01. Tier-1 gateways T1-Web and T1-App link to the same Tier-0 gateway, and neither runs a stateful service. An Edge cluster was selected on T1-Web at creation in case NAT is needed later; T1-App has no Edge cluster. Monitoring shows heavy traffic between Web and App VMs, and heavy traffic among the Web segments themselves.
Which two assessments of this design are accurate?
(Choose two.)
a) The Tier-0 SR routes Web-to-App traffic on an Edge
b) Moving the T1-Web SR to another cluster fixes it
c) Traffic among Web segments stays on host DRs
d) Giving T1-App its own SR removes the Edge hop
e) Web-to-App traffic hairpins through the T1-Web SR on an Edge
02. NSX Manager has used VMware Identity Manager for sign-in, with NSX roles assigned to Active Directory groups through it. The company is retiring VMware Identity Manager, so the administrator adds an LDAP identity source for the same Active Directory domain, pointing at the same domain controllers that VMware Identity Manager used.
What happens to the existing role assignments when VMware Identity Manager is then disabled?
a) They carry over, so group members keep their NSX roles when they sign in through the LDAP identity source
b) They are deleted with the integration, so each AD group needs its roles assigned again
c) They are converted into local NSX accounts holding the same roles
d) They depend on VMware Identity Manager staying enabled beside LDAP
03. Cluster Compute-01 is prepared through a transport node profile whose single VDS, VDS-Prod, carries overlay transport zone TZ-Overlay-A and VLAN transport zones TZ-VLAN-1 and TZ-VLAN-2. The hosts also have two unused physical NICs. A separate lab overlay must now use a second overlay transport zone, TZ-Overlay-B, on the same hosts.
Which design meets the requirement?
a) Add TZ-Overlay-B to VDS-Prod beside TZ-Overlay-A in the existing host switch
b) Remove the two VLAN zones from VDS-Prod so that it can carry both overlay zones
c) Attach TZ-Overlay-B through a second VDS
d) Add an N-VDS on each host for TZ-Overlay-B beside VDS-Prod
04. VM Web-01 is attached to overlay segment Seg-Web, and an administrator is validating the new segment with Network Topology. Before checking the tunnels of the host, the administrator wants to confirm which host transport node Web-01 is running on.
Which Network Topology action shows this?
a) Select Seg-Web to see the services attached to the segment, such as DHCP and the metadata proxy
b) Double-click Web-01 to open its fabric view, which shows the host cluster and host transport node it runs on
c) Double-click the gateway of Seg-Web to see its DR and Edge cluster
d) Click Seg-Web and read its transport zone, which lists the hosts the segment spans
05. In a design workshop, an architect drags each requirement card onto the NSX capability tile that meets it. One card reads: two data centers each keep their own NSX Manager cluster; networking and security are defined once and applied consistently at both; and if one site fails, its workloads restart at the other under the same security policy.
Which capability tile should this card be placed on?
a) L2 VPN between Tier-0 gateways at the two sites, extending the segments
b) One NSX Manager cluster with its nodes split across the two sites
c) NSX projects, one per data center, under the default org
d) NSX Federation, with a Global Manager and both NSX Manager clusters registered as its Local Managers\
06. Overlay segment Seg-HR is connected to a Tier-1 gateway and receives IPv4 addresses from a Segment DHCP server. The administrator wants to keep that server and also attach a DHCP relay profile pointing at the corporate DHCP servers, so that relay can answer whenever the NSX server runs out of free addresses.
What is true of this plan?
a) Relay forwards the requests that the server leaves unanswered
b) Relay hands out the leases, while the local server goes on supplying the DHCP options to clients
c) It fails because a segment holds one DHCPv4 relay or server, so pick one
d) The pair works once the relay profile names an Edge cluster
07. After enabling OSPF on Tier-0 gateway T0-Core, an administrator wants to confirm from the Network Topology view in NSX Manager, without logging in to an Edge node, which routes T0-Core has learned.
What should the administrator do with T0-Core in Network Topology?
a) Open the Edge cluster profile of the cluster hosting T0-Core
b) Export the topology to PDF and read the Tier-0 labels
c) Filter the view down to T0-Core and its uplinks
d) Download its routing table
08. Tenants Alpha and Beta each have an active-standby Tier-1 gateway linked to the same Tier-0 gateway, and both tenants use 10.1.0.0/24 for their workloads. Workloads in both tenants must reach a shared monitoring platform on the physical network, and the platform must be able to reply to the workloads of each tenant.
Where should address translation be configured?
a) SNAT on each Tier-1, to a distinct address per tenant
b) DNAT on each Tier-1 for the address of the monitoring platform
c) SNAT on the Tier-0, translating 10.1.0.0/24 to one shared external address
d) Reflexive NAT on the Tier-0
09. For VRF Lite, an administrator created an uplink trunk segment in the Edge VLAN transport zone, with connectivity set to None and VLANs 100-103. Four Tier-0 VRF gateways already have external interfaces on it, each on one of those access VLANs. A fifth tenant gateway, VRF-E, must peer with the physical router on VLAN 140, and its external interface cannot be given access VLAN 140 on this segment.
What should the administrator change?
a) Set the connectivity of the trunk segment to the parent Tier-0 gateway
b) Make VLAN 140 the uplink profile transport VLAN
c) Add VLAN 140 to the VLAN range of the trunk segment
d) Give the parent Tier-0 gateway an external interface on VLAN 140 first
10. Physical backup servers in subnet 10.50.0.0/24 on VLAN 500 copy data each night from VMs on overlay segment Seg-DB, subnet 10.60.0.0/24. The Tier-0 gateway runs active-active with ECMP across four Edge nodes. The team wants the nightly copies to use more than one Edge node, and the servers do not need Layer 2 adjacency with the VMs.
Which approach meets this goal?
a) Routed flows through the Tier-0, spread by ECMP
b) An Edge bridge on Seg-DB with a profile naming four Edge nodes
c) A Tier-0 service interface on VLAN 500 as the servers' gateway
d) L2 VPN between Seg-DB and VLAN 500