Exam 3V0-42.20 topic 1 question 15 discussion

Actual exam question from VMware's 3V0-42.20

Question #: 15
Topic #: 1

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
✑ Data between two networks connected over a public network needs to be encrypted.
✑ Certificate authentication is required.
✑ Dynamic route learning is preferred.
Which selection should the architect include in their design? (Choose the best answer.)

A. Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.
B. Deploy a Tier-0 gateway in Active/Active mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
C. Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512 with RSA as the hash algorithm.
D. Deploy a Tier-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA512 with RSA as the hash algorithm.

Show Suggested Answer

Suggested Answer: C 🗳️

by MJ86 at Feb. 12, 2021, 6:13 a.m.

Comments

Submit Cancel

MJ86

Highly Voted 11 months, 3 weeks ago

C is the correct answer. Route-based IPSec VPN provides tunneling on traffic based on the static routes or routes learned dynamically. Tier-0 gateway in the active-standby state supports the following services: NAT Load balancing Stateful firewall VPN Reference Docs: https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-C0E5AF10-576D-493A-A079-C4C95D8F5373.html https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A.html#GUID-7B0CD287-C5EB-493C-A57F-EEA8782A741A

upvoted 8 times

...

Rawatam

Most Recent 3 months, 2 weeks ago

C is correct due to dynamic route learning.

upvoted 3 times

...

Me_Loi1

9 months, 2 weeks ago

C is correct

upvoted 4 times

...

diegof1

10 months ago

C is correct. https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-DF689847-252E-451E-84B5-DB507CC010AC.html

upvoted 4 times

...

tungdt

11 months, 2 weeks ago

C is correct

upvoted 2 times

...

VMwareARCHI