2V0-41.24 Question 258
Select 3An organization is deploying NSX Federation to manage multiple NSX-T instances across different locations. To ensure secure communication between the Global Manager and the Local Managers, what security components must be implemented?
- A
Certificate-based authentication between Global Manager and Local Managers
- B
Federation-specific firewall rules to block all inter-site traffic
- C
Inter-site NSX-T Manager cluster encryption
- D
Secure channels using Transport Layer Security (TLS)
- E
Role-Based Access Control (RBAC) for Federation entities
Show answer and explanation
Correct answers: A, D, E
Explanation
In NSX Federation, secure communication between the Global Manager and Local Managers is critical to maintaining the integrity of the deployment. This is achieved through certificate-based authentication, TLS for secure communication channels, and RBAC to enforce access control. These components work together to ensure that only authorized systems and users can interact with the Federation, while communication remains encrypted and trusted.
- A. Correct.
Certificate-based authentication is a key security component in NSX Federation. It ensures that the Global Manager and Local Managers trust each other and communicate securely.
- B. Incorrect.
Blocking all inter-site traffic would prevent the necessary communication between Federation components, making this option incorrect.
- C. Incorrect.
While NSX-T Manager cluster encryption is important for securing internal cluster communication, it is not a Federation-specific security component.
- D. Correct.
TLS is used to establish secure channels for communication between the Global Manager and Local Managers, making this an essential security component.
- E. Correct.
RBAC is a critical component to enforce granular access control for Federation entities, ensuring that only authorized users and systems can perform specific actions within the Federation.