The firewall rule shown in the exhibit is part of a gateway firewall applied to a Tier-0 gateway (TO-GW-01). The key indicators are the "Category: LOCAL GATEWAY" and the "Applied to: TO-GW-01". The rule is set to "Drop" SSH traffic (port 22) from any source to the destinations listed (App-Servers, DB-Servers, Web-Servers).
References:
VMware NSX-T Data Center Documentation
Understanding Firewall Categories in NSX-T
Question 2
Which protocol allows an administrator to provide overlay networks on top of physical networks used in NSX-T Datacenter?
Options:
A.
Geneve Segments
B.
Tier-0 Gateway
C.
VXLAN
D.
Distributed Firewall
Answer:
A
Explanation:
In NSX-T Data Center, the Geneve protocol is used to provide overlay networks on top of physical networks. Geneve (Generic Network Virtualization Encapsulation) is a tunneling protocol that enables the creation of virtual network overlays, allowing for the segmentation and isolation of network traffic in multi-tenant environments. This flexibility simplifies network management and enhances scalability.
[Reference: VMware NSX-T Data Center Networking, , , Reference: https://docs.vmware.com/en/VMware-Validated-Design/5.1/sddc-architecture-and-design-for- vmware-nsxt-workload-domains/GUID-CF3C47CA-9BEB-4213-8F08-1494261BF3EC.html, ]
Question 3
Which two statements are true about N-VDS/VDS? (Choose two.)
Options:
A.
KVM hosts support both N-VDS and VDS.
B.
It is a module deployed in all transport nodes that provides L2 functionality.
C.
It is a module deployed in all transport nodes that provides L3 functionality.
D.
ESXi hosts support both N-VDS and VDS.
E.
Bare-metal servers support both N-VDS and VDS.
Answer:
B, D
Explanation:
B. It is a module deployed in all transport nodes that provides L2 functionality. D. ESXi hosts support both N-VDS and VDS.
N-VDS (NSX Virtual Distributed Switch) and VDS (vSphere Distributed Switch) are both network switch constructs used in NSX-T Data Center. The N-VDS provides Layer 2 (L2) functionality and is deployed on all transport nodes to handle network traffic. ESXi hosts support both N-VDS and VDS, allowing for flexible network configurations.