A county lists endpoint malware EDR on staff laptops and east-west isolation between tax and GIS VMs. Which product on this exam's use-case family supports the network-isolation need?
Select an answer to reveal the explanation.
Short Explanation
EDR on laptops is an endpoint story, not the NSX story. When the county needs isolation between tax and GIS VMs, that is NSX-T micro-segmentation. Do not award Carbon Black as the NV answer.
Full Explanation
A county that lists laptop EDR alongside east-west isolation between tax and GIS VMs is describing two different control planes. For this exam’s network-isolation use-case family, NSX-T Data Center provides micro-segmentation between those VMs through the Distributed Firewall. Carbon Black Cloud addresses endpoint malware and belongs to VCP-SEC territory; it is not the NSX overlay or micro-segmentation product. Workspace ONE UEM manages devices and compliance; it is not the Distributed Firewall for tax and GIS VMs. Horizon delivers virtual desktops; it is not the east-west isolation product for those application VMs. Exam caveat: distractors intentionally borrow real VMware security and EUC brands—award NSX only when the need is network or micro-segmentation, and never treat Carbon Black as an NV answer. Operational check: tag tax and GIS workloads, place them in NSX groups, publish allow-list DFW rules for required ports, and keep laptop EDR as a separate Carbon Black control outside the NSX rule table so auditors see the split clearly. In municipal operations, record the chosen control and the rejected distractors in the change ticket so future on-call staff understand which failure modes would affect city services. Re-validate after the next maintenance window that the same design still holds for the current NSX build and the agency workloads that depend on it.