VMware VMware Certifications VCPN610 Questions & Answers

• Question 121:

  A vSphere administrator wants to setup an NSX Edge Service Gateway to provide traveling employees secure access to company servers located in specific network segments within the corporate Data Center. The remote access solution must provide a method to authenticate the users. Which two methods can be used with the NSX Edge Service Gateway? (Choose two.)

  A. TACACS+

  B. MS-CHAP

  C. RSA Secure ID

  D. Active Directory

  Correct Answer: CD

• Question 122:

  -- Exhibit

  

  -- Exhibit -An administrator configures an NSX network as shown:

  Both VM-A and VM-B use the same Distributed Router for their default gateway. VM-B receives an IP

  message from VM-A.

  What is the source MAC address of the IP message received by VM-B?

  A. VM-B's default gateway's MAC address.

  B. VM-A's MAC address.

  C. VM-A's default gateway's MAC address.

  D. Logical Switch 7321's MAC address.

  Correct Answer: A

• Question 123:

  Which two options are valid distribution methods used by the NSX Edge Load Balancer? (Choose two.)

  A. Destination IP Hash

  B. Least Load

  C. URI

  D. Round Robin

  Correct Answer: CD

• Question 124:

  A vSphere administrator deployed an NSX Edge Load Balancer in HA mode. What happens in the event the Load Balancer has a failure?

  A. The secondary NSX Edge Load Balancer assumes the role of primary. Existing Flows will need to have their connections reestablished.

  B. HA will start the NSX Edge Load Balancer on another ESXi host in the cluster. All existing flows will need to have their connections reestablished.

  C. HA will start the NSX Edge Load Balancer on another ESXi host in the cluster. The NSX Controller caches existing flows and hands them to the Load Balancer when it is back up.

  D. The secondary NSX Edge Load Balancer assumes the role of primary. The NSX Controller caches existing flows and hands them to the Load Balancer when it is back up.

  Correct Answer: A

• Question 125:

  A company hosts an internal website on multiple virtual machines attached to a Logical Switch with VNI 7321. A Distributed Router serves as the virtual machines' default gateway.

  When an user resolves the URL for the website, the internal DNS server responds with the IP address of one of the virtual machine's IP addresses in a round robin fashion. This approach results in some virtual machines having a much higher number of user sessions than others.

  The company wants to deploy a NSX Edge Service Load Balancer to improve on this situation. Which distribution method can be configured on the NSX Edge Load Balancer to meet the company's needs?

  A. LEAST_CONN

  B. IP_HASH

  C. LEAST_LOAD

  D. URI

  Correct Answer: A

• Question 126:

  Which two statements are true regarding Layer 2 VPNs? (Choose two.)

  A. Layer 2 VPNs are used to securely extend Ethernet segments over an untrusted medium.

  B. The NSX Edge Service Gateway can form a Layer 2 VPN with a standards-compliant physical appliance.

  C. The Distributed Router can form a Layer 2 VPN to another Distributed Router or NSX Edge Service Gateway.

  D. Layer 2 VPNs require the two VPN endpoints be in the same Layer 2 segment.

  Correct Answer: AB

• Question 127:

  Which components are required to enable layer 2 bridging? (Choose two.)

  A. Distributed firewall rule to allow layer 2 traffic in the bridge.

  B. Deployed Logical Switch.

  C. Deployed Logical Router.

  D. VLAN trunk configured on logical switch.

  Correct Answer: AC

• Question 128:

  Which two are valid types of authentication for an OSPF area? (Choose two.)

  A. Password authentication

  B. MD5 authentication

  C. SHA1 authentication

  D. LDAP authentication

  Correct Answer: AB

• Question 129:

  A vSphere administrator wants to add a VLAN LIF to a Distributed Router. What must the vSphere administrator do for the VLAN LIF to be added successfully?

  A. The vSphere administrator must assign a VLAN number to the distributed portgroup that the VLAN LIF connects to.

  B. The vSphere administrator must assign a VLAN number to the Distributed Router that the Logical Switch connects to.

  C. The vSphere administrator must assign a VLAN number to the Logical Switch that the Distributed Router connects to.

  D. The vSphere administrator must assign a VLAN number to the uplink on the distributed switch that the VLAN LIF connects to.

  Correct Answer: A

• Question 130:

  A vSphere administrator added a new interface to a Distributed Router with a subnet of 172.16.10.0/24 and wants to make this subnet reachable to the rest of the network. How can the vSphere administrator achieve this?

  A. Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and redistribute into OSPF the 172.16.10.0/24 subnet.

  B. Enable OSPF in the Distributed Router. Configure the uplink interface in the normal area and the new interface with the subnet 172.16.10.0/24 in a Backbone area.

  C. Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and redistribute from OSPF the 172.16.10.0/24 subnet.

  D. Enable OSPF on the Distributed Router. Configure the uplink interface in the Backbone area and the new interface with the subnet 172.16.10.0/24 in a normal area.

  Correct Answer: D