10.2 Design VM-Series Deployments Across Hypervisors (e.g., AHV, KVM, ESXi) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary benefit of configuring NUMA node affinity for VM-Series on a multi-socket host?

   • AReduced vCPU count requirement
   • BIncreased storage I/O throughput
   • CSimplified network configuration
   • DImproved memory access latency
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When deploying VM-Series on ESXi, which resource allocation practice is recommended to ensure consistent performance during memory contention?

   • ADisable memory overcommitment
   • BEnable memory ballooning
   • CSet a memory limit to the VM's full memory size
   • DSet a memory reservation equal to the VM's full memory size
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization is deploying VM-Series on ESXi to handle 20 Gbps of traffic. The team wants to use SR-IOV to improve throughput. Which statement about SR-IOV and VM-Series is correct?

   • ASR-IOV supports live migration of VM-Series instances.
   • BSR-IOV is only supported on KVM, not on ESXi.
   • CSR-IOV assigns virtual functions (VFs) to the VM-Series, bypassing the hypervisor's virtual switch and reducing CPU overhead.
   • DSR-IOV requires DPDK to be enabled on the VM-Series to function.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A service provider is deploying VM-Series on KVM to handle 10 Gbps of traffic. The team wants to use DPDK to reduce CPU usage. Which configuration is required to enable DPDK on VM-Series?

   • AUse virtio-net interfaces for all data plane connections.
   • BConfigure the VM-Series with a single vCPU to reduce context switching.
   • CEnable SR-IOV on the physical NIC and assign VFs to the VM-Series.
   • DAllocate dedicated physical cores for DPDK and configure hugepages on the host.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A cloud provider is designing a VM-Series deployment on AHV to handle 50 Gbps of encrypted traffic. Each VM-Series instance can handle 10 Gbps of encrypted traffic. The provider must ensure high availability and minimize the number of instances. Which design is most efficient?

   • ADeploy six VM-Series instances in an active/active cluster behind a load balancer, each sized for 10 Gbps.
   • BDeploy five VM-Series instances in an active/active cluster behind a load balancer, each sized for 10 Gbps.
   • CDeploy two VM-Series instances in active/passive mode, each sized for 25 Gbps.
   • DDeploy one VM-Series instance with 64 vCPUs and QAT to handle the full 50 Gbps.
   Reveal Solution Discussion Select an answer first