nerdexam
Broadcom-VMware

3V0-21.23 · Question #48

There is a request for approved virtual machine applications through a new vSphere platform's integrated automation portal. The platform was built following all provided company security guidelines…

The correct answer is D. The vSphere hosting platform and all PCI application virtual machines must be monitored using. NFR - Any requirement that specifies how the system performs a certain function. In this case using vRealize Operations Compliance Pack for PCI.

Design for security

Question

There is a request for approved virtual machine applications through a new vSphere platform's integrated automation portal. The platform was built following all provided company security guidelines and has been assessed against Sarbanes-Oxley Act of 2002 (SOX) regulations. The platform has the following characteristics:

  • vRealize Operations is being used to monitor all clusters.
  • There is a dedicated ESXi cluster, supporting all management services.

All network traffic is via distributed virtual switches (DVS).

  • There is a dedicated ESXi cluster for all line-of-business applications.

Network traffic is serviced by NSX-T.

  • There is a dedicated ESXi cluster for virtual desktop infrastructure (VDI).

Network traffic is serviced by NSX-T. The application owner is requesting approval to install a new service that must be protected as per the Payment Card Industry (PCI) Data Security Standard. Which additional non-functional requirement should the architect include in the design to support the new service?

Options

  • AThe vSphere hosting platform and all PCI application virtual machines must be assessed against
  • BThe vSphere hosting platform and all PCI application virtual machines must be assessed for SOX
  • CThe vSphere hosting platform and all PCI application virtual machine network traffic must be
  • DThe vSphere hosting platform and all PCI application virtual machines must be monitored using

How the community answered

(48 responses)
  • A
    25% (12)
  • B
    6% (3)
  • C
    13% (6)
  • D
    56% (27)

Explanation

NFR - Any requirement that specifies how the system performs a certain function. In this case using vRealize Operations Compliance Pack for PCI.

Topics

#PCI compliance#SOX regulations#vRealize Operations#security monitoring

Community Discussion

No community discussion yet for this question.

Full 3V0-21.23 Practice