Question 1

An administrator has connected two virtual machines on the same overlay segment. Ping between both virtual machines is successful. What type of network boundary does this represent?

Options :

A : Layer 2 VPN

B : Layer 2 bridge

C : Layer 2 broadcast domain

D : Layer 3 route

Answer: C

Question 2

A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers. The naming convention will be: • WKS-WEB-SRV-XXX • WKY-APP-SRR-XXX • WKI-DB-SRR-XXX What is the optimal way to group them to enforce security policies from NSX?

Options :

A : Use Edge as a firewall between tiers.

B : Do a service insertion to accomplish the task.

C : Group all by means of tags membership.

D : Create an Ethernet based security policy.

Answer: C

Question 3

How does the Traceflow tool identify issues in a network?

Options :

A : Compares the management plane configuration states containing control plane traffic and error reporting from transport node agents.

B : Compares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.

C : Injects ICMP traffic into the data plane and observes the results in the control plane.

D : Injects synthetic traffic into the data plane and observes the results in the control plane.

Answer: D

Question 4

Which two are supported by L2 VPN clients? (Choose two.)

Options :

A : NSX for vSphere Edge

B : 3rd party Hardware VPN Device

C : NSX Autonomous Edge

D : NSX Edge

Answer: A,D

Question 5

Which two choices are use cases for Distributed Intrusion Detection? (Choose two.)

Options :

A : Use agentless antivirus with Guest Introspection.

B : Quarantine workloads based on vulnerabilities.

C : Identify risk and reputation of accessed websites.

D : Gain Insight about micro-segmentation traffic flows.

E : Identify security vulnerabilities in the workloads.

Answer: B,E

Free 2V0-41.23 Mock Exam – Practice Online Confidently

Buying Options: