2V0-41.24 Question 255
Select 3An organization has deployed an NSX Federation to manage multiple sites globally. Security teams are concerned about ensuring consistent security policies across all sites while maintaining compliance with local regulations. Which of the following are valid security use cases for NSX Federation?
- A
Centralized enforcement of firewall rules across all sites to ensure uniform security policies.
- B
Creation of site-specific security policies to address unique compliance or regulatory requirements.
- C
Replication of security events and logs between sites to ensure centralized monitoring and incident response.
- D
Disabling security enforcement in smaller sites to minimize resource usage.
- E
Enforcing security policies only at the primary site and leaving secondary sites unmanaged.
Show answer and explanation
Correct answers: A, B, C
Explanation
NSX Federation provides centralized management and enforcement of security policies across multiple sites while allowing for site-specific configurations to meet local regulatory requirements. It also ensures that security events and logs can be replicated for centralized monitoring. These capabilities help maintain a strong and consistent security posture across a distributed environment.
- A. Correct.
Centralized enforcement of firewall rules is a key feature of NSX Federation, allowing security policies to be consistently applied across all sites.
- B. Correct.
NSX Federation allows the creation of site-specific security policies, which can accommodate compliance with region-specific regulations or requirements.
- C. Correct.
Replication of security events and logs is a valid use case for NSX Federation, enabling centralized monitoring and faster incident response across geographically dispersed sites.
- D. Incorrect.
Disabling security enforcement compromises the security posture of a site and is not a recommended practice in a federated NSX deployment.
- E. Incorrect.
Enforcing security policies only at the primary site and leaving secondary sites unmanaged goes against the principles of NSX Federation, which aims to provide consistent and comprehensive security across all sites.