[Dec-2023] Pass 3V0-42.20 Exam in First Attempt Updated 3V0-42.20 Exam Questions
VCAP-NV Design 2020 Dumps 3V0-42.20 Exam for Full Questions - Exam Study Guide
NEW QUESTION # 30
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
Data between two networks connected over a public network needs to be encrypted.
Certificate authentication is required.
Dynamic route learning is preferred.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
- B. Deploy a Tier-0 gateway in Active/Active mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
- C. Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
- D. Deploy a Tier-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
Answer: C
NEW QUESTION # 31
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
Current hypervisor of choice is KVM.
Cost reduction is important.
Which two selections should the architect recommend to the organization? (Choose two.)
- A. Deploy Edge VM Nodes using ISO.
- B. Deploy Edge VM Nodes on KVM.
- C. Deploy bare metal Edge Nodes.
- D. Deploy NSX Manager using OVF.
- E. Deploy NSX Manager using QCOW2.
Answer: C,E
Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/installation/GUID-11417AA2-5EBC-49C7-8A86-EB94604261A6.html
NEW QUESTION # 32
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
NSX-T will span across two sites for disaster recovery.
Public Load Balancer VIP should be accessible from a secondary site.
Distributed Firewall Policies should be available at a secondary site.
Routing capabilities should be maintained after failure.
NAT capabilities are required.
Which two selections should the architect include in their design? (Choose two.)
- A. Set MTU to 1550 between sites.
- B. Use of the same ISPs across sites.
- C. Use IP sets or groups to configure DFW rules.
- D. Use MTU to 1550 between sites.
- E. Use two separate ISPs across sites.
Answer: B,C
Explanation:
Reference:
site-solutions-cross-vcenter-nsx-design-guide.pdf
NEW QUESTION # 33
An NSX-T Architect is working in a brownfield environment with 4 ESXi hosts. These constraints were documented:
new servers cannot be purchased
North/South bandwidth must be guaranteed
Top-of-Rack switches have additional uplinks
Which three recommendations should the architect implement? (Choose three.)
- A. Use a resource pool for production workloads.
- B. Remove one of the ESXi hosts and install a bare-metal Edge.
- C. Install Edge nodes on a separate cluster.
- D. Use a resource pool to deploy the Edge nodes on.
- E. Recommend obtaining 2 new physical NICs for the servers.
Answer: A,D,E
Explanation:
https://docs.vmware.com/en/VMware-Validated-Design/services/deployment-of-nsx-t-workload-domains-with-mult-az-using-vmware-cloud-foundation/GUID-15C5DFF8-C8D9-40AB-AFAF-89887281F3C8.html
NEW QUESTION # 34
Which two benefits can be achieved using in-band management of an NSX Bare Metal Edge Node?
(Choose two.)
- A. Reduces egress data.
- B. Reduces storage requirements.
- C. Reduces cost.
- D. Preserves packet locality.
- E. Preserves switchports.
Answer: A,C
NEW QUESTION # 35
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
There is a performance based SLA for East - West traffic.
The business critical applications require prioritization of their traffic.
One of the services is a file share and has a high demand for bandwidth.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Review average North/South traffic from the core switches and firewall.
- B. Monitor East-West traffic throughout normal business cycles.
- C. Include a segment QoS profile and review the impact of utilizing this feature.
- D. Meet with the organization's application team to get additional information.
Answer: C
Explanation:
QoS provides high-quality and dedicated network performance for preferred traffic that requires high bandwidth. The QoS mechanism does this by prioritizing sufficient bandwidth, controlling latency and jitter, and reducing data loss for preferred packets even when there is a network congestion. Taken from https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-62BB7145-EDD7-4611-A50D-17F4A0EAE57C.html
NEW QUESTION # 36
What would an architect recommend to a customer that wants to extend management to an additional data center through Layer 2, but does not want to add additional NSX-T licensing? (Choose the best answer.)
- A. Deploy a standalone NSX Manager.
- B. Deploy Autonomous Edge as the L2 VPN client.
- C. Deploy a standalone Edge as the IPSec VPN.
- D. Deploy a standalone NSX Controller.
Answer: B
NEW QUESTION # 37
Which three choices are non-functional requirements? (Choose three.)
- A. certification
- B. scalability
- C. authorization
- D. availability
- E. authentication
- F. cost
Answer: B,D,F
Explanation:
https://technicloud.com/category/vmware/
NEW QUESTION # 38
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
The company will use a Leaf and Spine physical network architecture with Layer 3 gateways for top of rack switches.
The company is planning to deploy 120 ESX hosts across 10 racks.
There will be a total of a 12 clusters where each cluster has one host per rack.
What should the architect recommend to allow applications to run on any host in the cluster? (Choose the best answer.)
- A. Deploy an L2 VPN to allow the networks to extend to each host.
- B. Deploy all application networks on NSX segments.
- C. Deploy a Tier-0 gateway per Rack and configure BGP between racks.
- D. Deploy a Tier-1 gateway per Rack and configure BGP between racks.
Answer: B
NEW QUESTION # 39
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
Any proposed solution must provide low latency.
Any proposed solution must provide high throughput.
Customer is running stock trading applications.
Which two selections should the architect recommend to meet high-performance workload requirements? (Choose two.)
- A. Leverage KVM as the compute host.
- B. Leverage ESXi as the compute host.
- C. Enable latency sensitivity mode on the N-VDS.
- D. Use LACP for all uplink profiles.
- E. Enable enhanced data path mode on the N-VDS.
Answer: B,E
NEW QUESTION # 40
A Solutions Architect is working with a customer which wants to extend their traditional Telco IP/MPLS core network to an NFV cloud.
Which NSX-T Data Center feature can be recommended by the architect? (Choose the best answer.)
- A. EVPN
- B. Load Balancer
- C. BGP
- D. Distributed IDS
Answer: C
NEW QUESTION # 41
Which three IPv6 features are supported in an NSX-T Data Center design? (Choose three.)
- A. IPv6 DNS
- B. IPv6 switch security
- C. IPv6 static routing
- D. IPv6 OSPF
- E. IPv6 Distributed Firewall
- F. IPv6 VXLAN
Answer: B,C,E
Explanation:
Explanation/Reference: https://blogs.vmware.com/networkvirtualization/2019/02/ipv6-support-in-nsx-t-2-4.html/
NEW QUESTION # 42
According to the Discover Task of the Engagement Lifecycle, which statement would be classified as a risk? (Choose the best answer.)
- A. Due to existing contracts and purchase agreements, the existing server hardware needs to be reused.
- B. To retain certification to provide financial services to end customers, PCI-DSS audits need to be passed.
- C. A merger and acquisition process was recently completed and new company on-boarding is not completed.
- D. Enough power and cooling capacity is available in each rack in the data center.
Answer: B
NEW QUESTION # 43
A Solutions Architect is working with a customer which wants to extend their traditional Telco IP/MPLS core network to an NFV cloud.
Which NSX-T Data Center feature can be recommended by the architect? (Choose the best answer.)
- A. EVPN
- B. Load Balancer
- C. BGP
- D. Distributed IDS
Answer: C
Explanation:
Explanation/Reference: https://docs.vmware.com/en/VMware-vCloud-NFV/3.0/vmware-vcloud-nfv-30.pdf
NEW QUESTION # 44
Which selection must be taken into consideration when creating a Logical Design for a planned migration? (Choose the best answer.)
- A. An N-VDS can only attach to a single VLAN transport zone.
- B. An N-VDS can attach to both an Overlay and a VLAN transport zone to a N-VDS having different name/s.
- C. An N-VDS must be disabled before attaching both Overlay and VLAN transport zones.
- D. An N-VDS can only attach to a single Overlay transport zone.
Answer: B
Explanation:
You can attach an N-VDS to both an Overlay and a VLAN transport zone, and you can do it also as with N-VDS having a different name or the same name. Single N-VDS can carry the traffic of both the Overlay transport zone and the VLAN transport zone. http://www.vmwarearena.com/how-to-create-nsx-t-transport-zone-vmware-nsx-t-part-7/#:~:text=So%20the%20transport%20zone%20is,and%20the%20VLAN%20transport%20zone.
Single N-VDS can carry the traffic of both the Overlay transport zone and the VLAN transport zone. http://www.vmwarearena.com/how-to-create-nsx-t-transport-zone-vmware-nsx-t-part-7/
NEW QUESTION # 45
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
* Maximum performance and availability is required between the physical and virtual network.
* Load Balancing service is required for back-end web servers.
* NAT is required.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Deploy a Tier-1 gateway and connect it to an Active/Active Tier-0 gateway with ECMP configured.
- B. Deploy an Active/Standby Tier-0 gateway and configure ECMP.
- C. Deploy an Active/Active Tier-0 gateway and configure ECMP.
- D. Create two separate VLANs to connect the Tier-0 gateway upstream traffic and configure ECMP.
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION # 46
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
There is a performance based SLA for East - West traffic.
The business critical applications require prioritization of their traffic.
One of the services is a file share and has a high demand for bandwidth.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Review average North/South traffic from the core switches and firewall.
- B. Monitor East-West traffic throughout normal business cycles.
- C. Include a segment QoS profile and review the impact of utilizing this feature.
- D. Meet with the organization's application team to get additional information.
Answer: C
NEW QUESTION # 47
Which three choices are part of a Design Approach when discussing design alternatives and their effects? (Choose three.)
- A. performance
- B. backup
- C. security
- D. budget
- E. knowledge
- F. cost
Answer: A,C,F
Explanation:
"Design qualifiers ensure that all levels of the engagement are met. Each qualifier affects the other qualifiers. Design qualifiers include: * Availability * Manageability * Performance * Recoverability * Security * Cost"
NEW QUESTION # 48
Refer to the exhibit.
A financial company is adopting micro-services with the intent of simplifying network security. An NSX-T architect is proposing a NSX-T Data Center micro-segmentation logical design. The architect has created a diagram to share with the customer.
How many security levels will be implemented according to this Logical Design? (Choose the best answer.)
- A. 9 levels
- B. 5 levels
- C. 3 levels
- D. 4 levels
Answer: B
NEW QUESTION # 49
......
Authentic Best resources for 3V0-42.20 Online Practice Exam: https://pass4sure.guidetorrent.com/3V0-42.20-dumps-questions.html