VMware VCP-SEC 2021 2V0-81.20 Dumps Questions

dumps2021-12-15T06:19:10+08:00

VMware 2V0-81.20 exam is a related test for VCP-SEC 2021 certification, which tests your knowledge of VMware’s security solutions. There are 70 questions in real VMware certification 2V0-81.20 exam, and you have 130 minutes to finish all the questions. The required passing score of VMware 2V0-81.20 exam is 300. The exam format is Multiple Choice, Multiple Choice Multiple Selection, Drag and Drop, Matching. Free VMware VCP-SEC 2021 2V0-81.20 dumps questions are available below.

Page 1 of 3

1. Which two options are available for Windows Update Source when creating a Windows Profile for patch management in a Workspace ONE deployment? (Choose two.)

VMware Update Manager

Microsoft Update Service

VMware Update Service

Cloud Update Service

WSUS

2. When creating a policy in VMware Carbon Black Cloud, what impact does setting the Target Value to Low have?

Alerts Severity scores are raised by 1.

Alerts Severity scores are raised by 2.

Alerts Severity scores are lowered by 1.

Alerts Severity scores are lowered by 2.

3. What are two valid time limit selections when creating a Last Seen compliance policy in Workspace ONE UEM? (Choose two.)

Hours

Minutes

Days

Weeks

Months

4. Where in the NSX UI does an administrator deploy NSX Intelligence?

Go to Plan & Troubleshoot > Configuration > ADD NSX INTELLIGENCE APPLIANCE

Go to Security > Configuration > Appliances > ADD NSX INTELLIGENCE APPLIANCE

Go to System > Configuration > Appliances > ADD NSX INTELLIGENCE APPLIANCE

Go to Home > Configuration > Appliances > ADD NSX INTELLIGENCE APPLIANCE

5. An administrator has deployed a new NSX Distributed Firewall rule that allows only TLS 1.2 and TLS 1.3 HTTPS connections. The new rule is working, but TLS 1.0 and TLS 1.1 connections are still occurring.

What step is required to enforce the TLS policy restriction?

Configure a Context Profile and select DNS-TCP and DNS-UDP attributes.

Configure a Context Profile and select a FQDN attributes.

Configure a Context Profile and select TLS 1.2 and 1.3 attributes.

Configure a Context Profile and select HTTPS and HTTP attributes.

6. An administrator has been asked to install Guest Introspection Thin Agent using VMware

Tools on a Windows 10 VDI solution.

Which statement is correct for enabling the Identity Firewall feature?

Guest Introspection drivers are included with VMware Tools for Windows and a reboot of the VM is required to initialize the drivers

To install Guest Introspection on a Windows VM, you must perform a custom install and select the drivers.

Guest Introspection drivers are available from third-party providers and can be initialized without a VM reboot.

Select Guest Introspection Drivers to install File Introspection (vsepfit) and Network Introspection (vnetfit) drivers.

7. Which Carbon Black Cloud feature allows an administrator to audit at scale and identify gaps in least privilege configuration controls?

Watchlist

Live Query

Investigate

CB Baseline Tool

8. An administrator is trying to secure Workspace ONE components with firewall rules.

What port does the administrator need to allow for communication between the UEM Console Server and the UEM Database Server?

443

3389

445

1433

9. In a Workspace ONE deployment, which three are valid pre-configured sources for creating a baseline with the Baseline Wizard? (Choose three.)

GPO Connector

Registry File Import

Windows Security Baseline

CIS Benchmarks

Custom Baseline

10. Which would be a cause for a device being flagged as compromised in the Workspace ONE UEM dashboard?

Device was stolen.

Device was lost.

Device was damaged.

Device was jailbroken.

Page 2 of 3

11. What is the number of NSX managers that can be deployed in a NSX-T Data Center production environment?

a single NSX Manager and three NSX Controllers

a NSX Management Cluster of three Managers and a NSX Controllers Cluster of three Controllers

a single NSX Management Cluster of three Managers which includes the NSX Controller function

a single NSX Manager and a single NSX Controller

12. In the NSX Manager UI, which tab is selected to manage firewall rules?

Plan & Troubleshoot tab

Security tab

Inventory tab

Networking tab

13. Which file can be used to validate repcli authentication was enabled for Carbon Black Cloud?

C:Program FilesConferrepcii.ini

C:Program FilesConferconfig.ini

C:Program FilesConfercfg.ini

C:Program FilesConfercli.ini

14. Which are two use cases for NSX Intelligence? (Choose two.)

Perform day 2 network operations and troubleshooting.

Provide end-to-end network visibility for physical, virtual, and third-party environments.

Identify security vulnerabilities and automatically quarantine affected workloads.

Gain insight about micro-segmentation traffic flows.

Simplify rule recommendation and deployment.

15. What traffic type is used to create an NSX Transport Zone to connect to the physical infrastructure?

Trunk

Vlan

Underlay

Overlay

16. When creating an NSX-T Data Center Firewall rule to prevent all communication between same scope objects, what must be true of the first firewall rule?

The port will be 443.

The logging would be on.

The source and destination are the same.

The firewall action would be rejected.

17. Which is true about Time-Based Firewall Policy rules?

Time-Based policy rules apply only to the NSX Distributed Firewall.

Time-Based policy rules apply to the NSX Gateway and Distributed Firewall.

Time-Based policy rules can only be used one time for NSX Gateway Firewall.

Time-Based policy rules apply only to the NSX Gateway Firewall.

18. 1.When deploying a Carbon Black Cloud Sensor using GPO, which option is a required setting?

COMPANY_CODE

LICENSE_CODE

CONNECT_LIMIT

AUTO_UPDATE

19. An administrator is updating NSX Distributed Firewall rules. The administrator did the Publish a few minutes ago and is now receiving calls about lost connections. The administrator has decided to roll-back the configuration.

Where can the administrator see past saved configurations to perform the rollback?

Go to System > Distributed Firewall > Configurations > View

Go to Security > Distributed Firewall > ACTIONS > Configurations - View

Go to System > Distributed Firewall > Rolling back > View

Go to Inventory > Distributed Firewall > ACTIONS > Configurations - View

20. Which three options are valid unattended installation options for Carbon Black Cloud Sensors? (Choose three.)

UPDATESOURCE=

GROUP_NAME=

LICENSE_CODE=

COMPANY_CODE=

AUTO_UPDATE=

Page 3 of 3

21. Which three tasks are completed during the installation of NSX-T Data Center Workflow for vSphere? (Choose three.)

install NSX Edges, then create an NSX Edge cluster

create transport zones and set type to Overlay and VLAN; create host transport nodes and standard or enhanced N-VDS/VDS as needed

install the NSX Manager, configure a compute manager, deploy additional NSX Manager nodes to form a cluster

install NSX Tier-0 or Tier-1 gateways, then create an NSX Edge cluster

create transport zones and set type to VXLAN and VLAN; create host transport nodes and standard or enhanced N-VDS/VDS as needed

VMware VCP-SEC 2021 2V0-81.20 Dumps Questions

VMware VCP-SEC 2021 2V0-81.20 Dumps Questions

Share this post

Leave a Reply Cancel reply

Related Posts