How can NSX-T Distributed Firewall help customers achieve security for newly migrated containerized applications?

Question

Options

• AQuality of service
• BMicro-segmentation
• CDynamic routing
• DNetwork I/O control

• A
  3% (1)
• B
  93% (27)
• D
  3% (1)

Explanation

Micro-segmentation (B) is correct because NSX-T Distributed Firewall operates at the workload level, applying granular firewall policies directly to individual containers, pods, or VMs - regardless of which host they run on. This allows organizations to enforce least-privilege security between containerized workloads (east-west traffic) without relying on traditional perimeter firewalls, which is critical for newly migrated apps that may have unknown trust boundaries.

Why the others are wrong:

• A (Quality of Service): QoS governs bandwidth prioritization and traffic shaping - a performance concern, not a security mechanism.
• C (Dynamic routing): Routing protocols (BGP, OSPF) control how traffic flows between networks, not how it's inspected or restricted.
• D (Network I/O Control: NIOC manages resource allocation for network traffic among VMs on a host - again a performance/resource feature, not a security policy tool.

Memory tip: Think "micro = small boundaries." Micro-segmentation means every workload gets its own firewall bubble - perfect for containers that can spin up anywhere in the cluster.

No community discussion yet for this question.