2V0-41.24 Question 54
Single answerAn organization has deployed VMware NSX-T Data Center in their environment. The network administrator wants to segment traffic between different tenants while ensuring that workloads can communicate within their respective segments. Which feature of NSX-T logical switching can be used to achieve this?
- A
VLAN-backed segments
- B
Overlay-backed segments
- C
Distributed Firewall
- D
Transport Zones
Show answer and explanation
Correct answer: B
Explanation
Overlay-backed segments in NSX-T are used to create isolated logical networks that segment traffic between tenants while allowing communication within each segment. This is achieved using encapsulation technologies such as GENEVE, which operate independently of the physical network constraints. This makes overlay-backed segments the ideal choice for tenant segmentation in modern SDN environments.
- A. Incorrect.
VLAN-backed segments are used to connect workloads to traditional VLANs but are not ideal for tenant segmentation in overlay-based environments as they are limited by VLAN scale.
- B. Correct.
Overlay-backed segments allow traffic segmentation by creating isolated logical networks over the physical infrastructure, providing scalability and tenant isolation.
- C. Incorrect.
The Distributed Firewall provides security policies for micro-segmentation, but it does not handle the logical segmentation of traffic between tenants.
- D. Incorrect.
Transport Zones define the scope of logical switches and transport nodes but do not directly segment tenant traffic.