VMware Certified Professional 6 - Network Virtualization 6.2 Exam

Question 1

A Service Provider is using VMware vCloud Director with VMware vCloud Networking and Security (VCNS) on vSphere. Which two products will be impacted by the upgrade of VCNS to VMware NSX?
(Choose two.)

A. ESXi hosts

B. NSX Controller Cluster

C. vShield Manager

D. vCenter Server

Correct Answer: A,C

Question 2

An organization has a PCI compliant application deployed as part of a larger NSX environment. Every year a team of contractors evaluates the security of the environment and recommends changes.
What NSX Role and Scope should the contractors be given to minimize access but still allow them to fulfill the stated requirement?

A. NSX Administrator, Limit access scope

B. Auditor, Limit access scope

C. Enterprise Administrator, Limit access scope

D. Security Administrator, No restrictions

Correct Answer: B

Question 3

A security administrator needs to create a Security Group based on an Active Directory group. However, AD Groups are not available as an option. What must the administrator configure before AD Groups are available?

A. Guest Introspection virtual machines must be joined to the domain

B. Inventory Service must be registered with a domain account

C. NSX Manager must be registered with Active Directory

D. NSX Controller must be registered with Active Directory

Correct Answer: C

Question 4

Which two functions are provided by VMkernel ports? (Choose two.)

A. 802.1Q VLAN tagging

B. vSphere vMotion

C. VXLAN Port Configuration

D. ESXi Host Management

Correct Answer: B,D

Question 5

Which tool is used to display VXLAN connection information?

A. esxtop

B. pktcap-uw

C. NSX Controller CLI

D. VDS Health Check

Correct Answer: C

Question 6

Which is a best practice to secure system traffic, ensure optimal performance and satisfy prerequisites for NSX?

A. Configure a single VMkernel and a single distributed port group for all the system traffic.

B. Dedicate separate VMkernel adapters for each type of system traffic and dedicate separate standard switches for each type of system traffic connected to a single physical network.

C. Configure a single distributed port group with a single VMkernel for Management and iSCSI traffic, a separate VMkernel for vMotion and VSAN traffic.

D. Dedicate separate VMkernel adapters for each type of system traffic. Dedicate separate distributed port groups for each VMkernel adapter and isolate the VLANs for each type of system traffic.

Correct Answer: D

Question 7

An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and registered with the vCenter server.
Which additional step is required before the distributed firewall is functional?

A. Deploy the NSX Controller cluster

B. Configure VTEPs on each host

C. Perform host preparation on the cluster

D. Enable Guest Introspection

Correct Answer: C

Question 8

What vSphere Distributed Switch security policy allows virtual machines to send frames with a MAC Address that is different from the one specified in the vmx file?

A. Forged Transmits

B. MAC Address Changes

C. Failover detection

D. Promiscuous Mode

Correct Answer: A

Question 9

Which port is used for NSX REST API Requests?

A. 8443

B. 443

C. 5480

D. 80

Correct Answer: B

Question 10

What is the minimum NSX role necessary for a user to edit the firewall on an Edge Services Gateway (ESG)?

A. Security Administrator

B. Enterprise Administrator

C. Auditor

D. NSX Administrator

Correct Answer: A

VMware Certified Professional 6 - Network Virtualization 6.2 - 2V0-642 Exam Practice Test

Latest Update

Useful Links

Contact Us