Free VMware 2V0-33.22PSE Practice Exam with Questions & Answers | Set: 2

https://blogs.vmware.com/cloud/2019/07/02/dhcp-dhcp-relay-vmware-cloud-aws/

To create a new network segment in the software-defined data center that utilizes the corporate DHCP server to provide IP addresses, the proper sequence is to create a DHCP relay profile, create a new segment attached to the Tier-1 gateway, and configure the segment DHCP config to utilize the new DHCP relay profile1. This is because the DHCP relay profile contains the IP address of the external DHCP server and the DHCP relay agent that forwards the DHCP requests and responses between the segment and the DHCP server1. The segment must be attached to the Tier-1 gateway, which is the edge device that provides routing and firewall services for the segment2. The segment DHCP config allows the administrator to specify the DHCP type, the DHCP relay profile, and the DHCP options for the segment3. References: 1: Configure Segment DHCP Properties - VMware Docs, 2: Create or Modify a Network Segment - VMware Docs, 3: Segment DHCP Config - VMware Docs

Customer responsibility “Security in the Cloud” – Customers are responsible for the deployment and ongoing configuration of their SDDC, virtual machines, and data that reside therein. In addition to determining the network firewall and VPN configuration, customers are responsible for managing virtual machines (including in guest security and encryption) and using VMware Cloud on AWS User Roles and Permissions along with vCenter Roles and Permissions to apply the appropriate controls for users.

The responsibility for the encryption of virtual machines in VMware Cloud lies with the customer. The customer is responsible for configuring and managing any encryption or security related settings and configurations in the virtual machines, such as disk encryption or the configuration of security protocols. The VMware Cloud Provider Partner (VCPP) is responsible for the overall security of the cloud environment [1][2], including the encryption of data at rest, but the customer is responsible for configuring and managing the encryption settings within their virtual machines. Reference: https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws.encryption/GUID-6F6921CA-44D6-4D9D-B0C0-12C18A545B7C.html

Gateway firewalls are used to protect east-west traffic, while distributed firewalls control the I/O path to and from a VM's virtual NIC. Furthermore, gateway firewalls and distributed firewalls cannot share the same sets of rules and policies.

Example B illustrates the benefit of cloud computing where an organization can manage its cloud resources by using different cloud providers that are separate and isolated from each other. This allows the organization to make use of features and services offered by different cloud providers in order to benefit from the best of different services.

Example C illustrates the benefit of cloud computing where a business can store infrequently accessed data in the cloud in order to benefit from reduced on-premises storage costs, as cloud storage is usually cheaper than on-premise storage.

Example E illustrates the benefit of cloud computing where a developer can code an application in a cloud-based environment, and, with a few simple commands, deploy the application on the business website. This eliminates the need for the developer to set up and manage the application on their own, as the cloud platform handles the deployment and hosting of the application.

Example F illustrates the benefit of cloud computing where a large amount of storage can be made available in seconds using a cloud option. This is useful for businesses that require a large amount of storage but don't have the resources to set up and manage their own storage solution.

For more information on the benefits of cloud computing, see the VMware official documentation at https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws.getting-started/GUID-F0A2F338-A6A7-49AD-B158-CFFCA2F29C1B.html.

Route-based IPSec VPNs provide the flexibility to dynamically learn when new networks are created, making them the ideal choice for establishing connectivity between an on-premises data center and VMware Cloud. Route-based IPSec VPNs use the Border Gateway Protocol (BGP) to dynamically learn and propagate routes over the VPN tunnel, allowing for scalable and secure connectivity. [1]

[1] https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws.networking/GUID-EDA5A6E5-6C5B-4F66-9C2F-2C6D4F6EF8F6.html

VMware Tanzu Mission Control provides a central platform to manage and view all Tanzu Kubernetes clusters and workloads running in the environment. It allows administrators to set policies across multiple clusters, set up cluster identities, monitor cluster health and performance, and much more. Tanzu Mission Control also provides access to a variety of cloud-native tools, such as Kubernetes Dashboard, Helm, and Kubeapps.

Publishing Applications with VMware Horizon 7

https://vcdx.vmware.com/content/dam/digitalmarketing/vmware/ru/pdf/techpaper/vmware-horizon-7-application-publishing.pdf

VMware Technical Support Guide

https://www.vmware.com/pdf/techsupportguide.pdf

Quick-Start Tutorial for VMware Dynamic Environment Manager ...

https://techzone.vmware.com/resource/quick-start-tutorial-vmware-dynamic-environment-manager

"VMware Tanzu® Mission ControlTM is a centralized management platform for consistently operating, managing, and securing Kubernetes infrastructure and modern applications across teams and clouds. It provides a global view of all of the Kubernetes clusters. You can use the resource hierarchy to manage and enforce consistent policies across Kubernetes clusters. "

Private L2 VPN: To migrate running VMs between SDDCs in different geographical locations.

You use a private layer 2 (L2) VPN to extend an on-premises network to your cloud SDDC. This extended network is a single subnet with a single broadcast domain.

You can use L2 VPNs to migrate VMs to and from your cloud SDDC, for disaster recovery, or for dynamic access to cloud computing resources (often called cloud bursting).

VM migrations across an L2 VPN support VLAN tagging and GENEVE frame encapsulation when migrating between a cloud SDDC to another SDDC.

The L2 VPN tunnel extends layer 2 networks across geographic sites. VMs can move across sites (using vSphere vMotion) and keep the same IP addresses using an L2 VPN.

An extended network segment is required for a cloud administrator to create a virtual machine that requires layer 2 connectivity to an on-premises workload. Extended networks allow for the virtual machines to communicate directly with the on-premises workload while remaining isolated from the public cloud. This allows for the virtual machines to access the same services and workloads as the on-premises workloads while still remaining secure.

The two use cases that apply to NSX logical routing are A. You must provide external connectivity to VMs and containers, and B. Your organization must provide connectivity between VMs and containers that are connected to different segments. NSX logical routing allows you to provide external connectivity to VMs and containers, and to provide layer 3 connectivity between VMs and containers that are connected to different segments. It does not provide layer 2 connectivity between VMs and microservices or intrinsic security for VMs connected to different segments.