VMware VMware Certifications VCPN610 Questions & Answers

• Question 81:

  Where are the Logical Firewall logs saved?

  A. On the vNIC-FW module

  B. On the ESXi host

  C. On the NSX Controllers

  D. On the NSX Manager

  Correct Answer: B

• Question 82:

  If a Security Group is the Source for a General Logical Firewall Rule, which Virtual Machines will be affected by the rule?

  A. Each Virtual Machine defined in the Security Group.

  B. Each Virtual Machine defined in the Source and Destination fields of the Logical Firewall Rule.

  C. Each Virtual Machine identified in the Applied To field of the Logical Firewall Rule.

  D. Each Virtual Machine identified in the Destination field of the Logical Firewall Rule.

  Correct Answer: C

• Question 83:

  Which statement best describes firewall packet processing in an NSX environment?

  A. Packets that require firewall processing are redirected to the nearest ESXi host deployed with a virtual machine based firewall.

  B. Packets that require firewall processing are forwarded to a physical firewall appliance.

  C. Packets that require firewall processing are processed in-line on the local hypervisor.

  D. Packets that require firewall processing are forwarded to the nearest ESXi host with an embedded firewall module.

  Correct Answer: C

• Question 84:

  A company wants to deploy VMware NSX for vSphere and ensure the least amount of bandwidth consumption in the underlying physical architecture. Which replication mode should the logical switches be deployed with?

  A. Multicast Replication Mode

  B. Unicast Replication Mode

  C. Hybrid Replication Mode

  D. vSphere Replication Mode

  Correct Answer: A

• Question 85:

  You want to use an existing NSX Manager to extend logical networks to the ESXi hosts of a new cluster. What should you do?

  A. On the Installation > Host Preparation page of the Networking and Security section of the vSphere Web Client, click the Install link for the new cluster.

  B. On the Installation > Host Preparation page of the Networking and Security section of the vSphere Web Client, click the Install link for each of the new hosts.

  C. On the Installation > Management page of the Networking and Security section of the vSphere Web Client, click the green plus sign to deploy a new NSX controller node to the new cluster.

  D. On the Installation > Logical Network Preparation page of the Networking and Security section of the vSphere Web Client, create a new Transport Zone for the new cluster.

  Correct Answer: A

• Question 86:

  What is the earliest version of vCloud Network and Security (vCNS) that can be upgraded to VMware NSX for vSphere 6.0?

  A. vCNS 5.0

  B. vCNS 5.1

  C. vCNS 5.5

  D. vCNS 6.0

  Correct Answer: C

• Question 87:

  Which is not a prerequisite to upgrade vCloud Network and Security Virtual Wires to Logical Switches?

  A. vCloud Network and Security Manager has been upgraded to NSX Manager.

  B. vShield Data Security has been uninstalled.

  C. NSX Controllers have been deployed.

  D. The NSX Manager has been configured with the same IP as the vCloud Network and Security Manager.

  Correct Answer: C

• Question 88:

  -- Exhibit

  

  -- Exhibit -An administrator is testing connectivity between two ESXi hosts and uses the ping utility.

  Based on the results shown in the exhibit, which statement is correct?

  A. Communication between the hosts is working correctly.

  B. The hosts are in separate subnets.

  C. The MTU size is too small.

  D. A logical router has not been deployed and configured.

  Correct Answer: C

• Question 89:

  Which statement is true regarding multicast traffic when implementing NSX?

  A. A multicast address range is required when using vCenter Server 5.5

  B. A multicast address range is required when using ESXi 5.1 hosts

  C. A multicast address range is required when using ESXi 5.0 hosts

  D. A multicast address range is required when using vCenter Server 5.1

  Correct Answer: B

• Question 90:

  Choose the two statements correctly describing the way NSX provides integration with Cloud Management Platforms (CMP). (Choose two.)

  A. OpenStack provides integration with the Cinder plug-in.

  B. OpenStack provides integration with the Neutron plug-in.

  C. VMware provides open source API plug-ins for their own CMP products such as vCD and vCAC.

  D. VMware provides out of the box integration with their own CMP products such as vCD and vCAC.

  Correct Answer: BD