2V0-81.20 시험 - 3Com실제시험문제와 답 - 70문항

Question No : 1

Considering the NSX Manager Node, what is VMware's recommended size for a typical production deployment?

A.small appliance for deployments with up to 64 hosts
B.medium appliance for deployments with up to 64 hosts
C.medium appliance for deployments with up to 128 hosts
D.small appliance for deployments with up to 32 hosts

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/installation/GUID-AECA2EE0-90FC-48C4-8EDB-66517ACFE415.html

Question No : 2

In a Workspace ONE environment, what is the maximum number of days a Windows Feature Update (Windows 10 1703 and above) can be deferred?

A.7
B.90
C.365
D.30

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2011/Windows_Desktop_Device_Management/GUID-AWT-PROFILE-WAU-CONFIGWD.html#:~:text=The%20maximum%20number%20of%20days,defer%20up%20t o%20365%20days

Question No : 3

A security administrator receives an error with code 1001 while configuring a time-based firewall rule on an ESXi host.
Which two actions can resolve the problem? (Choose two.)

A.restarting the NSX firewall kernel module on the ESXi host
B.restarting the NTP service on the ESXi host
C.configuring the ESXi host with a remote NTP server
D.configuring the ESXi host with a local NTP server
E.reinstalling the NSX modules on the ESXi host

정답:
Explanation:
Reference: https://arabitnetwork.files.wordpress.com/2018/12/nsx_64_troubleshooting-update4.pdf

Question No : 4

Which three options are used to automate patch remediation based on CVEs for Windows devices using Workspace ONE Intelligence? (Choose three.)

A.Use Workspace ONE UEM console to approve patches.
B.Create Automated remediation based on Risk score.
C.Create automated remediation based on CVE vulnerabilities.
D.Identify vulnerable devices across the entire environment based on CVE information.
E.Create a dashboard to track CVE remediation.

정답:
Explanation:
Reference: https://techzone.vmware.com/meeting-security-slas-through-intelligent-patch-automation-vmware-workspace-one-operational-tutorial#_1089620

Question No : 5

In a Workspace ONE deployment, which three are valid pre-configured sources for creating a baseline with the Baseline Wizard? (Choose three.)

A.GPO Connector
B.Registry File Import
C.Windows Security Baseline
D.CIS Benchmarks
E.Custom Baseline

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/Windows_Desktop_Device_Management/GUID-uemWindeskUsingBaselines.html

Question No : 6

Refer to the exhibit.

What command was run on the NSX Edge node to pull this information?

A.get tunnel-ID
B.show vteps
C.get vteps
D.list vteps

정답:
Explanation:
Reference: https://vdc-download.vmware.com/vmwb-repository/dcr-public/c3fd9cef-6b2b-4772-93be-3fe60ce064a1/1f67b9e1-b111-4de7-9ea1-39931d28f560/NSX-T%20Command-Line%20Interface%20Reference.html#get%20vteps

Question No : 7

When creating a new Identity Provider (IdP) in Workspace ONE Access, which two methods are used to identify users? (Choose two.)

A.SAML Attribute
B.NameID Element
C.UserID Element
D.User Attribute
E.SAML Response

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-Access/19.03/idm-administrator/GUID-0C459D5A-A0FF-4893-87A0-10ADDC4E1B8D.html

Question No : 8

Where in the NSX UI does an administrator add an Active Directory Domain?

A.Go to System > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY
B.Go to Inventory > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY
C.Go to Home > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY
D.Go to Security > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-8B60D22B-3119-48F6-AEAE-AE27A9372189.html

Question No : 9

Which two are features of a hybrid cloud model for networking and security when using NSX-T Data Center and VMware NSX Cloud? (Choose two.)

A.NSX Data Center provides consistent logical networking and security across protected and recovery sites.
B.NSX Data Center supports Layer 2 VPN between an NSX Edge and a Direct Connect Gateway.
C.NSX Data Center and VMware NSX Cloud stretch Layer 2 domains between public clouds using the Geneve overlay.
D.NSX Data Center supports secure, encrypted user access to private corporate applications (SSL VPN).
E.NSX Data Center supports remote sites (IPsec VPN) with optional VPN gateways or hardware routers from other vendors.

정답:
Explanation:
Reference:
https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/nsx/vmware-nsx-datasheet.pdf

Question No : 10

An organization is expanding NSX to deploy the NSX Distributed Firewall on an AWS VPC and Azure VNET.
Which statement is true concerning the expansion?

A.The request is not possible because NSX works only in VMware environments.
B.NSX can only manage native security components on AWS and Azure with agent based mode.
C.NSX can only do an agent based mode on AWS and Azure.
D.NSX can choose native security components on AWS and Azure or agent based mode.

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-9522BEC9-E85E-41DC-8AF5-2652A647730F.html

Question No : 11

When designing NSX-T for high availability with Layer 2 adjacency, what is the recommended number of NSX Managers that should be deployed?

A.2 NSX Managers deployed using a load balancer
B.1 NSX Manager using vSphere for high availability
C.3 NSX Managers using a VIP address for Management
D.2 NSX Managers using a VIP address for Management

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-Cloud-Foundation/4.3/vcf-management-domain-design/GUID-E8F4757B-8C4A-4CBB-BE93-E6969A8940D3.html

Question No : 12

Which is the name of the default policy that is applied to all applications in Workspace ONE Access?

A.primary_policy
B.default_policy
C.default_access_policy_set
D.default_application_policy

정답:
Explanation:
Reference: https://theidentityguy.ca/2021/02/25/workspace-one-access-best-practices-in-policy-management/

Question No : 13

Which is true about Time-Based Firewall Policy rules?

A.Time-Based policy rules apply only to the NSX Distributed Firewall.
B.Time-Based policy rules apply to the NSX Gateway and Distributed Firewall.
C.Time-Based policy rules can only be used one time for NSX Gateway Firewall.
D.Time-Based policy rules apply only to the NSX Gateway Firewall.

정답:
Explanation:
Reference: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/administration/GUID-8572496E-A60E-48C3-A016-4A081AC80BE7.html

Question No : 14

Which two options are needed to configure NSX-T Data Center to access the Active Directory? (Choose two.)

A.Domain Controller Name
B.Distinguished Name
C.username
D.Port
E.netBIOS name