2V0-41.23 Exam Dumps : VMware NSX 4.x Professional

The answer is A. SR is instantiated and automatically connected with DR.

SR stands for Service Router and DR stands for Distributed Router. They are components of the NSX Edge node that provide different functions1

The SR is responsible for providing stateful services such as NAT, firewall, load balancing, VPN, and DHCP. The DR is responsible for providing distributed routing and switching between logical segments and the physical network1

When a stateful service is enabled for the first time on a Tier-0 Gateway, the NSX Edge node automatically creates an SR instance and connects it with the existing DR instance. This allows the stateful service to be applied to the traffic that passes through the SR before reaching the DR2

According to the VMware NSX 4.x Professional Exam Guide, understanding the SR and DR components and their functions is one of the exam objectives3

To learn more about the SR and DR components and how they work on the NSX Edge node, you can refer to the following resources:

• VMware NSX Documentation: NSX Edge Components 1
• VMware NSX 4.x Professional: NSX Edge Architecture
• VMware NSX 4.x Professional: NSX Edge Routing

According to the VMware NSX Documentation, these are the prerequisites for adding nodes to an NSX Management Cluster using the NSX UI:

• All nodes must be in the same subnet and have IP connectivity with each other.
• A compute manager must be configured and associated with the NSX Manager node.
• The NSX Manager node must have a valid license.
• The NSX Manager node must have a valid certificate.

.

The main components on the edge node for north-south malware prevention perform the following functions:

• IDS/IPS engine: Extracts files and relays events and data to the security hub

North-south malware prevention uses the file extraction features of the IDS/IPS engine that runs on NSX Edge for north-south traffic.

• Security hub: Collects file events, obtains verdicts for known files, sends files for local and cloud-based analysis, and sends information to the security analyzer

• RAPID: Provides local analysis of the file

• ASDS Cache: Caches reputation and verdicts of known files