VMware NSX-T Data Center for Operators — Question 31
A cloud administrator is asked to validate a proposed internetworking design that will provide connectivity to a VMware Cloud on AWS environment from multiple company locations.
The following requirements must be met:
Connectivity to the VMware Cloud on AWS environment must support high-throughput data transfer.
Connectivity to the VMware Cloud on AWS environment must NOT have a single point of failure.
Any network traffic between on-premises company locations must be sent over a private IP address space.
Which design decisions should be made to meet these network connectivity requirements?
Answer options
- A. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a secondary, standby Direct Connect from headquarters using a public VIF. Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.
- B. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a public VIF for this connection. Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS. Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.
- C. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the “Use VPN as Backup to Direct Connect” option. Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.
- D. Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a policy-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the “Use VPN as Backup to Direct Connect” option. Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.
Correct answer: C
Explanation
Option C is correct because it ensures a private VIF is used for high-throughput data transfer and includes a route-based IPsec VPN tunnel as a backup, configured correctly to function as a failover. Options A, B, and D either do not use the correct type of VIF or do not properly implement the required backup configurations, which can lead to potential single points of failure or inadequate data transfer capabilities.