VCP-VCF Administrator 2024 Question 272
Select 3An organization is planning to configure Multi-Organizational Tenancy in VMware Cloud Foundation to separate resources between two departments: Finance and IT. They want to ensure that each department has its own dedicated workload domain with strict resource isolation, while sharing the same management domain. Which of the following steps are required to achieve this configuration?
- A
Create separate workload domains for Finance and IT using VMware Cloud Foundation SDDC Manager.
- B
Enable NSX-T micro-segmentation to enforce network-level isolation between Finance and IT workloads.
- C
Assign dedicated vCenter Server instances to each workload domain.
- D
Configure shared storage across both workload domains to enable resource sharing.
- E
Create user roles and permissions to restrict cross-domain administrative access.
Show answer and explanation
Correct answers: A, C, E
Explanation
To configure Multi-Organizational Tenancy in VMware Cloud Foundation, each department (Finance and IT) must have isolated workload domains with dedicated compute, storage, and networking resources. Separate vCenter Server instances ensure management isolation, while user roles and permissions enforce administrative access control. Enabling NSX-T micro-segmentation or sharing storage is not a mandatory step for achieving strict tenancy separation.
- A. Correct.
Creating separate workload domains is essential to provide dedicated compute, storage, and networking resources for each department, ensuring resource isolation.
- B. Incorrect.
While NSX-T micro-segmentation is useful for network security, it is not specifically required to configure Multi-Organizational Tenancy in VMware Cloud Foundation.
- C. Correct.
Assigning dedicated vCenter Server instances to each workload domain is necessary to ensure management separation and avoid cross-domain interference.
- D. Incorrect.
Shared storage across workload domains would violate the principle of resource isolation, which is a core requirement for Multi-Organizational Tenancy.
- E. Correct.
Creating user roles and permissions ensures that administrators from one organization cannot access or manage resources in another organization, thereby maintaining strict isolation.