Two transit fare-collection VMs share the same NSX-T overlay segment. What is true about east-west inspection?
Select an answer to reveal the explanation.
Short Explanation
Sharing a hallway does not skip the checkpoint at each office door. Distributed Firewall sits on the vNIC, so two fare VMs on the same segment still get inspected—no physical hairpin required.
Full Explanation
NSX-T Distributed Firewall is enforced in the hypervisor at each vNIC, independent of L2 adjacency. Same-segment east-west conversations remain DFW flows and do not need to hairpin through a physical firewall or the Edge. Treating them as north-south or as Carbon Black-only visibility misses the overlay inspection model.