VCP-VMC 2024 Question 226
Single answerA cloud administrator is tasked with creating a new network segment in VMware Cloud on AWS for application workloads. The new segment should support communication between virtual machines and allow the routing of traffic to other segments. The administrator also needs to ensure that the segment is isolated from external networks until a specific firewall rule is applied. Which configuration step is necessary to meet these requirements?
- A
Create a routed network segment and set the gateway CIDR
- B
Create an extended network segment for on-premises connectivity
- C
Create a disconnected network segment with no gateway
- D
Create a routed network segment and enable DHCP
Show answer and explanation
Correct answer: A
Explanation
To meet the requirements of this scenario, a routed network segment with a gateway CIDR is necessary to allow communication within the segment and routing to other segments. Isolation from external networks can be achieved by configuring firewall rules, which is independent of the segment type. Other segment types, such as extended or disconnected, do not fit the use case described in the question.
- A. Correct.
Correct. A routed network segment with a gateway CIDR allows communication between virtual machines within the segment and routing to other segments, while the isolation from external traffic can be controlled through firewall rules.
- B. Incorrect.
Incorrect. Extended network segments are used for connecting VMware Cloud workloads to on-premises environments and are not necessary in this scenario.
- C. Incorrect.
Incorrect. A disconnected network segment does not allow routing or communication with other segments until it is explicitly connected to a gateway, which conflicts with the requirements.
- D. Incorrect.
Incorrect. While enabling DHCP can simplify IP management, it is not explicitly required to meet the scenario's requirements, and the isolation requirement can still be managed without DHCP.