VMware 2V0-81.20 問題集

質問 1：
A security administrator receives an error with code 1001 while configuring a time-based firewall rule on an ESXi host.
Which two actions can resolve the problem? (Choose two.)
A. restarting the NTP service on the ESXi host
B. restarting the NSX firewall kernel module on the ESXi host
C. reinstalling the NSX modules on the ESXi host
D. configuring the ESXi host with a remote NTP server
E. configuring the ESXi host with a local NTP server
正解：A,C

質問 2：
An administrator has been asked to install Guest Introspection Thin Agent using VMware Tools on a Windows 10 VDI solution.
Which statement is correct for enabling the Identity Firewall feature?
A. Guest Introspection drivers are included with VMware Tools for Windows and a reboot of the VM is required to initialize the drivers
B. Guest Introspection drivers are available from third-party providers and can be initialized without a VM reboot.
C. To install Guest Introspection on a Windows VM, you must perform a custom install and select the drivers.
D. Select Guest Introspection Drivers to install File Introspection (vsepfit) and Network Introspection (vnetfit) drivers.
正解：C

質問 3：
When creating an NSX-T Data Center Firewall rule to prevent all communication between same scope objects, what must be true of the first firewall rule?
A. The source and destination are the same.
B. The firewall action would be rejected.
C. The port will be 443.
D. The logging would be on.
正解：D

質問 4：
Where in the NSX UI does an administrator add an Active Directory Domain?
A. Go to Security > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY
B. Go to Inventory > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY
C. Go to System > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY
D. Go to Home > Configuration > Identity Firewall AD > ADD ACTIVE DIRECTORY
正解：C

質問 5：
In a Workspace ONE deployment, what two commands are available for a Windows policy when sending a command action as part of a compliance policy? (Choose two.)
A. Device Wipe
B. Enterprise Wipe
C. Apply Baseline
D. Apply Profile
E. Request Device Checkin
正解：C,D

質問 6：
Users on iOS and Android devices are being prompted for their credentials when accessing an application protected by Workspace ONE Access.
The current configuration includes:
Workspace ONE UEM is integrated with Workspace ONE Access
Workspace ONE UEM has a Certificate Authority configured
Single sign-on has been enabled through device profiles
What authentication method can be used to allow iOS and Android devices to launch an application without being prompted for credentials?
A. Kerberos
B. TRUESSO
C. Mobile SSO
D. Windows SSO
E. OKTA
正解：C

質問 7：
When designing NSX-T for high availability with Layer 2 adjacency, what is the recommended number of NSX Managers that should be deployed?
A. 3 NSX Managers using a VIP address for Management
B. 2 NSX Managers using a VIP address for Management
C. 2 NSX Managers deployed using a load balancer
D. 1 NSX Manager using vSphere for high availability
正解：A