VMware NSX 4.x Professional (2024) — Question 79

Which two statements are true for IPSec VPN? (Choose two.)

Answer options

• A. IPSec VPN services can be configured at Tier-0 and Tier-1 gateways.
• B. Dynamic routing is supported for any IPSec mode in NSX.
• C. IPSec VPNs use the DPDK accelerated performance library.
• D. VPNs can be configured on the command line interface on the NSX manager.

Correct answer: A, C

Explanation

The correct answers are A and C because IPSec VPN services can indeed be configured at both Tier-0 and Tier-1 gateways, and they utilize the DPDK for enhanced performance. Option B is incorrect as not all IPSec modes in NSX support dynamic routing, and option D is misleading since VPNs can be configured through the CLI but may have limitations compared to GUI configurations.