VCP-VMC 2024 Question 160
Single answerAn organization is configuring a VMware Cloud deployment. They need to separate network traffic for their virtual machines (VMs) and management components, such as vCenter and NSX-T Manager, to ensure better security and traffic isolation. What type of segments should they configure for this requirement?
- A
Use compute segments for both virtual machines and management components since they are designed for general traffic.
- B
Use management segments for virtual machines and compute segments for management components to enhance traffic separation.
- C
Use compute segments for virtual machines and management segments for management components to ensure proper isolation.
- D
Use a single segment type for both virtual machines and management components to simplify the network topology.
Show answer and explanation
Correct answer: C
Explanation
In VMware Cloud environments, compute segments are used to handle virtual machine traffic, while management segments are designed for management components, such as vCenter, NSX-T Manager, and other core infrastructure services. This separation ensures that management traffic is isolated from compute traffic, enhancing security and providing better traffic control and monitoring.
- A. Incorrect.
Compute segments are intended for virtual machine traffic, not management components. Using compute segments for both would not provide the necessary isolation for management traffic.
- B. Incorrect.
Management segments are specifically designed for management components, not virtual machines. This configuration would mix up the intended purpose of the segment types, defeating the goal of traffic separation.
- C. Correct.
This is the correct configuration. Compute segments are designed to handle VM traffic, while management segments are meant for management components like vCenter and NSX-T Manager, ensuring proper isolation and security.
- D. Incorrect.
Using a single segment type for both virtual machines and management components would simplify topology but compromise traffic isolation and security, which is not recommended.