3V0-25.25: Advanced VMware Cloud Foundation 9.0 Networking

By Broadcom · Question Mode

QuestionQ21

VerifiedUnknown / not found in official Broadcom sources

An administrator is bringing a new research VPC into its R&D project.

Requirements include:

  • Application teams must remain isolated while still consuming shared DNS.
  • The physical core network exposes BGP only on VLAN 300-dc-edge-uplink-pg, which terminates on the Edge cluster.
  • Any north-south connectivity to the datacenter must pass through Edge.
  • East-west paths should stay on hosts where possible.
  • Direct Internet egress is not permitted.

Which combination of Transit Gateway (TGW) mode, VPC subnet type, and routing configuration satisfies these requirements?

Explanation

Centralized external connectivity places the TGW and Tier-0 service routers on NSX Edge VMs, enabling the BGP connection on the Edge-terminated VLAN and ensuring datacenter north-south traffic traverses Edge. A Private-TGW subnet permits VPCs attached to the same TGW to consume shared DNS while retaining project-scoped routing and avoiding external advertisement. Importing only necessary datacenter prefixes and filtering or disabling VPC-route export enforces least-route exposure and prevents unintended egress.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!