2023 3V0-42.20 exam torrent 3V0-42.20 Study Guide
Easily pass 3V0-42.20 Exam with our Dumps & PDF Test Engine
NEW QUESTION # 11
A telecom company has purchased NSX-T as part of a Software Defined Data Center (SDDC) initiative. The company wants to ensure the highest performance for network traffic leaving the virtual environment.
- A. Select Network cards that support VXLAN Offload.
- B. Configure Equal-Cost Multi-Pathing on the NSX Edges.
- C. Set "Latency Sensitive" option to High when deploying the virtual NSX Edges.
- D. Use bare metal NSX Edges.
- E. Configure SR-IOV for the virtual NSX Edges.
Answer: C,E
NEW QUESTION # 12
Which three choices are non-functional requirements? (Choose three.)
- A. certification
- B. scalability
- C. cost
- D. availability
- E. authorization
- F. authentication
Answer: B,C,D
Explanation:
https://technicloud.com/category/vmware/
NEW QUESTION # 13
Which two protocols are typically used for multicast in a NSX-T Data Center environment? (Choose two.)
- A. IGMPv3
- B. PIM Dense Mode
- C. PIM Full Form
- D. PIM Sparse mode
- E. IGMPv2
Answer: D,E
Explanation:
The following protocols are used to implement multicast in NSX-T Data Center 3.0> Internet Group Management Protocol (IMGP)
- IGMPv2
- IGMP Snooping
Protocol-Independent Mutlicast (PIM)
- PIM Sparse Mode (PIM-SM)
- PIM Bootstrap.
Take from NSX-T ICM 3.0 Lecture Manual - Multicas Protocols section.
or
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-6AAC3360-4F79-4FBF-BCC1-0D8C220B0621.html
NEW QUESTION # 14
An architect is helping an organization with the Logical Design of a Layer 2 bridging solution.
This information was gathered during the Assessment Phase:
Workloads are running on ESXi hosts.
Workloads are running on KVM hosts.
Workloads on hypervisors should use bridging services.
VLAN 50 is used for Tier-0 uplink connectivity.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Create an ESXi Bridge Cluster and configure the bridging profile with VLAN 50.
- B. Create an NSX Edge Bridge Cluster and configure the bridging profile with VLAN 50.
- C. Create an NSX Edge Bridge Cluster and configure the bridging profile with VLAN 60.
- D. Create an ESXi Bridge Cluster and configure the bridging profile with VLAN 60.
Answer: B
Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.3/com.vmware.nsxt.admin.doc/GUID-7B21DF3D-C9DB-4C10-A32F-B16642266538.html
NEW QUESTION # 15
Which selection must be taken into consideration when creating a Logical Design for a planned migration? (Choose the best answer.)
- A. An N-VDS can only attach to a single VLAN transport zone.
- B. An N-VDS can attach to both an Overlay and a VLAN transport zone to a N-VDS having different name/s.
- C. An N-VDS must be disabled before attaching both Overlay and VLAN transport zones.
- D. An N-VDS can only attach to a single Overlay transport zone.
Answer: A
NEW QUESTION # 16
A customer has a requirement to implement a next generation firewall (NGFW) to improve security network introspection. The customer wants to apply the NGFW to all workloads exposed both internally and externally. The customer wants the NGFW to work seamlessly with NSX-T Data Center and vSphere.
Which solution should be recommended to the customer? (Choose the best answer.)
- A. Use network introspection only on the external workloads and use NSX DFW for internal workloads.
- B. Apply the NGFW on bare metal hosts which will offer better performance of inline network introspection.
- C. Apply the NGFW to internal and external workloads for increased protection and use NSX-T Data Center with Federation to set network policies.
- D. Use NSX-T Data Center leveraged with NSX Intelligence to protect all workloads at the network inspection level.
Answer: D
NEW QUESTION # 17
An NSX-T Architect is working in a brownfield environment with 4 ESXi hosts. These constraints were documented:
new servers cannot be purchased
North/South bandwidth must be guaranteed
Top-of-Rack switches have additional uplinks
Which three recommendations should the architect implement? (Choose three.)
- A. Install Edge nodes on a separate cluster.
- B. Use a resource pool for production workloads.
- C. Use a resource pool to deploy the Edge nodes on.
- D. Recommend obtaining 2 new physical NICs for the servers.
- E. Remove one of the ESXi hosts and install a bare-metal Edge.
Answer: B,C,D
Explanation:
https://docs.vmware.com/en/VMware-Validated-Design/services/deployment-of-nsx-t-workload-domains-with-mult-az-using-vmware-cloud-foundation/GUID-15C5DFF8-C8D9-40AB-AFAF-89887281F3C8.html
NEW QUESTION # 18
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
There are six hosts and hardware has already been purchased.
Customer is planning a collapsed Management/Edge/Compute cluster.
Each host has two 10Gb NICs connected to a pair of switches.
There should be no single point of failure in any proposed design.
Which virtual switch design should the architect recommend to the organization? (Choose the best answer.)
- A. Create an NSX-T Virtual Distributed Switch (N-VDS) for Management VMKernel and overlay traffic and assign both NICs.
- B. Create an NSX-T Virtual Distributed Switch (N-VDS) for Management VMkernel and overlay traffic and assign a new virtual NIC.
- C. Create a vSphere Distributed Switch (vDS) for Management VMkernel traffic and assign one NIC. Also, create an NSX-T Virtual Distributed Switch (N-VDS) for overlay traffic and assign one NIC.
- D. Create an NSX-T Virtual Distributed Switch (N-VDS) for Management VMkernel traffic and assign one NIC. Also, create an NSX-T Virtual Distributed Switch (N-VDS) for overlay traffic and assign one NIC.
Answer: C
NEW QUESTION # 19
Which NSX-T feature is used to allocate the network bandwidth to business-critical applications and to resolve situations where several types of traffic compete for common resources? (Choose the best answer.)
- A. Network I/O Control Profiles
- B. Transport Node Profiles
- C. LAG Uplink Profile
- D. LLDP Profile
Answer: A
Explanation:
Use the Network I/O Control (NIOC) profile to allocate the network bandwidth to business-critical applications and to resolve situations where several types of traffic compete for common resources.
NIOC profile introduces a mechanism to reserve bandwidth for the system traffic based on the capacity of the physical adapters on a host. Version 3 of the Network I/O Control feature offers improved network resource reservation and allocation across the entire switch.
Network I/O Control version 3 for NSX-T Data Center supports the resource management of the system traffic related to virtual machines and to infrastructure services, such as vSphere Fault Tolerance. System traffic is strictly associated with an ESXi host.
Taken from https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/installation/GUID-9A8FD62A-F099-4329-8220-6D5853F9A62D.html
NEW QUESTION # 20
Which two resources can be used by an NSX architect during the Assessment Phase? (Choose two.)
- A. VMware customer references
- B. key stakeholder interviews
- C. VMware Validated Design
- D. application licensing
- E. vRealize Network Insight
Answer: B,E
NEW QUESTION # 21
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
* Maximum performance and availability is required between the physical and virtual network.
* Load Balancing service is required for back-end web servers.
* NAT is required.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Deploy an Active/Standby Tier-0 gateway and configure ECMP.
- B. Deploy an Active/Active Tier-0 gateway and configure ECMP.
- C. Create two separate VLANs to connect the Tier-0 gateway upstream traffic and configure ECMP.
- D. Deploy a Tier-1 gateway and connect it to an Active/Active Tier-0 gateway with ECMP configured.
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 22
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.
This information was gathered by the architect during the Discover Task of the Engagement Lifecycle:
There are applications which use IPv6 addressing.
Network administrators are not familiar with NSX-T Data Center solutions.
Hosts can only be configured with two physical NICs.
There is an existing management cluster to deploy the NSX-T components.
Dynamic routing should be configured between the physical and virtual network.
There is a storage array available to deploy NSX-T components.
Which risk was documented by the architect? (Choose the best answer.)
- A. Dynamic routing should be configured between the physical and virtual network.
- B. There are applications which use IPv6 addressing.
- C. Network administrators are not familiar with NSX-T Data Center solutions.
- D. There is a storage array available to deploy NSX-T components.
Answer: C
NEW QUESTION # 23
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
Maximum performance and availability is required between the physical and virtual network.
Load Balancing service is required for back-end web servers.
NAT is required.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Deploy an Active/Standby Tier-0 gateway and configure ECMP.
- B. Deploy an Active/Active Tier-0 gateway and configure ECMP.
- C. Create two separate VLANs to connect the Tier-0 gateway upstream traffic and configure ECMP.
- D. Deploy a Tier-1 gateway and connect it to an Active/Active Tier-0 gateway with ECMP configured.
Answer: A
NEW QUESTION # 24
A customer deploying NSX-T Data Center requires role based access controls be enforced in NSX Manager with these requirements:
identity platform must be highly available
authentication must be performed by customer's existing SAML identity provider MFA must be performed by administrator to gain access to NSX Manager Which identity deployments would meet the customer's requirements? (Choose the best answer.)
- A. NSX Manager OAuth 2.0 registered to a 2-node VMware Identity Manager cluster.
- B. NSX Manager OAuth 2.0 registered to a 3-node Active Directory Federation Services cluster.
- C. NSX Manager OAuth 2.0 registered to a 2-node Active Directory Federation Services cluster
- D. NSX Manager OAuth 2.0 registered to a 3-node VMware Identity Manager cluster.
Answer: D
NEW QUESTION # 25
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.
Which risk is documented by an architect? (Choose the best answer.)
- A. The team is not trained for NSX-T but have a very strong experience with vSphere.
- B. Aggregate N-S throughput at any given time should be at least 10G.
- C. Open communication between different application tiers is not allowed.
- D. The security team has a firewall communication matrix documented.
Answer: A
NEW QUESTION # 26
Which three assessment findings are part of a Conceptual Design? (Choose three.)
- A. risks
- B. constraints
- C. justifications
- D. assumptions
- E. vendor model
- F. host names
Answer: A,B,C
NEW QUESTION # 27
An administrator is asked to improve Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for Disaster Recovery (DR) in their company network. The network has a primary site and a secondary site. The ability to support outages with minimum loss of connectivity to the company's core application is a priority.
Which design should the administrator recommend? (Choose the best answer.)
- A. NSX-T Data Center using an Orchestrator to recover VMs across sites.
- B. NSX-T Data Center using Federation and dependencies set between primary and secondary sites.
- C. NSX-T Data Center using a registered third-party DR solution.
- D. NSX-T Data Center using built-in standard automation DR and secondary site recovery setup.
Answer: B
Explanation:
NSX-T federation allows creating global routing constructs ( Routers & Segments) and one of the main use cases of federation is BCDR
NEW QUESTION # 28
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:
Maximum performance and availability is required between the physical and virtual network.
Load Balancing service is required for back-end web servers.
NAT is required.
Which selection should the architect include in their design? (Choose the best answer.)
- A. Deploy a Tier-1 gateway and connect it to an Active/Active Tier-0 gateway with ECMP configured.
- B. Deploy an Active/Active Tier-0 gateway and configure ECMP.
- C. Create two separate VLANs to connect the Tier-0 gateway upstream traffic and configure ECMP.
- D. Deploy an Active/Standby Tier-0 gateway and configure ECMP.
Answer: A
Explanation:
LB must be attached to Tier-1 gateway. In a typical deployment, the Tier-1 gateway is connected to a Tier-0 gateway in active-active mode, and as we know just in Tier-0 is supported ECMP.
NEW QUESTION # 29
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
The company will use a Leaf and Spine physical network architecture with Layer 3 gateways for top of rack switches.
The company is planning to deploy 120 ESX hosts across 10 racks.
There will be a total of a 12 clusters where each cluster has one host per rack.
What should the architect recommend to allow applications to run on any host in the cluster? (Choose the best answer.)
- A. Deploy a Tier-0 gateway per Rack and configure BGP between racks.
- B. Deploy all application networks on NSX segments.
- C. Deploy an L2 VPN to allow the networks to extend to each host.
- D. Deploy a Tier-1 gateway per Rack and configure BGP between racks.
Answer: B
NEW QUESTION # 30
A customer wants to use ECMP to provide additional throughput and availability for their critical business applications. Some applications require load balancing for scale and availability.
Which two Edge design choices can an architect present to the customer? (Choose two.)
- A. Configure ECMP on the Tier-0 gateway and Load Balancing on the Tier-1 gateway.
- B. Create a Tier-0 gateway in Active/Active mode and a Tier-1 gateway in Active/Standby mode.
- C. Configure ECMP and Load Balancing on the Tier-0 gateway.
- D. Create a Tier-0 gateway in Active/Standby mode.
- E. Create a Tier-0 gateway in Active/Standby mode and a Tier-1 gateway in Active/Standby mode.
Answer: C,D
NEW QUESTION # 31
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. During discussions about centralized services NAT running on Tier-1 or Tier-0 Gateway, the customer made these requests:
Services contain stateful services.
Services should be in high availability mode.
Which two selections should the architect include in their design? (Choose two.)
- A. The high availability mode supported is only Active-Standby.
- B. Use Reflexive NAT on the uplink interface.
- C. DNAT should be applied on the uplink interface.
- D. An active/active model should be used.
- E. Mix stateful and stateless NAT rules on the same gateway.
Answer: A,C
Explanation:
Stateful services: Require HA mode configured as Active-Standby
Stateless services: Require HA mode configured as Active-Active
You can create different NAT rules:
* Source NAT (SNAT) translates the source IP of the outbound packets to a known public IP address so that the application can communicate with the outside world without using its private IP address. SNAT also tracks the reply.
* Destination NAT (DNAT) enables access to internal private IP addresses from the outside world by translating the destination IP address when inbound communication is initiated. DNAT also takes care of the reply. For both SNAT and DNAT, users can apply NAT rules based on the 5-tuple match criteria.
* Reflexive NAT rules are stateless access control lists (ACLs) that must be defined in both directions. These rules do not track the connection. Reflexive NAT rules are applied when stateful NAT cannot be used. For example, when a Tier-0 gateway is running in active-active equal-cost multipath (ECMP) mode, you cannot configure stateful NAT because asymmetrical paths might cause issues.
NEW QUESTION # 32
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.
This information was gathered by the architect during the Discover Task of the Engagement Lifecycle:
Existing hardware will be used in any design proposal.
Network bandwidth cannot be expanded.
Which concept of the Discover Task do these items belong to? (Choose the best answer.)
- A. assumption
- B. constraint
- C. requirement
- D. risk
Answer: B
NEW QUESTION # 33
A Solutions Architect is designing an environment with 1,200 services being offered through the NSX-T Data Center Load Balancer.
Which three selections are necessary to meet the minimum requirements to support the solution? (Choose three.)
- A. Large Load Balancer
- B. Large Edge Node
- C. Extra Large Edge Node
- D. Tier 1 Gateway
- E. Extra Large Load Balancer
- F. Tier 0 Gateway
Answer: A,B,D
NEW QUESTION # 34
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:
Customer currently has a single 10 host vSphere cluster.
Customer wants to improve network security and automation.
Current cluster utilization and business policies prevent changing the existing vSphere deployment.
High-availability is important to the customer.
Which three selections should the architect include in their design? (Choose three.)
- A. Deploy the NSX Controllers in the management cluster.
- B. Apply vSphere DRS VM-Host anti-affinity rules to the virtual machines of the NSX-T Edge cluster.
- C. Remove 2 hosts from the cluster and create a new edge cluster.
- D. Apply vSphere Distributed Resource Scheduler (vSphere DRS) VM-Host anti-affinity rules to NSX Managers.
- E. Remove vSphere DRS VM-Host affinity rules to the NSX-T Controller VMs.
- F. Deploy at least two NSX-T Edge virtual machines in the vSphere cluster.
Answer: B,D,F
NEW QUESTION # 35
......
VMware 3V0-42.20: Advanced Design VMware NSX-T Data Center exam is designed to assess the knowledge and skills of IT professionals in the area of advanced design for VMware NSX-T Data Center solutions. 3V0-42.20 exam covers a range of topics, including NSX-T components and architecture, design principles and methodologies, security and automation, and integration with other VMware solutions.
VMware 3V0-42.20 exam consists of 60 multiple-choice questions that must be completed within 135 minutes. 3V0-42.20 exam covers a wide range of topics, including NSX-T Data Center architecture, design principles, security, automation, and integration with other VMware solutions. 3V0-42.20 exam also evaluates the candidate's ability to analyze customer requirements and design solutions that meet their specific needs. To pass the exam, candidates must receive a score of at least 300 out of 500 points. Passing 3V0-42.20 exam will earn the candidate the VMware Certified Advanced Professional - Network Virtualization Design 2021 (VCAP-NV Design 2021) certification, which is highly valued in the IT industry.
3V0-42.20 PDF Pass Leader, 3V0-42.20 Latest Real Test: https://www.actual4dump.com/VMware/3V0-42.20-actualtests-dumps.html
Valid 3V0-42.20 Test Answers & 3V0-42.20 Exam PDF: https://drive.google.com/open?id=1J-ogubJJXJCuK2Zw1Pd1_IvkFbcxvY8P