An administrator needs to encrypt file transfers between two sites that do not have the same subnet. Which NSX-T feature accomplishes this task?

Question

Options

• ASSL VPN +
• BIPSEC VPN
• CTier-0 Gateway
• DL2 VPN

• A
  2% (1)
• B
  82% (36)
• C
  5% (2)
• D
  11% (5)

Explanation

IPSec VPN is correct because it operates at Layer 3, encrypting traffic between two sites with different subnets by creating a secure tunnel between their IP gateways - exactly what's needed for inter-site encrypted file transfers across routed networks.

SSL VPN (A) is designed for remote user/client access to a network, not site-to-site connectivity between two infrastructure locations. Tier-0 Gateway (C) is a routing construct in NSX-T that handles north-south traffic but provides no built-in encryption - it's the platform IPSec VPN runs on, not the encryption solution itself. L2 VPN (D) is the trap answer: it does connect two sites, but it stretches Layer 2 (same subnet) across sites, so it's only useful when both sites share a subnet - the opposite of this scenario.

Memory tip: Think "different subnets = different layers = Layer 3 solution." IPSec = Inter-Premise Security across routed (L3) networks; L2 VPN = same subnet stretched; SSL VPN = single remote users, not sites.

No community discussion yet for this question.