1
2V0-41.20 PROFESSIONAL VMWARE NSX-T DATA
CENTER CERTIFY FOR SURE WITH IT EXAM DUMPS
2026-27 JUST RELEASED REAL EXAM STUDY GUIDE
1. Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?
A. set time-server
B. get timezone
C. set ntp-server
D. set timezone
Answer: C
2. An NSX administrator has deployed an NSX Edge on a bare-metal server. Which command registers the
NSX Edge with the NSX Manager?
A. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint
<nsx-manager-thumbprint>
B. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint
<nsx-manager—thumbprint>
C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint
<nsx-manager-thumbprint>
D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint
<nsx-manager-thumbprint>
1
,2
Answer: D
3. An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode.
In the event of node failure, the failover policy should not allow the original failed node to become the Active
node upon recovery.
Which failover policy meets this requirement?
A. Non-Preemptive
B. Preemptive
C. Enable Preemptive
D. Disable Preemptive
Answer: A
4. What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)
2
,3
Certify For Sure with IT Exam Dumps
A. policy-based IPSec VPN
B. Layer-7 based IPSec VPN
C. route-based IPSec VPN
D. Open source based IPSec VPN
E. SSL based IPSec VPN
Answer: A C
5. What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)
A. Segment Port
B. Group
C. Segment
D. DFW
E. Tier-1 Gateway
Answer: B D
6. Which step must be performed before deploying an additional NSX Manager from the NSX-T UI?
A. Prepare the ESXi hosts as Transport Nodes.
B. Configure the Virtual IP of the cluster.
C. Register vCenter Server as a Compute Manager.
D. Create an Edge Cluster.
Answer: C
7. An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.
In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement
configuration has to be done on the Tier-1 Gateway? (Choose two.)
A. Advertise All LB SNAT IP Routes
B. All Static Routes
C. Information
D. Advertise All LB VIP Routes
E. Advertise All NAT Routes
3
, 4
Certify For Sure with IT Exam Dumps
Answer: A D
Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EEBA627A-0860-477A
-9
8. An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment
is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)
A. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.
B. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the
KVM Transport Node.
C. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but
are in Powered Off state.
D. The virtual machines running on the KVM Transport Node are not connected to the VDS.
E. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.
Answer: B E
9. Which two ports are used by a transport node to communicate with the management and control planes
in NSX-T Data Center 3.0? (Choose two.)
A. 5685
B. 1235
C. 5671
D. 5678
E. 1234
Answer: B E
Explanation:
The NSX Manager management plane communicates with the transport nodes by using APH Server over
NSX-RPC/TCP through port 1234. CCP communicates with the transport nodes by using APH Server over
NSX-RPC/TCP through port 1235. Taken from NSX-T ICM 3.0 Lecture manual
4
2V0-41.20 PROFESSIONAL VMWARE NSX-T DATA
CENTER CERTIFY FOR SURE WITH IT EXAM DUMPS
2026-27 JUST RELEASED REAL EXAM STUDY GUIDE
1. Which CLI command on NSX Manager and NSX Edge is used to change NTP settings?
A. set time-server
B. get timezone
C. set ntp-server
D. set timezone
Answer: C
2. An NSX administrator has deployed an NSX Edge on a bare-metal server. Which command registers the
NSX Edge with the NSX Manager?
A. join management-cluster <nsx-cluster-IP> username admin password <admin- password> thumbprint
<nsx-manager-thumbprint>
B. join cluster <nsx-cluster-IP> username root password <root-password> thumbprint
<nsx-manager—thumbprint>
C. join policy-manager <nsx-manager-ip> username root password <root-password> thumbprint
<nsx-manager-thumbprint>
D. join management-plane <nsx-nanager-ip> username admin password <admin-password> thumbprint
<nsx-manager-thumbprint>
1
,2
Answer: D
3. An NSX administrator is creating a Tier-1 Gateway configured in Active-Standby High Availability Mode.
In the event of node failure, the failover policy should not allow the original failed node to become the Active
node upon recovery.
Which failover policy meets this requirement?
A. Non-Preemptive
B. Preemptive
C. Enable Preemptive
D. Disable Preemptive
Answer: A
4. What are two types of supported IPSec VPNs in NSX-T Data Center? (Choose two.)
2
,3
Certify For Sure with IT Exam Dumps
A. policy-based IPSec VPN
B. Layer-7 based IPSec VPN
C. route-based IPSec VPN
D. Open source based IPSec VPN
E. SSL based IPSec VPN
Answer: A C
5. What are two valid options when configuring the scope of a distributed firewall rule? (Choose two.)
A. Segment Port
B. Group
C. Segment
D. DFW
E. Tier-1 Gateway
Answer: B D
6. Which step must be performed before deploying an additional NSX Manager from the NSX-T UI?
A. Prepare the ESXi hosts as Transport Nodes.
B. Configure the Virtual IP of the cluster.
C. Register vCenter Server as a Compute Manager.
D. Create an Edge Cluster.
Answer: C
7. An NSX administrator has configured a load balancer virtual server on a Tier-1 Gateway.
In order to advertise the load balancer virtual IP to the Tier-0 Gateway, which route advertisement
configuration has to be done on the Tier-1 Gateway? (Choose two.)
A. Advertise All LB SNAT IP Routes
B. All Static Routes
C. Information
D. Advertise All LB VIP Routes
E. Advertise All NAT Routes
3
, 4
Certify For Sure with IT Exam Dumps
Answer: A D
Explanation:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-EEBA627A-0860-477A
-9
8. An NSX Administrator has created a segment named WEB-LS from the NSX UI and noticed the segment
is not realized on the KVM Transport node.
What are two possible causes for this issue? (Choose two.)
A. The KVM Transport node has hardware issues and will not realize the WEB-LS Segment.
B. Since the Compute Manager is disconnected in NSX UI, the WEB-LS segment will not be realized on the
KVM Transport Node.
C. The virtual machines running on the KVM Transport Node are connected to the WEB-LS segment, but
are in Powered Off state.
D. The virtual machines running on the KVM Transport Node are not connected to the VDS.
E. The virtual machines running on the KVM Transport Node are not connected to the WEB-LS Segment.
Answer: B E
9. Which two ports are used by a transport node to communicate with the management and control planes
in NSX-T Data Center 3.0? (Choose two.)
A. 5685
B. 1235
C. 5671
D. 5678
E. 1234
Answer: B E
Explanation:
The NSX Manager management plane communicates with the transport nodes by using APH Server over
NSX-RPC/TCP through port 1234. CCP communicates with the transport nodes by using APH Server over
NSX-RPC/TCP through port 1235. Taken from NSX-T ICM 3.0 Lecture manual
4