An administrator has a vSphere 8.0 environment that is not presently running NSX.
How can the administrator converge this vSphere 8 environment into a VMware Cloud Foundation (VCF) management domain?
AManually upgrade the vSphere 8.0 environment to version 9.0 and use the VCF installer to converge the vSphere 9.0 environment into a new VCF instance.
BManually upgrade the vSphere 8.0 environment to version 9.0 and manually install NSX 9.x and use the VCF installer to converge the vSphere 9.0 with NSX 9.0 environment into a new VCF instance.
CManually upgrade the vSphere 8.0 environment to version 9.0 and use VCF Operations to converge the vSphere 9.0 environment into a new VCF instance.
DManually install NSX 9 into the vSphere 8.0 environment and use the VCF installer to converge the vSphere 8.0 with NSX 9.0 environment into a new VCF instance.
0
Community Discussion
No comments yet. Be the first to start the discussion!
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
Save question
0
Community Discussion
No comments yet. Be the first to start the discussion!
How should the Global Managers (GMs) and Local Managers (LMs) be distributed to provide high availability and optimal performance in a three-site NSX Federation deployment?
Choose two
AThe GM should be a single appliance placed in a central cloud environment to simplify connectivity, relying on vSphere HA for availability.
BThe GM cluster should be deployed across three sites.
CLMs are only needed on the primary site. Secondary sites can manage their local data plane directly via the GM.
DEach NSX site must have its own LM cluster that reports to the GM.
ELMs should only be deployed as single nodes to reduce overhead.
An architect must enable users to deploy multiple copies of a test lab with public internet access.
The design requires that every deployment use the same machine IP addresses.
Which configuration allows each lab to connect to the public internet?
AConfigure firewall rules to isolate the traffic going to the public internet.
BConfigure DNAT rules on the Tier-1 gateway.
CConfigure SNAT rules on the Tier-0 gateway.
DConfigure isolation on the NSX segment.
An administrator has created a new Tier-1 Gateway and is trying to change the connected gateway of a deployed segment to use that new gateway.
In the UI, when the administrator selects the Connected Gateway dropdown, the new Tier-1 Gateway does not appear as an available gateway.
What could stop the new Tier-1 Gateway from appearing in the list of available gateways?
AThe Tier-1 Gateway is not connected to an NSX Edge Cluster.
BThe Tier-1 Gateway and NSX Segment are connected to different Tier-0 Gateways.
CThe Tier-1 Gateway and NSX Segment are in different transport zones.
DThe Tier-1 Gateway connectivity policy is set to "None".
During a design review, an administrator is asked to explain which underlying technology allows the NSX Edge to perform rapid packet processing and attain near line-rate performance for Virtual Network Functions (VNFs).
Which technology does the NSX Edge leverage for fast packet processing?
AData Plane Development Kit (DPDK)
BAMD Power Now
CIntel Speed Step
DNon-Uniform Memory Access (NUMA)
An administrator must explain the characteristics and requirements of Centralized Connectivity Mode, planned for configuration in a VMware Cloud Foundation (VCF) workload domain.
Drag four options from the list into Centralized Connectivity Mode, in any order.
Drag & Drop
It can be configured during the deployment of the workload domain.
It supports stateful services configuration.
It is suitable for environments where that require a streamlined network with limited NSX networking services.
It is required to use All Apps Org functionality in VCF Automation.
It can be configured after the creation of a workload domain.
DHCP and external IP services are the only services supported in this mode.
Requires a dedicated VLAN and subnet to connect the Transit Gateway with the ToR switch.
Requires the deployment of an NSX Edge cluster to host the Tier-0 gateway.
When using a DHCP Relay on a segment, which design limitation must be considered?
ADHCP settings, DHCP options, and static bindings can be configured on the segment.
BDHCP Relay service is available to all the other segments in the network.
CDHCP client requests cannot be relayed to the external DHCP servers.
DDHCP settings, DHCP options, and static bindings cannot be configured on the segment.
An administrator is registering a secondary-site Local Manager (LM) with the Global Manager (GM). The secondary-site LM contains three NSX Manager virtual machines (VMs). The administrator is preparing the connection information required for registration.
What must be supplied when registering the LM with the GM?
AThe external load balancer Virtual IP (VIP) without requiring API certificate updates on individual LM VMs.
BThe IP address of the primary NSX Manager VM in the cluster.
CThe LM Cluster Virtual IP (VIP) or FQDN of the LM Cluster VIP.
DAll three individual LM VM IP addresses in a comma-separated list for redundant connectivity.
An administrator is enabling IPv6-to-IPv4 communication for workloads hosted in an NSX environment. The workloads use IPv6-only addressing, while the external systems they need to reach are IPv4-only. To provide this translation service, the administrator chooses to configure NAT64.
Which two of the following characteristics of NAT64 are true?
Choose two
ANAT64 is supported on Tier-1 gateways only.
BNAT64 requires the Tier-1 gateway to be configured in active-active mode.
CNAT64 is supported on Tier-0 and Tier-1 gateways.
DNAT64 requires the Tier-1 gateway to be configured in active-standby mode.
ENAT64 is stateless and requires gateways to be deployed in active-standby mode.
An administrator implements route leaking between the Tier-0 gateways to improve east/west communication because the physical L3 devices are oversubscribed.
Where should NAT be configured, based on the depicted architecture, to enable communication between overlapping IP addresses?
HOTSPOT –
An administrator is determining GENEVE encapsulation by examining a Wireshark capture.
The administrator directs VM-1 to send continuous ICMP requests to VM-2. Click the location where the administrator should see the GENEVE-encapsulated packet.
An administrator needs to import an existing vSphere environment into VMware Cloud Foundation (VCF) as a new workload domain.
During the vSphere-environment import, the administrator must register the new workload domain with an NSX instance associated with an existing workload domain.
Which tool should the administrator use to import the vSphere environment into VCF and register it with the existing NSX instance?
AvSphere Client.
BSDDC Manager.
CVCF Operations.
DVCF Installer.
An administrator is diagnosing intermittent connectivity failures between two workloads attached to NSX VLAN segments by using Traceflow. In-band Network Telemetry (INT) is enabled in the NSX Global Configuration.
How does Traceflow detect issues in a VLAN network?
AInjects ICMP traffic into the data plane and observes the results in the control plane.
BCompares intended network state in the control plane with Tunnel End Point (TEP) keepalives in the data plane.
CTraceflow cannot be enabled to analyze VLAN network segments in NSX.
DInjects synthetic traffic into the data plane and observes the results in the control plane.
An administrator is troubleshooting an issue in which workloads connected to a Tier-1 Gateway named T1-App can no longer reach external North/South destinations.
The Tier-1 connects to an Active/Standby Tier-0 Gateway named T0-Prod.
Observed symptoms:
VMs on segments attached to T1-App can ping one another.
VMs on T1-App cannot reach any external IP beyond T0-Prod.
From a VM on the segment, a ping to the T1-App Distributed Router (DR) IP succeeds.
A ping from the VM to the T1-App Service Router (SR) fails.
The Edge cluster hosting the T1-App SR reports both Edge nodes as Up and Healthy.
No failover has occurred; the same Edge node is still displayed as Active for T1-App.
What is the most likely cause of this issue?
AThe overlay network between DR and SR has an MTU mismatch.
BLocalized control plane is enabled on the Tier-1 causing the SR to remain admin-down.
CRoute advertisement from T1-App to T0-Prod for 100.64.x.x/31 is disabled.
DStatic default route is missing on the Tier-1 DR component.
Which two statements outline the recommended approach for configuring and synchronizing security policies across Federated NSX sites?
Choose two
ASecurity policies should be defined locally on each LM and only synchronized manually by an administrator to prevent accidental conflicts.
BThe Global Manager only synchronizes networking (L2/L3) configurations. Security rules must be configured separately on each site.
CConsistency is achieved by ensuring all security groups have the exact same name on every Federated site's Local Manager (LM).
DSecurity policies, such as Distributed Firewall rules and security groups, must be defined as global policies on the Global Manager (GM).
ELocal Manager (LM)s (LMs) can define local policies, but any global policies defined on the GM always take precedence over the local ones.
In an NSX environment, an administrator is seeing low throughput and intermittent congestion between the Tier-0 Gateway and the upstream physical routers. The environment was built for high availability and load balancing, with two Edge Nodes deployed in Active/Active mode.
Which two actions would resolve the low throughput and congestion?
Choose two
AEnable ECMP on the Tier-0 gateway.
BConvert Tier-1 gateways to be edgeless.
CAdd an additional vNIC to the NSX Edge node.
DDeploy additional Edge nodes.
EDisable NAT on the Tier-0 gateway.
An administrator is bringing a new research VPC into its R&D project.
Requirements include:
Application teams must remain isolated while still consuming shared DNS.
The physical core network exposes BGP only on VLAN 300-dc-edge-uplink-pg, which terminates on the Edge cluster.
Any north-south connectivity to the datacenter must pass through Edge.
East-west paths should stay on hosts where possible.
Direct Internet egress is not permitted.
Which combination of Transit Gateway (TGW) mode, VPC subnet type, and routing configuration satisfies these requirements?
ADistributed TGW with Private-VPC subnet, policy-based routing to shared services; static routes for datacenter services on each segment.
BDistributed TGW, external attachment for the datacenter core and Private-TGW Subnet to shared services; import datacenter routes via BGP on transport nodes and suppress export.
CCentralized TGW with Private-TGW Subnet to datacenter core and external to shared services; advertise all VPC routes but rely on upstream ACLs to block.
DCentralized TGW, external attachment on the Edge for datacenter core and Private-TGW Subnet to shared services; import only required datacenter prefixes and disable/filter export of VPC routes.
An administrator must distinguish the roles of Global Manager (GM) and Local Manager (LM) to identify where particular configurations should be completed.
Which statements describe the difference between Global Manager and Local Manager?
AThe Global Manager creates and manages global network objects, while Local Manager enforce them.
BThe Local Manager (LM) creates and manages local network objects, while Global Managers enforce them.
CPolicy creation must always be performed at each Local Manager and synchronized manually with the Global Manager.
DThe Global Manager only provides reporting functions.
An administrator must configure Network Connectivity in a VMware Cloud Foundation (VCF) environment for the workload domain that will be used with vSphere Supervisor.
Place four options from the list into the correct sequence.
Drag & Drop
Configure Network Connectivity
Login to SDDC Manager
Navigate to Networks tab
Deploy NSX Edge nodes
Configure VLAN trunking
Create VPC
Login to vCenter console
Login to VCF Operations console
When selecting Syslog levels for an NSX Manager, which three criticalities deliver the highest level of information?
Community Discussion