VCP-VMC 2024 Question 224
Single answerYou are tasked with creating a new network segment in VMware Cloud on AWS for a multi-tier application. The application requires the network segment to be isolated and not accessible from the internet while allowing communication between VMs within the same segment. Which configuration should you choose during the creation of the network segment?
- A
Create a routed network segment with no firewall rules.
- B
Create a routed network segment and apply a deny-all inbound and outbound rule.
- C
Create an isolated network segment.
- D
Create a routed network segment and enable NAT for internet access.
Show answer and explanation
Correct answer: C
Explanation
To meet the requirement of isolating the network segment from the internet while allowing communication between VMs within the same segment, an isolated network segment should be used. This type of segment is not connected to a gateway and ensures complete isolation from external networks. The other options either introduce connectivity to the internet or add unnecessary complexity.
- A. Incorrect.
This option is incorrect because a routed network segment is connected to a gateway and allows communication to other networks or the internet, which violates the isolation requirement.
- B. Incorrect.
This option is incorrect because while adding deny-all rules might block traffic to and from the internet, it does not inherently isolate the network segment. It also adds unnecessary complexity.
- C. Correct.
This option is correct because an isolated network segment is not connected to a gateway, ensuring that it is fully isolated and accessible only by VMs within the same segment, which aligns with the requirements.
- D. Incorrect.
This option is incorrect because enabling NAT for internet access contradicts the requirement for the segment to be isolated from the internet.