VCP-VCF Administrator 2024 Question 240
Select 3An organization is deploying a VPN service in NSX to establish secure connectivity between their on-premises data center and a public cloud environment. As a VMware Cloud Foundation Administrator, you are tasked with configuring the VPN service. Which of the following steps must be performed to successfully configure the VPN service in NSX?
- A
Configure a Tier-0 Gateway and ensure it is associated with an Edge Cluster
- B
Enable the BGP routing protocol on the Tier-1 Gateway
- C
Create a VPN profile and configure encryption and authentication settings
- D
Establish a logical switch for VPN connectivity
- E
Create a VPN session and specify the remote endpoint and traffic selectors
Show answer and explanation
Correct answers: A, C, E
Explanation
To configure a VPN service in NSX, a Tier-0 Gateway is required to manage external connectivity and must be associated with an Edge Cluster to handle the VPN traffic. A VPN profile is necessary to define encryption and authentication parameters. Finally, a VPN session must be created to establish the secure connection between the local and remote sites, specifying the remote endpoint and traffic selectors. While BGP and logical switches are part of NSX, they are not directly involved in the VPN configuration process.
- A. Correct.
Correct. A Tier-0 Gateway is required for VPN configuration as it provides the external routing capability and must be associated with an Edge Cluster to handle VPN traffic.
- B. Incorrect.
Incorrect. BGP is not a requirement for configuring a VPN service. It is used for dynamic routing but is not directly related to the VPN setup process.
- C. Correct.
Correct. A VPN profile is essential to define the encryption, authentication, and other security parameters for the VPN connection.
- D. Incorrect.
Incorrect. Logical switches are used to define Layer 2 connectivity in NSX but are not directly involved in VPN configuration.
- E. Correct.
Correct. A VPN session must be created to establish the actual connection, where the remote endpoint (peer site) and traffic selectors are specified.