A customer is deploying VMware Cloud Foundation (VCF) in an enterprise environment. During a series of workshops with stakeholders, the following requirements were identified:
The network solution must be capable of complete logical isolation.
The network solution must be capable of supporting independent upgrade cycles for network stacks.
The network solution must be capable of tenant-specific customization of NSX configurations.
The architect has made the following design decisions:
The solution will consist of a single VCF instance.
The solution will include a management domain and two workload domains.
Based on the scenario, which additional design decision meets all of the stated requirements?
Show Answer
Hide Answer
Correct Answer:
D
Dedicated NSX instances per workload domain provide the highest level of logical isolation and allow independent upgrade cycles, fulfilling the requirement of tenant-specific customization. Each workload domain with its own NSX instance can be managed separately, updated independently, and configured with its own security policies, BGP/VRF, segments, and gateways.
NSX Federation could achieve some level of centralization but does not support independent upgrade cycles per domain. A shared NSX instance breaks isolation and would tightly couple upgrade cycles, violating two of the key stated requirements.
VMware Cloud Foundation NSX-T Design Guide -- NSX Instance Design Options
VMware Cloud Foundation 9.0 -- Multi-Tenant Networking Models
