Q:

When vRealize Log Insight is implemented in an organization, how can it facilitate the regular
tasks of an administrator who is responsible for log management? (Choose three.)

A:

vRealize Log Insight can analyze huge amount of logs, discover structure in unstructured data,
and deliver enterprise-wide visibility to an administrator using a Web interface.

vRealize Log Insight can provide a comprehensive management stack with a unified
management experience for IT services on vSphere.

vRealize Log Insight can provide consolidated system logging capability to the administrator for
delivering real-time log management in a data center.

vRealize Log Insight can automatically choose the best visualization for the data and provide
administrators a clear view of their infrastructure.

vRealize Log Insight can strategically leverages logs and enable an administrator to identify the
idle or over provisioned virtual machines.

Q:

What are the common log formats that can be parsed at the client side? (Choose three.)

A:

CSV

Syslog

Key/Value Pairs

XML

SQL

Q:

With vRealize Log Insight, you can collect events from Windows event channels and log files, and
forward them to the vRealize Log Insight server using native Windows agents. Which medium does the
native Windows agent use to communicate with vRealize Log Insight and transfer events? (Choose two.)

A:

Over Ingestion API

 Through Syslog

Through NFC

Over PCoIP

Q:

Which feature of vRealize Log Insight is likely to benefit a customer with comprehensive
operations management of the environment?

A:

Addition of structure to all types of unstructured data

Creation of on-the-fly Dashboards

Machine-learning and intelligent grouping

Integration of vRealize Log Insight with other virtualization solutions

Q:

When trying to sell vRealize Log Insight to a potential customer, what are the sales activities that
you should follow to ensure a successful sale? (Choose three.)

A:

Sell on the value of the VMware licensing model versus the competitors pay model

Focus on the capacity planning capabilities provided for the VMware vSphere® environment

Inform the customers about the prerequisites and sizing considerations

Ask customers to use the vRealize Log Insight evaluation guide available on the Log Insight
product page

Highlight that the customers are entitled to 25-OSIs of vRealize Log Insight for vCenter with each
vCenter Standard license that they own.

Q:

What are the potential benefits of client-side event parsers? (Choose three.)

A:

Only parsed data is sent to vRealize Log Insight

Reduce overhead on the server

 Allow tags to be sent from the agent and added as static fields in the vRealize Log Insight index

They remove the need to use the server-side index

It is easy to create dashboards

Q:

How is the dynamic extraction of fields in vRealize log insight helpful for an administrator?
(Choose two.)

A:

He can easily search and filter the list of log events

He can aggregate events in Interactive Analytics itself

He can directly export queries without the need for exporting the event results

He can group query results

Q:

What are the advantages of combining multiple vRealize Log Insight instances with existing
nodes and forming a vRealize Log Insight cluster? (Choose two.)

A:

When one of the nodes in a cluster goes down, data ingestion can still continue with the help of
other node(s).

The additional capacity provided by multiple nodes can be utilized for load balancing the data
ingestion when spikes occur.

Disaster recovery, which is generally a resource intensive operation, can be easily performed.

Logs can be aggregated within a protected network

Q:

How does the implementation of vRealize Log Insight 3 in your environment help you in
performing an upgrade operation of all nodes in a vRealize Log Insight cluster? (Choose two.)

A:

Once the cluster master is upgraded, all worker nodes are simultaneously upgraded.
 Once the cluster master is upgraded, each worker is automatically placed into maintenance
mode and upgraded sequentially.

If a cluster-wide upgrade fails, the nodes are rolled back to their pre-upgraded state.

During the upgrade operation, a new node is configured to perform log analysis.

Q:

In vRealize Log Insight, how can you easily view events in context to other events at the same
time?

A:

By highlighting the event types

By switching to the Event Trends tab

By filtering events of different objects within a specific time range

By grouping event types of a single object

Q:

A vRealize Log Insight user wants to capture the state of the query at a particular point of time
for future reference. How can he do that?

A:

Take a snapshot of the query

Save the query in Dashboard as a widget

Clone the query

Run the same query again

Q:

What are the advantages of using an integrated load balancer (ILB) in a vRealize Log Insight
cluster environment? (Choose two.)

A:

ILB diverts the incoming ingestion traffic among all nodes across L2 and L3 networks.

ILB balances incoming traffic among available vRealize Log Insight nodes.
 ILB balances ingestion and queries across nodes.

ILB supports stateful failover of business-critical applications.

Q:

What are the pre-requisites that should be taken care of before deploying vRealize Log Insight at
the customer site? (Choose two.)

A:

Set a root password for the vRealize Log Insight virtual appliance

Configure a minimum of three nodes in a vRealize Log Insight cluster

Collect the information about the FQDN of VMware vCenter Server® and the administrator

Reserve IP addresses for each virtual appliance to be deployed

Q:

What are the advantages of integrating vRealize Log Insight with vRealize Operations? (Choose
Two.)

A:

You can configure an alert in vRealize Log Insight so that a notification appears in vRealize
Operations Manager.

You can tag the ingested events in vRealize Log Insight with the inventory details of vRealize
Operations and allow access to the vRealize Operations components

You can collect events even from encrypted folders and forward them to the vRealize Log Insight
server.

You can determine new vRealize Operations configurations from within vRealize Log Insight.

Q:

Which of these are key features of VMware vRealize® Log InsightTM? (Choose two.)

A:

Collects and analyzes all types of machine-generated log data

Performs machine learning

Identifies idle or over-provisioned virtual machines

 Provides enhanced security

Q:

Which scenario is addressed by Query High Availability?

A:

Failure of the cluster leader

Ingestion failure when the leader is lost

Load balancing when accessing the user interface

Aggregation of query results across nodes

Q:

What happens when the master node of a vRealize Log Insight cluster fails? (Choose two.)

A:

A new master is automatically elected from among the available worker nodes.

The cluster becomes inaccessible.

All worker nodes own and process the query together.

If the master holds the UI/query leader and ILB roles, an election process is triggered to host the
roles on a new node.

Q:

An organization, currently using a traditional log management tool, is planning to implement

vRealize Log Insight in its environment. What are the benefits that the organization will reap out of this
implementation? (Choose three.)

A:

Faster time-to-value because the IT department can quickly configure vRealize Log Insight and
start receiving insights on log data.

Improved resource management because vRealize Log Insight automatically destroys the
extraneous logs that unnecessarily utilize the storage and network bandwidth.

Higher operational efficiency because the administrators can easily identify the issues with
minimal manual effort.
 Speedy log analysis because vRealize Log Insight quickly receives minimal log files only from a
limited number of devices.

Maximized value in terms of comprehensive operations management because vRealize Log

Insight easily integrates with other virtualization solutions.