3V0-32.23 · Question #6
A customer is deploying vRealize Log Insight (vRLI) in their data centers. The customer has the following: - Three data centers in three geographical locations. - Each site has 1000 logging sources…
The correct answer is B. Configure filters to eliminate forwarding loops between vRLI clusters. C. Configure logs forwarding from each data center to another one. D. Deploy nine vRLI "Medium" nodes in a single cluster in each data center. Options C and B work together as a pair: configuring peer-to-peer log forwarding between data centers (C) means each site's logs are replicated to at least one other site, protecting against a full site failure - but this bidirectional topology creates the risk of infinite…
Question
A customer is deploying vRealize Log Insight (vRLI) in their data centers. The customer has the following:
- Three data centers in three geographical locations.
- Each site has 1000 logging sources that send events to vRLI.
The customer has the following requirements:
- Minimize the resources footprint in the management cluster where vRLI
will be deployed.
- vRLI must be highly available with no single points of failure.
- Logs collected from any data center must be protected against site
failure. Which three design decisions would the architect choose to achieve the requirements? (Choose three.)
Options
- AConfigure logs forwarding from all data centers to a specific data center.
- BConfigure filters to eliminate forwarding loops between vRLI clusters.
- CConfigure logs forwarding from each data center to another one.
- DDeploy nine vRLI "Medium" nodes in a single cluster in each data center.
- EConfigure filters to forward critical logs to central vRLI cluster.
- FDeploy four vRLI "Large" nodes in a single cluster in each data center.
How the community answered
(40 responses)- A5% (2)
- B60% (24)
- E25% (10)
- F10% (4)
Explanation
Options C and B work together as a pair: configuring peer-to-peer log forwarding between data centers (C) means each site's logs are replicated to at least one other site, protecting against a full site failure - but this bidirectional topology creates the risk of infinite forwarding loops, so filters (B) are mandatory to break the cycle and ensure each log event is only forwarded once.
Option D is correct over F because of the "minimize resource footprint" requirement: Medium nodes consume fewer vCPUs and RAM than Large nodes, and three Medium nodes per data center (nine total across three sites) satisfies the HA/no-SPOF requirement through clustering while keeping per-cluster resource consumption lower than deploying Large nodes would.
The distractors fail on specific requirements:
- A sends all logs to one DC, creating a single point of failure for log collection - violating the no-SPOF rule.
- E only forwards critical logs, meaning non-critical logs are lost if a site fails - violating full log protection.
- F uses Large nodes which have a heavier resource footprint than Medium, directly violating the minimize-footprint requirement.
Memory tip: Think "Ring → Guard → Right-size" - C creates a forwarding ring, B guards against loops, and D right-sizes with Medium nodes. Any answer that funnels everything to one place (A) or filters what gets protected (E) breaks site-failure protection.
Topics
Community Discussion
No community discussion yet for this question.