Free 5V0-41.21 Exam Braindumps
VMware NSX-T Data Center 3.1 Security Questions 26–30 (page: 7)

Updated On: 9-Feb-2026

Which two are used to define dynamic groups for an NSX Distributed Firewall? (Choose two.)

  1. segment
  2. physical servers
  3. machine name
  4. tags
  5. segment's port

Answer(s): C,D

Explanation:

For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID- BEDA8D9F-ACBC-42B1-B7F5-FEEF0E0D899C.html) for more information on configuring dynamic groups.



What type of IDS/IPS system deployment allows an administrator to block a known attack?

  1. A system deployed in SPAN port mode.
  2. A system deployed inline with ALERT and DROP action.
  3. A system deployed inline with ALERT action.
  4. A system deployed in TERM mode.

Answer(s): B

Explanation:

as a system deployed inline with both ALERT and DROP action will provide the ability to block attacks when a match is found
For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID-

D9A6B1E7-FFCD-47A7-8E0C-FDD3DE6AC2B6.html) for more information on configuring an IDS/IPS system.



A security administrator is verifying the health status of an NSX Service Instance.
Which two parameters must be functioning for the health status to show as Up? (Choose two.)

  1. VMs must have at least one vNIC.
  2. VMs must not have existing endpoint protection rules.
  3. VMs must have virtual hardware version 9 or higher.
  4. VMs must be available on the host.
  5. VMs must be powered on.

Answer(s): D,E

Explanation:

The health status of an NSX Service Instance is an indicator of the overall health and functionality of the service.
For an NSX Service Instance to show as Up, the following two parameters must be functioning:
1. VMs must be available on the host - The VMs that are associated with the service must be present on the host and able to communicate with the NSX Manager. If a VM is not available on the host, the service will not be able to function properly.
2. VMs must be powered on - The VMs that are associated with the service must be powered on and running. If a VM is not powered on, the service will not be able to function properly.



Which vCenter component is used by the NSX Manager to deploy the Partner Service VM on every host of a cluster configured for guest introspection?

  1. ESXi Agent Manager (EAM)
  2. Auto Deploy
  3. Update Manager (VUM)
  4. Component Manager

Answer(s): D

Explanation:

Component Manager is used to deploy the Partner Service VM on every host of a cluster configured for guest introspection.
For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID- ACB4CE1E-4F6E-4B4F-96BF-9FA9DFFF9229.html) for more information on configuring guest introspection.



To which object can time based rules be applied?

  1. Gateway Firewall only
  2. DFW and Gateway Firewall both
  3. DFW only
  4. DFW or Gateway Firewall, but not both at the same time

Answer(s): C

Explanation:

For further reading, see the VMware NSX-T Data Center Administration Guide (https://pubs.vmware.com/NSX-T-Data-Center/index.html#com.vmware.nsxt.admin.doc/GUID- 8F9C6E9E-9C83-4CAD-BB3A-F4E4A25C6FE7.html) for more information on configuring time based rules.



Viewing page 7 of 15
Viewing questions 31 - 35 out of 70 questions


Post your Comments and Discuss VMware 5V0-41.21 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!