Exam 3V0-42.20 topic 1 question 13 discussion

Actual exam question from VMware's 3V0-42.20

Question #: 13
Topic #: 1

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
✑ NSX-T will span across two sites for disaster recovery.
✑ Public Load Balancer VIP should be accessible from a secondary site.
✑ Distributed Firewall Policies should be available at a secondary site.
✑ Routing capabilities should be maintained after failure.
✑ NAT capabilities are required.
Which two selections should the architect include in their design? (Choose two.)

A. Use of the same ISPs across sites.
B. Use two separate ISPs across sites.
C. Use MTU to 1550 between sites.
D. Set MTU to 1550 between sites.
E. Use IP sets or groups to configure DFW rules.

Show Suggested Answer

Suggested Answer: AE 🗳️
Reference:
https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/nsx/vmware-multi-site-solutions-cross-vcenter-nsx-design-guide.pdf

by RevanT at Feb. 2, 2021, 9:32 p.m.

Comments

Submit Cancel

MBrown

Highly Voted 2 years, 10 months ago

A and E are the correct answers, the MTU can't be less than 1600. https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-5D7E3D43-6497-4273-99C1-77613C36AD75.html

upvoted 10 times

NetRock1

2 years, 9 months ago

Agree with you A and E are the correct answers.

upvoted 3 times

...

4ourDS

Most Recent 8 months, 4 weeks ago

Selected Answer: AE

The question seems to be about making sure the architect is aware of how to make use of the multi-region IPs provided by the ISP.

upvoted 1 times

...

joncursio

9 months, 2 weeks ago

Why the F would you use the same ISP? You can advertise the same IP space to multiple suppliers. There's better fault tolerance using different at each site..?

upvoted 1 times

...

Nabil1986

9 months, 2 weeks ago

A & E is corr

upvoted 1 times

...

Me_Loi1

2 years, 8 months ago

I am not sure, as long as you span the NSX layer across both site you are also aware of the NSX/vSphere logics, therefore you don't need to use IP sets, you can easily use all object types for the DFW. Answer A is definitly correct as it is a mandatory requirement stated on the NSX documentation: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-5D7E3D43-6497-4273-99C1-77613C36AD75.html But I don't think that E is correct, instead D would be more suitable since the GENEVE header needs exactly 50 Bytes (1550Bytes in total) extra like VXLAN back then. It only depends how much extra metadata is implmented on the TLV from VMware. But technically it could work with 1550Bytes, but I never tested it...

upvoted 1 times