VMware 3V0-42.20 - Advanced Design VMware NSX-T Data Center Exam
Page: 3 / 12
Total 57 questions
Question #11 (Topic: Single Topic)
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
✑ Any proposed solution must provide low latency.
✑ Any proposed solution must provide high throughput.
✑ Customer is running stock trading applications.
Which two selections should the architect recommend to meet high-performance workload requirements? (Choose two.)
This information was gathered during a workshop:
✑ Any proposed solution must provide low latency.
✑ Any proposed solution must provide high throughput.
✑ Customer is running stock trading applications.
Which two selections should the architect recommend to meet high-performance workload requirements? (Choose two.)
A. Leverage ESXi as the compute host.
B. Use LACP for all uplink profiles.
C. Leverage KVM as the compute host.
D. Enable enhanced data path mode on the N-VDS.
E. Enable latency sensitivity mode on the N-VDS.
Answer: BD
Question #12 (Topic: Single Topic)
Which selection is associated with the Review Task of the Engagement Lifecycle? (Choose the best answer.)
A. Gather and document requirements, assumptions, and constraints.
B. Build, deploy, implement, and test the design.
C. Measure performance against customer’s objective.
D. Create and document the logical and physical design.
Answer: C
Question #13 (Topic: Single Topic)
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
✑ NSX-T will span across two sites for disaster recovery.
✑ Public Load Balancer VIP should be accessible from a secondary site.
✑ Distributed Firewall Policies should be available at a secondary site.
✑ Routing capabilities should be maintained after failure.
✑ NAT capabilities are required.
Which two selections should the architect include in their design? (Choose two.)
This information was gathered during the Assessment Phase:
✑ NSX-T will span across two sites for disaster recovery.
✑ Public Load Balancer VIP should be accessible from a secondary site.
✑ Distributed Firewall Policies should be available at a secondary site.
✑ Routing capabilities should be maintained after failure.
✑ NAT capabilities are required.
Which two selections should the architect include in their design? (Choose two.)
A. Use of the same ISPs across sites.
B. Use two separate ISPs across sites.
C. Use MTU to 1550 between sites.
D. Set MTU to 1550 between sites.
E. Use IP sets or groups to configure DFW rules.
Answer: AE
Question #14 (Topic: Single Topic)
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.
Which risk is documented by an architect? (Choose the best answer.)
Which risk is documented by an architect? (Choose the best answer.)
A. The security team has a firewall communication matrix documented.
B. The team is not trained for NSX-T but have a very strong experience with vSphere.
C. Open communication between different application tiers is not allowed.
D. Aggregate N-S throughput at any given time should be at least 10G.
Answer: B
Question #15 (Topic: Single Topic)
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
✑ Data between two networks connected over a public network needs to be encrypted.
✑ Certificate authentication is required.
✑ Dynamic route learning is preferred.
Which selection should the architect include in their design? (Choose the best answer.)
This information was gathered during the Assessment Phase:
✑ Data between two networks connected over a public network needs to be encrypted.
✑ Certificate authentication is required.
✑ Dynamic route learning is preferred.
Which selection should the architect include in their design? (Choose the best answer.)
A. Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
B. Deploy a Tier-0 gateway in Active/Active mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
C. Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
D. Deploy a Tier-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
Answer: C
