Advanced NSX Features VCP-NV Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is deploying NSX Federation to stretch a network between two sites. The same IP subnet (172.16.20.0/24) is used for the same application at both sites. The application instances at each site need to communicate with each other. How does NSX Federation handle this overlapping IP space?

   • AIt only allows the stretched network to be used for management traffic, not application traffic.
   • BIt requires the administrator to re-IP one of the sites to a different subnet before Federation can be enabled.
   • CIt automatically translates the IP addresses at one site using NAT before forwarding traffic.
   • DIt uses a stretched Tier-1 gateway with a unique virtual tunnel endpoint (VTEP) per site to allow the overlapping subnets to coexist.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A large enterprise is experiencing high CPU utilization on its ESXi hosts due to the NSX distributed firewall and overlay networking processing. The workloads are latency-sensitive, and the team wants to offload this processing to dedicated hardware. Which solution should the team consider?

   • AIncrease the number of vCPUs on the ESXi hosts to handle the additional processing load.
   • BEnable DPU-based acceleration on the ESXi hosts that are experiencing high CPU utilization.
   • CDeploy NSX Edge nodes in a cluster to handle all distributed firewall and overlay traffic.
   • DMove the workloads to a different cluster that has more available memory.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a requirement for NSX Federation certificates?

   • ACertificates must be renewed every 30 days.
   • BCertificates must be stored on a hardware security module (HSM).
   • CCertificates must be signed by a public CA.
   • DCertificates must be trusted by all participating NSX Managers.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization is planning an NSX Federation deployment with two sites. Each site has its own NSX-T Data Center environment managed by a separate vCenter Server. The network team has confirmed that the sites have routable connectivity and that the required ports are open. The security team requires that all management-plane communication between the global manager and local managers be encrypted. What must be configured to meet this requirement?

   • AEnsure that the global manager and local managers trust each other's certificates.
   • BPlace the global manager and local managers on the same VLAN to avoid encryption overhead.
   • CConfigure a VPN tunnel between the two sites for all management traffic.
   • DUse the same NSX-T Data Center version on all managers to enable native encryption.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which component in an NSX Federation deployment is responsible for providing a single pane of management across all participating sites?

   • AGlobal Manager
   • BvCenter Server
   • CNSX Edge
   • DLocal Manager
   Reveal Solution Discussion Select an answer first