2V0-41.24 Question 259
Select 2An organization has deployed VMware NSX Federation to manage multiple NSX-T Data Center environments across different sites. As part of securing the Federation architecture, the administrator is tasked with understanding the security components involved. Which components are responsible for ensuring secure communication and authentication between the Global Manager and Local Manager instances?
- A
Certificate-based authentication
- B
Global Manager Transport Node
- C
IPsec tunnels between sites
- D
Role-Based Access Control (RBAC)
- E
Secure Token Service (STS)
Show answer and explanation
Correct answers: A, E
Explanation
In NSX Federation, secure communication and authentication between the Global Manager and Local Manager instances are ensured by certificate-based authentication and the Secure Token Service (STS). These components work together to provide cryptographic security and authentication, ensuring that only trusted systems interact within the Federation architecture.
- A. Correct.
Certificate-based authentication is a key security component in NSX Federation. It ensures that communication between the Global Manager and Local Manager is secure and authenticated.
- B. Incorrect.
Global Manager Transport Nodes are not a security component but rather entities responsible for forwarding traffic in the NSX environment. They do not handle authentication or secure communication.
- C. Incorrect.
IPsec tunnels are used for encrypting traffic between sites but are not directly responsible for securing communication between Federation components like the Global Manager and Local Manager.
- D. Incorrect.
Role-Based Access Control (RBAC) defines user access and permissions but does not handle communication security between the Global Manager and Local Manager.
- E. Correct.
Secure Token Service (STS) is part of the authentication mechanism in NSX Federation, allowing for secure token-based communication and authentication between components.