QUESTION 44
Which three threat types can be detected by NSX Distributed IDPS?
(Choose three)
Response:

QUESTION 45
What of the following is true regarding Distributed Firewall logging?

QUESTION 46
A security administrator suspects that a service insertion policy is not working as expected. Which NSX Manager feature can be used to validate the health status of the associated service instance?
Response:

QUESTION 47
Which component is responsible for defining the security policy in a software-defined firewall architecture?
Response:

QUESTION 48
Which component plays a key role in enforcing distributed firewall policies across hypervisors in a private cloud environment?
Response:

QUESTION 49
Which two capabilities are provided by the Advanced Threat Prevention module in NSX?
(Choose two)
Response:

QUESTION 50
Distributed IDS cannot be implemented on which of the following?

QUESTION 51
Which rule type is most suitable for controlling lateral movement between VMs in a specific security group?
Response:

QUESTION 52
Which component allows administrators to view intrusion detection alerts and threat severity in NSX?
Response:

QUESTION 53
Which statement best describes the vDefend firewall’s distributed architecture?
Response:

QUESTION 54
In the context of Role-Based access control which of the following is NOT a built-in vDefend Role?

QUESTION 55
Which two strategies enhance container workload protection using vDefend Firewall?
(Choose two)
Response:

QUESTION 56
Which following roles are pre-configured in roles and cannot be modified? (Select all that apply)

QUESTION 57
Which two actions should administrators take after receiving a malware detection alert in NSX?
(Choose two)
Response:

QUESTION 58
Which of the following API actions are not valid?

QUESTION 59
Which inspection method is used by NSX Malware Prevention to identify zero-day threats?
Response:

QUESTION 60
Which of the following does the Applied To field impact?

QUESTION 61
What features does NSX Live Traffic Analysis tool provide? (Select all that apply)

QUESTION 62
What file types can vDefend Gateway Malware Detection analyze?
(Select all that apply)
Response:

QUESTION 63
Which one of the following are the ICMP Timer Variables that can be customized within the vDefend Distributed Firewall?

QUESTION 64
What is the primary objective of implementing lateral protection using the vDefend Distributed Firewall?
Response:

QUESTION 65
If you want to run Gateway IDS/IPS, what is the minimum Edge Form Factor size supported to run this feature?

QUESTION 66
What three components feed their events into NDR?