10.2 Design VM-Series Deployments Across Hypervisors (e.g., AHV, KVM, ESXi) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is deploying VM-Series on KVM to inspect 4 Gbps of traffic with threat prevention enabled. The data sheet indicates that 4 vCPUs are needed for 4 Gbps with threat prevention. The host has 16 physical cores with hyperthreading disabled. What is the recommended vCPU allocation?

   • AAllocate 2 vCPUs and enable hyperthreading to double the throughput.
   • BAllocate 4 vCPUs without pinning and allow the hypervisor to schedule them dynamically.
   • CAllocate 4 vCPUs and pin them to 4 physical cores.
   • DAllocate 8 vCPUs to provide headroom for traffic spikes.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a virtual function (VF) in the context of SR-IOV?

   • AA lightweight PCIe function that can be assigned to a VM for direct network access
   • BA virtual network interface created by the hypervisor for each VM
   • CA type of virtual switch
   • DA software-based packet processing engine
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An enterprise runs VM-Series on an ESXi host with two NUMA nodes, each with 16 cores. The firewall VM is configured with 12 vCPUs and 64 GB RAM. The administrator notices throughput is lower than expected and suspects NUMA remote memory access. Which change should be made to improve performance?

   • ADisable hyperthreading on the host to reduce NUMA node complexity.
   • BConfigure the VM to prefer NUMA node 0 and set memory affinity to that node.
   • CSet the VM's CPU affinity to all 32 physical cores across both NUMA nodes.
   • DIncrease the VM's memory reservation to 128 GB to force the hypervisor to allocate memory from both nodes.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary benefit of assigning an SR-IOV virtual function to VM-Series?

   • AIncreased storage capacity
   • BEnhanced management plane security
   • CReduced CPU overhead for network I/O
   • DSimplified firewall policy management
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An administrator is deploying VM-Series on a two-socket ESXi host with hyperthreading enabled. The VM will use 16 vCPUs and 64 GB RAM. The administrator notices that throughput is inconsistent and suspects hyperthreading is causing cache contention. What is the best course of action?

   • ADisable hyperthreading on the host and pin the VM-Series vCPUs to physical cores on a single NUMA node.
   • BKeep hyperthreading enabled and set CPU affinity to all logical processors.
   • CDisable hyperthreading but allow the VM-Series vCPUs to span both NUMA nodes.
   • DKeep hyperthreading enabled and increase the VM-Series vCPU count to 32.
   Reveal Solution Discussion Select an answer first