VMware 2V0-641 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 2V0-641
Exam Name/Title: VMware Certified Professional 6 - Network Virtualization
Certification Provider: VMware
Corresponding Certification: VCP6-NV

Exam Questions: 110
Updated On: Oct 14, 2026

Question #19

Which two statements are true regarding Layer 2 VPNs? (Choose two.)

A. Layer 2 VPNs are used to securely extend Ethernet segments over an untrusted medium.

B. The NSX Edge Service Gateway can form a Layer 2 VPN with a standards-compliant physical appliance.

C. Layer 2 VPNs require the two VPN endpoints be in the same Layer 2 segment.

D. The Distributed Router can form a Layer 2 VPN to another Distributed Router or NSX Edge Service Gateway.

Discussion 0

Correct Answer: A,B Vote an answer

Question #20

Which Virtual Machine cannot be protected by the Distributed Firewall?

A. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.1 host.

B. A Virtual Machine connected to a vSS Portgroup running on an ESXi 5.5 host.

C. A Virtual Machine connected to a logical switch running on an ESXi 5.1 host.

D. A Virtual Machine connected to a vDS Portgroup running on an ESXi 5.5 host.

Discussion 0

Correct Answer: C Vote an answer

Question #21

What are two valid methods of configuring virtual machines to use a vSphere Distributed Switch (vDS) that are currently using a vSphere Standard Switch (vSS)? (Choose two.)

A. Select each virtual machine and edit the virtual network adapter's connection settings.

B. Select each virtual machine and drag it to the vSphere Distributed Switch.

C. Select the vSS in use by the virtual machines and select the Move to option on the right-click menu.

D. Use the Migrate Virtual Machine Networking option from the right-click menu of the vDS.

Discussion 0

Correct Answer: A,D Vote an answer

Question #22

Which is not a prerequisite to upgrade vCloud Network and Security Virtual Wires to Logical Switches?

A. vCloud Network and Security Manager has been upgraded to NSX Manager.

B. NSX Controllers have been deployed.

C. The NSX Manager has been configured with the same IP as the vCloud Network and Security Manager.

D. vShield Data Security has been uninstalled.

Discussion 0

Correct Answer: B Vote an answer

Question #23

You want to use an existing NSX Manager to extend logical networks to the ESXi hosts of a new cluster.
What should you do?

A. On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for the new cluster.

B. On the Installation > Management page of the Networking & Security section of the vSphere Web Client, click the green plus sign to deploy a new NSX controller node to the new cluster.

C. On the Installation > Host Preparation page of the Networking & Security section of the vSphere Web Client, click the Install link for each of the new hosts.

D. On the Installation > Logical Network Preparation page of the Networking & Security section of the vSphere Web Client, create a new Transport Zone for the new cluster.

Discussion 0

Correct Answer: A Vote an answer

Question #24

Which action is not an option for adding Virtual Machines to a Security Group?

A. Selecting objects to include within a Security Group.

B. Adding Virtual Machines to a Security Policy and associating it with a Security Group.

C. Defining Dynamic Membership in the Security Group.

D. Adding Virtual Machines to a Security Group and nesting it within another Security Group.

Discussion 0

Correct Answer: B Vote an answer

Question #25

-- Exhibit --- Exhibit -

An NSX administrator creates the NSX network in the exhibit.
What destination IP address will Host-A use when sending a VXLAN frame to Host-B?

A. The IP address Host-B provided to Host-A during VXLAN tunnel setup negotiations.

B. The IP address of Host-B's NSX Controller. The NSX Controller forwards the VXLAN frame to Host-B.

C. The IP address of Host-B's management vmkernel port, which is also the VTEP IP address.

D. The IP address of one of Host-B's new vmkernel ports created during host configuration.

Discussion 0

Correct Answer: D Vote an answer

Question #26

Which is not a valid Destination option for a General Logical Firewall rule?

A. MAC Set

B. Network

C. Datacenter

D. Virtual App

Discussion 0

Correct Answer: A Vote an answer

Question #27

-- Exhibit -

-- Exhibit -
An administrator is testing connectivity between two ESXi hosts and uses the ping utility, as shown in the Exhibit.
Based on the results shown in the exhibit, which statement is correct?

A. The hosts are in separate subnets.

B. A logical router has not been deployed and configured.

C. The MTU size is too small.

D. Communication between the hosts is working correctly.

Discussion 0

Correct Answer: C Vote an answer

Download Free VMware 2V0-641 Demo

Simply submit your e-mail address below to get started with our free demo of your VMware 2V0-641 exam.