Exam 2V0-33.22 topic 1 question 36 discussion

Actual exam question from VMware's 2V0-33.22

Question #: 36
Topic #: 1

A cloud administrator is asked to validate a proposed internetworking design that will provide connectivity to a VMware Cloud on AWS environment from multiple company locations.
The following requirements must be met:
Connectivity to the VMware Cloud on AWS environment must support high-throughput data transfer.
Connectivity to the VMware Cloud on AWS environment must NOT have a single point of failure.
Any network traffic between on-premises company locations must be sent over a private IP address space.
Which design decisions should be made to meet these network connectivity requirements?

A. Configure a Direct Connect from headquarters to VMware Cloud on AWS.
Use a private VIF for this connection.
Configure a secondary, standby Direct Connect from headquarters using a public VIF.
Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.
B. Configure a Direct Connect from headquarters to VMware Cloud on AWS.
Use a public VIF for this connection.
Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS.
Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.
C. Configure a Direct Connect from headquarters to VMware Cloud on AWS.
Use a private VIF for this connection.
Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the “Use VPN as Backup to Direct Connect” option.
Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.
D. Configure a Direct Connect from headquarters to VMware Cloud on AWS.
Use a private VIF for this connection.
Configure a policy-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the “Use VPN as Backup to Direct Connect” option.
Configure dual, redundant, policy-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

Show Suggested Answer

Suggested Answer: C 🗳️

by ryanzou at April 1, 2023, 9:46 p.m.

Comments

Submit Cancel

IAZZUS

7 months ago

Selected Answer: C

Configure a Direct Connect from headquarters to VMware Cloud on AWS. Use a private VIF for this connection. Configure a route-based IPsec VPN tunnel as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the “Use VPN as Backup to Direct Connect” option. Configure dual, redundant, route-based IPsec VPN connections from each regional office to VMware Cloud on AWS.

upvoted 1 times

...

VirtualSteveO

1 year, 2 months ago

C is the most appropriate answer

upvoted 1 times

...

dperlegkas

1 year, 7 months ago

Selected Answer: C

i think is C

upvoted 1 times

...

uchiken

1 year, 8 months ago

Selected Answer: C

My answer is C. -------------------------------- A route-based VPN creates an IPsec tunnel interface and routes traffic through it as dictated by the SDDC routing table. A route-based VPN provides resilient, secure access to multiple subnets. When you use a route-based VPN, new routes are added automatically when new networks are created. https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws-networking-security/GUID-5AF45CE6-FA53-45C0-83E5-25F8E3A055E9.html

upvoted 1 times

...

ryanzou

1 year, 9 months ago

Selected Answer: C

C is correct.

upvoted 1 times

...