Evaluate the Implication for Namespace Network Options VCAP-VCF-VKS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a security benefit of using NSX-T networking for namespaces?

   • AIt provides encryption for all traffic
   • BIt provides micro-segmentation with Distributed Firewall
   • CIt isolates all namespaces by default
   • DIt eliminates the need for network policies
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A managed service provider (MSP) is building a multi-tenant vSphere with Kubernetes platform using NSX-T. They need to provide network isolation between tenants (namespaces) that is enforced at the infrastructure level, not just at the application level. The MSP also wants to allow tenants to create their own Kubernetes NetworkPolicies for additional intra-namespace segmentation. Which design best meets these requirements?

   • ACreate a separate VDS port group for each tenant and use VLAN tagging for isolation.
   • BUse a single Tier-1 gateway for all tenants and rely on Kubernetes NetworkPolicies for isolation.
   • CCreate a dedicated Tier-1 gateway for each tenant namespace and connect them all to a shared Tier-0 gateway.
   • DPlace all tenants on the same VLAN and use NSX-T distributed firewall rules to isolate them.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A small enterprise is migrating a legacy application to vSphere with Kubernetes. The environment currently uses only standard vSphere networking (VSS/VDS) and does not have NSX-T deployed. The application must be accessible from the existing corporate network via a static IP address. The team wants to minimize new infrastructure components. Which namespace network option should they choose?

   • ANSX-T with Tier-1 gateway and load balancer
   • BNSX-T with Tier-0 gateway only
   • CA Kubernetes ingress controller with a NodePort service
   • DVLAN-backed network with a distributed virtual port group
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which NSX-T component is responsible for providing east-west security within a namespace when using NSX-T networking?

   • ATier-0 gateway
   • BTier-1 gateway
   • CNSX-T Load Balancer
   • DDistributed Firewall
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team is reviewing the network security posture of a vSphere with Kubernetes environment using NSX-T. They want to ensure that a compromised pod in one namespace cannot access the Kubernetes API server. Which mechanism should they use?

   • AA Kubernetes NetworkPolicy that blocks egress to the API server's IP address.
   • BA dedicated Tier-1 gateway for the namespace that has no route to the API server's network.
   • CA network address translation (NAT) rule that hides the API server's IP address.
   • DAn NSX-T distributed firewall rule that blocks traffic from the namespace's segment to the API server's IP.
   Reveal Solution Discussion Select an answer first