VCP-VCF Administrator 2024 Question 219
Select 3You are tasked with configuring a new application environment in a VMware Cloud Foundation setup. The application requires isolated network segments for front-end and back-end traffic, and routing between these segments needs to be enabled. Additionally, you need to ensure proper logging is configured for troubleshooting purposes. Which steps should you perform to meet these requirements?
- A
Create two segments in VMware NSX, one for the front-end and one for the back-end traffic, and assign appropriate VLAN IDs.
- B
Configure a Tier-0 Gateway in NSX to enable routing between the segments.
- C
Configure a Tier-1 Gateway in NSX and attach the front-end and back-end segments to enable routing between them.
- D
Enable Distributed Firewall (DFW) rules for traffic control between the segments.
- E
Set up Syslog forwarding in NSX to a centralized logging server for monitoring and troubleshooting.
Show answer and explanation
Correct answers: A, C, E
Explanation
To meet the requirements for isolated network segments with routing and ensure proper logging, you need to create the required segments in VMware NSX and configure a Tier-1 Gateway for routing between them. Additionally, setting up Syslog forwarding is crucial for logging and monitoring the NSX environment. A Tier-0 Gateway is not necessary in this scenario since there is no mention of external connectivity, and DFW rules are not explicitly required to meet the given objectives.
- A. Correct.
Correct: To create isolated network segments, you need to define two segments with appropriate VLANs using VMware NSX. This is a fundamental step to meet the application's requirements.
- B. Incorrect.
Incorrect: A Tier-0 Gateway is used for north-south traffic (traffic between the data center and external networks) and is not required for routing between internal segments.
- C. Correct.
Correct: A Tier-1 Gateway is required to enable routing between the front-end and back-end segments within the NSX environment.
- D. Incorrect.
Incorrect: While Distributed Firewall (DFW) rules are useful for traffic control, they are not necessary for basic routing between segments.
- E. Correct.
Correct: Configuring Syslog forwarding ensures that logs from NSX components are sent to a centralized logging server, which is essential for monitoring and troubleshooting.