合格させる5V0-41.21試験一発合格保証100%カバー率でリアル試験問題 [2024年01月]
有効な5V0-41.21テスト解答VMware 5V0-41.21試験PDF問題を試そう
質問 # 24
Which of the following are the local user accounts used to administer NSX-T Data Center?
- A. operator, admin, root
- B. operator, admin, audit
- C. admin, super, read-only
- D. admin, audit, root
正解：B
解説：
For further reading, see the VMware NSX-T Data Center Administration Guide (https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/com.vmware.nsxt.admin.doc/GUID-4A4E9FBE-50B3-4F8F-B6C4-8527E7A08A67.html) for more information on user accounts and permissions in NSX-T Data Center.
質問 # 25
A security administrator has configured NSX Intelligence for discovery. They would like to get recommendations based on the changes in the scope of the input entities every hour.
What needs to be configured to achieve the requirement?
- A. Toggle the monitoring option on.
- B. Start a new recommendation.
- C. Adjust the time range to 1 hour.
- D. Publish the recommendations.
正解：A
質問 # 26
A security administrator recently enabled Guest Introspection on NSX-T Data Center.
Which would be a reason none of the Microsoft Windows based VMs are reporting any information?
- A. NSX Manager require a reboot.
- B. VMware Tools need to be reconfigured.
- C. NSX Manager needs to be reconfigured.
- D. Windows VMs require a reboot.
正解：C
解説：
NSX Manager needs to be reconfigured. Guest Introspection requires additional configuration of the NSX Manager in order to collect information from the Windows based VMs. This configuration includes setting up the Guest Introspection service with the appropriate credentials and configuring the rules to allow the traffic through the firewall. Once this is done, the Windows VMs will start reporting information to the NSX Manager.
For more information on setting up Guest Introspection, please refer to the NSX-T Data Center documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsx-t-3.0-installing/GUID-3B7F12AD-D8F7-44B9-A56B-E71F64C2F6A0.html
質問 # 27
A security administrator is required to protect East-West virtual machine traffic with the NSX Distributed Firewall.What must be completed with the virtual machine's vNIC before applying the rules'
- A. It is connected to the underlay.
- B. It must be connected to a vSphere Standard Switch.
- C. It is connected to a transport zone.
- D. It is connected to an NSX managed segment.
正解：D
質問 # 28
What is one of the main use-cases of NSX-T Endpoint Protection?
- A. North-South Firewalling
- B. East-West Firewalling
- C. Agentless Antivirus
- D. Use Network Security Services of a third party vendor
正解：B
質問 # 29
Refer to the exhibit.
An administrator needs to configure a security policy with a firewall rule allowing a group of applications to retrieve the correct time from an NTP server. Which is the category to configure this security policy and firewall rule?
- A. Infrastructure
- B. Application
- C. Emergency
- D. Environment
正解：A
解説：
For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID-D12A8AE7-B9E9-4C79-8FE4-7F4BECD4F71B.html) for more information on configuring firewall rules.
質問 # 30
Which are two use-cases for the NSX Distributed Firewall' (Choose two.)
- A. Software defined networking
- B. Lateral Movement of Attacks prevention
- C. Zero-Trust with segmentation
- D. Security Analytics
- E. Network Visualization
正解：B、C
質問 # 31
At which OSI Layer do Next Generation Firewalls capable of analyzing application traffic operate?
- A. Layer 7
- B. Layer 4
- C. Layer 3
- D. Layer 2
正解：A
質問 # 32
An administrator wants to use Distributed Intrusion Detection. How is this implemented in an NSX-T Data Center?
- A. As a distributed solution across multiple NSX Managers.
- B. As a distributed solution across multiple NSX Edge nodes.
- C. As a distributed solution across multiple KVM hosts.
- D. As a distributed solution across multiple ESXi hosts.
正解：C
質問 # 33
An administrator needs to send FW connections logs to a remote server.
Which sequence of commands does the administrator need to apply on their ESXi Host?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
正解：B
質問 # 34
Which dot color indicates an on-going attack of medium severity in the IDS/IPS events tab of NSX-T Data Center'
- A. blinking orange dot
- B. solid orange dot
- C. solid red dot
- D. blinking yellow dot
正解：C
質問 # 35
What is one of the main use-cases of NSX-T Endpoint Protection?
- A. East-West Firewalling
- B. North-South Firewalling
- C. Agentless Antivirus
- D. Use Network Security Services of a third party vendor
正解：C
解説：
NSX-T Endpoint Protection provides agentless antivirus protection for virtual machines running on VMware ESXi hosts. It uses the VMware vShield Endpoint API to scan the virtual machines without requiring the installation of antivirus agents. The service is integrated with third-party antivirus solutions, such as McAfee and Symantec, to provide real-time protection against malware and other threats.
For more information on NSX-T Endpoint Protection, please refer to the NSX-T Data Center documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsx-t-3.0-endpoint-protection/GUID-25C22F02-4B30-47D4-8F0C-3BC9F9C3AFD3.html
質問 # 36
An administrator needs to send FW connections logs to a remote server.
Which sequence of commands does the administrator need to apply on their ESXi Host?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
正解：B
質問 # 37
Which is an insertion point for East-West service insertion?
- A. Partner SVM
- B. tier-1 gateway
- C. transport node
- D. Guest VM vNlC
正解：B
質問 # 38
An NSX administrator is trying to find the dvfilter name of the sa-web-01 virtual machine to capture the sa-web-01 VM traffic. What could be a reason the sa-web-01 VM dvfilter name is missing from the command output?
- A. ESXi host has 5SH disabled.
- B. ESXi host has the firewall turned off.
- C. sa-web-01 VM has the no firewall rules configured.
- D. sa-web-01 is powered Off on ESXi host.
正解：D
解説：
The most likely reason the sa-web-01 VM dvfilter name is missing from the command output is that the sa-web-01 VM is powered off on the ESXi host. The dvfilter name is associated with the VM when it is powered on, and is removed when the VM is powered off. Therefore, if the VM is powered off, then the dvfilter name will not be visible in the command output. Other possible reasons could be that the ESXi host has the firewall turned off, the ESXi host has 5SH disabled, or that the sa-web-01 VM has no firewall rules configured. Reference: [1] https://kb.vmware.com/s/article/2143718 [2] https://docs.vmware.com/en/VMware-NSX-T/3.0/vmware-nsx-t-30-administration-guide/GUID-AC3CC8A3-B2DE-4A53-8F09-B8EEE3E3C7D1.html
質問 # 39
At which OSI Layer do Next Generation Firewalls capable of analyzing application traffic operate?
- A. Layer 7
- B. Layer 4
- C. Layer 3
- D. Layer 2
正解：A
解説：
Next Generation Firewalls are capable of analyzing application traffic at Layer 7 of the OSI model. Layer 7 is the Application Layer, which is where the application-level protocols, such as HTTP and FTP, are implemented. Next Generation Firewalls are able to inspect the application traffic and apply rules based on the content of the application-level packets.
For more information on the OSI model and Next Generation Firewalls, please refer to the following resources:
* OSI Model: https://en.wikipedia.org/wiki/OSI_model * Next Generation Firewalls: https://en.wikipedia.org/wiki/Next-generation_firewall
質問 # 40
When using URL Analysis In NSX-T, which two services must be set in the URL rule to capture traffic over TCP and UDP? (Choose two.)
- A. DNS
- B. DHCP
- C. DNS-UDP
- D. DHCPv6
- E. DNS-TSIG
正解：A、C
質問 # 41
What component in a transport node receives the firewall configuration from the central control plane?
- A. nsx-mpa
- B. nsx-appl-proxy
- C. nsx-ccp
- D. nsx-proxy
正解：B
質問 # 42
What type of IDS/IPS system deployment allows an administrator to block a known attack?
- A. A system deployed inline with ALERT action.
- B. A system deployed inline with ALERT and DROP action.
- C. A system deployed in SPAN port mode.
- D. A system deployed in TERM mode.
正解：B
解説：
as a system deployed inline with both ALERT and DROP action will provide the ability to block attacks when a match is found For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID-D9A6B1E7-FFCD-47A7-8E0C-FDD3DE6AC2B6.html) for more information on configuring an IDS/IPS system.
質問 # 43
Refer to the exhibit.
An administrator is reviewing NSX Intelligence information as shown in the exhibit.
What does the red dashed line for the UDP:137 flow represent?
- A. Discovered communication
- B. Unprotected communication
- C. Allowed communication
- D. Blocked communication
正解：D
解説：
The red dashed line for the UDP:137 flow in the NSX Intelligence information represents blocked communication. This indicates that the NSX Distributed Firewall has blocked the communication between the source and destination IP addresses on port 137.
For more information on NSX Intelligence and how to use it, please refer to the NSX-T Data Center documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/nsx-t-3.0-intelligence/GUID-C2B2AF2E-A76A-46B8-A67A-42D7A9E924A9.html
質問 # 44
......
5V0-41.21試験問題にて有効な5V0-41.21問題集PDF：https://jp.fast2test.com/5V0-41.21-premium-file.html
検証済み5V0-41.21問題集と解答で合格保証：https://drive.google.com/open?id=1MRRlZr5fhHegqRp8atkKTrcA1ijH5FI2