Quiz
VCAP NSX
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (48)
1Which two statements describe the recommended strategy for configuring and synchronizing security policies across Federated NSX sites? (Choose two.)
- AConsistency is achieved by ensuring all security groups have the exact same name on every Federated site's Local Manager (LM).
- BSecurity policies, such as Distributed Firewall rules and security groups, must be defined as global policies on the Global Manager (GM).
- CThe Global Manager only synchronizes networking (L2/L3) configurations. Security rules must be configured separately on each site.
- DLocal Managers (LMs) can define local policies, but any global policies defined on the GM always take precedence over the local ones.
- ESecurity policies should be defined locally on each LM and only synchronized manually by an administrator to prevent accidental conflicts.
2An administrator is investigating reports that several Virtual Machines (VMs) deployed on an NSX virtual network segment are dropping packets. To troubleshoot the issue the administrator has attached two test VMs to the virtual network in order to inspect the packets sent between the two test VMs. What tool will allow the administrator to analyze the packet flow?
- AFlows Monitoring in the VCF Operations UI.
- BTraceflow in the NSX Manager UI.
- CPort Mirroring in the NSX Manager UI.
- DLive Traffic Analysis in the NSX Manager UI.
3An administrator is troubleshooting an issue where workloads connected to a Tier-1 Gateway named T1-App can no longer reach external North/South destinations.
• The Tier-1 is connected to an Active/Standby Tier-0 Gateway named T0-Prod.
Symptoms observed:
• VMs on segments attached to T1-App can ping each other.
• VMs on T1-App cannot reach any external IP outside T0-Prod.
• From a VM on the segment, ping to the T1-App Distributed Router (DR) IP succeeds.
• Ping from the VM to the T1-App Service Router (SR) fails.
• The Edge cluster hosting the T1-App SR shows both Edge nodes Up and Healthy.
• No failover has occurred — the same Edge node is still shown as Active for T1-App.
What is the most likely cause of this issue?- AThe overlay network between DR and SR has an MTU mismatch.
- BRoute advertisement from T1-App to T0-Prod for 100.64.x.x/31 is disabled.
- CStatic default route is missing on the Tier-1 DR component.
- DLocalized control plane is enabled on the Tier-1 causing the SR to remain admin-down.
4An architect has just deployed a new NSX Edge cluster in a VMware Cloud Foundation (VCF) fleet. The BGP peer between the NSX Tier-0 gateway and the top-of-rack routers is successfully up and stable.
• BGP Connection is established, but the NSX Tier-0 is not receiving a default route from the top-of-rack routers.
• Workloads inside NSX have no Internet access.
What could be the solution?- ATier-0 gateway community settings are missing on the top-of-rack router configuration.
- BThe top-of-rack router receives a default route from Tier-0 gateway.
- CTier-0 gateway has a limit set too low for how many routes it can accept.
- DThere is no default route configured on the top-of-rack router for the Tier-0 gateway.
5An administrator is investigating packet loss reported by workloads connected to VLAN segments in an NSX environment. Initial checks confirm:
• All VMs are powered on
• VLAN segment IDs are consistent across transport nodes
• Physical switch configurations are correct.
Which two NSX tools can be used to troubleshoot packet loss on VLAN Segments? (Choose two.)- AFlow Monitoring
- BTraceflow
- CPacket Capture
- DActivity Monitoring
- ELive Flow
6An administrator is tasked to enable users to configure an individual VPC, but not create subnets. What three NSX roles would the administrator assign to allow access without the ability to create subnets? (Choose three.)
- ASecurity Admin
- BNetwork Admin
- CVPC Admin
- DSecurity Operator
- ENetwork Operator
7An administrator has a VMware Cloud Foundation (VCF) instance. A critical NSX security update has been released by Broadcom. How can the administrator install the NSX update?
- ADownload the NSX patch to the NSX Manager. Apply it using VCF Operations Fleet Management.
- BDownload the NSX patch to VCF Operations. Apply it using NSX Manager.
- CDownload the NSX patch to VCF Operations. Apply it using VCF Operations Fleet Management.
- DDownload the NSX patch to the NSX Manager. Apply it using NSX Manager.
8An administrator is troubleshooting BGP flapping in a VMware Cloud Foundation (VCF) 9 environment. A Tier-0 Gateway is running in Active/Active mode with two Edge nodes. BFD is enabled on the eBGP sessions to the upstream routers. Each Edge node uses its own uplink IP for BGP. After some network maintenance, one BGP session starts flapping every few minutes. The other BGP sessions stay stable. On the affected Edge node, the command get bfd-sessions shows:
State: Down
Diag: Detect Time Expired
Symptoms:
The upstream router also shows the BFD session as Down with control Detection Time Expired.
There are no interface errors, no packet loss for normal traffic, and clearing the BFD session temporarily brings it back up – but it flaps again after a few minutes.
What is the root cause?- ABFD timers are mismatched between Tier-0 Gateway and the upstream routers.
- BThe MTU does not match on the end-to-end between Tier-0 Gateway and upstream routers.
- CBFD is configured in echo mode on the upstream routers.
- DThe Edge nodes are undersized and are experiencing high contention on CPU and drops BFD packets.
9An administrator is configuring an NSX segment used by a nested hypervisor deployment where an ESXi VM runs on an ESXi host and multiple VMs run inside the ESXi VM. Which segment profile must be created to satisfy the request?
- AIP Discovery
- BSecurity
- CMAC Discovery
- DSpoof Guard
10An administrator created a new Tier-1 Gateway and is attempting to change the connected gateway for a deployed segment to use the new gateway. In the UI, when the administrator clicks the Connected Gateway dropdown, the new Tier-1 gateway is not shown as an available gateway. What would prevent the new Tier-1 gateway from showing in the list of available gateways?
- AThe Tier-1 Gateway is not connected to an NSX Edge Cluster.
- BThe Tier-1 Gateway connectivity policy is set to "None".
- CThe Tier-1 Gateway and NSX Segment are in different transport zones.
- DThe Tier-1 Gateway and NSX Segment are connected to different Tier-0 Gateways.
11An administrator has noticed an issue in a freshly deployed VMware Cloud Foundation (VCF) environment where the BGP neighborship between the Tier-0 gateway and a physical router remains in the Idle state. Pings between the uplink IPs are successful. What is the issue?
- AAutonomous System number mismatch.
- BDistributed Firewall blocking traffic.
- CGeneve tunnel down.
- DOverlay MTU too low.
12An administrator needs to prevent the datacenter from advertising any internal prefixes toward a new VPC, while still ensuring the VPC receives a default route learned from the datacenter's upstream network. Where should the routing policy be applied?
- AOn each segment default gateway.
- BOn the Tier-1 gateway.
- COn the VPC transit gateway.
- DOn the provider Tier-0 neighbor.
13An administrator is configuring NSX resource sharing to allow shared access to multiple resources in the default space.
By default, which user role owns the shared resources for the default space?- ANetwork Admin
- BSecurity Admin
- CProject Admin
- DEnterprise Admin
14An administrator is tasked to create a development environment with a Tier-1 gateway to host overlay segments for only East/West workload communication. North/South communication is also required. The solution will not include the following services: NAT, DHCP, VPN. Which step must the administrator take when creating the Tier-1 gateway?
- AConfigure a Service Interface on the Tier-1 gateway to connect each overlay segment to provide the East/West communication.
- BEnable route advertisement and connect the Tier-1 gateway to the Tier-0 gateway.
- CAssign the Tier-1 gateway to an Edge Cluster before any segments are created.
- DKeep route advertisement disabled and leave the Tier-1 gateway disconnected from any Tier-0 gateway.
15An administrator is preparing to deploy a new workload domain that will host vSphere Kubernetes Service (VKS) clusters. Before configuring the network for the Kubernetes clusters, the administrator needs to create a Tier-0 Gateway to handle North/South connectivity. What is the requirement for creating a Tier-0 Gateway for use with a workload domain that is running the vSphere Kubernetes service (VKS) with VPC?
- AThe Tier-0 Gateway route map must contain an IP prefix with only a deny rule.
- BThe Tier-0 Gateway must be configured in Non-Preemptive failover mode.
- CThe Tier-0 Gateway must be configured in Active/Standby mode.
- DThe Tier-0 Gateway must have IPv6 enabled.
16During a design review, the administrator is asked to explain which underlying technology enables the NSX Edge to perform fast packet processing and achieve near line-rate performance for Virtual Network Functions (VNFs). Which technology is leveraged in the NSX Edge for fast packet processing?
- AData Plane Development Kit (DPDK)
- BAMD Power Now
- CNon-Uniform Memory Access (NUMA)
- DIntel Speed Step
17An administrator has a standalone vSphere 8.0 Update 1a deployment that is running with VMware NSX 4.1.0.2 and has to converge the deployment into a new VMware Cloud Foundation (VCF) instance. How can the administrator accomplish this task?
- AManually upgrade both vSphere and NSX to version 9 prior to converging. Then use the VCF Installer to converge the vSphere 9 and NSX 9 instances into a new VCF management domain.
- BManually upgrade vSphere to version 9. Then use the VCF Installer to converge the vSphere 9 environment into a new VCF management domain. Then use the VCF lifecycle management tools to upgrade NSX to version 9.
- CUse the VCF Installer to converge the existing vSphere 8 and NSX 4 environment into a new VCF management domain. Then use the VCF lifecycle management tools to upgrade to 9.
- DManually upgrade vSphere to version 9 and uninstall NSX 4. Then use the VCF Installer to converge the vSphere 9.0 environment into a new VCF management domain at which time NSX 9 will be reinstalled.
18An administrator must provide North/South connectivity for a VPC. The fabric exposes a distributed external VLAN across all ESX hosts. But, the only BGP peer to the core is on a VLAN only accessible on the Edge Cluster. Which design is required?
- AUse a VPC Tier-0 Gateway in active/active mode with distributed eBGP peering.
- BDistributed Transit Gateway with an EVPN route reflector on the transport nodes.
- CCentralized Transit Gateway on the Edge Cluster.
- DDeploy a Provider Tier-1 with BGP and connect the VPC Transit Gateway via route leaking.
19An administrator is troubleshooting intermittent connectivity failures between two workloads connected to NSX VLAN segments using Traceflow. In-band Network Telemetry (INT) has been enabled in the NSX Global Configuration. How does Traceflow identify issues in a VLAN network?
- AInjects ICMP traffic into the data plane and observes the results in the control plane.
- BInjects synthetic traffic into the data plane and observes the results in the control plane.
- CTraceflow cannot be enabled to analyze VLAN network segments in NSX.
- DCompares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.
20An administrator is troubleshooting why workloads in NSX cannot reach the external network 10.100.0.0/16. The Tier-0 Gateway is in Active/Active mode and has the following configuration:
Uplink-1 (VLAN 100): 192.168.100.0/24 -> router R1 at 192.168.100.1
Uplink-2 (VLAN 101): 192.168.101.0/24 -> router R2 at 192.168.101.1
A static route for 10.100.0.0/16 was added with both next-hops (192.168.100.1 and 192.168.101.1).
The Scope of this route is set to Uplink-1.
Symptoms:
Virtual Machines (VMs) cannot reach 10.100.0.0/16
Traceroute from the VM stops at the Tier-0 gateway with "Destination Net Unreachable"
Pings from the Edge nodes to both 192.168.100.1 and 192.168.101.1 are success
What explains why workloads in NSX cannot reach the external network?- AStatic routes do not support Equal Cost Multi-Pathing (ECMP) in NSX.
- BThe static route Scope is set to only one uplink interface, but the next-hops are on two different VLANs.
- CThe next-hops should have been configured as the Tier-0's own uplink IPs instead of the routers IPs.
- DThe physical routers are missing return routes.
21An administrator is tasked to configure NSX Federation between separate VMware Cloud Foundation (VCF) Fleets. Which requirement must all sites meet before being added to a Global Manager (GM) for NSX Federation?
- AAll Sites must use the same VTEP VLAN and IP pools.
- BAll sites must use identical Tier-0 gateway BGP autonomous system numbers.
- CAll sites must be managed by the same VCF instance.
- DAll sites must have the same NSX version and build.
22The administrator must configure Border Gateway Protocol (BGP) on the Tier-0 Gateway to establish neighbor relationships with upstream routers. Which two statements describe the Border Gateway Routing Protocol (BGP) configuration on a Tier-0 Gateway? (Choose two.)
- AEIGRP is configured by default.
- BCan be used as an Exterior Gateway Protocol.
- CThe network is divided into areas that are logical groups.
- DIt supports a 4-byte autonomous system number.
23An architect needs to allow users to deploy multiple copies of a test lab with public access to the internet. The design requires the same machine IPs be used for each deployment. What configuration will allow each lab to connect to the public internet?
- AConfigure DNAT rules on the Tier-1 gateway.
- BConfigure isolation on the NSX segment.
- CConfigure firewall rules to isolate the traffic going to the public internet.
- DConfigure SNAT rules on the Tier-0 gateway.
24A sovereign cloud provider has a VMware Cloud Foundation (VCF) stretched Workload Domain across two data centers (AZ1 and AZ2), where site connectivity via Layer 3 is provided by the underlay. The following NSX details are included in the design:
Each site must host its own local NSX Edge Cluster for availability zones.
Tier-0 gateways must be configured in active/active mode with BGP ECMP to local top-of-rack switches.
Inter-site Edge TEP traffic must not cross the inter-DC link.
SDDC Manager is used to automate NSX deployment.
During deployment of the Edge Cluster for AZ2, the SDDC Manager workflow fails because the Edge transport nodes' TEP IPs are not reachable from the ESXi transport nodes. Which step ensures correct Edge Cluster deployment in multi-site stretched domains?- ADisable the liveness check during Edge deployment in SDDC Manager.
- BConfigure BGP neighbors before deploying the Edge Cluster.
- CReuse the TEP IP pool from AZ1.
- DCreate an AZ2-specific Edge TEP IP pool and map it to the AZ2 uplink profile before deploying the Edge Cluster.
25An administrator is upgrading an existing VMware Cloud Foundation (VCF) environment. An NSX Edge Cluster is required to support north-south traffic for a workload domain. How would the administrator initiate the edge cluster deployment?
- AFrom the VCF Installer.
- BThrough VCF Operations Fleet Manager.
- CFrom vCenter Network Connectivity wizard.
- DFrom the vCenter Server Appliance Management Interface (VAMI).
26An administrator is troubleshooting east—west network performance between several virtual machines connected to the same logical segment. The administrator inspects the internal forwarding tables used by ESXi and notices that different tables exist for MAC and IP mapping. Which table on an ESXi host is used to determine the location of a particular workload for frame forwarding?
- AARP Table
- BFIP Table
- CTEP Table
- DMAC Table
27An administrator has a vSphere 8 Update 1a with NSX 4.1.0.2 environment. What option can the administrator use to converge this vSphere with NSX environment into a VMware Cloud Foundation (VCF) Workload Domain?
- AUse the VCF installer to automatically converge the vSphere with NSX environment into a new VCF Workload Domain.
- BUpgrade NSX to version 9 into the vSphere 8 environment and use the VCF installer to converge the vSphere 8 with NSX environment into a new VCF Workload Domain.
- CUpgrade the environment version and use the VCF installer to converge the vSphere environment into a new VCF Workload Domain.
- DUpgrade the environment and use VCF Operations to converge the vSphere environment into a new VCF Workload Domain.
28An administrator changed the SFTP server used for scheduled NSX Manager backups. The backup jobs now fail with the error "Host KEY Verification Failed." The connectivity and credentials are correct. How would an administrator resolve the error?
- ATurn Off Backup encryption.
- BUpdate the SSH fingerprint.
- CTrust the certificate on the SFTP server.
- DUse the NSX cluster VIP as the SFTP endpoint.
29An administrator has deployed a new VMware Cloud Foundation (VCF) management domain. To be compliant with company policy, backups must be configured to occur anytime a change is made to the NSX configuration. How can the administrator ensure that complete configuration backups are captured every time a change occurs?
- AConfigure an alarm to detect configuration changes and automatically trigger a complete configuration backup.
- BNo action is required as by default NSX will automatically perform a complete backup every time a change is made to the configuration.
- CConfigure a cron job on the NSX Manager to automatically perform an incremental backup of the NSX configuration every hour.
- DCreate a recurring backup schedule and explicitly indicate that backups should be captured anytime the configuration changes.
30An administrator is enabling IPv6-to-IPv4 communication for workloads hosted in an NSX environment. The workloads use IPv6-only addressing, but the external systems they must reach are IPv4-only. To provide this translation service, the administrator decides to configure NAT64. Which two following characteristics about NAT64 are true? (Choose two.)
- ANAT64 is stateless and requires gateways to be deployed in active-standby mode.
- BNAT64 requires the Tier-1 gateway to be configured in active-standby mode.
- CNAT64 is supported on Tier-1 gateways only.
- DNAT64 is supported on Tier-0 and Tier-1 gateways.
- ENAT64 requires the Tier-1 gateway to be configured in active-active mode.
31An NSX Manager cluster has failed. The administrator deployed a new NSX Manager using the latest version and attempted to restore from a backup, but the restore operation failed. What would an administrator do to recover the cluster?
- AEdit the backup passphrase to match the new build.
- BUse SDDC Manager to replace NSX Manager.
- CUse the NSX restore API instead of the UI.
- DDeploy an NSX Manager that matches the backup's build.
32An administrator has observed an NSX Local Manager (LM) outage at the secondary Site. However, the NSX Global Manager (GM) in secondary Site remains operational. What happens to data plane operations and policy enforcement at the secondary site?
- AAll traffic is blocked until secondary site LM recovers.
- BOnly local policies work; global policies cease to apply on the secondary site.
- CThe data plane operates normally until LM recovery and reconnection.
- DSecondary site must failover all workloads to Primary site.
33An administrator has been tasked with providing a networking solution including a Source and Destination NAT for a single Tenant. The tenant is using Centralized Connectivity with a Tier-0 Gateway named Ten-A-Tier-0 supported by an Edge cluster in Active-Active mode. The NAT solution must be available for multiple subnets within the Tenant space. The administrator chooses to deploy a Tier-1 Gateway to implement the NAT solution. How would the administrator complete the task?
- AChange Ten-A-Tier-0 to Active-Standby to support the stateful NAT.
- BCreate a new Tier-0 Gateway in Active-Standby mode and attach another Tier-1 Gateway.
- CCreate a Tier-1 Gateway in Distributed Routing mode only and do not attach it to Ten-A-Tier-0.
- DCreate a new Tier-1 Gateway in Active-Standby mode and attach it to Ten-A-Tier-0.
34When using a DHCP Relay on a segment, which design restriction must be considered?
- ADHCP settings, DHCP options, and static bindings cannot be configured on the segment.
- BDHCP client requests cannot be relayed to the external DHCP servers.
- CDHCP settings, DHCP options, and static bindings can be configured on the segment.
- DDHCP Relay service is available to all the other segments in the network.
35An administrator is troubleshooting a BGP connectivity issue on a Tier-0 Gateway (Active/Active). The Tier-0 has the following configuration:
• Uplink VLAN 100: 192.168.100.0/24
• Uplink VLAN 101: 192.168.101.0/24
• BGP neighbors configured: 192.168.100.1 and 192.168.101.1
• A single static default route (0.0.0.0/0) exists with next-hop 192.168.100.1
Symptoms observed on both Edge Nodes:
• Get BGP neighbors —> both neighbors stuck in Idle (Connect) — "No route to peer"
• Ping to 192.168.100.1 and 192.168.101.1 succeeds from the Edge nodes
• Get route shows the default route present only on VLAN 100 interface (fp-eth0), missing on VLAN 101 (fp-eth1)
What is the root cause of both BGP sessions remaining in Idle state?- AThe static default route Scope is set only to the uplink VLAN 100 segment.
- BThe ToR routers do not have routes back to the Edge uplink interfaces.
- CMulti-hop eBGP is required when using two VLANs.
- DBGP authentication mismatch between Tier-0 and ToR routers.
36An administrator must prevent a new VPC from exporting any of its prefixes to the datacenter while still receiving a default route. Where should the routing policy be applied?
- AOn the VPC default route advertiser
- BOn the VPC's Transit Gateway
- COn the providers' BGP peer template
- DOn the VPC Gateway Firewall
37A large multinational corporation is seeking proposals for the modernization of a Private Cloud environment. The proposed solution must meet the following requirements:
• Support multiple data centers located in different geographic regions.
• Provide a secure and scalable solution that ensures seamless connectivity between data centers and different departments.
Which three NSX features or capabilities must be included in the proposed solution? (Choose three.)- ANSX Edge
- BAVI Load Balancer
- CvDefend
- DVirtual Private Cloud (VPC)
- ECentralized Network Connectivity
- FNSX L2 Bridging
38An administrator has deployed a workload domain in VMware Cloud Foundation (VCF). The workload domain was deployed with NSX managers using the XL form factor. After deployment, the administrator realizes the NSX manager is oversized and needs to change to a smaller form factor. What should the administrator do to accomplish this task?
- AEach NSX Manager must be redeployed.
- BEach NSX manager must be resized using the API.
- CEach NSX manager must be resized through vCenter.
- DEach NSX manager must be rightsized using VCF Operations
39When attempting to deploy or expand an edge cluster from an administrator encounters a failure: "Failed to validate the BGP Route Distribution". Prior to calling support, the administrator attempts to troubleshoot the issue. How should the administrator troubleshoot this issue?
- ALog into the NSX manager and examine the nsxapi.log for errors.
- BLog into the Tier-1 router to verify that route distribution is being enabled.
- CLog into the vCenter and verify there are no errors or warnings from the NSX manager.
- DLog into the edge node of the Tier-0 being deployed and check the routes being learnt.
40Which two requirements are part of the registration process for Local Manager (LM) to a Global Manager (GM) in NSX for centralized management of network and security services across different workload domains deployed in separate locations? (Choose two.)
- AThe LM will validate the GM license to perform the GM registration.
- BThe external load balancer VIP is used for NSX Managers without requiring node API certificate updates.
- CThe LM Cluster VIP / FQDN is provided for GM-LM communication.
- DThe IP / FQDN of any of the 3 LM must be used for registration.
- EThe GM-Active requests the LM IP / FQDN and admin credentials for registration.
41An administrator encountered a failure with one of the NSX Managers in a VCF Fleet. The administrator has successfully re-deployed an NSX Manager from SFTP backups. However, after replacing the failed manager node, the new node joins successfully, but the cluster status remains "Degraded".
The get cluster status command on the leader still shows the old UUID with state "REMOVED".
What is the command to resolve the issue?- Adetach node <new-uuid>
- Bdelete node <old-uuid>
- Cdetach node <old-uuid> then delete node <old-uuid>
- Ddetach node <old-uuid>
42The administrator is implementing a multi-location VMware Cloud Foundation (VCF) environment. The design requires centralized security and networking policies across multiple VCF instances. What action must the administrator take to satisfy the requirements?
- ADeploy a Global Manager cluster manually.
- BDeploy a Local Manager (LM) cluster using VCF Operations.
- CUse SDDC Manager to deploy a Global Manager cluster.
- DUse VCF Installer to deploy a Local Manager (LM) cluster.
43An architect is designing a VMware Cloud Foundation (VCF) solution. The following information was gathered during the assessment phase:
There is a critical application used by the Finance Team.
The critical application has an availability and recoverability SLA of 99.999%.
The critical application is sensitive to network changes.
Which two configurations should the architect include in their design? (Choose two.)- AConfigure multiple static routes on Tier-1 gateway.
- BConfigure Tier-0 gateway for eBGP and ECMP.
- CEnable BFD on the Tier-0 gateway.
- DConfigure Tier-1 gateway for eBGP and ECMP.
- EInstall and configure hosts with 100Gbps physical NICs.
44A cloud service provider runs VPCs with differing traffic patterns:
Some VPCs are generating high, large North/South flows.
Most of the VPCs generate very little traffic.
The architect needs to optimize Edge dataplane resource consumption while ensuring that noisy VPCs do not impact others.
Which optimization satisfies the requirement?- AAssign one dedicated Edge node per high-traffic VPC.
- BReduce the number of VPCs by consolidating VPCs into shared namespaces.
- CConvert high-traffic VPCs into VLAN-backed segments attached directly to Tier-0 gateways.
- DUse multiple Edge clusters and distribute VRF-backed VPCs based on traffic profiles.
45An administrator is configuring Border Gateway Protocol (BGP) routing on a Tier-0 Gateway to optimize north—south traffic flow between the NSX environment and multiple upstream physical routers. The environment includes two external connections that advertise overlapping routes to the same destination networks. To ensure predictable and efficient routing behavior, the administrator decides to manipulate specific BGP attributes on outbound advertisements and inbound route updates. What are two valid BGP Attributes that can be used to influence the route path traffic will take? (Choose two.)
- ABFD
- BCost
- CAS-Path Prepend
- DMED
46Which of the following statements is true when configuring Remote Tunnel End Points (RTEPs) with NSX Federation?
- ATEP and RTEP networks must use separate physical NICs.
- BRTEP needs to be configured on only one edge node.
- CThe default MTU for the RTEP network is 1500.
- DDHCP must be used to assign IP addresses to the RTEP.
47How should the Global Managers (GMs) and Local Managers (LMs) be distributed to ensure high availability and optimal performance in a multi-site NSX Federation deployment comprised of three sites? (Choose two.)
- AEach NSX site must have its own LM cluster that reports to the GM.
- BLMs are only needed on the primary site. Secondary sites can manage their local data plane directly via the GM.
- CLMs should only be deployed as single nodes to reduce overhead.
- DThe GM cluster should be deployed across three sites.
- EThe GM should be a single appliance placed in a central cloud environment to simplify connectivity, relying on vSphere HA for availability.
48In an NSX environment, an administrator is observing low throughput and intermittent congestion between the Tier-0 Gateway and the upstream physical routers. The environment was designed for high availability and load balancing, using two Edge Nodes deployed in Active/Active mode. The administrator enables ECMP on the Tier-0 gateway, but the issues persist. Which action would address low throughput and congestion?
- AConvert Tier-1 gateways to be edgeless.
- BDisable NAT on the Tier-0 gateway.
- CAdd an additional vNIC to the NSX Edge node.
- DDeploy additional Edge nodes.
Information
- Description
- Grado Superior VMWARE Quiz on VCAP NSX, created by Alessandro Gonzales on 23/04/2026.
- Author
- Alessandro Gonzales
- Language
- Español
- Views
- 34
- Tags
- Rating
- No ratings yet Rate this quiz