Which cipher is not supported by the NSX Edge Service Gateway for an IPSec VPN?
A.
3DES
B.
AES-GCM
C.
AES-256
D.
DES
Which cipher is not supported by the NSX Edge Service G…
Which cipher is not supported by the NSX Edge Service Gateway for an IPSec VPN?
D is correct.
The following IPSec VPN algorithms are supported:
■AES (AES128-CBC)
■AES256 (AES256-CBC)
■Triple DES (3DES192-CBC)
■AES-GCM (AES128-GCM)
■DH-2 (Diffie–Hellman group 2)
■DH-5 (Diffie–Hellman group 5)
https://pubs.vmware.com/NSX-62/index.jsp?topic=%2Fcom.vmware.nsx.admin.doc%2FGUID-6152B56B-2119-48E7-B2F2-BDDCF58B3F14.html
New 2V0-642 Exam Questions and Answers Updated Recently (17/Aug/2017):
NEW QUESTION 1
Two virtual machines are unable to communicate with one another. The virtual machines are in the same distributed port group, but reside on different ESXi hosts. What are two possible causes for the communications issue? (Choose two )
A. Basic multicast filtering mode has been disabled on the ESXi hosts.
B. No physical NICs are assigned as active or standby uplinks in a NIC team.
C. The standby links are configured on different VLANs, preventing heartbeats from reaching each VM.
D. The physical NICs assigned as active or standby uplinks reside on different VLANs on the physical switch.
Answer: CD
NEW QUESTION 2
A customer has Cisco Nexus 1000V switches in their environment and is looking at deploying NSX. Which statement is correct?
A. The environment must be migrated from the Nexus 1000V to vSphere Distributed Switches.
B. The environment must be configured for VXLAN over the Nexus 1000V.
C. The environment can use the Nexus 1000V switches for the NSX deployment.
D. The environment must be migrated from the Nexus 1000V to vSphere Standard Switches.
Answer: A
NEW QUESTION 3
How is high availability of the NSX Edge Gateway accomplished?
A. HA Application Monitoring on the Edge Gateway sends a heartbeat to the ESXi host.
B. VMware Tools on the Edge Gateway sends a heartbeat to the ESXi host.
C. The Edge appliance sends a heartbeat through an uplink interface.
D. The Edge appliance sends a heartbeat through an internal interface.
Answer: D
NEW QUESTION 4
In a Cross-vCenter implementation, where is the Universal Control Cluster deployed and configured?
A. In each vCenter instance associated with the Cross-vCenter implementation.
B. In each prepared NSX cluster associated with the Cross-vCenter implementation.
C. In every vCenter instance associated with an NSX Manager.
D. In the vCenter instance associated with the Primary NSX Manager.
Answer: D
NEW QUESTION 5
What is one of the benefits of using logical switches in an NSX environment?
A. IP subnet definitions can be migrated into logical switches using the NSX Manager.
B. Quality of Service parameters are automatically configured in a logical switch.
C. The physical infrastructure is responsible for maintaining the logical switch broadcast tables.
D. The physical infrastructure is not constrained by MAC/FIB table limits.
Answer: C
NEW QUESTION 6
An application requires load balancing with minimal impact to network performance. An NSX administrator is deploying a load balancer to meet the stated requirements. Which load balancing engine should be deployed?
A. Layer 5
B. Layer 6
C. Layer 7
D. Layer 4
Answer: D
NEW QUESTION 7
Where does an administrator configure logging for the NSX Manager?
A. In the vSphere Web Client
B. In the NSX Manager GUI
C. In the NSX Manager command line interface (CLI)
D. In the vSphere Syslog Collector
Answer: B
NEW QUESTION 8
Which two networking and security components are contained m the backup configuration data of an NSX Manager backup file? (Choose two.)
A. vSphere Distributed Switch
B. Resource Pools
C. Edge Services Gateway
D. Grouping Objects
Answer: CD
NEW QUESTION 9
Which action is not an option for adding Virtual Machines to a Security Group?
A. Adding Virtual Machines to a Security Group and nesting it within another Security Group.
B. Defining Dynamic Membership in the Security Group.
C. Adding Virtual Machines to a Security Policy and associating it with a Security Group.
D. Selecting objects to include within a Security Group.
Answer: C
NEW QUESTION 10
An administrator is deploying NSX to secure the virtual environment. NSX Manager has been deployed and register with it. Which additional step is required before the distributed firewall is functional?
A. Configure VTEPs on each host
B. Perform host preparation on the cluster
C. Deploy the NSX Controller cluster
D. Enable Guest Introspection
Answer: C
NEW QUESTION 11
Which three NSX services are available for synchronization in a Cross-vCenter implementation? (Choose three.)
A. Spoofguard
B. Distributed Firewall
C. Edge Firewall
D. Logical Switch
E. Transport Zone
Answer: BDE
NEW QUESTION 12
Which NSX routing protocols offers the most flexible policy control when peering with the physical environment?
A. BGP
B. OSPF
C. ISIS
D. EIGRP
Answer: B
NEW QUESTION 13
Which service cannot be included in a Security Policy using Service Composer?
A. Endpoint Services
B. Firewall Rules
C. Virtual Private Network Services
D. Network Introspection Services
Answer: C
NEW QUESTION 14
An NSX administrator is creating a filter as shown below.
……
What would be the purpose of creating a filter?
A. To quickly add a new rule.
B. To temporarily filter traffic.
C. To quickly remove a rule.
D. To quickly identify rules.
Answer: B
NEW QUESTION 15
……
P.S. These New 2V0-642 Exam Questions Were Just Updated From The Real 2V0-642 Exam, You Can Get The Newest 2V0-642 Dumps In PDF And VCE From — https://www.passleader.com/2v0-642.html (285q VCE and PDF)
Good Luck!
Besides, part of the new 285Q 2V0-642 dumps are available here:
https://drive.google.com/open?id=0B-ob6L_QjGLpbVl3X1hXbUdteHc
Best Regards!
NEW QUESTION 1 — B,D are correct.
• There are no physical NICs on some of the hosts assigned to active or standby uplinks in the teaming and failover order of the distributed port group.
• The physical NICs on the hosts that are assigned to the active or standby uplinks reside in different VLANs on the physical switch. The physical NICs in different VLANs cannot see each other and thus cannot communicate with each other.
From
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.troubleshooting.doc/GUID-5324A0E4-AA7B-40CC-A975-D45328B5C434.html
NEW QUESTION 5 — D is correct.
The physical infrastructure does not have to deal with MAC/FIB table limits since the logical switch contains the broadcast domain in software.
“””logical switch contains the broadcast domain in software”””
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.troubleshooting.doc/GUID-5324A0E4-AA7B-40CC-A975-D45328B5C434.html
NEW QUESTION 12 — A is correct.
“”””with BGP being the more flexible of the two””””
NSX Design Guide : Page 57 https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/nsx/vmw-nsx-network-virtualization-design-guide.pdf
Both the NSX DLR and the NSX ESG support OSPF and BGP. The primary difference between these routing protocols is the level of control on routes propagation and attribute manipulations they allow, “”””with BGP being the more flexible of the two””””. The concept of an Autonomous System (AS), defined as a group of routers under the same administrative domain, comes also into play. Routing inside an AS is usually done via an IGP (e.g., OSPF) while routing between Autonomous Systems is done via an EGP (e.g., BGP).
Thanks all helpful comments here!!!
Just passed the VCP6-NV 2V0-642 exam few days ago!
I got 77 questions and scored 90% (the passing score is 300 now)!
As you all know, the 2V0-642 exam is a new exam for replacing the 2V0-641 exam, most of the exam topics are same as the 2V0-641, but there are also a lot of new objectives in the actual 2V0-642 test.
I recommend you to learn the new 2V0-642 study guide carefully, knowing deeply of the new exam topics that are not available in the 2V0-641 exam.
And, I suggest you to learn the newest PassLeader 2V0-642 dumps, almost all questions are from it, though some answers may not 100% correct.
P.S. Part of that PL 2V0-642 dumps are available here FYI:
http://www.vmwaredump.com/category/network-virtualization-dumps/2v0-642-exam-dumps
Good Luck!!!