Advanced NSX Features VCP-NV Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary benefit of DPU-based acceleration in NSX?

   • AIt eliminates the need for virtual switches.
   • BIt provides a dedicated management network.
   • CIt offloads networking and security processing from the host CPU.
   • DIt increases the number of VMs per host.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is using NSX Federation to stretch a Tier-1 network between two sites. The same application subnet (192.168.10.0/24) is used at both sites, and each site has its own Tier-0 gateway connected to the physical network. The security team wants to apply a distributed firewall rule that blocks traffic from the application subnet to the database subnet (10.10.0.0/24) at both sites. What must be configured to ensure the rule is applied consistently across both sites?

   • ACreate the distributed firewall rule on each local manager independently, using the same rule name and sequence number.
   • BConfigure the rule on the stretched Tier-1 gateway at the global manager, which will automatically propagate to both sites.
   • CCreate a group containing the application subnet and a group containing the database subnet, then apply the rule at the global manager level.
   • DUse a Tier-0 gateway rule at each site, since the traffic must cross the physical network between the sites.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a key benefit of using NSX Federation for security policies?

   • ASecurity policies are applied consistently across all sites.
   • BSecurity policies are limited to a single site.
   • CSecurity policies are only enforced at the Global Manager.
   • DSecurity policies are automatically generated based on traffic analysis.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of a stretched network in NSX Federation?

   • ATo replace the need for VPN connections between sites.
   • BTo enable cross-site firewall inspection.
   • CTo provide a single routing domain across all sites.
   • DTo allow workloads to move between sites without changing their IP address.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which use case is a typical fit for DPU-based acceleration in NSX?

   • AManagement plane tasks such as policy configuration.
   • BStorage replication between sites.
   • CDNS resolution for virtual machines.
   • DHigh-throughput workloads that require low latency.
   Reveal Solution Discussion Select an answer first