Exam 3V0-42.20 topic 1 question 15 discussion

Actual exam question from VMware's 3V0-42.20

Question #: 15
Topic #: 1

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
✑ Data between two networks connected over a public network needs to be encrypted.
✑ Certificate authentication is required.
✑ Dynamic route learning is preferred.
Which selection should the architect include in their design? (Choose the best answer.)

A. Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
B. Deploy a Tier-0 gateway in Active/Active mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
C. Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
D. Deploy a Tier-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.

Show Suggested Answer

Suggested Answer: C 🗳️

by MJ86 at Feb. 12, 2021, 6:13 a.m.

Comments

Submit Cancel

MJ86

Highly Voted 1 year, 4 months ago

C is the correct answer. Route-based IPSec VPN provides tunneling on traffic based on the static routes or routes learned dynamically. Tier-0 gateway in the active-standby state supports the following services: NAT Load balancing Stateful firewall VPN Reference Docs: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-C0E5AF10-576D-493A-A079-C4C95D8F5373.html https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A.html#GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A

upvoted 8 times

...