VCP-VCF Administrator 2024 Question 225
Select 4You are tasked with configuring multi-tenancy in NSX within a VMware Cloud Foundation environment by creating a Virtual Private Cloud (VPC) and setting up projects. Which steps must you perform to ensure projects are properly isolated and resources are allocated correctly to tenants?
- A
Create a VPC and associate it with a specific NSX-T Manager instance.
- B
Define segments within the VPC and assign them to the corresponding projects.
- C
Enable Distributed Firewall (DFW) rules at the project level for tenant isolation.
- D
Assign tenants to projects and allocate resource quotas for each project.
- E
Configure a single shared Tier-1 Gateway for all tenants in the VPC.
Show answer and explanation
Correct answers: A, B, C, D
Explanation
To enable multi-tenancy in NSX within VMware Cloud Foundation, you must create a VPC and configure projects with proper isolation and resource allocation. This involves defining segments for logical separation, applying security policies like Distributed Firewall (DFW) rules, and assigning tenants to projects with specific quotas. A shared Tier-1 Gateway does not provide adequate isolation for tenant environments, so this approach is not recommended.
- A. Correct.
Creating a VPC and associating it with an NSX-T Manager instance is required to establish the foundation for network resources that can be assigned to projects.
- B. Correct.
Defining segments within the VPC ensures that each project has its own dedicated logical network for tenant isolation and communication.
- C. Correct.
Enabling Distributed Firewall (DFW) rules at the project level is essential for isolating tenant traffic and ensuring security boundaries.
- D. Correct.
Assigning tenants to projects and allocating resource quotas is a necessary step to control resource consumption and maintain multi-tenancy.
- E. Incorrect.
Configuring a single shared Tier-1 Gateway for all tenants would not ensure proper isolation. Each tenant or project should ideally have its own Tier-1 Gateway to enhance security and separation.