VMware Carbon Black Cloud Enterprise EDR (2020) — Question 121

Which vSphere with Tanzu Workload Network topology provides Layer 2 isolation between Tanzu Kubernetes clusters across namespaces when vSphere Distributed Switches are used?

Answer options

• A. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and separate Workload Networks for each namespace
• B. A dedicated Primary Workload Network for the Supervisor Cluster control plane VMs and a single Workload Network for namespaces
• C. A single Workload Network for the Supervisor Cluster control plane VMs and Tanzu Kubernetes clusters
• D. Distributed firewall rules to isolate namespaces

Correct answer: A

Explanation

The correct answer is A because it provides individual Workload Networks for each namespace, ensuring Layer 2 isolation between Tanzu Kubernetes clusters. Options B and C do not offer the required isolation as they either share a Workload Network or do not separate namespaces effectively. Option D addresses isolation but does not pertain to the specific Workload Network topology required for Layer 2 separation.