An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
Some workloads should be moved to a Cloud Provider.
Extend network's VLAN or VNI across sites on the same broadcast domain.
Enable VM mobility use cases such as migration and disaster recovery without IP address changes.
Support 1500 byte MTU between sites.
Which selection should the architect include in their design? (Choose the best answer.)
A. Load Balancer
B. Reflexive NAT
C. SSL VPN
D. L2 VPN
Which selection is associated with the Review Task of the Engagement Lifecycle? (Choose the best answer.)
A. Gather and document requirements, assumptions, and constraints.
B. Build, deploy, implement, and test the design.
C. Measure performance against customer's objective.
D. Create and document the logical and physical design.
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.
Which risk is documented by an architect? (Choose the best answer.)
A. The security team has a firewall communication matrix documented.
B. The team is not trained for NSX-T but have a very strong experience with vSphere.
C. Open communication between different application tiers is not allowed.
D. Aggregate N-S throughput at any given time should be at least 10G.
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
Data between two networks connected over a public network needs to be encrypted.
Certificate authentication is required.
Dynamic route learning is preferred.
Which selection should the architect include in their design? (Choose the best answer.)
A. Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
B. Deploy a Tier-0 gateway in Active/Active mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
C. Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
D. Deploy a Tier-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
An architect is helping an organization with the Logical Design of a Layer 2 bridging solution.
This information was gathered during the Assessment Phase:
Workloads are running on ESXi hosts.
Workloads are running on KVM hosts.
Workloads on hypervisors should use bridging services.
VLAN 50 is used for Tier-0 uplink connectivity.
Which selection should the architect include in their design? (Choose the best answer.)
A. Create an NSX Edge Bridge Cluster and configure the bridging profile with VLAN 60.
B. Create an NSX Edge Bridge Cluster and configure the bridging profile with VLAN 50.
C. Create an ESXi Bridge Cluster and configure the bridging profile with VLAN 50.
D. Create an ESXi Bridge Cluster and configure the bridging profile with VLAN 60.
According to the Discover Task of the Engagement Lifecycle, which statement would be classified as a risk? (Choose the best answer.)
A. Enough power and cooling capacity is available in each rack in the data center.
B. To retain certification to provide financial services to end customers, PCI-DSS audits need to be passed.
C. A merger and acquisition process was recently completed and new company on-boarding is not completed.
D. Due to existing contracts and purchase agreements, the existing server hardware needs to be reused.
A customer wants to use ECMP to provide additional throughput and availability for their critical business applications. Some applications require load balancing for scale and availability.
Which two Edge design choices can an architect present to the customer? (Choose two.)
A. Create a Tier-0 gateway in Active/Standby mode and a Tier-1 gateway in Active/Standby mode.
B. Configure ECMP and Load Balancing on the Tier-0 gateway.
C. Create a Tier-0 gateway in Active/Active mode and a Tier-1 gateway in Active/Standby mode.
D. Create a Tier-0 gateway in Active/Standby mode.
E. Configure ECMP on the Tier-0 gateway and Load Balancing on the Tier-1 gateway.
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the assessment:
There must be a performance based SLA for East - West traffic.
Which two key performance features should the architect recommend? (Choose two.)
A. Configure N-VDS enhanced Data Path
B. Install advanced Edge pNIC Features
C. Setup RSS to leverage multiple cores
D. Leverage DPDK drivers
E. Enable GENEVE Offload
Which two protocols are typically used for multicast in a NSX-T Data Center environment? (Choose two.)
A. PIM Full Form
B. PIM Dense Mode
C. IGMPv2
D. PIM Sparse mode
E. IGMPv3
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution.
Which three selections are requirements documented by an architect? (Choose three.)
A. Aggregate N-S throughput at any given time should be at least 10G.
B. All traffic should recover in the event of Host/Rack/ToR failure.
C. Hardware is 5 years old and new hardware is already purchased.
D. SAN storage has enough capacity to build the new infrastructure.
E. Business critical applications should have an SLA of 99.99%.
F. The Development Team are heavy on API usage.