A customer has two sites and is looking to deploy NSX with stretched security. The customer wants to ensure that only authorized traffic can traverse the stretched security perimeter.What is the VMware recommended approach for implementing micro-segmentation in this scenario?

Use Distributed Firewall rules to enforce micro-segmentation across the stretched security perimeter.

Use Service Composer policies to enforce micro-segmentation across the stretched security perimeter.

Use Identity Firewall policies to enforce micro-segmentation across the stretched security perimeter.

Use Group Firewall policies to enforce micro-segmentation across the stretched security perimeter.

Which of the following considerations should be taken into account when designing Geneve tunneling?

The available bandwidth on the physical network links between the transport nodes.

The number of transport nodes in the NSX environment.

The available bandwidth on the physical network links between the transport nodes.

The size of the virtual machines running in the NSX environment.

The physical location of the transport nodes within the data center.

A high-level overview of the NSX solution, including objectives of the implementation.

A set of instructions for installing and configuring the NSX software.

A detailed diagram of the interfaces for the NSX Edge components in the data center.

A high-level overview of the NSX solution, including objectives of the implementation.

A detailed description of the NSX configuration, including VLAN and IP address assignments.

Use the RFC1918 IPv4 address space for these subnets and allocate one octet by region and another octet by function.

Use only /24 subnets to reduce confusion and mistakes when handling IPv4 subnetting.

Use the IP address of the floating interface for Virtual Router Redundancy Protocol (VRRP) or Hot Standby Routing Protocol (HSRP) as the gateway.

Use the RFC1918 IPv4 address space for these subnets and allocate one octet by region and another octet by function.

Use the RFC2460 IPv6 address space for these subnets and allocate one set by region and another set by function.

Use only /16 subnets to reduce confusion and mistakes when handling IPv4 subnetting.

Use only /24 subnets to reduce confusion and mistakes when handling IPv4 subnetting.

Use the IP address of the floating interface for Virtual Router Redundancy Protocol (VRRP) or Hot Standby Routing Protocol (HSRP) as the gateway.

Implement a Zero Trust model and enforce policies at the workload level.

Avoid the use of distributed firewalls as they can complicate the network design.

Implement a Zero Trust model and enforce policies at the Gateway level.

Implement a Zero Trust model and enforce policies at the workload level.

Deploy NSX in a single, large segment for simplicity.

It offers better control over the placement of stateful services.

It provides a cost-effective solution for simple networks.

It simplifies the network topology by consolidating all services into a single tier.

It eliminates the need for EVPN in the network design.

L2 bridging requires the same IP subnet to be used in both the on-premises and cloud environments.

L2 bridging requires the use of Geneve encapsulation for traffic to traverse the public internet.

L2 bridging can cause delays in traffic and should only be used for low-latency applications.

L2 bridging should only be used when the on-premises and cloud environments are in the same geographical location.

L2 bridging requires the same IP subnet to be used in both the on-premises and cloud environments.

Intrusion Detection and Prevention