nerdexam
Broadcom-VMware

3V0-21.23 · Question #6

An architect is preparing a design for a company planning digital transformation. During the requirements gathering workshop, the following requirements (REQ) and constraints (CON) are identified…

The correct answer is C. Use a single cluster and ensure that different security zones are separated at least with dedicated. VLANs are needed for network logical isolation. The security policy does not talk about compute

Design for security

Question

An architect is preparing a design for a company planning digital transformation. During the requirements gathering workshop, the following requirements (REQ) and constraints (CON) are identified:

  • REQ01 The platform must host different types of workloads including applications that must be

compliant with internal security standard.

  • REQ02 The infrastructure must initially run 100 virtual machines.
  • REQ03 Ten of the virtual machines must be compliant with internal security standard.
  • REQ04 The internal security standard specifies logical network separation for in-scope

applications.

  • CON01 The customer has already purchased the licenses as part of another project.
  • CON02 The customer has five physical servers that must be reused.

Additionally, based on resource requirements, four physical servers will be enough to run all workloads. Which recommendation should the architect make to meet requirements while minimizing project costs?

Options

  • AUse Network I/O Control to ensure the internal security zone has higher share value
  • BPurchase additional servers and plan separate, isolated clusters for workloads that must be
  • CUse a single cluster and ensure that different security zones are separated at least with dedicated
  • DUse a single cluster and configure DRS anti-affinity rules to ensure internal security compliant

How the community answered

(18 responses)
  • A
    22% (4)
  • B
    6% (1)
  • C
    67% (12)
  • D
    6% (1)

Explanation

VLANs are needed for network logical isolation. The security policy does not talk about compute

Topics

#security zones#logical network separation#cluster design#DVS

Community Discussion

No community discussion yet for this question.

Full 3V0-21.23 Practice