6V0-21.25試験無料問題集（105題）「VMware vDefend Security for VCF 5.x Administrator 認定」

出題：1

What is the primary objective of implementing lateral protection using the vDefend Distributed Firewall?
Response:

A. To prevent data loss during VM snapshot operations

B. To restrict access to NSX-T Manager via VPN

C. To enforce bandwidth throttling policies

D. To control and restrict east-west traffic between workloads

正解：D 解答を投票する

出題：2

Which three key attributes define a vDefend firewall rule?
(Choose three)
Response:

A. Source

B. Service

C. Uplink Type

D. Log Level

E. Destination

正解：A,B,E 解答を投票する

出題：3

Which scripting or automation platform is commonly used alongside NSX-T for automating vDefend firewall rule deployment?
Response:

A. Hadoop

B. Ansible Playbooks for storage arrays

C. Chef

D. Python with REST API

正解：D 解答を投票する

出題：4

Which three benefits does micro-segmentation offer when implemented with vDefend for lateral protection?
(Choose three)
Response:

A. Enhances compliance by segmenting sensitive environments

B. Limits lateral movement by enforcing workload isolation

C. Requires centralized inspection points

D. Reduces unnecessary resource reservations for firewall appliances

E. Enables fine-grained control at the VM level

正解：B,C,E 解答を投票する

出題：5

Which three types of traffic can be inspected and controlled by vDefend firewall policies in a distributed architecture?
(Choose three)
Response:

A. Management traffic from vCenter

B. Internal application tier traffic

C. North-south traffic to/from external clients

D. East-west inter-VM traffic

E. vMotion traffic between hosts

正解：B,C,D 解答を投票する

出題：6

What is the primary function of VMware's Advanced Threat Prevention (ATP) capabilities in a private cloud environment?
Response:

A. To detect and prevent both known and unknown cyber threats using behavioral analysis and sandboxing

B. To replicate VMs across availability zones for backup

C. To enforce compliance for vSphere hardware compatibility

D. To reduce storage IO latency during high-load operations

正解：A 解答を投票する

出題：7

Which three types of malware can be detected and blocked by NSX Malware Prevention?
(Choose three)
Response:

A. DNS cache corruption

B. Ransomware

C. Data deduplication anomalies

D. Keyloggers

E. Botnet droppers

正解：B,D,E 解答を投票する

出題：8

Which three security features can be enforced using Gateway Firewall policies in NSX?
(Choose three)
Response:

A. NAT and VPN rule enforcement

B. Cluster-level backup operations

C. Stateful packet inspection

D. L2 switching between VMs

E. North-south traffic segmentation

正解：A,C,E 解答を投票する

出題：9

What happens if two firewall rules apply to the same traffic flow within a single section?
Response:

A. The more permissive rule overrides the restrictive one

B. The rule with the longer name takes precedence

C. Both rules are ignored, and traffic is dropped

D. The topmost rule in the section is applied first

正解：D 解答を投票する

出題：10

What distinguishes a context-aware firewall policy from a traditional firewall rule?
Response:

A. It incorporates user identity, device posture, and application context

B. It applies policies at the switch uplink level

C. It uses only static IP ranges for access control

D. It only filters DNS and ICMP traffic

正解：A 解答を投票する

6V0-21.25試験無料問題集「VMware vDefend Security for VCF 5.x Administrator 認定」