6V0-21.25問題集、VMware実際の試験問題

質問 1

Which of the following are maintained by the vDefend Distributed Firewall on a per vnic basis? (Select all that apply)

A. Flow Table

B. Firewall Table

C. IDPS Table

D. Rule Table

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which vDefend Gateway Firewall feature is ONLY supported on T1 Gateways?

A. L3/L4 Gateway Firewall

B. Gateway IDRS

C. Stateful Services on A/A Gateways

D. Gateway IDFW

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

vDefend Malware Detection can be enforced on which of the following? (Select all that apply)

A. T1 Uplinks

B. T1 Downlinks

C. T1 Service Interfaces

D. T0 Downlinks

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which of the following is true regarding the VMware vDefend Distributed Firewall?

A. VMware vDefend Distributed Firewall can be deployed as a virtual machine or on bare metal hardware

B. VMware vDefend Distributed Firewall runs as an agent in a physical switch with open software development capabilities

C. VMware vDefend Distributed Firewall is a hypervisor-based software defined firewall solution

D. VMware vDefend Distributed Firewall runs in the ESXi vSwitch

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

You want to create a VMware vDefend Distributed Firewall policy to allow traffic to a specific virtual machine, but only for certain hours of the day. What should you do?

A. Create a time-based firewall policy

B. Create a script and use the API to execute the script on a schedule

C. Create the rule in the Emergency section of the Distributed Firewall

D. Create an URL filter

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which one of the following is NOT one of the use-cases of Distributed Intrusion Detection and Prevention?

A. Achieve regulatory compliance requirements for PCI-DSS, HIPAA, SOX

B. Prevent lateral movement of attackers by blocking vulnerabilities

C. Provide routing capability for an air-gapped network to securely access the internet

D. Enable software-based IDS/IPS for Critical applications

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which of the following is NOT true in the context of Malware Prevention?

A. Static Analysis is good at catching the benign files and good at catching the obvious malicious files

B. All the files are sent to NSX advanced threat prevention service for dynamic analysis

C. Dynamic Analysis provides full visibility into subject behavior and system memory

D. Static Analysis determines if dynamic analysis is needed

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 8

What would best describe DGA activity?

A. Trying to connect to randomly generated domains to obfuscate C2 traffic

B. Intercepting packets to steal sensitive data

C. Logging keystrokes to capture user credentials

D. Exploiting vulnerabilities in web applications through SQL injection

正解: A

解説: (PassTest メンバーにのみ表示されます)

VMware vDefend Security for VCF 5.x Administrator - 6V0-21.25 模擬練習