A customer has a requirement to implement a next generation firewall (NGFW) to improve security network introspection. The customer wants to apply the NGFW to all workloads exposed both internally and externally. The customer wants the NGFW to work seamlessly with NSX-T Data Center and vSphere.
Which solution should be recommended to the customer? (Choose the best answer.)
The customer requires a next-generation firewall for both internal and external workloads and seamless integration with NSX-T Data Center and vSphere. Applying the NGFW to both internal and external workloads maximizes protection. Additionally, using NSX-T Data Center with Federation allows for unified policy management across multiple environments, which aligns with the customer's requirement to streamline network security policies.
D is the correct answer
C is totally feasible and satisfy the requirements. You can manage the steering rules with federation.
I feel this shoud be A, with C you have no control over DFW policies on external workloads, however A addresses network introspection for External and DFW for internal workloads which NSX can do
NSX Intelligence is not a protection tool. It just monitors flows and let's you click on DFW rules that it suggests based on that.
C, Can't be A as they want to use NGFW both externally and internally, can't be B as that only covers NS, and especially can't be D, as does it not mention the NGFW. Federation can be a use case for integration with NGFW
How would Federation be used in this case?
Correct Answer: C
Only C applies the requirements
A is correct. D is not correct. How NSX Intelligence will help protect external workloads when only works for overlay networks plus is not a security feature.
I will go with D if I ran into this question during exam. NSX Intelligence is designed to plan for firewall rules and for deployment.