Administrative and Operational Tasks

VCTA-NV · 100 questions

• A city operator must create the first segments and gateways on a brand-new NSX-T 3.x fabric that has no leftover Advanced objects. How should the operator open NSX to do that work?
• After a county upgrade, leftover Advanced objects still exist on the municipal NSX fabric. The operator needs to inspect those objects in the GUI. What should the operator do?
• County operations staff created some civic segments in Policy mode and others in Manager mode, and membership and rules no longer line up. What GUI practice should they adopt going forward?
• A library operator needs a single glance at overall NSX system, networking, security, and compliance health for the branch data center. Which NSX GUI location should the operator open?
• Public-works needs a new overlay Layer 2 network for water-meter headend VMs on the city's NSX-T fabric. How should the operator create that network in NSX?
• While adding the public-works segment, the operator must choose whether the meter-headend VMs ride an overlay or a VLAN-backed network. Where in the NSX GUI is that choice made?
• Permit-system VMs on a new city segment need a default gateway so they can reach other civic applications. How should the operator give that segment a gateway in the NSX GUI?
• The city needs a departmental southbound router so Parks workloads can have their own tenant gateway. Which NSX GUI path creates that object?
• The new Parks Tier-1 gateway must reach the city's ISP. What should the operator configure on that Tier-1 in the NSX GUI?
• The municipal NOC needs the north-south gateway that will BGP-peer with the city's ISP routers. Which NSX GUI location holds that provider gateway?
• Operators must list the compute VMs that NSX already knows from the city's vCenter compute manager. Which NSX GUI path shows that inventory?
• A Distributed Firewall rule must match every city VM tagged Finance without typing a static IP list. How should the operator build that match in the NSX GUI?
• The city adopted a tagging convention so later groups can collect permit, finance, and clinic workloads. Where should the operator apply those NSX tags?
• Clinic VMs on the same overlay must have east-west allow and deny rules between application tiers. Which NSX GUI area creates those rules?
• Operators are adding web-to-app rules for the city's 311 portal VMs in Policy-mode Distributed Firewall. Which DFW category should hold those application-tier rules?
• A county security draft for clinic micro-segmentation should be saved so reviewers can inspect it before it is published to the fabric. What Policy-mode GUI feature should the operator use?
• The city must restrict north-south access from the 311 portal segment to the internet. Which NSX GUI control applies that gateway-edge restriction?
• Utility-billing VMs need source NAT so they can reach a partner network using a public civic address. Where in the NSX GUI should the operator configure that NAT?
• Three permit-portal web VMs should share one virtual IP for citizen traffic. Which NSX GUI area creates that VIP and its server pool?
• The city needs an IPsec tunnel from the primary civic data center to the backup municipal site. Which NSX GUI path configures that session?
• A test segment for the township clerk lab needs NSX to hand out addresses. How should the operator enable that in the GUI?
• A cloud-facing civic use case needs an NSX DNS zone, which is available only in Policy mode. Which GUI path should the operator use?
• Operators need a reusable set of addresses for TEP or NAT allocations instead of tracking them only in a spreadsheet. Where should that pool live in the NSX GUI?
• An operator must confirm which overlay and VLAN transport zones exist on the municipal fabric. Which NSX GUI path shows that list?
• The county must confirm which ESXi hosts are prepared as NSX transport nodes. Which NSX GUI location shows that host-node status?
• Harborview utility-billing SNAT stopped after an Edge VM reboot. Where in NSX Manager should the operator check that Edge appliance's transport-node status?
• County finance needs to confirm which Edge VMs form the HA pair that serves tax-portal NAT. Where in NSX Manager does the operator inspect Edge cluster membership?
• A township must document the teaming and MTU its ESXi hosts use for NSX uplinks before a ToR change. Where in NSX Manager does the operator open the uplink profile those hosts use?
• The library consortium stood up a second vCenter for a new branch cluster, but NSX still shows none of those hosts. Where in NSX Manager does the operator register that vCenter as a compute manager?
• After a parks-and-rec ESXi host dropped from the fabric, the operator needs NSX's own alarm list rather than only a vSphere host alarm. Where should they look in the NSX GUI?
• Municipal-court auditors complain that idle NSX Manager browser sessions stay open too long. Which GUI location changes the UI session timeout rather than a data-path firewall rule?
• Public-works cannot open an NSX feature the vendor said is licensed, and the GUI shows a license restriction. Where does the operator apply or inspect NSX license keys?
• Before a wastewater change weekend, operations must back up NSX Manager configuration to the city's SFTP server. Which NSX GUI page is the NSX configuration backup, not a vCenter VM backup?
• City 311 helpdesk must view NSX objects without changing policy. Where in NSX Manager does the operator assign a read-only (auditor) role rather than relying on vSphere permissions alone?
• A clerk VM cannot reach a tax VM on the overlay, and the operator must inject a synthetic packet and watch where NSX delivers or drops it. Which NSX GUI tool does that?
• Building-permits security wants a SPAN-like copy of a segment's traffic sent to the city's packet-analyzer VM. Which NSX GUI feature is the NSX method, not a physical ToR SPAN?
• A new permitting operator needs the object named permits-prod quickly and does not know which menu owns it. What NSX Manager control locates objects by name across the inventory?
• A GIS operator who learned NSX-V terms cannot find a logical switch for the mapping-app network that was created in Policy mode. How should they use the NSX GUI?
• Water-SCADA routing was created years ago as a Manager-mode logical router. The Policy-mode gateway list does not show it. What should the operator do in the NSX GUI?
• City-hall change control wants NSX Manager appliances kept off Distributed Firewall enforcement so a new default-deny cannot lock operators out of the GUI. Where is that exclusion list?
• The public library must allow guest-segment internet only during open hours and deny it overnight, using NSX rather than a physical after-hours ACL. Where does the operator set that schedule?
• Permitting wants a Distributed Firewall rule that matches HTTP as an application, not only TCP/80, on the civic-web group. Where in Policy-mode NSX Manager is that L7 match defined and then used?
• HR wants Distributed Firewall rules that use Active Directory groups for city staff rather than only IP sets. Which NSX GUI path enables that identity-based control?
• Airport IT must inspect citizen HTTPS that enters the permitting Tier-0 from the internet, not east-west traffic between two overlay VMs. Which Security submenu matches that north-south goal?
• Public-health added Distributed Firewall rules for a new clinic segment, but the VMs still follow the old policy. What GUI action realizes those new rules?
• Courts IT created a new overlay segment and must confirm NSX realized it on the transport nodes before attaching VMs. Where in the NSX GUI is that realized status?
• Wastewater must keep a physical ToR VLAN for a lab-instrument network and still attach VMs in NSX. How should the operator create that network in the GUI?
• The municipal ISP handoff is a VLAN on the Edge uplinks. Where does the operator attach the county Tier-0 to that VLAN toward the ISP?
• County north-south routing must run Active-Active or Active-Standby on the shared internet Tier-0. At associate GUI depth, where is that HA mode selected rather than BGP neighbor stanzas?
• Permitting's Tier-1 must perform SNAT for department VMs, but NAT is unavailable until centralized services have an Edge. What GUI step enables those T1 services?
• Harborview's NSX operator must collect an NSX Manager support bundle for Broadcom Support after a civic outage ticket, not a vSphere host log dump. Which GUI path generates that NSX bundle?
• County GIS operators keep losing the Policy and Manager mode buttons after they collapse the NSX Manager chrome. Where should they make those buttons always visible?
• The city auditor wants a glance at NSX compliance widgets without opening every security policy. Which GUI area shows those compliance dashboard widgets?
• Permitting staff ask which Distributed Firewall policies currently apply to the license-application VM. How should the operator find that in the NSX GUI?
• Parks needs a reusable Layer-4 object for the municipal recreation portal on TCP 8443 so Distributed Firewall rules can name the service instead of typing the port each time. Where is that object created?
• Two city NSX environments must reuse a Distributed Firewall draft from staging in production. Which GUI action imports that draft?
• Transit wants Distributed IDS/IPS turned on for the fare-collection overlay, not a new Distributed Firewall allow list and not signature-tuning design. Where does the operator open that in NSX Manager?
• The city licensed NSX Endpoint Protection for guest introspection on library kiosk VMs. Which NSX Manager family is the GUI for that Policy-mode feature?
• Water treatment wants east-west traffic redirected to a partner inspection SVM (network introspection), not merely allowed by a Distributed Firewall rule. Which GUI family hosts that redirection rule?
• The municipal SOC collector must receive NSX IPFIX records for overlay and firewall flow visibility. Where does the operator enable NSX IPFIX rather than vCenter NetFlow?
• After a weekend power test, public-works needs to confirm all three NSX Manager nodes are still in the cluster. Which page shows that appliance cluster status?
• County cluster Courts-Compute must receive the same NSX host-switch settings as the other prepared clusters. Which GUI objects apply that profile without a VCP host-prep CLI lab?
• GIS wants to see which host switch (N-VDS or VDS) each ESXi transport node is using for the civic overlay. Where is that visible in NSX Manager?
• Auditors require a legal login banner on NSX Manager before civic operators authenticate. Where is that banner set?
• The NOC must check whether city Edge uplinks on the north-south Tier-0 are up after a municipal fiber cut. Which NSX GUI shows that Edge or Tier-0 interface status?
• Township ops need a reusable QoS, Spoof Guard, or IP Discovery profile to attach to civic segments. Where are those profiles created?
• County finance requires Spoof Guard on the treasury overlay so VMs cannot spoof MAC or IP addresses. How is that enabled in the NSX GUI?
• A DHCP-heavy public-health test LAN is missing discovered IPs in NSX groups. Which setting should the operator adjust in the NSX GUI?
• After the operator created a new permits overlay segment in NSX Manager, the building-permit VM still sits on an old VLAN port group. Which GUI actually moves the vNIC onto that NSX segment?
• After creating the library overlay segment in NSX Manager, operators must confirm it appeared for vSphere admins. What should they expect in vCenter?
• A junior civic operator needs the NSX REST API reference hosted on the appliance, not to write production REST. Where is that documentation or explorer?
• Courts need every Distributed Firewall rule that references the group grp-case-mgmt. How does the operator find them quickly in the NSX GUI?
• Parks already has a working Tier-1; Recreation needs a similar departmental gateway for a new agency environment. Which GUI achieves that without buying a hardware router?
• The city's isolated lab must turn Distributed Firewall off globally during a messy packet-reproduction test. Where is that enable/disable control?
• Council staff want a picture of how the city Tier-0, agency Tier-1s, and segments connect. Which NSX GUI shows that topology?
• Harborview's NOC must add BGP neighbors so the city's north-south Tier-0 can peer with the ISP. Which NSX GUI location is the NSX-side place to do that work?
• A county parks operator opens Load Balancing and finds the feature greyed out on the civic NSX fabric. How should the operator use the NSX GUI to check license enforcement?
• A township wants a junior civic operator to work in NSX without full administrative power. How should the administrator assign least privilege in the NSX GUI?
• City staff must log in to NSX Manager with Active Directory accounts instead of local users. Which NSX GUI location configures that directory-based login?
• After a city PKI rotation, the library must replace the certificate presented by the NSX Manager web UI. Which NSX GUI location holds that certificate?
• Water-utility operators see skewed NSX logs and certificate warnings after a power event. Where in the NSX GUI do they set time and NTP on the Manager appliance?
• Parks operators need to know which Edge node is currently active for a stateful Tier-1 gateway. Which NSX GUI view shows that HA locality?
• The clerk's office has a physical queue printer that must share L2 with an NSX segment. How should the operator use the NSX GUI to create that bridge-backed connection?
• Permit-system operators need to see which VMs and vNICs are attached to a civic segment and whether those ports are up. Which NSX GUI view shows that?
• A 311 operator needs to jump from the 311 web VM to its related NICs, segments, and groups. Which NSX GUI path is the fastest?
• Auditors asked the county for an inventory of NSX grouping objects used on civic workloads. Which NSX GUI page lists or exports those groups?
• Civic helpdesk staff should watch NSX health but must not prepare hosts or change Fabric. How should they use the NSX GUI?
• A municipal operator toggles Policy and Manager in the NSX Manager UI while working a mixed civic fabric. What does that GUI switch change?
• After a county operator creates a transport zone and Edge in System or Manager mode, the Policy Networking menu still omits those objects. What should the operator do in the NSX GUI?
• A library technician bookmarks the NSX graphical user interface for daily civic operations. Which URL is the NSX GUI?
• A clinic change window must power off a records VM and tighten its Distributed Firewall rules. How should the operator use GUIs to achieve both goals?
• Transit operators believe a civic web VM is dropping packets because of Distributed Firewall. Which NSX GUI tool should they use to see that drop?
• Courts need a group that includes the physical badge system's IP addresses so Distributed Firewall can reference that mixed civic system. Where is that group created?
• Security operators must apply a Distributed Firewall policy only to the courts VM group, not to the entire civic data center. Which DFW GUI field scopes that policy?
• After a public-safety drill, operators want Emergency Distributed Firewall rules to stay evaluated before Application rules. How should they use the NSX GUI?
• GIS operators must save a health-check monitor for a load-balancer pool that fronts civic map servers. Which NSX GUI area holds that object?
• A township operator cannot turn on a VPN service because the control is greyed out while the UI is in Manager mode. How should the operator use the NSX GUI to reach that service?
• Operators must configure Bridge Firewall on a civic segment that bridges a physical records VLAN. Which NSX GUI mode contains that feature?
• Harborview is told that a future NSX Federation (Global Manager) might join the civic fabric, so all GUI work must stay Federation-ready. How should operators use the NSX GUI today?
• Civic leadership wants a single screenshot of system, networking, and security health before a council briefing. Which NSX GUI page should the operator capture?