2V0-41.24 Question 189
Select 3A company has deployed VMware NSX-T Data Center to manage its network infrastructure. The company needs to establish secure communication between two branch offices over the public internet. How does NSX-T leverage IPSec-based technologies to establish VPNs, and which of the following statements accurately describe its usage?
- A
IPSec VPNs in NSX-T use encryption protocols like AES to secure data in transit.
- B
NSX-T supports both policy-based and route-based IPSec VPN configurations.
- C
IPSec VPNs in NSX-T can only be configured through the NSX Manager CLI.
- D
Traffic between branch offices is encapsulated using the IPSec protocol, preventing data interception.
- E
IPSec VPNs in NSX-T cannot be used to establish communication between on-premises data centers and public clouds.
Show answer and explanation
Correct answers: A, B, D
Explanation
NSX-T leverages IPSec-based technologies to establish secure VPN connections by encrypting and encapsulating traffic using protocols like AES and ESP. It supports both policy-based and route-based configurations, offering flexibility for various network designs. These VPNs can be configured using the NSX Manager GUI or API and can connect on-premises data centers, branch offices, and even public clouds. This ensures that IPSec VPNs are versatile and secure for modern hybrid network environments.
- A. Correct.
Correct: IPSec VPNs in NSX-T indeed use encryption protocols like AES to ensure data in transit is protected against unauthorized access.
- B. Correct.
Correct: NSX-T supports both policy-based and route-based VPNs, providing flexibility in how IPSec VPNs are configured based on the organization's needs.
- C. Incorrect.
Incorrect: IPSec VPNs in NSX-T can be configured through both the NSX Manager GUI and API, not just the CLI.
- D. Correct.
Correct: IPSec ensures that traffic is encapsulated and encrypted, preventing data interception or tampering over unsecured networks.
- E. Incorrect.
Incorrect: IPSec VPNs in NSX-T can be used to establish communication between on-premises data centers and public clouds, such as AWS or Azure.