VMware NSX-T Data Center Advanced (VCAP-NV Design) — Question 57

A customer has a requirement to implement a next generation firewall (NGFW) to improve security network introspection. The customer wants to apply the NGFW to all workloads exposed both internally and externally. The customer wants the NGFW to work seamlessly with NSX-T Data Center and vSphere.
Which solution should be recommended to the customer? (Choose the best answer.)

Answer options

• A. Use network introspection only on the external workloads and use NSX DFW for internal workloads.
• B. Apply the NGFW on bare metal hosts which will offer better performance of inline network introspection.
• C. Apply the NGFW to internal and external workloads for increased protection and use NSX-T Data Center with Federation to set network policies.
• D. Use NSX-T Data Center leveraged with NSX Intelligence to protect all workloads at the network inspection level.

Correct answer: C

Explanation

The correct answer, C, suggests applying the NGFW to all workloads, which aligns with the customer's needs for comprehensive protection. Option A limits the scope of network introspection, which does not fulfill the requirement for all workloads. Option B focuses on bare metal hosts, which may not be necessary for the customer's virtual environment, and option D, while useful, does not directly address the need for NGFW on all workloads.