VCP-VMC 2024 Question 126
Select 2You are configuring a VMware Cloud on AWS SDDC and need to ensure proper network connectivity between your on-premises data center and the SDDC. Which two steps are mandatory to establish this connectivity?
- A
Configure a VPN connection between the on-premises data center and the VMware Cloud on AWS SDDC.
- B
Set up a Direct Connect gateway within AWS to link the on-premises network and the SDDC.
- C
Establish an NSX-T Distributed Firewall rule to allow traffic from the on-premises data center.
- D
Configure a route-based VPN in NSX-T Manager to communicate with the on-premises data center.
- E
Create a custom NAT rule to translate on-premises IP addresses into public IPs.
Show answer and explanation
Correct answers: A, D
Explanation
To establish network connectivity between an on-premises data center and a VMware Cloud on AWS SDDC, configuring a VPN connection and setting up a route-based VPN in NSX-T Manager are mandatory steps. These configurations ensure secure and efficient routing of traffic between the two environments. Other options, such as Direct Connect and custom NAT rules, are optional and depend on specific use cases.
- A. Correct.
Configuring a VPN connection is a mandatory step to establish secure, encrypted connectivity between the on-premises data center and the VMware Cloud on AWS SDDC.
- B. Incorrect.
Setting up a Direct Connect gateway is optional and not mandatory unless you require high-bandwidth, low-latency connectivity.
- C. Incorrect.
While NSX-T Distributed Firewall rules may be required for specific traffic policies, they are not mandatory for basic connectivity setup.
- D. Correct.
A route-based VPN configuration in NSX-T Manager is a critical step to enable routing between the on-premises data center and the SDDC.
- E. Incorrect.
Custom NAT rules are not required for basic connectivity; they are used only in specific scenarios where translation of private to public IPs is needed.