최신 2V0-41.23 무료덤프 - VMware NSX 4.x Professional
Sort the rule processing steps of the Distributed Firewall. Order responses from left to right.
정답:
Explanation:
The correct order of the rule processing steps of the Distributed Firewall is as follows:
* Packet arrives at vfilter connection table. If matching entry in the table, process the packet.
* If connection table has no match, compare the packet to the rule table.
* If the packet matches source, destination, service, profile and applied to fields, apply the action defined.
* If the rule table action is allow, create an entry in the connection table and forward the packet.
* If the rule table action is reject or deny, take that action.
This order is based on the description of how the Distributed Firewall works in the web search results1. The first step is to check if there is an existing connection entry for the packet in the vfilter connection table, which is a cache of flow entries for rules with an allow action. If there is a match, the packet is processed according to the connection entry. If there is no match, the packet is compared to the rule table, which contains all the security policy rules. The rules are evaluated from top to bottom until a match is found. The match criteria include source, destination, service, profile and applied to fields. The action defined by the matching rule is applied to the packet. The action can be allow, reject or deny. If the action is allow, a new connection entry is created for the packet and the packet is forwarded to its destination. If the action is reject or deny, the packet is dropped and an ICMP message or a TCP reset message is sent back to the source.
Which two commands does an NSX administrator use to check the IP address of the VMkernel port for the Geneve protocol on the ESXi transport node? (Choose two.)
정답: B,D
설명: (DumpTOP 회원만 볼 수 있음)
In an NSX environment, an administrator is observing low throughput and congestion between the Tier-O Gateway and the upstream physical routers.
Which two actions could address low throughput and congestion? (Choose two.)
Which two actions could address low throughput and congestion? (Choose two.)
정답: C,D
설명: (DumpTOP 회원만 볼 수 있음)
Which VPN type must be configured before enabling a L2VPN?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
How is the RouterLink port created between a Tier-1 Gateway and Tler-0 Gateway?
정답: B
설명: (DumpTOP 회원만 볼 수 있음)
Which three DHCP Services are supported by NSX? (Choose three.)
정답: A,B,D
설명: (DumpTOP 회원만 볼 수 있음)
Which two BGP configuration parameters can be configured in the VRF Lite gateways? (Choose two.)
정답: A,C
설명: (DumpTOP 회원만 볼 수 있음)
Which two tools are used for centralized logging in VMware NSX? (Choose two.)
정답: A,B
설명: (DumpTOP 회원만 볼 수 있음)
Which of the two following characteristics about NAT64 are true? (Choose two.)
정답: C,E
설명: (DumpTOP 회원만 볼 수 있음)
Which CLI command is used for packet capture on the ESXi Node?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)