2V0-41.24 Question 369
Select 2You are configuring a virtual machine (VM) in your NSX-T Data Center environment. The VM needs internet access but should not be directly exposed to external networks. You decide to attach it to a NAT segment. Which of the following steps is required to successfully attach the VM to the NAT segment?
- A
Create a Layer 2 segment and enable the NAT option during segment creation.
- B
Attach the VM's network interface card (NIC) to the NAT segment.
- C
Configure a NAT rule on the Tier-1 Gateway associated with the NAT segment.
- D
Enable DHCP on the NAT segment to assign an IP address to the VM.
- E
Assign a static IP address to the VM and configure a corresponding NAT rule.
Show answer and explanation
Correct answers: B, C
Explanation
To attach a VM to a NAT segment, the VM's NIC must be connected to the segment so that its traffic can flow through the NAT gateway. Additionally, a NAT rule must be created on the Tier-1 Gateway to define how the VM's traffic will be translated. These steps ensure proper network connectivity and address translation for the VM while maintaining security through NAT.
- A. Incorrect.
Incorrect: A Layer 2 segment does not inherently support NAT functionality. NAT is configured at the Tier-1 Gateway level, not during segment creation.
- B. Correct.
Correct: The VM's NIC must be attached to the NAT segment to route traffic through the NAT gateway.
- C. Correct.
Correct: A NAT rule must be defined on the Tier-1 Gateway associated with the NAT segment to enable address translation for the VM's traffic.
- D. Incorrect.
Incorrect: While DHCP can be used to assign an IP address to the VM, it is not a requirement for attaching the VM to the NAT segment.
- E. Incorrect.
Incorrect: Assigning a static IP address is optional. However, even with a static IP, a corresponding NAT rule must still be defined at the Tier-1 Gateway for address translation.