VCP-VMC 2024 Question 24
Single answerAn organization is deploying a VMware Cloud solution in their software-defined data center (SDDC). The administrator needs to ensure that network traffic between workloads on different hosts is optimized and secured within the SDDC environment. Which networking component in the VMware SDDC achieves this by providing distributed routing and firewalling capabilities?
- A
NSX Distributed Firewall
- B
NSX Edge Gateway
- C
NSX Distributed Logical Router
- D
vSphere Standard Switch
Show answer and explanation
Correct answer: C
Explanation
The NSX Distributed Logical Router plays a crucial role in the VMware SDDC by enabling highly efficient east-west traffic routing directly on the hypervisor. This eliminates the need for traffic to travel to a central routing device, thereby reducing latency and improving performance. Additionally, it integrates with the NSX Distributed Firewall to provide security and micro-segmentation. While other options such as the NSX Edge Gateway and NSX Distributed Firewall serve specific purposes, they do not provide distributed routing capabilities essential for workload optimization within the SDDC.
- A. Incorrect.
The NSX Distributed Firewall provides distributed security at the VM level but does not handle routing. It is primarily focused on securing east-west traffic within the environment.
- B. Incorrect.
The NSX Edge Gateway provides north-south traffic routing and services such as VPNs and NAT, but it is not responsible for distributed routing within the SDDC.
- C. Correct.
The NSX Distributed Logical Router is responsible for optimizing east-west traffic by providing distributed routing capabilities directly on the hypervisor. It also integrates with the NSX Distributed Firewall for enhanced security at the VM level.
- D. Incorrect.
The vSphere Standard Switch is a traditional networking component that provides basic Layer 2 connectivity but does not support advanced features like distributed routing or firewalling.