VMware 6V0-21.25 Certification Exam Sample Questions

6V0-21.25 Braindumps, 6V0-21.25 Exam Dumps, 6V0-21.25 Examcollection, 6V0-21.25 Questions PDF, 6V0-21.25 Sample Questions, VCP-PCS Admin Dumps, Private Cloud Security Administrator Official Cert Guide PDF, VCP-PCS Admin VCE, VMware Private Cloud Security Administrator PDFWe have prepared VMware vDefend Security for VCF 5.x Administrator (6V0-21.25) certification sample questions to make you aware of actual exam properties. This sample question set provides you with information about the VCP-PCS Admin exam pattern, question formate, a difficulty level of questions and time required to answer each question. To get familiar with VMware Certified Professional - Private Cloud Security Administrator (VCP-PCS Admin) exam, we suggest you try our Sample VMware 6V0-21.25 Certification Practice Exam in simulated VMware certification exam environment.

To test your knowledge and understanding of concepts with real-time scenario based VMware 6V0-21.25 questions, we strongly recommend you to prepare and practice with Premium VMware VCP-PCS Admin Certification Practice Exam. The premium VMware Private Cloud Security Administrator certification practice exam helps you identify topics in which you are well prepared and topics in which you may need further training to achieving great score in actual VMware Certified Professional - Private Cloud Security Administrator (VCP-PCS Admin) exam.

VMware 6V0-21.25 Sample Questions:

01. In one Application-category policy, rule 1 allows Any to Any with a context profile that contains the HTTP App ID. Rule 2, below it, allows ICMP echo from the monitoring servers to the web VMs, and rule 3 drops all other traffic to the web VMs. The hit count of rule 2 stays at zero, and the monitoring probes fail.
What should the administrator change?
a) Add an ICMP App ID to the context profile used by rule 1
b) Move rule 2 into the Environment category and give it Jump to Application
c) Turn off the Stateful setting on the policy so ICMP is evaluated per packet
d) Move the ICMP rule above the Layer 7 rule
 
02. Which capability is supported in a vDefend DFW policy applied to Antrea Container Clusters?
a) Time-based scheduling that activates the rule in a set window
b) Negated source groups that match every pod outside a group
c) Applied To at both policy and rule level, with the policy level taking precedence
d) The TCP Strict advanced setting on the policy
 
03. After Distributed Security for VDS is installed on a cluster, NSX shows a transport node profile, a host switch and a VLAN transport zone that it created for the VDS.
Which statement about these objects is true?
a) They can be edited in NSX, and the changes are pushed back to the VDS in vCenter
b) They are system-generated and cannot be edited
c) They must be recreated after each VDS change
d) They are stored only in vCenter
 
04. vDefend Firewall comes in two form factors: the Distributed Firewall and the Gateway Firewall.
How can the Gateway Firewall form factor be deployed?
a) As a kernel module in each ESXi host at every vNIC
b) As a service VM deployed on every host in the cluster
c) Only as a dedicated hardware appliance or chassis from the vendor
d) As a VM or on ISO-converted bare metal
 
05. A company uses NSX Federation with a Global Manager and three Local Managers. During a maintenance window, the administrator of one site wants to deactivate the Distributed Firewall for that site only and opens DFW General Settings on the site's Local Manager.
What will the administrator find?
a) The status is set once at the Global Manager and cannot be overridden here
b) The DFW can be deactivated there once the site's rules are moved to a local span
c) The Local Manager setting overrides the Global Manager for that site's hosts
d) Each site must deactivate its own DFW
 
06. What NSX Manager deployment is required for a production vDefend environment?
a) A single NSX Manager protected by vSphere HA
b) A three-node NSX Manager cluster
c) One NSX Manager per vCenter cluster with DFW enabled
d) Two NSX Manager nodes in an active-standby pair
 
07. During a pilot, an administrator creates several NSX tags but never assigns them to any VM.
What happens to these unused tags?
a) They stay until removed with the Delete action on the Tags page
b) They are moved to the system tags list and become read-only
c) They are kept until their scope is cleared, then deleted at the next publish
d) They are deleted automatically after five days
 
08. Antrea cluster A is already registered with NSX. To register cluster B quickly, an engineer plans to copy cluster A's bootstrap-config.yaml, keeping its certificate and key and changing only the clusterName.
What must change for the registration to be supported?
a) Nothing more, provided both clusters keep using the same PI user
b) The NSXManagers field must point to the NSX cluster VIP instead of the manager IPs
c) Cluster B needs its own principal identity user and certificate, with the CN matching its unique clusterName
d) Cluster B must register to a different NSX Manager cluster than cluster A
 
09. Pods in an Antrea cluster registered with NSX call a database running on NSX-backed VMs. The security team wants a distributed firewall rule on the database VMs that admits only traffic leaving that cluster through its Antrea Egress IPs.
Which group design should the rule use for its source?
a) An Antrea group selecting the client pods by namespace and pod label criteria
b) A Generic group with Antrea Egress members in dynamic membership criteria
c) An Antrea group with the pods' IPs added as static members
d) An Identity Firewall group built from the pods' service account
 
10. Cluster A has vDefend activated on its distributed port groups, and Cluster B has no distributed security. An administrator uses vMotion to move a protected VM from Cluster A to Cluster B for maintenance.
What happens to the VM's distributed firewall protection after the move?
a) Its policies keep being enforced because DFW state travels with the VM during vMotion
b) Its policies are enforced by the Gateway Firewall until it returns to Cluster A
c) Its security policies are removed while it runs on Cluster B
d) Its traffic is dropped until NSX is installed

Answers:

Question: 01
Answer: d		 Question: 02
Answer: c		 Question: 03
Answer: b		 Question: 04
Answer: d		 Question: 05
Answer: a
Question: 06
Answer: b		 Question: 07
Answer: d		 Question: 08
Answer: c		 Question: 09
Answer: b		 Question: 10
Answer: c

Note: Please update us by writing an email on feedback@vmexam.com for any error in VMware Certified Professional - Private Cloud Security Administrator (VCP-PCS Admin) certification exam sample questions

Rating: 4.8 / 5 (115 votes)