ISC2 Certified Cloud Security Professional (CCSP) Practice Question

Your team is building a new multitenant IaaS cloud on VMware vSphere 7 that will use NSX-T Data Center for software-defined networking. Tenants may bring overlapping RFC 1918 address spaces, so the design must isolate each tenant's east-west traffic while scaling far beyond the 4,094-VLAN limit of IEEE 802.1Q-all without requiring any changes to the existing physical switches. Which NSX-T feature best meets these requirements?

  • Building GRE tunnels between tenant gateways on the perimeter firewall

  • Extending traditional 802.1Q VLAN trunks across the top-of-rack physical switches

  • Implementing private VLANs (PVLANs) on the vSphere distributed virtual switch

  • Creating NSX-T overlay segments that use Geneve encapsulation and 24-bit VNIs for each tenant

ISC2 Certified Cloud Security Professional (CCSP)
Cloud Platform & Infrastructure Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot