2V0-41.24 Question 184
Select 3An organization is deploying a VMware NSX environment and needs to configure DNS resolution for workloads in a private network. They decide to use the NSX DNS forwarder service for this purpose. Which of the following steps are required to correctly configure and use the DNS forwarder service in NSX?
- A
Create a DNS forwarding zone and specify the upstream DNS servers.
- B
Attach the DNS forwarder service to a Tier-0 gateway for external DNS resolution.
- C
Configure the DNS forwarder service in the NSX Edge appliance.
- D
Add DNS forwarding rules to map specific domain names to IP addresses.
- E
Ensure that workloads use the DNS forwarder service's IP address as their DNS server.
Show answer and explanation
Correct answers: A, C, E
Explanation
To use the NSX DNS forwarder service, you must configure a DNS forwarding zone and specify upstream DNS servers to handle queries. The service itself is configured on an NSX Edge appliance. Workloads must point to the DNS forwarder's IP address as their DNS server to route their DNS queries appropriately. Attaching the service to a Tier-0 gateway or adding specific forwarding rules is not part of the standard configuration process.
- A. Correct.
Correct: Configuring a DNS forwarding zone and specifying upstream DNS servers is a necessary step to enable the DNS forwarder service to resolve DNS queries.
- B. Incorrect.
Incorrect: The DNS forwarder service is typically associated with a Tier-1 gateway in NSX, not a Tier-0 gateway. Tier-0 is used for external connectivity, but DNS forwarding is configured at Tier-1.
- C. Correct.
Correct: The DNS forwarder service must be configured on the NSX Edge appliance, as it provides the actual DNS forwarding functionality.
- D. Incorrect.
Incorrect: Adding DNS forwarding rules to map specific domain names to IP addresses is not a required step. The DNS forwarder service forwards queries to upstream DNS servers for resolution.
- E. Correct.
Correct: For workloads to use the DNS forwarder service, they must be configured to point to the service's IP address as their DNS server.