An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
Migrating existing data center to KVM hosts.
Redundancy and high availability are required.
No component can be a single point of failure.
Which selection should the architect recommend? (Choose the best answer.)
Answer : A
Which three assessment findings are part of a Conceptual Design? (Choose three.)
Answer : A, D, E
A customer has a requirement to implement a next generation firewall (NGFW) to improve security network introspection. The customer wants to apply the NGFW to all workloads exposed both internally and externally. The customer wants the NGFW to work seamlessly with NSX-T Data Center and vSphere.
Which solution should be recommended to the customer? (Choose the best answer.)
Answer : A
A customer deploying NSX-T Data Center requires role based access controls be enforced in NSX Manager with these requirements:
identity platform must be highly available
authentication must be performed by customer's existing SAML identity provider
MFA must be performed by administrator to gain access to NSX Manager
Which identity deployments would meet the customer's requirements? (Choose the best answer.)
A Solutions Architect is assisting a service provider with designing an NSX-T Data Center solution for these environments:
Virtual Data Center to Virtual Data Center connectivity
Tenant workload on-boarding to Virtual Data Centers.
These requirements must be met:
scalability across 5 data centers
all sites have a latency of 180ms
MTU between sites is 1800
bandwidth is 100Mbps between sites
multi-tenancy
Which two selections should the Solutions Architect propose to the service provider? (Choose two.)
Answer : D, E
As mentioned, using Federation for five sites is not possible yet. Therefore, we have to setup L2VPN. IPSec (needed by L2VPN) can be established from T0 as well as T1 (the same rule applies to L2VPN). However, L2VPN is limited (server or client) to one service per gateway, therefore it's not possible to utilize five L2VPN tunnels from the same T0 and we have to deploy five T1s.
An architect is helping an organization with the Physical Design of an NSX-T Data Center solution.
This information was gathered during a workshop:
Some workloads should be moved to a Cloud Provider.
Extend network's VLAN or VNI across sites on the same broadcast domain.
Enable VM mobility use cases such as migration and disaster recovery without IP address changes.
Support 1500 byte MTU between sites.
Which selection should the architect include in their design? (Choose the best answer.)
Answer : D
An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
Data between two networks connected over a public network needs to be encrypted.
Certificate authentication is required.
Dynamic route learning is preferred.
Which selection should the architect include in their design? (Choose the best answer.)
Answer : C
Route-based IPSec VPN provides tunneling on traffic based on the static routes or routes learned dynamically.
Tier-0 gateway in the active-standby state supports the following services:
NAT
Load balancing
Stateful firewall
VPN
Reference Docs:
https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-C0E5AF10-576D-493A-A079-C4C95D8F5373.html