VCP-VMC 2024 Question 21
Single answerYou are designing a Software-Defined Data Center (SDDC) for a customer and need to configure the networking to support their workloads. The customer wants to ensure complete network isolation between different application tiers (web, application, and database) while enabling dynamic provisioning of networks. Which SDDC networking feature should you prioritize to meet these requirements?
- A
NSX-T Segments
- B
vSphere Standard Switch (VSS)
- C
Distributed Firewall (DFW)
- D
VXLAN
Show answer and explanation
Correct answer: A
Explanation
The customer's requirement for complete network isolation and dynamic provisioning is best addressed by NSX-T Segments. These logical networks support advanced use cases in the SDDC by enabling isolated networking for application tiers while allowing for flexible, on-demand creation of networks. Other options like VSS, DFW, and VXLAN do not fully meet the requirements of isolation and dynamic provisioning.
- A. Correct.
NSX-T Segments are logical Layer 2 networks in VMware NSX-T that provide complete isolation and flexibility for dynamic provisioning, making them ideal for creating isolated networks for different application tiers.
- B. Incorrect.
vSphere Standard Switch (VSS) is a basic virtual switch that lacks advanced features for network isolation or dynamic provisioning, thus not suitable for the customer's requirements.
- C. Incorrect.
Distributed Firewall (DFW) is primarily a security feature for controlling traffic at a granular level but does not address the need for creating isolated networks or dynamic provisioning.
- D. Incorrect.
VXLAN provides network virtualization but is an older technology that has largely been superseded by NSX-T Segments for modern SDDC implementations.