It is impossible to pass VMware 2V0-642 exam without any help in the short term. Come to Actualtests soon and find the most advanced, correct and guaranteed VMware 2V0-642 practice questions. You will get a surprising result by our Refresh VMware Certified Professional 6 - Network Virtualization 6.2 Exam practice guides.

Q9. Exhibit:

Which would best describe a workload in Compute Cluster 1 attached to a logical switch port group?

A. Within Compute Cluster 1, Layer 2 would function, but Layer 3 would fail.

B. Within Compute Cluster 1, Layer 2 would fail, and Layer 3 would fail.

C. Within ComputeCluster 1, Layer 2 would fail, but Layer 3 would function.

D. Within Compute Cluster 1, Layer 2 would function, and Layer 3 would function.

Answer: A

Explanation:

This has an interesting side effect: if you didn’t add all clusters of a given DVS to the TZ, those clusters you haven’t added will still have access to that Logical Switch. Let’s have a look at the following diagram:

From <https://telecomoccasionally.wordpress.com/2014/12/27/nsx-for-vsphere- understanding-transport-zone-scoping/>

his means that in out hypothetical case, if we were to create a DLR and connect to it that

LS we’ve created earlier, DLR instance would get created on hosts in clusters Comp B and

Mgmt / Edge, but not on hosts in clusteCr omp A:

From <https://telecomoccasionally.wordpress.com/2014/12/27/nsx-for-vsphere-understanding-transport-zone-scoping/


Q10. A workload was attached to a logical switch port group in Compute Cluster 1. Users are complaining that I hey can communicate with other workloads on that port group in the cluster, but not with other workloads on different networks.

What is the most probable cause?

A. The distributed firewall has a default rule set to deny all

B. The Distributed Logical Router was not configured on Compute Cluster 1

C. Compute Cluster 1 is NOT a member of the Transport Zone

D. An NSX Edge has NOT been deployed into Compute Cluster 1

Answer: A


Q11. Which tool is used to detect rogue services?

A. NSX Logical Firewall

B. NSX Logical Router

C. Activity Monitoring

D. Flow Monitoring

Answer: D


Q12. Internet access is required from virtual machines located on any logical switch Direct access from the internet to these virtual machines is NOT permitted

Which perimeter NSX Edge feature would achieve this with the least configuration?

A. LB

B. VPN

C. SNAT

D. DNAT

Answer: D


Q13. What is the best practice workflow for a NSX installation to support logical switching?

A. Deploy NSX Manager, Configure Logical Switches, Register with vCenter, Deploy Controllers. Prepare hosts

B. Deploy NSX Manager, Deploy Controllers, Configure Logical Switches, Register withvCenter, Prepare hosts

C. Deploy NSX Manager, Register with vCenter, Prepare hosts, Deploy Controllers, Configure Logical Switches

D. Deploy NSX Manager, Register with vCenter, Deploy Controllers, Prepare hosts, Configure Logical Switches

Answer: B


Q14. Which three NSX services are available for synchronization in a Cross-vCenter implementation? (Choose three.)

A. Spoofguard

B. Distributed Firewall

C. Edge Firewall

D. Logical Switch

E. Transport Zone

Answer: B,D,E

Explanation:

Referencehttps://pubs.vmware.com/NSX- 62/topic/com.vmware.ICbase/PDF/nsx_62_cross_vc_install.pdf


Q15. An NSX administrator notices an error during the initial configuration of the SSO lookup service, as shown:

The administrator pulls up the lookup service status, which displays Disconnected.

What step should be performed to resolve this issue?

A. Change the Port number from 7444 to 443

B. Change theSSO Administrator User Name

C. Regenerate the SSL Certificate and reboot the NSX Manager

D. Use IP address versus the DNS name in theLookup Service

Answer: C


Q16. What is the most restrictive NSX role that can be used to create and publish security policies and install virtual appliances?

A. Security Administrator

B. NSX Administrator

C. Auditor

D. Enterprise Administrator

Answer: D