VMware 5V0-41.21 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 5V0-41.21
Exam Name/Title: VMware NSX-T Data Center 3.1 Security
Certification Provider: VMware
Corresponding Certification: VMware NSX-T Data Center Security Skills 2023

Exam Questions: 72
Updated On: Jul 25, 2026

Question #1

Which two statements are true about NSX Intelligence? (Choose two.)

A. NSX Intelligence supports planning of NSX-T Edge Firewall rules and policy.

B. NSX Intelligence can help to visualize network physical infrastructure.

C. NSX Intelligence can be used in conjunction with vRealize Network Insight.

D. NSX Intelligence assists to build service insertion with Partner SVM.

E. NSX Intelligence supports planning of distributed firewall rules and policy.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #2

A company's CTO has requested that all logging should be enabled for all NSX-T Data Center Distributed Firewall rules. What should be considered prior to executing this request?

A. Once logging is enabled for all rules it cannot be disabled afterwards.

B. Large amounts of log information can fill up the vSphere Server database.

C. Large amounts of log information will likely affect performance.

D. Logging can only be enabled for sections and not for single rules.

Discussion 0

Correct Answer: B Vote an answer

Question #3

Refer to the exhibit.

An administrator configured a firewall rule on their Edge Gateway to allow access to web servers.
What is missing in the Gateway Firewall policy to have the firewall rule applied?

A. Firewall rule needs to be enabled.

B. Firewall rule needs to be published

C. Firewall service needs to be enabled on gateway.

D. Firewall rule needs to be moved to Default category.

Discussion 0

Correct Answer: D Vote an answer

Question #4

What is an unprotected traffic flow in NSX Intelligence?

A. A traffic flow that matches an allow rule more granular than the default.

B. A traffic flow that matches a reject rule more granular than the default.

C. A traffic flow that matches the default distributed firewall rule.

D. A traffic flow that matches a drop rule more granular than the default.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #5

An organization is using VMware Identity Manager (vIDM) to authenticate NSX-T Data Center users Which two selections are prerequisites before configuring the service? (Choose two.)

A. Validate vIDM functionality

B. Configure vIDM Integration

C. Time Synchronization

D. Certificate Thumbprint from vIDM

E. Assign a role to users

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #6

Where is a partner security virtual machine (Partner SVM) deployed to process the redirected North-South traffic in an efficient manner?

A. Deployed close to the VMware vCenter Server.

B. Deployed close to the NSX Edge nodes.

C. Deployed close to the Partner Manager.

D. Deployed close to the compute nodes.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #7

A Security Administrator needs to update their NSX Distributed IDS/IPS policy to detect new attacks with critical CVSS scoring that leads to credential theft from targeted systems.
Which actions should you take?

A. * Create a new profile from Security > Distributed IDS > Profiles
* Select Critical severity, filter on attack type and select Successful Credential Theft Detected
* Check the profile is applied In Distributed IDS rules
* Monitor Distributed IDS alerts to validate changes are applied

B. * Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules
* Filter on attack type and select Successful Credential Theft Detected
* Update Mode to detect and prevent
* Click on gear icon and change direction to OUT

C. * Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules
* Filter on attack type and select Successful Credential Theft Detected
* Update Mode to detect and prevent
* Click on gear icon and change direction to IN-OUT

D. * Update Distributed IDS/IPS signature database
* Edit your profile from Security > Distributed IDS > Profiles
* Select Critical severity, filter on attack type and select Successful Credential Theft Detected
* Check the profile is applied in Distributed IDS rules

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #8

Which is the port number used by transport nodes to export firewall statistics to NSX Manager?

A. 4789

B. 1234

C. 1235

D. 6081

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free VMware 5V0-41.21 Demo

Simply submit your e-mail address below to get started with our free demo of your VMware 5V0-41.21 exam.