Exam 3V0-21.21 topic 1 question 11 discussion

Actual exam question from VMware's 3V0-21.21

Question #: 11
Topic #: 1

An architect is designing a new greenfield environment with 600 ESXi hosts in an automated fashion. The engineering department already has a PXE Boot server,
TFTP server, and DHCP server set up with an NFS mount for their current Linux servers.
The architect must be able to demonstrate and meet a security requirement to have all infrastructure processes separated.
Which recommendation should the architect make for the ESXi host deployment?

A. Request an isolated network segment to use and dedicate it to Auto Deploy functions
B. Ask the business to expand the engineering environment to service the virtual environment as well
C. Request a common shared network with flexible security measures to accommodate different auto deployment options
D. Deploy each ESXi host individually and document it to satisfy security requirements

Show Suggested Answer

Suggested Answer: A 🗳️

by andy33 at April 6, 2021, 1:22 a.m.

Comments

Submit Cancel

CloudRRA

Highly Voted 2 years, 8 months ago

I'll go for A ... reduce the security risk of Auto Deploy by completely isolating the network where Auto Deploy is used. https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.esxi.install.doc/GUID-8DAC6FEE-0441-4072-8195-9461095C2041.html

upvoted 26 times

...

odomahoney

Most Recent 8 months ago

Selected Answer: A

Requirement: "The architect must be able to demonstrate and meet a security requirement to have all infrastructure processes separated."

upvoted 1 times

...

Icemaker21

11 months ago

The answer has to be C. In a perfect world, isolating your Auto Deploy network is certainly desirable BUT in this case the services are already in place and being leveraged by other systems so isolating the traffic is not possible without breaking the existing systems.

upvoted 1 times

...