Exam 3V0-21.21 topic 1 question 43 discussion

I'd say it is C. The virtual infrastructure environment must connect application virtual machines and management services to separate VLANs

C. The virtual infrastructure environment must connect application virtual machines and management services to separate VLANs Process of elimimation and seperating services by VLAN will increase security. A. The virtual infrastructure environment must connect application virtual machines and management services to new physical network switches NO - "No budget is available in the short term for additional platform investment." B. The virtual infrastructure environment must connect application virtual machines and management services to separate distributed virtual switches (DVS) NO - "Recently, a security-related issue with a virtual machine caused all management services to become unavailable." It never specified what type of Virtual machine had the security related issue D. The virtual infrastructure environment must connect management services to a vSphere standard switch (VSS) NO - this does not increase security.

A >> There is no budget for additional switches B & D >> Choosing between DVS and VSS will not make any difference to segregate the management and application virtual machines C >> It is the only solution here to segregate management and applications VMs at network level. And VLANs are part of Layer 2, they can be used.

C, network separation

VLANs is a zero touch money mitigation

VLANs should resolve the concerns

Another stupid question. Here the answer B with two VDS allow to separate two network broadcasts domain because you are using two virtual switches. The answer C, oh 02 layers two separete with 02 vlans is a obvious shit but the real problem here is why you will connect the virtual infrastructure (with must be worded as applications ans services vms workload domain) and management environment?? There is a requiment for connecting this two environments? The vms will access infractructure services like the vCenter to cause another datacenter down LoL - Just fireup all this shit certification team making stupid question.

Okay but layer 2, shouldn't that be vSS?

C. The virtual infrastructure environment must connect application virtual machines and management services to separate VLANs