10.2 Design VM-Series Deployments Across Hypervisors (e.g., AHV, KVM, ESXi) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which hypervisor feature can be used to expose hardware crypto acceleration to a VM-Series instance?

   • ANUMA node affinity
   • BPCI passthrough
   • CSR-IOV
   • DMemory ballooning
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A network team is deploying VM-Series on KVM to handle 15 Gbps of traffic. The host has 32 physical cores. The team wants to use DPDK to accelerate packet processing. Which prerequisite must be met for DPDK to work with VM-Series?

   • AConfigure the VM-Series with a single vCPU to reduce context switching.
   • BDedicate at least 4 physical cores to DPDK and configure hugepages for memory.
   • CEnable SR-IOV on the physical NIC and assign virtual functions to the VM.
   • DUse virtio-net interfaces for all data plane connections.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   On ESXi, which setting is used to configure NUMA node affinity for a VM-Series instance?

   • ANUMA node affinity in the VM's advanced settings
   • BStorage controller type in the VM's hardware settings
   • CMemory reservation in the VM's resource settings
   • DNetwork adapter type in the VM's hardware settings
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A financial firm is deploying VM-Series on ESXi to inspect 20 Gbps of TLS-encrypted traffic. The current VM has 16 vCPUs and 32 GB RAM, but CPU utilization reaches 90% during peak hours. The firm cannot add more physical hosts. Which option provides the most effective way to reduce CPU load while maintaining throughput?

   • AEnable DPDK on the VM-Series to accelerate packet processing.
   • BConfigure the VM-Series to use SR-IOV virtual functions for all data interfaces.
   • CIncrease the VM-Series vCPU count to 24 and enable CPU hot-add.
   • DEnable Intel QuickAssist Technology (QAT) passthrough to the VM-Series for crypto offload.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is deploying VM-Series on ESXi to inspect 25 Gbps of traffic. The team wants to use SR-IOV to improve network throughput. Which configuration is required for SR-IOV to work with VM-Series?

   • AEnable DPDK on the VM-Series to take advantage of SR-IOV.
   • BConfigure the VM-Series to use the vmxnet3 adapter for all interfaces.
   • CAssign the physical NIC directly to the VM-Series using PCI passthrough.
   • DEnable SR-IOV on the physical NIC and assign virtual functions (VFs) to the VM-Series data plane interfaces.
   Reveal Solution Discussion Select an answer first