2V0-41.24 Question 55
Select 4A network administrator is tasked with deploying NSX segments in a multi-tier application environment. The goal is to ensure network isolation between different application tiers (web, application, and database) while maintaining connectivity to shared services such as DNS and Active Directory. Which functions of NSX segments will help achieve this requirement?
- A
Enable logical Layer 2 network segmentation for isolating workloads.
- B
Support the attachment of Virtual Machines (VMs) to provide connectivity to the network.
- C
Automatically configure routing between different segments without additional configuration.
- D
Provide integration with external physical VLANs via VLAN-backed segments.
- E
Enable the use of distributed firewalls for traffic filtering and security at the segment level.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
NSX segments are crucial for creating isolated Layer 2 domains that connect workloads while supporting integration with external VLANs and enabling security through distributed firewalls. These capabilities align with the requirements of multi-tier applications, where workloads must be isolated yet connected to shared services and protected by security policies.
- A. Correct.
Correct: NSX segments provide logical Layer 2 network segmentation, which is essential for isolating workloads such as web, application, and database tiers.
- B. Correct.
Correct: NSX segments allow VMs to connect to the network, enabling communication within and across segments as configured.
- C. Incorrect.
Incorrect: Routing between segments requires additional configuration, such as creating Tier-1/Tier-0 gateways, and is not automatically handled by the segments themselves.
- D. Correct.
Correct: NSX segments can be VLAN-backed, allowing integration with external VLANs, which is useful for connecting to shared services like DNS and Active Directory.
- E. Correct.
Correct: NSX segments support distributed firewalls, enabling granular traffic filtering and security at the segment level.