New Year Special Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

 
Home > VMware > VCAP-NV Design 2020 > 3V0-42.20

3V0-42.20 Advanced Design VMware NSX-T Data Center Question and Answers

Question # 4

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.

This information was gathered during the Assessment Phase:

  • Data between two networks connected over a public network needs to be encrypted.
  • Certificate authentication is required.
  • Dynamic route learning is preferred.

Which selection should the architect include in their design? (Choose the best answer.)

A.

Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.

B.

Deploy a Tier-0 gateway in Active/Active mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.

C.

Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.

D.

Deploy a Tier-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.

Full Access
Question # 5

What would an architect recommend to a customer that wants to extend management to an additional data center through Layer 2, but does not want to add additional NSX-T licensing? (Choose the best answer.)

A.

Deploy a standalone NSX Controller.

B.

Deploy a standalone NSX Manager.

C.

Deploy a standalone Edge as the IPSec VPN.

D.

Deploy Autonomous Edge as the L2 VPN client.

Full Access
Question # 6

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.

This information was gathered during the assessment:

  • There must be a performance based SLA for East – West traffic.

Which two key performance features should the architect recommend? (Choose two.)

A.

Configure N-VDS enhanced Data Path

B.

Install advanced Edge pNIC Features

C.

Setup RSS to leverage multiple cores

D.

Leverage DPDK drivers

E.

Enable GENEVE Offload

Full Access
Question # 7

An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.

Which risk is documented by an architect? (Choose the best answer.)

A.

The security team has a firewall communication matrix documented.

B.

The team is not trained for NSX-T but have a very strong experience with vSphere.

C.

Open communication between different application tiers is not allowed.

D.

Aggregate N-S throughput at any given time should be at least 10G.

Full Access
Question # 8

What is a design justification for a solution with 3 NSX Manager nodes deployed in a 4 ESXi cluster Management Cluster? (Choose the best answer.)

A.

NSX Controllers are separated from NSX Managers allowing 6 ESXi servers to host them.

B.

NSX Management Plane and Control Plane will be reduced to a single point of failure.

C.

Compute consumption guarantees NSX Manager nodes can be run on the same ESXi host.

D.

Single point of failure on Control Plane and Management Plane will be mitigated.

Full Access
Copyright myexamcollection.com. All Right Reserved.