2V0-41.24 Question 283
Select 3An organization is deploying a new NSX-T Data Center environment to support multiple tenant applications. As part of the configuration, the administrator needs to create segments to enable East-West traffic among VMs within each tenant while isolating traffic between tenants. Which segment configuration steps should the administrator perform to achieve this requirement?
- A
Create a separate segment for each tenant.
- B
Configure each segment with a unique VLAN ID.
- C
Associate each segment with a dedicated Tier-1 Gateway.
- D
Enable the 'Admin State' setting for all segments.
- E
Apply a single VLAN ID to all segments to simplify configuration.
Show answer and explanation
Correct answers: A, C, D
Explanation
To meet the organization's requirement of enabling East-West traffic within tenants while isolating traffic between tenants, the administrator must create separate segments for each tenant, associate them with dedicated Tier-1 Gateways, and ensure that the segments are active ('Admin State' enabled). Using VLAN IDs is optional in NSX-T's overlay networking unless VLAN-backed segments are specifically required. Applying a single VLAN ID to all segments would compromise tenant isolation and is not a valid configuration.
- A. Correct.
This is correct. Creating a separate segment for each tenant ensures traffic isolation between tenants, meeting the requirement for traffic segregation.
- B. Incorrect.
This is incorrect. While VLANs are used in traditional networking for segmentation, NSX-T segments operate at the overlay level. VLAN IDs are not mandatory for segment creation in this context unless VLAN-backed segments are specifically required.
- C. Correct.
This is correct. Associating each segment with a dedicated Tier-1 Gateway ensures that East-West traffic flows within the tenant's logical topology, while maintaining isolation from other tenants.
- D. Correct.
This is correct. Enabling the 'Admin State' ensures that the segments are activated and ready for use by the tenant's VMs.
- E. Incorrect.
This is incorrect. Applying a single VLAN ID to all segments would merge traffic across tenants, violating the isolation requirement and contradicting the scenario's goal.