1500 Questions | VCP-NV: Network Virtualization Bootcamp

Security (25-30%): Explain NSX Security Features Overview, Describe how to Configure Threat Prevention,

Implementation and Architecture (30-35%): Explain NSX Components and Functionality, Describe how to Plan and Implement NSX,

B) NSX Controller

C) NSX Manager

D) Distributed Logical Router

E) vCenter Server

F) NSX vSwitch

Correct Answer: C

Overall Explanation: The NSX Manager is the management plane component that provides a centralized graphical user interface and REST API for creating, configuring, and monitoring NSX components,

Option Explanations:

B is incorrect because the NSX Controller handles the control plane by managing logical networks, not the main user configuration interface,

C is correct because the NSX Manager is the sole management plane component for configuring the environment,

D is incorrect because the Distributed Logical Router operates in the data plane for East-West traffic,

E is incorrect because while vCenter manages compute resources, NSX Manager handles the network virtualization aspects,

F is incorrect because the vSwitch is a data plane component handling actual traffic forwarding,

B) Distributed Firewall

C) Edge Services Gateway

D) Identity Firewall

E) Distributed Intrusion Detection System

F) Service Insertion

Correct Answer: B

Overall Explanation: The Distributed Firewall runs in the hypervisor kernel and enforces security policies at the vNIC level of each virtual machine, enabling true microsegmentation,

Option Explanations:

B is correct because the Distributed Firewall provides East-West stateful firewalling applied directly to each VM interface,

C is incorrect because Edge Services manage North-South traffic leaving the virtualized environment,

D is incorrect because the Identity Firewall uses Active Directory user sessions for rule enforcement, which is a feature built on top of the base firewall mechanism,

E is incorrect because Intrusion Detection analyzes traffic for signatures and anomalies rather than providing basic firewall stateful enforcement,

F is incorrect because Service Insertion is used to redirect traffic to third-party security appliances,

B) NVGRE

C) GENEVE

D) VLAN

E) IPsec

F) OSPF

Correct Answer: C

Overall Explanation: NSX-T utilizes GENEVE as its tunneling protocol for overlay networks, replacing the VXLAN protocol used in the older NSX for vSphere architecture,

Option Explanations:

B is incorrect because NVGRE is a different encapsulation protocol primarily associated with Microsoft environments,

C is correct because GENEVE provides a flexible structure and is the standard for NSX-T overlay transport,

D is incorrect because VLANs segment physical networks without the overlay encapsulation required by NSX-T,

E is incorrect because IPsec is a suite for encrypting traffic over IP networks, not the primary overlay encapsulation protocol,

F is incorrect because OSPF is a dynamic routing protocol, not an encapsulation standard,

Welcome to the Mock ms 900 microsoft 365 fundamentals mock exam practice tests Academy to help you prepare for your VMware Certified Professional - Network Virtualization,

You can retake the exams as many times as you want,

This is a huge original question bank,

You get support from instructors if you have questions,

Each question has a detailed explanation,

Mobile-compatible with the Udemy app,