QuestionQ16

Network Virtualization

You are designing a data center network that requires rapidly deploying and removing security features between virtual machines in response to triggered traffic flows. The data center must be able to scale up and down quickly according to traffic load, then release resources when security services are no longer required.

In this scenario, which security-design type would meet this requirement?

  • A a centralized security appliance
  • B a container-based security deployment
  • C a physical security device connected to each host
  • D an all-in-one virtual security device in each host
Explanation

A container-based security deployment can instantiate security functions on demand, scale the number of service instances horizontally as traffic changes, and scale them back down to release compute resources when they are no longer needed. Kubernetes horizontal autoscaling supports automatically increasing and decreasing workload replicas to match observed demand.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!