2V0-41.23 Exam Dumps : VMware NSX 4.x Professional

According to the VMware NSX Documentation, these are two of the use cases for Distributed Intrusion Detection, which is a feature of NSX Network Detection and Response:

• Quarantine workloads based on vulnerabilities: You can use Distributed Intrusion Detection to detect vulnerabilities in your workloads and apply quarantine actions to isolate them from the network until they are remediated.
• Identify security vulnerabilities in the workloads: You can use Distributed Intrusion Detection to scan your workloads for known vulnerabilities and generate reports that show the severity, impact, and remediation steps for each vulnerability.

• Security policy recommendations: Are East-West distributed firewall (DFW) security policies in the application category12.
• Security group recommendations: Are VMs or physical servers whose traffic flows were analyzed for the time period and the boundary you had specified12.
• Service recommendations: Are service objects that were used by applications in the VMs or physical servers that you had specified, but the services are not yet defined in the NSX inventory12.

The answer is A. SR is instantiated and automatically connected with DR.

SR stands for Service Router and DR stands for Distributed Router. They are components of the NSX Edge node that provide different functions1

The SR is responsible for providing stateful services such as NAT, firewall, load balancing, VPN, and DHCP. The DR is responsible for providing distributed routing and switching between logical segments and the physical network1

When a stateful service is enabled for the first time on a Tier-0 Gateway, the NSX Edge node automatically creates an SR instance and connects it with the existing DR instance. This allows the stateful service to be applied to the traffic that passes through the SR before reaching the DR2

According to the VMware NSX 4.x Professional Exam Guide, understanding the SR and DR components and their functions is one of the exam objectives3

To learn more about the SR and DR components and how they work on the NSX Edge node, you can refer to the following resources:

• VMware NSX Documentation: NSX Edge Components 1
• VMware NSX 4.x Professional: NSX Edge Architecture
• VMware NSX 4.x Professional: NSX Edge Routing