2V0-41.24 Question 57
Select 3An organization is deploying VMware NSX in their network environment. They need to create logical Layer 2 networks for their virtual workloads to communicate within the same subnet while being decoupled from the physical network. Additionally, they want to segment traffic for better isolation and apply specific policies to individual workloads. Which of the following functions are provided by NSX segments in this scenario?
- A
Provide logical Layer 2 connectivity for virtual workloads
- B
Enable micro-segmentation by applying security policies to individual workloads
- C
Perform Layer 3 routing between different subnets
- D
Integrate directly with physical network switches for VLAN-based segmentation
- E
Support VLAN tagging for traffic that needs to traverse the physical network
Show answer and explanation
Correct answers: A, B, E
Explanation
NSX segments are key components of VMware NSX, providing logical Layer 2 connectivity, supporting VLAN tagging for integration with physical networks, and enabling micro-segmentation for workload-level security. However, Layer 3 routing is handled by other NSX components, such as Tier-1 and Tier-0 Gateways. NSX segments decouple networking functions from physical infrastructure, offering flexible and scalable software-defined networking solutions.
- A. Correct.
NSX segments create logical Layer 2 networks, allowing virtual workloads to communicate within the same subnet, independent of the underlying physical infrastructure.
- B. Correct.
NSX segments can be used with distributed firewalls to enable micro-segmentation, applying security policies to individual workloads or groups of workloads.
- C. Incorrect.
Layer 3 routing is not a function of NSX segments themselves. Routing is handled by the NSX Tier-1 and Tier-0 Gateways.
- D. Incorrect.
NSX segments are designed for software-defined networking. While they can integrate with physical networks, they do not directly manage VLAN-based segmentation at the physical switch level.
- E. Correct.
NSX segments support VLAN tagging, enabling traffic to traverse the physical network when required.