VCP-VMC 2024 Question 225
Select 4You are configuring a VMware Cloud on AWS environment and need to create a new network segment to isolate a group of workloads for compliance purposes. Which steps are required to successfully create and manage the network segment within the VMware Cloud Console?
- A
Navigate to the Networking & Security tab in the VMware Cloud Console and select 'Segments' to create a new segment.
- B
Assign a unique subnet CIDR block to the new segment to avoid IP conflicts.
- C
Enable DHCP services for the network segment to dynamically assign IP addresses to workloads.
- D
Directly attach the new network segment to an existing VPC in AWS without additional configuration.
- E
Configure the segment with the desired tier (e.g., Routed or Isolated) based on workload requirements.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
When creating and managing a network segment in VMware Cloud on AWS, you must use the Networking & Security tab to define the segment. Essential steps include assigning a unique subnet CIDR block, enabling DHCP for IP address management, and configuring the segment's tier based on workload needs. Directly attaching the segment to an AWS VPC is not supported, as network management is handled within the VMware NSX framework.
- A. Correct.
Correct: The Networking & Security tab in the VMware Cloud Console is where you manage network segments. This is the starting point for creating a new segment.
- B. Correct.
Correct: A unique subnet CIDR block is necessary to avoid IP address conflicts within the network and with other segments or external networks.
- C. Correct.
Correct: Enabling DHCP is a common practice to simplify IP address management for workloads attached to the segment.
- D. Incorrect.
Incorrect: Directly attaching a network segment to an existing AWS VPC without additional configuration is not a valid action in VMware Cloud on AWS. Network segments are managed within the VMware NSX framework.
- E. Correct.
Correct: Configuring the segment with the appropriate tier (e.g., Routed or Isolated) ensures it meets the workload's communication and security requirements.