VCP-VCF Administrator 2024 Question 229
Select 3You are an administrator tasked with configuring VMware NSX advanced security features in a VMware Cloud Foundation environment. Your goal is to enhance east-west traffic security within the data center and ensure that specific application workloads comply with strict micro-segmentation policies. Which combination of NSX advanced features should you configure to meet this requirement?
- A
Distributed Firewall (DFW)
- B
NSX Load Balancer
- C
NSX Intrusion Detection and Prevention System (IDS/IPS)
- D
Edge Gateway
- E
NSX Service Insertion
Show answer and explanation
Correct answers: A, C, E
Explanation
To secure east-west traffic and implement micro-segmentation policies, features like the Distributed Firewall (DFW) and NSX IDS/IPS are essential. DFW ensures granular traffic control between workloads, while IDS/IPS detects and mitigates threats within the data center. Additionally, NSX Service Insertion facilitates integration with third-party security tools to enhance traffic inspection and policy enforcement. Together, these features provide a comprehensive solution for securing application workloads in a VMware Cloud Foundation environment.
- A. Correct.
The Distributed Firewall (DFW) is a key feature for micro-segmentation and east-west traffic control. It allows you to create granular policies to control traffic between workloads.
- B. Incorrect.
The NSX Load Balancer is used to distribute traffic across multiple servers but does not contribute to securing east-west traffic or micro-segmentation policies.
- C. Correct.
NSX IDS/IPS helps detect and prevent malicious traffic within the environment, adding an additional layer of security for application workloads.
- D. Incorrect.
Edge Gateway is primarily used for north-south traffic management and does not enhance east-west traffic security directly.
- E. Correct.
NSX Service Insertion allows integration with third-party security solutions to enhance micro-segmentation and traffic inspection, making it a valuable feature for this scenario.