最新的VMware Certified Professional認證 2V0-81.20考試題庫

問題1

A company has deployed a new application. Users are complaining they cannot connect. The administrator suspects there is an issue with the Distributed Firewall (DFW).
What three steps can be taken to troubleshoot the DFW? (Choose three.)

A. The administrator should verify firewall rules exist to permit traffic and verify the hit counters are increasing.

B. The administrator should confirm if the DFW rule is set to log, and then look on the hypervisor where the VMs reside and look at logs at /var/log/dfwpktlogs.log.

C. The administrator should configure vRealize Log Insight using the Insight agent as the type and review the DFW rule logs in vRealize Log Insight.

D. The administrator should confirm that SLOT 2, which is used by the DFW, is configured under the vNICs of the VMs.

E. The administrator should configure vRealize Log Insight using syslog as the type and review the DFW rule logs in vRealize Log Insight.

正確答案: A,B,E

問題2

An administrator is trying to create a new access policy rule in Workspace ONE Access.
Which two options are available when creating this new access policy rule. (Choose two.)

A. Device OS Version

B. Authentication Method

C. Device Ownership

D. Compliance State

E. Network Range

正確答案: B,E

問題3

In an NSX-T Data Center deployment, micro-segmentation via security policies is accomplished using which component?

A. NSX Distributed Firewall

B. NSX Gateway Firewall

C. NSX Logical Router

D. NSX Bridge Firewall

正確答案: A

問題4

In what order are NSX-T Distributed Firewall rules processed?

A. Left-to-right, top-to-bottom, finding a rule match the packet is processed per the rule and stops.

B. Top-to-bottom, left-to-right, finding a rule match the packet is processed per the rule and stops.

C. Top-to-bottom, left-to-right, finding a rule match the packet is processed per the rule and continues to next rule.

D. Left-to-right, top-to-bottom, finding a rule match the packet is processed per the rule and continues to next rule.

正確答案: C

問題5

An administrator has deployed a new NSX Distributed Firewall rule that allows only TLS 1.2 and TLS 1.3 HTTPS connections. The new rule is working, but TLS 1.0 and TLS 1.1 connections are still occurring.
What step is required to enforce the TLS policy restriction?

A. Configure a Context Profile and select a FQDN attributes.

B. Configure a Context Profile and select HTTPS and HTTP attributes.

C. Configure a Context Profile and select TLS 1.2 and 1.3 attributes.

D. Configure a Context Profile and select DNS-TCP and DNS-UDP attributes.

正確答案: A

問題6

Refer to the exhibit.

What command was run on the NSX Edge node to pull this information?

A. get tunnel-ID

B. get vteps

C. show vteps

D. list vteps

正確答案: B

問題7

Users on iOS and Android devices are being prompted for their credentials when accessing an application protected by Workspace ONE Access.
The current configuration includes:
Workspace ONE UEM is integrated with Workspace ONE Access
Workspace ONE UEM has a Certificate Authority configured
Single sign-on has been enabled through device profiles
What authentication method can be used to allow iOS and Android devices to launch an application without being prompted for credentials?

A. Kerberos

B. TRUESSO

C. Windows SSO

D. OKTA

E. Mobile SSO

正確答案: E

問題8

What are two valid time limit selections when creating a Last Seen compliance policy in Workspace ONE UEM? (Choose two.)

A. Minutes

B. Hours

C. Weeks

D. Months

E. Days

正確答案: A,E

最新的VMware Professional VMware Security - 2V0-81.20免費考試真題

最新更新

站內鏈接

聯系我們