2V0-41.24 Question 18
Single answerAn organization has deployed VMware NSX in their environment to improve network management and security. The administrator wants to ensure that a consistent security policy is applied across all workloads, regardless of their location in the data center. Which feature of NSX policy and centralized policy management enables this behavior?
- A
Distributed Firewall (DFW)
- B
Group-Based Policy
- C
Global Manager
- D
Context-Aware Micro-Segmentation
Show answer and explanation
Correct answer: B
Explanation
Group-Based Policy is a key feature of NSX policy and centralized policy management, allowing administrators to define policies based on workload groups rather than individual IP addresses or locations. This ensures that workloads dynamically inherit the correct security policies, maintaining consistency regardless of their placement within the data center.
- A. Incorrect.
Distributed Firewall (DFW) provides East-West traffic filtering at the hypervisor level, but it does not inherently provide consistent policy management across all workloads without additional configuration.
- B. Correct.
Group-Based Policy allows administrators to apply security policies to groups of workloads defined by dynamic membership, ensuring consistent policy application across workloads regardless of location.
- C. Incorrect.
Global Manager is used for managing NSX-T environments across multiple sites, but it is not specifically designed for applying consistent security policies within a single site.
- D. Incorrect.
Context-Aware Micro-Segmentation is a feature of NSX that enhances security by analyzing traffic patterns and applying policies, but it does not inherently ensure consistent policy management across all workloads.