2V0-41.24 Question 40
Select 2An administrator is designing a VMware NSX-T Data Center environment for a multi-tenant data center. The tenants must be isolated from each other, and the administrator wants to ensure that specific workloads can communicate only within their respective tenant network. Which component(s) should the administrator configure to achieve this?
- A
Create separate Transport Zones for each tenant to isolate their respective data plane traffic.
- B
Configure Transport Nodes to belong to multiple Transport Zones for overlapping tenant communication.
- C
Utilize a Virtual Distributed Switch (VDS) for tenant-specific networking to provide Layer 2 connectivity.
- D
Deploy separate N-VDS instances for each tenant to ensure isolation.
- E
Assign unique overlay segment IDs to tenant workloads within a shared Transport Zone.
Show answer and explanation
Correct answers: A, D
Explanation
In NSX-T, Transport Zones define the scope of data plane traffic, and separate Transport Zones can be used to isolate traffic between tenants. Additionally, deploying separate N-VDS instances for each tenant ensures both physical and logical isolation, which is crucial in a multi-tenant environment. These two approaches together effectively meet the design requirements for tenant isolation.
- A. Correct.
Creating separate Transport Zones for each tenant ensures complete isolation of tenant data plane traffic and is a recommended approach for multi-tenancy in NSX-T.
- B. Incorrect.
Transport Nodes can belong to multiple Transport Zones, but this approach would not ensure isolation between tenants, as overlapping configurations could lead to unintended communication.
- C. Incorrect.
A Virtual Distributed Switch (VDS) is used for vSphere networking but does not provide tenant isolation in NSX-T. NSX-T uses N-VDS or VDS for its data plane, but tenant isolation is achieved through other mechanisms.
- D. Correct.
Deploying separate N-VDS instances for each tenant ensures physical and logical separation, which aligns with the requirement for tenant isolation.
- E. Incorrect.
Assigning unique overlay segment IDs within a shared Transport Zone can help with traffic separation, but it does not provide the same level of isolation as separate Transport Zones or N-VDS instances.