最新的VMware NSX-T Data Center 3.1 Security - 5V0-41.21免費考試真題

A. NSX Distributed Firewall

B. NSX Distributed IDS/IPS

C. NSX Distributed Routing

D. NSX Distributed Switch Agent

A. The severity specified in the signature itself

B. The Common Vulnerability Scoring System score specified in the signature.

C. The type-rating associated with the classification type.

D. The load balancer deployment type.

E. The Distributed Intrusion Detection and Intrusion Prevention rules.

A. The ESXi hosts require access to the Internet to download category and reputation definitions.

B. A layer 7 gateway firewall rule must be configured on the tier-0 gateway uplink to capture DNS traffic.

C. The NSX Edge nodes require access to the Internet to download category and reputation definitions.

D. A layer 7 gateway firewall rule must be configured on the tier-1 gateway uplink to capture DNS traffic,

E. The NSX Manager requires access to the Internet to download category and reputation definitions.

A. Endpoint Protection Rules

B. Network Introspection Policy

C. vSphere Firewall Policy

D. URL Analysis Attributes

A. Medium-sized edge node (or higher), or a physical form factor edge

B. Layer 7 DNS firewall rule on NSX Edge cluster

C. Tier-1 gateway

D. NSX Enterprise or higher license key

E. Tier-0 gateway

F. OFW rule allowing traffic OUT to Internet

A. A traffic flow that matches an allow rule more granular than the default.

B. A traffic flow that matches a reject rule more granular than the default.

C. A traffic flow that matches a drop rule more granular than the default.

D. A traffic flow that matches the default distributed firewall rule.

A. nsx-ccp

B. nsx-proxy

C. nsx-appl-proxy

D. nsx-mpa

A. A system deployed inline with ALERT and DROP action.

B. A system deployed inline with ALERT action.

C. A system deployed in SPAN port mode.

D. A system deployed in TERM mode.