VCP-VCF Administrator 2024 Question 220
Select 3You are an administrator tasked with creating a new network segment in VMware NSX for a multi-tier application that requires both intra-tier communication and external connectivity. After creating the segment, you need to ensure routing is configured to allow communication between tiers and enable external access. Additionally, you want to enable logging for troubleshooting purposes. Which of the following steps must you perform to achieve this?
- A
Create a Tier-1 Gateway and attach the new segment to it.
- B
Enable logging for the NSX Manager using the built-in syslog server.
- C
Configure a Tier-0 Gateway and establish a peering connection with the Tier-1 Gateway.
- D
Enable route redistribution between the Tier-0 Gateway and Tier-1 Gateway.
- E
Attach the segment directly to the Tier-0 Gateway for external access.
Show answer and explanation
Correct answers: A, C, D
Explanation
To create a new segment in VMware NSX for a multi-tier application, you must attach the segment to a Tier-1 Gateway to handle intra-tier communication. A Tier-0 Gateway is needed for external connectivity, and the two gateways must establish a peering connection. Additionally, route redistribution must be configured to allow proper route advertisement between the gateways. Logging for NSX Manager is unrelated to this specific requirement, and directly attaching the segment to a Tier-0 Gateway does not meet the multi-tier application's needs.
- A. Correct.
Correct. A Tier-1 Gateway is required to manage intra-tier communication and must be attached to the new segment.
- B. Incorrect.
Incorrect. While enabling logging is important, this step specifies logging for the NSX Manager, which is unrelated to segment creation or routing configuration.
- C. Correct.
Correct. A Tier-0 Gateway is necessary for external connectivity, and it must peer with the Tier-1 Gateway to route traffic between the application tiers and the external network.
- D. Correct.
Correct. Route redistribution is required to ensure routes learned by the Tier-1 Gateway are advertised to the Tier-0 Gateway and vice versa.
- E. Incorrect.
Incorrect. Attaching a segment directly to the Tier-0 Gateway bypasses the Tier-1 Gateway and is not suitable for multi-tier applications requiring intra-tier communication.