VMware vSAN Administrator (2025) — Question 67

During the design workshop, the customer stated the following requirement:

• The solution must comply with the organization’s security standards.

Which two design decisions should be included in the logical design for the workload domain? (Choose two.)

Answer options

• A. Use an SHA-2 algorithm or higher when signing certificates.
• B. Enable Inter-SR iBGP routing.
• C. Use large-size NSX Edge virtual appliances to account for the additional firewall rules.
• D. Enable VM Monitoring for each workload within the cluster.
• E. Establish an operations practice to capture and update the thumbprint of the NSX Local Manager certificate on the NSX Global Manager every time the certificate is updated.

Correct answer: A, E

Explanation

Option A is correct as using an SHA-2 algorithm or higher ensures that the certificates meet modern security standards. Option E is also correct since maintaining the thumbprint of certificates helps ensure ongoing compliance with security protocols. Options B, C, and D do not directly address security compliance as specified in the requirement.