Question 1

An administrator configures a VPN gateway with eBGP for dynamic route exchange. After setup, routes are not advertised to the remote peer. Which configuration is most likely missing?

Options :

A : DHCP options for assigning IP addresses to remote endpoints.

B : ASN configuration for the local gateway to identify its autonomous system.

C : VLAN ID alignment between local and remote networks.

D : Peer IP address required for establishing the BGP session.

Answer: B

Question 2

Which statement is correct about cloning Application Security Policies?

Options :

A : The system prevents saving the cloned policy if it has the same secured entities as the original.

B : The policy type can be changed while cloning a policy.

C : Only one policy can be cloned at a time.

D : The default name of the cloned policy must be manually entered; the system does not provide a default.

Answer: B

Question 3

An administrator has configured a VPC with multiple overlay subnets and attached a VPN gateway using IPSec. After enabling Jumbo Frames on the physical network, VMs are still experiencing packet drops. What is the most likely reason?

Options :

A : MTU on guest VMs exceeds recommended size for IPSec.

B : DHCP relay is misconfigured.

C : Jumbo frames are not supported on overlay subnets.

D : Floating IP is missing on the VPN gateway.

Answer: A

Question 4

An administrator needs to configure a security policy that controls VM-to-VM communication within a category defined as secured entity. Which configuration action should the administrator take to restrict all intra-tier communication between the VMs within a category defined as secured entity?

Options :

A : Apply the policy with inbound rules that block all inter-VM communication.

B : Configure the security policy with allow-all intra-tier traffic.

C : Set the security policy to allow-specific traffic for intra-tier communication.

D : Use deny-all intra-tier traffic configuration in the policy.

Answer: D

Question 5

In the AD-VDI Departmental SecPol policy shown in the exhibit, ADGroup: Engineering is configured as a secured entity in a VDI Security Policy. Prism Central shows 2 / 2 active sessions under this group, but the administrator confirms that three Engineering users are currently logged in to persistent VDI desktops. The third user's VM shows no ADGroup assignment in its VM details in Prism Central, even after the user has successfully logged in. All three users are members of the same AD group, and the Domain Controller event logs confirm a successful interactive login for the third user. Which condition explains why the third user's VM is not being assigned the ADGroup: Engineering category?

Options :

A : The Active Directory Service account used by Prism Central is locked.

B : The third user's VM has been assigned an AppType category, preventing ID-Based categorization.

C : The Flow Identity Service has been disabled in Prism Central for the VM the third user is logging in to.

D : The Flow Network Security policy scope does not include the VLAN where the third user's VM resides.

Answer: B

Free NCP-NS-7.5 Mock Exam – Practice Online Confidently

Buying Options: