Q55. Which tool could be used to configure BGP on a Tier-0 Gateway?

Q56. Which two statements are true for IPSec VPN? (Choose two.)

Q57. Refer to the exhibit.
An administrator would like to change the private IP address of the NAT VM 172.16.101.11 to a public address of 80.80.80.1 as the packets leave the NAT-Segment network.
Which type of NAT solution should be implemented to achieve this?

Q58. An administrator wants to validate the BGP connection status between the Tier-O Gateway and the upstream physical router.
What sequence of commands could be used to check this status on NSX Edge node?

Q59. An administrator has deployed 10 Edge Transport Nodes in their NSX Environment, but has forgotten to specify an NTP server during the deployment.
What is the efficient way to add an NTP server to all 10 Edge Transport Nodes?

Q60. Which field in a Tier-1 Gateway Firewall would be used to allow access for a collection of trustworthy web sites?

Q61. In an NSX environment, an administrator is observing low throughput and congestion between the Tier-0 Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)

Q62. What can the administrator use to identify overlay segments in an NSX environment if troubleshooting is required?

Q63. An NSX administrator is using ping to check connectivity between VM1 running on ESXi1 to VM2 running on ESXi2. The ping tests fails. The administrator knows the maximum transmission unit size on the physical switch is 1600.
Which command does the administrator use to check the VMware kernel ports for tunnel end point communication?

Q64. Which two statements are true about IDS Signatures? (Choose two.)

Q65. When running nsxcli on an ESXi host, which command will show the Replication mode?

Q66. Which three security features are dependent on the NSX Application Platform? (Choose three.)

Q67. Which two CLI commands could be used to see if vmnic link status is down? (Choose two.)

Q68. Which two logical router components span across all transport nodes? (Choose two.)

Q69. What needs to be configured on a Tler-0 Gateway lo make NSX Edge Services available to a VM on a VLAN-backed logical switch?

Q70. Which two of the following features are supported for the Standard NSX Application Platform Deployment? (Choose two.)

Q71. An administrator has deployed 10 Edge Transport Nodes in their NSX Environment, but has forgotten to specify an NTP server during the deployment.
What is the efficient way to add an NTP server to all 10 Edge Transport Nodes?

Q72. How is the RouterLink port created between a Tier-1 Gateway and Tier-0 Gateway?

Q73. Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the Geneve protocol on the ESXi transport node? (Choose two.)

Q74. An NSX administrator would like to create an L2 segment with the following requirements:
* L2 domain should not exist on the physical switches.
* East/West communication must be maximized as much as possible.
Which type of segment must the administrator choose?

Q75. A security administrator needs to configure a firewall rule based on the domain name of a specific application.
Which field in a distributed firewall rule does the administrator configure?

Q76. Where can an administrator see a visual overview of network connections between different VMs and different networks, within the NSX domain?

Q77. What is the VMware recommended way to deploy a virtual NSX Edge Node?

Q78. A company Is deploying NSX micro-segmentation in their vSphere environment to secure a simple application composed of web. app, and database tiers.
The naming convention will be:
* WKS-WEB-SRV-XXX
* WKY-APP-SRR-XXX
* WKI-DB-SRR-XXX
What is the optimal way to group them to enforce security policies from NSX?