2V0-642: VMware Certified Professional 6 - Network Virtualization (NSX v6.2)

A network administrator has been tasked with deploying a 3-tier application across two data centers. Tier-1 and tier-2 will be located in Datacenter-A and tier-3 will

be located in Datacenter-B.

Which NSX components are needed to make this deployment functional?

A universal transport zone deployed with a universal distributed logical router (UDLR), a universal logical switch and two local logical switches connected to the UDLR.
A universal transport zone deployed with a universal distributed logical router (UDLR), two universal logical switches and a single logical switch connected to the UDLR.
A universal transport zone deployed with a universal distributed logical router (UDLR) and three universal logical switches connected to the UDLR.
A universal transport zone, a universal distributed logical router (UDLR) and three local switches in each data center connected to the UDLR.

Correct answer: C

You have deployed an Edge Services Gateway with the following interface configuration:

Your customer has requested that you provide the ability to use Remote Desktop Protocol to log into a virtual machine that has a tenant IP address of 192.168.7.21

using the provider IP address 192.168.100.4. You have performed the following configuration however, you cannot RDP into the virtual machine.

What configuration change do you need to make to allow this connection?

Change Applied On to “Uplink”.
Change the Protocol to “any”.
Change the Translated Port/Range to “rdp”.
Swap the Original IP/Range and Translated IP/Range IP Addresses.

Correct answer: A

Which two are accurate statements with regards to Guest Introspection installation? (Choose two.)

The service virtual machine performs data security and activity monitoring.
The installation deploys a virtual machine to hosts prepared for VMware NSX.
A security policy weight of 4300 is assigned to hosts prepared to Guest Introspection.
Guest Introspection is deployed with NSX Data Security by default.

Correct answer: AB

Which three objects are supported for universal synchronization in a Cross-vCenter NSX deployment? (Choose three.)

IP Pools
IP Sets
L2 bridges
MAC Sets
Transport Zones

Correct answer: BDE

Explanation:

Reference: https://pubs.vmware.com/NSX-62/index.jsp?topic=%2Fcom.vmware.nsx-cross-vcenter-install.doc%2FGUID-35831055-57D8-4F2F-95BA-8EFE5362746C.html

An organization has a PCI compliant application deployed as part of a larger NSX environment. Every year a team of contractors evaluates the security of the environment and recommends changes.

What NSX Role and Scope should the contractors be given to minimize access but still allow them to fulfill the stated requirement?

NSX Administrator, Limit access scope
Enterprise Administrator, Limit access scope
Auditor, Limit access scope
Security Administrator, No restrictions

Correct answer: C

In a Cross-vCenter environment, where is information about local logical switches and local logical routers maintained?

Local Controller Cluster
Platform Services Controller
Universal Controller Cluster
Local Transport Zone

Correct answer: C

Explanation:

Reference: https://pubs.vmware.com/NSX-62/topic/com.vmware.ICbase/PDF/nsx_62_cross_vc_install.pdf (p.18)

What is the effect on NSX Edge virtual machines when NSX Edge high availability is configured but vSphere HA is NOT configured?

The active-standby NSX Edge pair will survive one failure. However, the virtual machines must reside on the same host to prevent NSX Edge availability from being compromised.
The active-standby NSX Edge HA pair will survive multiple failures.
The active-standby NSX Edge HA pair will survive one failure. However, if another failure happens before the second Edge appliance is restored, NSX Edge availability can be compromised.
The active-standby NSX Edge HA pair will survive two failures. However, the virtual machines must reside on two different hosts.

Correct answer: C

Explanation:

Reference: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-6C4F0C33-C6DD-432B-AA91-10AD6B449125.html

An administrator creates a SpoofGuard policy for specific networks.

Which two modes are associated with this type of policy? (Choose two.)

Automatically trust IP assignments on their first use
Manually inspect and approve all IP assignments before use
Manually approve IP assignments listed in the Host file before use
Automatically inspect and trust IP assignments on every use

Correct answer: AB

Explanation:

Reference: http://www.virtually-limitless.com/vcix-nv-study-guide/create-modify-or-delete-spoofguard-policies/

Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

Within Compute Cluster 1, Layer 2 would function, but Layer 3 would fail.
Within Compute Cluster 1, Layer 2 would fail, and Layer 3 would fail.
Within Compute Cluster 1, Layer 2 would fail, but Layer 3 would function.
Within Compute Cluster 1, Layer 2 would function, and Layer 3 would function.

Correct answer: A

Where can firewall rules be applied on the NSX Edge Services Gateway?

Rules can be applied on the uplink interface only.
Rules can be applied on either the uplink interface or internal interface.
Rules can be on either the uplink, internal, or management interfaces.
Rules can be applied on the management and uplink interfaces only.

Correct answer: B

Explanation:

Reference: https://pubs.vmware.com/NSX-6/index.jsp?topic=%2Fcom.vmware.nsx.install.doc%2FGUID-6FB89057-CD13-48AF-82F2-550B89F89FC5.html

Vendor:	VMware
Exam Code:	2V0-642
Exam Name:	VMware Certified Professional 6 - Network Virtualization (NSX v6.2)
Date:	Sep 17, 2018
File Size:	3 MB

Download VMware Certified Professional 6 - Network Virtualization (NSX v6.2).2V0-642.PrepAway.2018-09-17.72q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown