VCAP-VCF Networking 3V0-25.25 Practice Questions & Answers • ExamPrepare

24 questions in this view

Page 1 of 4

Question 1

An administrator is troubleshooting North–South routing in an NSX environment where a Tier-0 Gateway peers with an upstream physical router using Border Gateway Protocol (BGP).

Although route redistribution has been configured, the administrator notices that external routes are not appearing in the routing table on the Tier-0 Gateway. To verify whether the problem is due to a BGP session failure, the administrator decides to check the BGP neighbor status directly from the NSX Edge Node CLI.

What sequence of commands should be used to check BGP status on NSX Edge node?

- show logical-routers - get vrf - show ip route bgp
- get gateways - vrf <number> - get bgp neighbor
- enable <LR-D> - get vrf <ID> - show bgp neighbor
- set vrf <ID> - show logical-routers - show <LR-D> bgp

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A sovereign cloud provider has a VMware Cloud Foundation (VCF) stretched Workload Domain across two data centers (AZ1 and AZ2), where site connectivity via layer-3 is provided by the underlay.

The following NSX details are included in the design:

Each site must host its own local NSX Edge Cluster for availability zones.
Tier-0 gateways must be configured in active/active mode with BGP ECMP to local top of rack switches.
Inter-site Edge TEP traffic must not cross the inter-DC link.
SDDC Manager is used to automate NSX deployment.

During deployment of the Edge Cluster for AZ2, the SDDC Manager workflow fails because the Edge transport nodes TEP IPs are not reachable from the ESX transport nodes.

Which step ensures correct Edge Cluster deployment in multi-site stretched domains?

Create an AZ2-specific Edge TEP IP pool and map it to the AZ2 uplink profile before deploying the Edge Cluster.
Reuse the TEP IP pool from AZ1.
Configure BGP neighbors before deploying the Edge Cluster.
Disable the liveness check during Edge deployment in SDDC Manager.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Which two statements describe the recommended strategy for configuring and synchronizing security policies across Federated NSX sites? (Choose two.)

Local Manager (LM)s (LMs) can define local policies, but any global policies defined on the GM always take precedence over the local ones.
Consistency is achieved by ensuring all security groups have the exact same name on every Federated site's Local Manager (LM).
Security policies should be defined locally on each LM and only synchronized manually by an administrator to prevent accidental conflicts.
The Global Manager only synchronizes networking (L2/L3) configurations. Security rules must be configured separately on each site.
Security policies, such as Distributed Firewall rules and security groups, must be defined as global policies on the Global Manager (GM).

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

The administrator has been tasked with differentiating the roles of Global Manager (GM) and Local Manager (LM) to determine where specific configurations should be performed.

Which statements describe the difference between Global Manager and Local Manager?

The Global Manager creates and manages global network objects, while Local Manager enforce them.
The Global Manager only provides reporting functions.
Policy creation must always be performed at each Local Manager and synchronized manually with the Global Manager.
The Local Manager (LM) creates and manages local network objects, while Global Managers enforce them.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

An administrator is enabling IPv6-to-IPv4 communication for workloads hosted in an NSX environment. The workloads use IPv6-only addressing, but the external systems they must reach are IPv4-only. To provide this translation service, the administrator decides to configure NAT64.

Which two following characteristics about NAT64 are true? (Choose two.)

NAT64 is supported on Tier-1 gateways only.
NAT64 requires the Tier-1 gateway to be configured in active-active mode.
NAT64 requires the Tier-1 gateway to be configured in active-standby mode.
NAT64 is supported on Tier-0 and Tier-1 gateways.
NAT64 is stateless and requires gateways to be deployed in active-standby mode.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

An administrator is troubleshooting an issue where workloads connected to a Tier-1 Gateway named T1-App can no longer reach external North/South destinations.

The Tier-1 is connected to an Active/Standby Tier-0 Gateway named T0-Prod.

Symptoms observed:

VMs on segments attached to T1-App can ping each other.
VMs on T1-App cannot reach any external IP outside T0-Prod.
From a VM on the segment, ping to the T1-App Distributed Router (DR) IP succeeds.
Ping from the VM to the T1-App Service Router (SR) fails.
The Edge cluster hosting the T1-App SR shows both Edge nodes Up and Healthy.
No failover has occurred – the same Edge node is still shown as Active for T1-App.

What is the most likely cause of this issue?

Localized control plane is enabled on the Tier-1 causing the SR to remain admin-down.
Static default route is missing on the Tier-1 DR component.
The overlay network between DR and SR has an MTU mismatch.
Route advertisement from T1-App to T0-Prod for 100.64.x.x/31 is disabled.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.