[Nov 18, 2023] 5V0-41.21 Exam Dumps - Try Best 5V0-41.21 Exam Questions - Test4Cram
Verified 5V0-41.21 exam dumps Q&As with Correct 72 Questions and Answers
NEW QUESTION # 22
Which of the following are the local user accounts used to administer NSX-T Data Center?
- A. admin, super, read-only
- B. admin, audit, root
- C. operator, admin, audit
- D. operator, admin, root
Answer: B
NEW QUESTION # 23
Refer to the exhibit.
An administrator needs to configure a security policy with a firewall rule allowing a group of applications to retrieve the correct time from an NTP server. Which is the category to configure this security policy and firewall rule?
- A. Emergency
- B. Application
- C. Infrastructure
- D. Environment
Answer: C
Explanation:
For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID-D12A8AE7-B9E9-4C79-8FE4-7F4BECD4F71B.html) for more information on configuring firewall rules.
NEW QUESTION # 24
How does N5X Distributed IDS/IPS keep up to date with signatures?
- A. NSX Manager has a local IDS/IPS signatures database that does not need to be updated.
- B. NSX Distributed IDS/IPS signatures are retrieved from updates.vmware.com.
- C. NSX-T Data Center is using a cloud based database to download the IDS/IPS signatures.
- D. NSX Edge uses manually uploaded signatures by the security administrator.
Answer: B
NEW QUESTION # 25
When using URL Analysis In NSX-T, which two services must be set in the URL rule to capture traffic over TCP and UDP? (Choose two.)
- A. DHCPv6
- B. DHCP
- C. DNS-UDP
- D. DNS
- E. DNS-TSIG
Answer: B,D
NEW QUESTION # 26
Which three security objects are provided as an output in a recommendation session in NSX Intelligence? (Choose three.)
- A. context profiles
- B. security groups
- C. security service
- D. gateway firewall rules
- E. distributed firewall rules
Answer: C,D,E
Explanation:
NSX Intelligence uses machine learning algorithms to analyze network traffic and provide recommendations for security and compliance. These recommendations include the following security objects:
Distributed Firewall Rules: Distributed firewall rules are used to control traffic between virtual machines within a logical network. NSX Intelligence can recommend new distributed firewall rules based on traffic patterns it observes in the network.
Security Service: Security services are used to protect virtual machines and networks from threats. NSX Intelligence can recommend new security services to be deployed based on traffic patterns it observes in the network.
Security Groups: Security groups are used to group virtual machines and networks together for security and management purposes. NSX Intelligence can recommend new security groups to be created based on traffic patterns it observes in the network.
1. context profiles are not an output from a recommendation session in NSX Intelligence. It is used to define the context of the network traffic that is being analyzed, such as the type of device, the network location, or the user.
2. gateway firewall rules are not an output from a recommendation session in NSX Intelligence. Gateway firewall rules are used to control traffic between logical networks, such as between a VLAN and a VXLAN, or between a logical network and the physical network.
Reference:
VMware NSX Intelligence documentation https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.intelligence.doc/GUID-F2F1D7E8-F6B2-4870-9E Top of Form Bottom of Form
NEW QUESTION # 27
Which esxcli command lists the firewall configuration on ESXi hosts?
- A. vsipioct1 getrules -f <filter-name>
- B. esxcli network firewall rules
- C. vsipioct1getrules -filter <filter-name>
- D. esxcli network firewall ruleset list
Answer: D
NEW QUESTION # 28
As part of an audit, an administrator is required to demonstrate that measures have been taken to prevent critical vulnerabilities from being exploited. Which Distributed IDS/IPS event filter can the administrator show as proof?
- A. CVE
- B. Signature ID
- C. CVSS
- D. Attack Type
Answer: B
NEW QUESTION # 29
What is an unprotected traffic flow in NSX Intelligence?
- A. A traffic flow that matches a drop rule more granular than the default.
- B. A traffic flow that matches the default distributed firewall rule.
- C. A traffic flow that matches a reject rule more granular than the default.
- D. A traffic flow that matches an allow rule more granular than the default.
Answer: B
Explanation:
An unprotected traffic flow in NSX Intelligence is a traffic flow that matches the default distributed firewall rule. The default rule is a catch-all rule which allows all traffic to pass through the distributed firewall, and any traffic flows that match this rule will be marked as unprotected. NSX Intelligence will then generate an alert for any unprotected traffic flows, allowing the administrator to take action to secure the traffic flow. Reference: [1] https://docs.vmware.com/en/VMware-NSX-T/3.0/vmware-nsx-t-30-administration-guide/GUID-D43B9C85-7F4C-4504-8D2B-BC1D7CADB4CD.html [2] https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/techpaper/vmware-nsx-data-center-for-vsphere-distributed-firewall-deployment-guide.pdf
NEW QUESTION # 30
A company's CTO has requested that all logging should be enabled for all NSX-T Data Center Distributed Firewall rules. What should be considered prior to executing this request?
- A. Large amounts of log information can fill up the vSphere Server database.
- B. Large amounts of log information will likely affect performance.
- C. Logging can only be enabled for sections and not for single rules.
- D. Once logging is enabled for all rules it cannot be disabled afterwards.
Answer: A
NEW QUESTION # 31
Which two criteria would an administrator use to filter firewall connection logs on NSX?
- A. FIREWALL CONNECTION
- B. FIREWALL RULE TAG
- C. FIREWALL-PKTLOG
- D. FIREWALL SYSTEM
- E. FIREWALL MONITORING
Answer: A,B
Explanation:
An administrator can use the FIREWALL RULE TAG and FIREWALL CONNECTION criteria to filter the logs on NSX. The FIREWALL RULE TAG criteria allows the administrator to filter the logs based on the tag assigned to each rule, while the FIREWALL CONNECTION criteria allows the administrator to filter the logs based on the connection status (e.g. accepted or denied).
For more information on how to filter firewall connection logs on NSX, please refer to the NSX-T Data Center documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsx-t-3.0-firewall/GUID-B6B835F2-B6F2-4468-8F8E-6F7B9B9D6E91.html
NEW QUESTION # 32
Which is an insertion point for East-West service insertion?
- A. tier-1 gateway
- B. Guest VM vNlC
- C. Partner SVM
- D. transport node
Answer: A
NEW QUESTION # 33
What must an administrator deploy to provide Linux based VMs with antivirus protection?
- A. Antivirus Agent in NSX
- B. Guest Introspection Thin Agent
- C. Antivirus Agent in vCenter
- D. Guest Customization Agent
Answer: C
NEW QUESTION # 34
An administrator is creating the first distributed firewall rules for a company's salts department. What is the first object that must be created in the distributed firewall'
- A. firewall service
- B. firewall folder
- C. firewall policy
- D. firewall file
Answer: B
NEW QUESTION # 35
Refer to the exhibit.
A security administrator is configuring a time window to create a time-based distributed firewall rule. While configuring the time window, an error displayed as shown in the exhibit. Which action will resolve the problem?
- A. Restart me NTP service on the ESXl host.
- B. Change the time windows frequency
- C. Change the time window interval.
- D. Configure the ESXl host to use a remote NTP server.
Answer: D
NEW QUESTION # 36
To which network operations does a user with the Security Engineer role have full access permission?
- A. Networking Forwarding Policies, Networking NAT, Networking VPN
- B. Networking DHCP, Networking NAT, Networking Segments
- C. Networking IP Address Pools, Networking NAT, Networking DHCP
- D. Networking Load Balancing, Networking DNS, Networking Forwarding Policies
Answer: C
Explanation:
A user with the Security Engineer role has full access permission to Networking IP Address Pools, Networking NAT, Networking DHCP, Networking Forwarding Policies, Networking VPN, Networking Load Balancing, Networking DNS, and Networking Segments. These operations allow the Security Engineer to configure and manage the necessary networking components to ensure a secure network environment. For example, Networking IP Address Pools allows the Security Engineer to create and manage IP address pools for assigning IP addresses to nodes on the network, Networking NAT allows the Security Engineer to configure Network Address Translation to improve security and privacy, and Networking Forwarding Policies allows the Security Engineer to configure policies for routing traffic between different networks. Reference: [1] https://docs.vmware.com/en/VMware-NSX-T/3.0/vmware-nsx-t-30-administration-guide/GUID-ACA9C0F2-2F2E-43E3-A3C3-DEEECB7CFE8F.html [2] https://docs.vmware.com/en/VMware-NSX-T/2.5/vmware-nsx-t-25
NEW QUESTION # 37
Information Security Management (ISM) describes a set of controls that organizations employ to protectwhich properties?
- A. confidentiality, interoperability, and availability
- B. confidentiality. Integrity, and accessibility
- C. configuration. Integrity, and availability
- D. confidentiality, integrity, and availability
Answer: C
NEW QUESTION # 38
An NSX administrator has been tasked with deploying a NSX Edge Virtual machine through an ISO image.
Which virtual network interface card (vNIC) type must be selected while creating the NSX Edge VM allow participation in overlay and VLAN transport zones?
- A. VMXNET2
- B. VMXNET3
- C. e1000
- D. Flexible
Answer: B
NEW QUESTION # 39
Which esxcli command lists the firewall configuration on ESXi hosts?
- A. vsipioct1 getrules -f <filter-name>
- B. esxcli network firewall rules
- C. vsipioct1 getrules -filter <filter-name>
- D. esxcli network firewall ruleset list
Answer: D
Explanation:
This command allows you to display the current firewall ruleset configuration on an ESXi host. It will show the ruleset names, whether they are enabled or disabled, and the services and ports that the ruleset applies to.
For example, you can use the command "esxcli network firewall ruleset list" to list all the firewall rulesets on the host.
You can also use the command "esxcli network firewall ruleset rule list -r <ruleset_name>" to display detailed information of the specific ruleset, where <ruleset_name> is the name of the ruleset you want to display.
It's important to note that you need to have access to the ESXi host's command-line interface (CLI) and have appropriate permissions to run this command.
https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vcli.ref.doc/esxcli_network_firewall_ruleset.html
NEW QUESTION # 40
......
VMware 5V0-41.21 Test Engine PDF - All Free Dumps: https://www.test4cram.com/5V0-41.21_real-exam-dumps.html
Get New 5V0-41.21 Certification – Valid Exam Dumps Questions: https://drive.google.com/open?id=1w1kuMAGOmzZ1QTxCOyB_uZhoqj1aPWqd