VMware VCAN610 Prüfungsthemen:
| Abschnitt | Ziele |
|---|---|
| Grundlagen der Netzwerkvirtualisierung | - NSX-Architektur und -Komponenten - Edge-Dienste und Lastverteilung - Logisches Switching und Routing - Bereitstellung und Verwaltung von NSX - Verteilte Firewall und Sicherheitsdienste |
VMware Certified Associate - Network Virtualization VCAN610 Prüfungsfragen mit Lösungen
Frage #1
Which action is not an option for adding Virtual Machines to a Security Group?
A. Adding Virtual Machines to a Security Group and nesting it within another Security Group.
B. Selecting objects to include within a Security Group.
C. Defining Dynamic Membership in the Security Group.
D. Adding Virtual Machines to a Security Policy and associating it with a Security Group.
Frage #2
Which two statements are true regarding Layer 2 VPNs? (Choose two.)
A. Layer 2 VPNs require the two VPN endpoints be in the same Layer 2 segment.
B. The NSX Edge Service Gateway can form a Layer 2 VPN with a standards-compliant physical appliance.
C. The Distributed Router can form a Layer 2 VPN to another Distributed Router or NSX Edge Service Gateway.
D. Layer 2 VPNs are used to securely extend Ethernet segments over an untrusted medium.
Frage #3
A company has augmented its Data Center infrastructure by using vCloud Hybrid Service during peak hours. The company wants to extend their existing subnets into the cloud while workloads retain their existing IP addresses. The virtual machines in these subnets use an NSX Edge Gateway as their default gateway.
Which solution should this company use?
A. SSL VPN
B. MPLS VPN
C. Layer 2 VPN
D. IPSec VPN
Frage #4
How does NSX simplify the underlying physical network?
A. All configuration and state information are readily accessible, as is the mapping between virtual network topologies and the physical network.
B. All configuration and state information is cached by the NSX controllers, reducing the number of MAC/ARP table entries on the physical network.
C. All configuration and state information is stored in the local NSX BPDU database, eliminating the need for Spanning Tree Protocol (STP) on the physical network.
D. All configuration and state information is available via the REST APIs to automate the configuration of the physical network.
Frage #5
An administrator manages a TFTP server virtual machine that is connected to a Logical Switch with a VNI of 7321. The TFTP server has been configured to use port 1069. An NSX Edge Service Gateway is connected to VNI 7321 and has an uplink interface with access to the physical network. Assume external users can reach the Service Gateway.
What should the administrator configure to ensure external connections to the TFTP server are successful?
A. Create a SNAT rule with the original port of 69 and translated port of 1069.
B. Create a DNAT rule with the original port of 1069 and translated port of 69.
C. Create a SNAT rule with the original port of 1069 and translated port of 69.
D. Create a DNAT rule with the original port of 69 and translated port of 1069.
Fragen und Antworten:
| Frage #1 Antwort: D | Frage #2 Antwort: B,D | Frage #3 Antwort: C | Frage #4 Antwort: A | Frage #5 Antwort: D |
1050 Kundenbewertungen
