2V0-41.24 Question 414
Select 2Your organization recently deployed VMware NSX Intelligence to enhance visibility into network traffic and application dependencies. As part of the implementation, you are tasked with identifying potential security gaps and applying micro-segmentation policies based on observed traffic patterns. Which combination of actions should you take using NSX Intelligence to achieve this goal?
- A
Analyze the application topology map generated by NSX Intelligence to identify communication flows between workloads.
- B
Export the traffic flow data from NSX Intelligence and manually configure firewall rules outside the NSX platform.
- C
Leverage the recommendations provided by NSX Intelligence to create and apply micro-segmentation policies directly within NSX Manager.
- D
Use NSX Intelligence to monitor real-time traffic anomalies and automatically quarantine impacted workloads.
- E
Manually correlate traffic patterns from NSX Intelligence with external third-party logs before implementing security policies.
Show answer and explanation
Correct answers: A, C
Explanation
To effectively use NSX Intelligence for micro-segmentation, you should analyze the application topology map to understand traffic flows and dependencies. Based on this analysis, you can leverage the platform's recommendations to create and enforce policies directly within NSX Manager. These actions ensure efficient and automated policy deployment while minimizing the risk of misconfigurations.
- A. Correct.
NSX Intelligence provides an application topology map that visualizes communication flows between workloads. This is essential for identifying traffic patterns and dependencies before applying micro-segmentation policies.
- B. Incorrect.
Exporting traffic data and manually configuring firewall rules outside the NSX platform is not recommended, as it bypasses the integration and automation capabilities of NSX Intelligence.
- C. Correct.
NSX Intelligence can generate micro-segmentation recommendations based on observed traffic flows, and these can be directly applied within NSX Manager for efficient policy deployment.
- D. Incorrect.
NSX Intelligence does not handle automatic quarantine of workloads; it focuses on visibility, analytics, and policy recommendations.
- E. Incorrect.
While third-party tools can complement NSX Intelligence, manually correlating traffic patterns outside the platform is unnecessary for applying micro-segmentation policies, as NSX Intelligence already provides direct recommendations.