An architect is helping an organization with the Logical Design of an NSX-T Data Center solution. This information was gathered during the Assessment Phase:
* Data between two networks connected over a public network needs to be encrypted.
* Certificate authentication is required.
* Dynamic route learning is preferred.
Which should the architect include in their design?

• A. Deploy a Tler-0 gateway in Active/Active mode. Configure policy-based IPSec VPN with SHA256withRSA as the hash algorithm.
• B. Deploy a Tler-0 gateway InActive/Active mode. Configure route-based IPSec VPN with SHA512wlthRSA as the hash algorithm.
• C. Deploy a Tier-0 gateway in Active/Standby mode. Configure route-based IPSec VPN with SHA512withRSA as the hash algorithm.
• D. Deploy a Tier-0 gateway in Active/Standby mode. Configure policy-based IPSec VPN with SHA256withRSA as the hash algorithm.

An architect is helping an organization with the Logical Design of an NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
* On premises deployment required.
* Use the existing network infrastructure.
* ESXi hosts have 2 pNICs with only 1 available for use.
* High availability will be required across all ports in any proposed solution.
* N-VDS will be required across the infrastructure in the future.
Which should thearchitect include in their design?

• A. Use VDS for management and workload traffic.
• B. Use a N-VDS for management traffic andVDS- for workload traffic.
• C. Use N-VDS for management and workload traffic.
• D. Use a VDS for management traffic and N-VDS- for workload traffic.

An architect is helping an organization redesign a previously installed NSX-T Data Center solution.
This information was gathered during the Assessment Phase:
* The company's headquarters Is located In Eastern Europe and there are several regional offices.
* The company owns several smaller companies around theglobe.
* All locations must access the RESTful API of NSX-T through the internal network for automating the creation of segments.
* The company's HQ does not have any internal Public Key Infrastructure.
* NSX-T has already been installed at the company's headquarters.
The architect has determined self-signed certificates should be replaced with certificates signed by a Public Key Infrastructure. Which should the architect recommend in their design?

• A. Replace the NSX Managers certificate with a certificate that Is signed by Company Public KeyInfrastructure.
• B. Replace the certificate on all three NSX Managers with a certificate that is signed by a third-party Public Key Infrastructure.
• C. Replace the NSX-T root certificate with an internal Certificate Authority.
• D. Replace vCenter root certificate with a certificate signed by a third-party Certificate Authority.

Refer to the exhibits.
An architect is helping an organization with the Conceptual Design of an NSX-T Data Center solution. The conceptual design includes these requirements, assumptions, constraints, and risks:
* Critical applications must run across sites without changing IP address.
* Business continuity and disaster recovery (BCDR) plans will leverage a second site running vSphere.
* RTO/RPO must be reduced for recovery of applications on secondary site.
* IT Teams require automation tools for configuration.
Which Conceptual Design would the architect recommend to the customer?

• A. Design Option 2
• B. Design Option 1
• C. Design Option 4
• D. Design Option 3