A security architect wants east-west traffic inspection AND centralized logging for compliance, without impacting workload performance. Which design BEST satisfies the requirement?

The correct answer is B. Distributed Firewall with Flow Monitoring enabled. Distributed Firewall + Flow Monitoring provides vNIC-level inspection with centralized visibility while preserving line-rate performance. Gateway firewalls centralize traffic but reduce scale and performance-something VMware examiners expect you to recognize.

Implement Network Security

Question

A security architect wants east-west traffic inspection AND centralized logging for compliance, without impacting workload performance. Which design BEST satisfies the requirement?

Options

AGateway Firewall on Tier-0 with syslog
BDistributed Firewall with Flow Monitoring enabled
CService Insertion with physical firewall
DLoad Balancer with L7 inspection

How the community answered

(23 responses)

A
13% (3)
B
78% (18)
C
4% (1)
D
4% (1)

Explanation

Distributed Firewall + Flow Monitoring provides vNIC-level inspection with centralized visibility while preserving line-rate performance. Gateway firewalls centralize traffic but reduce scale and performance-something VMware examiners expect you to recognize.

Topics

#Distributed Firewall#Flow Monitoring#east-west inspection#compliance logging

Community Discussion

No community discussion yet for this question.

Full 3V0-25.25 Practice