What is a performance advantage of NSX-T networking for namespaces compared to VLAN networking?

Simpler troubleshooting due to flat L2 network

Better scalability due to overlay segmentation

Higher throughput due to hardware offload

Lower latency due to L2 bridging

Which mechanism is used to enforce namespace-level network isolation in NSX-T networking?

NSX-T Distributed Firewall rules

What is a security consideration when using VLAN networking for namespaces?

VLANs provide distributed firewall capabilities

VLANs are susceptible to VLAN hopping attacks

VLANs automatically encrypt traffic

VLANs provide micro-segmentation

Which existing vSphere networking component is required for VLAN networking in vSphere with Kubernetes?

VMware NSX Data Center for vSphere

A security-conscious organization is deploying a multi-tenant vSphere with Kubernetes environment. They want to ensure that a compromised workload in one namespace cannot scan or attack workloads in another namespace. They also want to prevent a compromised workload from communicating with known malicious external IP addresses. Which combination of NSX-T features should they use?

Distributed firewall rules to block inter-namespace traffic and a DNS sinkhole to block malicious domains.

A dedicated Tier-1 gateway per namespace and a network address translation (NAT) rule to block malicious IPs.

Kubernetes NetworkPolicies to block inter-namespace traffic and NSX-T distributed firewall rules to block egress to malicious IPs.

NSX-T distributed firewall rules to block inter-namespace traffic and NSX-T security policies with groups to block egress to malicious IPs.

VMwareVCAP-VCF VKS (3V0-24.25)

Domain 3Objective 2

Evaluate the Implication for Namespace Network Options VCAP-VCF-VKS Practice Questions (Page 3)

Part of the Plan and Design domain, which makes up ~21% of our current practice bank.

20questions here

4free pages

9concepts

9 Concepts in This Objective

Namespace Network Options Overview
NSX-T Networking for Namespaces
VLAN Networking for Namespaces
Namespace Network Isolation
Load Balancing Options for Namespaces
Network Policies in Namespaces
Performance and Scalability Implications
Security Implications of Network Choices
Compatibility and Integration Considerations

Questions 11–15

11foundation · easy
What is a performance advantage of NSX-T networking for namespaces compared to VLAN networking?
Select an answer first
12foundation · easy
Which mechanism is used to enforce namespace-level network isolation in NSX-T networking?
Select an answer first
13foundation · easy
What is a security consideration when using VLAN networking for namespaces?
Select an answer first
14foundation · easy
Which existing vSphere networking component is required for VLAN networking in vSphere with Kubernetes?
Select an answer first
15application · medium
A security-conscious organization is deploying a multi-tenant vSphere with Kubernetes environment. They want to ensure that a compromised workload in one namespace cannot scan or attack workloads in another namespace. They also want to prevent a compromised workload from communicating with known malicious external IP addresses. Which combination of NSX-T features should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to VCAP-VCF-VKS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by VMware. “VCAP-VCF-VKS” is a trademark of its owner, used for identification only.