2V0-41.24 Question 366
Select 3You are tasked with deploying a new Tier-1 gateway to enable North-South connectivity for workloads in a new environment. Additionally, you need to create a segment that will connect to this Tier-1 gateway. The segment must provide connectivity for workloads in the 192.168.10.0/24 subnet, and Network Address Translation (NAT) must be configured to allow external access to these workloads. Which of the following steps must you perform to successfully achieve this configuration?
- A
Create a Tier-1 gateway and configure it to use a Tier-0 gateway for uplink connectivity.
- B
Create a segment connected to the Tier-1 gateway and assign the 192.168.10.0/24 subnet.
- C
Create a NAT rule on the Tier-1 gateway to enable SNAT for outbound traffic from the 192.168.10.0/24 subnet.
- D
Enable DHCP on the segment to dynamically assign IP addresses to workloads in the 192.168.10.0/24 subnet.
- E
Directly connect the segment to a Tier-0 gateway to bypass the Tier-1 gateway.
Show answer and explanation
Correct answers: A, B, C
Explanation
To enable North-South connectivity with NAT for workloads in the 192.168.10.0/24 subnet, you need to first create a Tier-1 gateway connected to a Tier-0 gateway, create a segment mapped to the 192.168.10.0/24 subnet and linked to the Tier-1 gateway, and configure a NAT rule for outbound traffic. This ensures that workloads can access external networks while maintaining proper network segmentation and routing.
- A. Correct.
Correct. A Tier-1 gateway must be created and connected to a Tier-0 gateway to enable North-South connectivity.
- B. Correct.
Correct. A segment must be created and linked to the Tier-1 gateway with the appropriate subnet to allow workload connectivity.
- C. Correct.
Correct. A NAT rule (e.g., SNAT) must be configured on the Tier-1 gateway to allow outbound traffic from the 192.168.10.0/24 subnet to access external networks.
- D. Incorrect.
Incorrect. While DHCP can be used, it is not a mandatory requirement for configuring NAT or connecting the segment to the Tier-1 gateway.
- E. Incorrect.
Incorrect. Segments should connect to a Tier-1 gateway in this scenario to properly route traffic and apply NAT rules. Bypassing the Tier-1 gateway would break the intended design.