試験3V0-21.25 トピック3 問題46 スレッド

To support centralized security inspection or "Service Chaining" in VCF 9.0, administrators leverage the routing flexibility of the NSX VPC. By configuring Static Routes within the tenant VPC, the administrator can override the default system-generated path to the internet. Specifically, the "0.0.0.0/0" (Default Route) can be pointed to the Interface IP of a security appliance or a load balancer residing within a shared or dedicated Security VPC. This forces all egress traffic from the application VPC to transit through the security layer for deep packet inspection or logging before the Transit Gateway forwards it to the external network.
While the Distributed Firewall (Option C) provides micro-segmentation, it does not redirect traffic to external appliances; only custom routing logic-managed through the VPC's routing table-can satisfy the requirement for centralized service insertion in a multi-VPC regional design.