VCP-VMC 2024 Question 100
Single answerA VMware Cloud on AWS administrator is tasked with deploying a workload that requires advanced networking and security features, such as distributed firewalling and micro-segmentation. The administrator needs to ensure the VMware NSX architecture in VMware Cloud is properly configured to meet these requirements. Which component of the NSX architecture is responsible for enforcing these features?
- A
NSX Edge
- B
NSX Manager
- C
NSX Distributed Firewall
- D
NSX Control Plane Agent
Show answer and explanation
Correct answer: C
Explanation
The NSX Distributed Firewall is a critical component of the NSX architecture in VMware Cloud, enabling advanced networking and security features such as micro-segmentation and distributed firewalling. These features are enforced at the hypervisor level, providing fine-grained control and protection for workloads. Other components like NSX Edge and NSX Manager play important roles in the NSX architecture but do not directly enforce these security policies.
- A. Incorrect.
The NSX Edge is primarily responsible for providing services like perimeter firewalling, load balancing, and VPN, but it does not enforce distributed firewall or micro-segmentation policies across workloads.
- B. Incorrect.
NSX Manager is the central management component of NSX, responsible for policy creation and configuration management, but it does not enforce security policies directly.
- C. Correct.
The NSX Distributed Firewall operates at the hypervisor level and is responsible for enforcing advanced security features like distributed firewalling and micro-segmentation across virtual machines.
- D. Incorrect.
The NSX Control Plane Agent is responsible for distributing configuration updates from the NSX Manager to the hypervisors, but it does not enforce security or networking policies directly.