A cloud administrator wants to migrate a virtual machine using VMware vSphere vMotlon from their on-premises data center to their VMware Cloud on AWS software-defined data center (SDDC), using an…

Question

Options

• AThe versions of VMware vSphere need to match between the on-premises data center and
• BA Layer 2 connection is configured between the on-premises data center and the cloud
• CAWS Direct Connect is configured between the on-premises data center and the cloud SDDC.
• DIPsec VPN is configured between the on-premises data center and the cloud SDDC.
• ECluster-level Enhanced vMotion Compatibility (EVC) is configured in the on-premises data

• A
  11% (5)
• B
  7% (3)
• C
  80% (37)
• E
  2% (1)

Explanation

Migrating a VM via vMotion to VMware Cloud on AWS requires both network-layer connectivity: AWS Direct Connect (C) provides the private, dedicated physical link between the on-premises data center and the cloud SDDC - this is precisely what "private line" refers to in the question - while IPsec VPN (D) establishes the encrypted logical tunnel over that link that VMware Cloud on AWS requires to secure vMotion and management traffic between environments. Both must be in place simultaneously; Direct Connect alone provides the path, but the SDDC management network requires the IPsec VPN overlay to authorize and secure cross-environment vMotion.

Why the distractors are wrong:

• (A) Matching vSphere versions - VMware Cloud on AWS uses HCX (Hybrid Cloud Extension) to abstract version differences, so version parity is not required.
• (B) Layer 2 connection - L2 extension (via HCX Network Extension or L2VPN) is optional for specific use cases (like retaining IP addresses), but it is not a prerequisite for vMotion itself, which can operate over Layer 3.
• (E) EVC at cluster level - EVC handles CPU compatibility for vMotion within a cluster across different CPU generations; HCX handles CPU compatibility for cross-cloud migrations, making cluster-level EVC unnecessary here.

Memory tip: Think "Direct Connect = the road, IPsec VPN = the secure lane on that road" - VMware Cloud on AWS needs both the physical private path and the encrypted tunnel riding on top of it before vMotion traffic can flow.

No community discussion yet for this question.