VCP-VCF Administrator 2024 Question 226
Select 4An organization is using VMware Cloud Foundation with NSX-T to manage their network infrastructure and has decided to implement multi-tenancy by creating a Virtual Private Cloud (VPC). As part of this implementation, they need to configure projects to ensure proper tenant isolation and resource allocation. Which steps must be completed to achieve this?
- A
Create a VPC within NSX-T and associate it with a specific project.
- B
Assign dedicated Tier-0 and Tier-1 Gateways to the VPC for tenant traffic routing.
- C
Enable NSX-T Federation to manage projects across multiple VPCs.
- D
Map the VPC to specific network segments and ensure tenant isolation through firewall rules.
- E
Configure project-specific NSX-T roles and permissions to control access.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To enable multi-tenancy in NSX-T using a VPC, you must create the VPC, associate it with a project, and configure dedicated gateways and network segments for tenant isolation. Additionally, role-based access control must be implemented to restrict access to the project resources. NSX-T Federation is not a requirement for single VPC deployments.
- A. Correct.
Correct: Creating a VPC and associating it with a specific project is a fundamental step to establish tenant isolation and resource allocation in NSX-T.
- B. Correct.
Correct: Assigning dedicated Tier-0 and Tier-1 Gateways ensures that each tenant has isolated routing and traffic management.
- C. Incorrect.
Incorrect: NSX-T Federation is not required for configuring projects within a single VPC. It is used for managing NSX-T environments across multiple locations.
- D. Correct.
Correct: Mapping the VPC to specific network segments and applying firewall rules ensures proper tenant isolation and network security.
- E. Correct.
Correct: Configuring project-specific roles and permissions ensures that only authorized users can access and manage resources within the project.