The city must encrypt a site-to-site path from the primary civic data center to a backup municipal site. Which NSX-T feature terminates that crypto?
Select an answer to reveal the explanation.
Short Explanation
A crypto tunnel between two civic halls is a VPN, and NSX terminates IPsec or L2 VPN on an Edge. Encrypted vMotion, a vSAN witness, and BLAST are not that site-to-site tunnel.
Full Explanation
NSX VPN services, including IPsec and L2 VPN, terminate on Edge nodes to provide encrypted connectivity between the primary civic data center and a backup municipal site. A crypto tunnel between two civic halls is a VPN, and NSX terminates that crypto on an Edge. vSphere vMotion encryption protects a live-migration stream, not a site-to-site VPN. A vSAN stretched witness supports storage quorum and is not IPsec. Horizon BLAST is a desktop protocol and is not the municipal site-to-site VPN. Exam caveat: associate questions expect Edge-terminated VPN for site-to-site crypto, not migration encryption or EUC display protocols. Operational check: configure an IPsec session under Networking VPN on the Edge-backed gateway path, bring up the tunnel to the backup site, pass a test flow, and reject vMotion encryption, vSAN witness, and BLAST as the VPN feature. Document the civic rationale in the change record so the next operator can restate why the correct control matches the agency outcome, why each distractor fails by concept, and which NSX Manager view confirms the result after publish. Document the civic rationale in the change record so the next operator can restate why the correct control matches the agency outcome, why each distractor fails by concept, and which NSX Manager view confirms the result after publish.