VCP-SEC 2021 2V0-81.20 Practice Test Questions.pdf

1. 2V0-81.20 Free Questions 2V0-81.20 Free Questions Professional VMware Security Professional VMware Security https://www.passquestion.com/ https://www.passquestion.com/2V0-81.20 2V0-81.20.html .html

2. Question 1 Question 1 When deploying a Carbon Black Cloud Sensor using GPO, which option is a required When deploying a Carbon Black Cloud Sensor using GPO, which option is a required setting? setting? A. COMPANY_CODE A. COMPANY_CODE B. LICENSE_CODE B. LICENSE_CODE C. CONNECT_LIMIT C. CONNECT_LIMIT D. AUTO_UPDATE D. AUTO_UPDATE Answer: A Answer: A

3. Question 2 Question 2 An administrator is updating NSX Distributed Firewall rules. The administrator did the Publish a few An administrator is updating NSX Distributed Firewall rules. The administrator did the Publish a few minutes ago and is now receiving calls about lost connections. The administrator has decided to roll- minutes ago and is now receiving calls about lost connections. The administrator has decided to roll- back the configuration. back the configuration. Where can the administrator see past saved configurations to perform the rollback? Where can the administrator see past saved configurations to perform the rollback? A. Go to System > Distributed Firewall > Configurations > View A. Go to System > Distributed Firewall > Configurations > View B. Go to Security > Distributed Firewall > ACTIONS > Configurations - View B. Go to Security > Distributed Firewall > ACTIONS > Configurations - View C. Go to System > Distributed Firewall > Rolling back > View C. Go to System > Distributed Firewall > Rolling back > View D. Go to Inventory > Distributed Firewall > ACTIONS > Configurations - View D. Go to Inventory > Distributed Firewall > ACTIONS > Configurations - View Answer: A Answer: A

4. Question 3 Question 3 An administrator has added a new ESXi host to a vCenter Server Cluster with NSX-T Data Center An administrator has added a new ESXi host to a vCenter Server Cluster with NSX-T Data Center already working. The administrator installed NSX-T Data Center components in the new ESXi. already working. The administrator installed NSX-T Data Center components in the new ESXi. When the administrator deploys a new VM in the host, connectivity tests good with ping, but SSH When the administrator deploys a new VM in the host, connectivity tests good with ping, but SSH session traffic is erratic. The VDS and NSX-T Data Center configuration is the same as each ESXI in session traffic is erratic. The VDS and NSX-T Data Center configuration is the same as each ESXI in the Cluster, but only VMs in the new ESXI are having problems. the Cluster, but only VMs in the new ESXI are having problems. What should the administrator do to address the problem? What should the administrator do to address the problem? A. Verify VLAN connection in each physical uplink. A. Verify VLAN connection in each physical uplink. B. Verify MTU configuration in each physical uplink. B. Verify MTU configuration in each physical uplink. C. Change VDS MTU to 1500 in each physical uplink. C. Change VDS MTU to 1500 in each physical uplink. D. Change VDS MTU to 2000 in each physical uplink. D. Change VDS MTU to 2000 in each physical uplink. Answer: B Answer: B

5. Question 4 Question 4 Which three statements are correct for Active Directory integration with Identity Firewalls (IDFW) in Which three statements are correct for Active Directory integration with Identity Firewalls (IDFW) in an NSX-T Data Center deployment? (Choose three.) an NSX-T Data Center deployment? (Choose three.) A. The IDFW can be used on both physical and virtual servers as long as supported operating system A. The IDFW can be used on both physical and virtual servers as long as supported operating system is installed. is installed. B. The Thin Agent must be enabled in VMWare tools as it is not enabled by default. B. The Thin Agent must be enabled in VMWare tools as it is not enabled by default. C. The IDFW can be used for Virtual Desktops (VDI) or Remote desktop sessions (RDSH support). C. The IDFW can be used for Virtual Desktops (VDI) or Remote desktop sessions (RDSH support). D. Identity-based groups can be used as the source or destination in DFW rules. D. Identity-based groups can be used as the source or destination in DFW rules. E. User identity information is provided by the NSX Guest Introspection Thin Agent. E. User identity information is provided by the NSX Guest Introspection Thin Agent. Answer: C,D,E Answer: C,D,E

6. Question 5 Question 5 In a Workspace ONE deployment, what two commands are available for a Windows policy when In a Workspace ONE deployment, what two commands are available for a Windows policy when sending a command action as part of a compliance policy? (Choose two.) sending a command action as part of a compliance policy? (Choose two.) A. Device Wipe A. Device Wipe B. Enterprise Wipe B. Enterprise Wipe C. Apply Baseline C. Apply Baseline D. Apply Profile D. Apply Profile E. Request Device Checkin E. Request Device Checkin Answer: C,D Answer: C,D

7. Question 6 Question 6 When creating a policy in VMware Carbon Black Cloud, what impact does setting the Target Value to When creating a policy in VMware Carbon Black Cloud, what impact does setting the Target Value to Low have? Low have? A. Alerts Severity scores are raised by 1. A. Alerts Severity scores are raised by 1. B. Alerts Severity scores are raised by 2. B. Alerts Severity scores are raised by 2. C. Alerts Severity scores are lowered by 1. C. Alerts Severity scores are lowered by 1. D. Alerts Severity scores are lowered by 2. D. Alerts Severity scores are lowered by 2. Answer: D Answer: D

8. Question 7 Question 7 Which two options are needed to configure NSX-T Data Center to access the Which two options are needed to configure NSX-T Data Center to access the Active Directory? (Choose two.) Active Directory? (Choose two.) A. Domain Controller Name A. Domain Controller Name B. Distinguished Name B. Distinguished Name C. username C. username D. Port D. Port E. netBIOS name E. netBIOS name Answer: B,E Answer: B,E

9. Question 8 Question 8 Which is true about Time-Based Firewall Policy rules? Which is true about Time-Based Firewall Policy rules? A. Time-Based policy rules apply only to the NSX Distributed Firewall. A. Time-Based policy rules apply only to the NSX Distributed Firewall. B. Time-Based policy rules apply to the NSX Gateway and Distributed Firewall. B. Time-Based policy rules apply to the NSX Gateway and Distributed Firewall. C. Time-Based policy rules can only be used one time for NSX Gateway Firewall. C. Time-Based policy rules can only be used one time for NSX Gateway Firewall. D. Time-Based policy rules apply only to the NSX Gateway Firewall. D. Time-Based policy rules apply only to the NSX Gateway Firewall. Answer: B Answer: B

10. Question 9 Question 9 Which is the name of the default policy that is applied to all applications in Workspace ONE Access? Which is the name of the default policy that is applied to all applications in Workspace ONE Access? A. primary_policy A. primary_policy B. default_policy B. default_policy C. default_access_policy_set C. default_access_policy_set D. default_application_policy D. default_application_policy Answer: C Answer: C

11. Question 10 Question 10 When designing NSX-T for high availability with Layer 2 adjacency, what is the recommended When designing NSX-T for high availability with Layer 2 adjacency, what is the recommended number of NSX Managers that should be deployed? number of NSX Managers that should be deployed? A. 2 NSX Managers deployed using a load balancer A. 2 NSX Managers deployed using a load balancer B. 1 NSX Manager using vSphere for high availability B. 1 NSX Manager using vSphere for high availability C. 3 NSX Managers using a VIP address for Management C. 3 NSX Managers using a VIP address for Management D. 2 NSX Managers using a VIP address for Management D. 2 NSX Managers using a VIP address for Management Answer: C Answer: C