5V0-41.21問題集、VMware実際の試験問題

質問 1

Which two are requirements for URL Analysis? (Choose two.)

A. The NSX Manager requires access to the Internet to download category and reputation definitions.

B. A layer 7 gateway firewall rule must be configured on the tier-0 gateway uplink to capture DNS traffic.

C. The NSX Edge nodes require access to the Internet to download category and reputation definitions.

D. A layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic,

E. The ESXi hosts require access to the Internet to download category and reputation definitions.

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which esxcli command lists the firewall configuration on ESXi hosts?

A. vsipioct1 getrules -filter <filter-name>

B. esxcli network firewall ruleset list

C. esxcli network firewall rules

D. vsipioct1 getrules -f <filter-name>

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

A security administrator recently enabled Guest Introspection on NSX-T Data Center.
Which would be a reason none of the Microsoft Windows based VMs are reporting any information?

A. Windows VMs require a reboot.

B. NSX Manager needs to be reconfigured.

C. VMware Tools need to be reconfigured.

D. NSX Manager require a reboot.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 4

An administrator wants to configure NSX-T Security Groups inside a distributed firewall rule. Which menu item would the administrator select to configure the Security Groups?

A. Inventory

B. System

C. Security

D. Networking

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which dot color indicates an on-going attack of medium severity in the IDS/IPS events tab of NSX-T Data Center?

A. solid orange dot

B. solid red dot

C. blinking orange dot

D. blinking yellow dot

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which two statements are true about NSX Intelligence? (Choose two.)

A. NSX Intelligence supports planning of NSX-T Edge Firewall rules and policy.

B. NSX Intelligence can be used in conjunction with vRealize Network Insight.

C. NSX Intelligence can help to visualize network physical infrastructure.

D. NSX Intelligence assists to build service insertion with Partner SVM.

E. NSX Intelligence supports planning of distributed firewall rules and policy.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 7

A company's CTO has requested that all logging should be enabled for all NSX-T Data Center Distributed Firewall rules. What should be considered prior to executing this request?

A. Logging can only be enabled for sections and not for single rules.

B. Large amounts of log information will likely affect performance.

C. Once logging is enabled for all rules it cannot be disabled afterwards.

D. Large amounts of log information can fill up the vSphere Server database.

正解: D

質問 8

An NSX administrator is trying to find the dvfilter name of the sa-web-01 virtual machine to capture the sa-web-01 VM traffic. What could be a reason the sa-web-01 VM dvfilter name is missing from the command output?

A. sa-web-01 VM has the no firewall rules configured.

B. ESXi host has 5SH disabled.

C. sa-web-01 is powered Off on ESXi host.

D. ESXi host has the firewall turned off.

正解: C

解説: (PassTest メンバーにのみ表示されます)

VMware NSX-T Data Center 3.1 Security - 5V0-41.21 模擬練習