Exam 3V0-732 topic 1 question 18 discussion

Actual exam question from VMware's 3V0-732

Question #: 18
Topic #: 1

An architect has been tasked with designing a blueprint containing web, application and database machines utilizing NSX for networking.
Upon provisioning, network traffic must be automatically restricted to allow:
✑ The web server to communicate only to the application server
✑ The application server to communicate to both the web and database servers
✑ The database server to be blocked from communicating to the other servers
Which two methods could the architect use to accomplish this? (Choose two.)

A. Assign an appropriate security group to the entitled items or entitled service within the entitlement.
B. Add an appropriate security group to the blueprint from within the blueprint properties, under NSX Settings.
C. Create or update an appropriate security group within NSX to include the provisioned machines.
D. Specify an appropriate security group in the blueprint and assign it to each machine.
E. Use an Event Broker subscription to ensure that provisioned machines are receiving the appropriate security group assignment.

Show Suggested Answer

Suggested Answer: CD 🗳️

by yoavbh at Nov. 30, 2020, 5:01 p.m.

Comments

Submit Cancel

yoavbh

4 years, 6 months ago

Correct C & D. In the article you can see that B is incorrect because once you add it you have to assign it. A has nothing to do with the answer, and so does E. https://docs.vmware.com/en/vRealize-Automation/7.5/com.vmware.vra.prepare.use.doc/GUID-CB9C8461-CF16-4973-8D55-BE39D4612CC6.html

upvoted 3 times

...