A customer is planning to migrate their current legacy networking infrastructure to a virtual environment,...

1. Why NSX Federation is the Best Choice (Correct Answer - B)

NSX Federation enables centralized management of multiple NSX deployments across different sites.

Distributed Firewall (DFW) ensures security segmentation per tenant, even across data centers.

Tier-0 Gateway provides global routing for multi-tenancy, ensuring efficient traffic flow between sites.

2. Why Other Options are Incorrect

(A - NSX Multi-Site Instead of Federation):

NSX Multi-Site only provides disaster recovery capabilities, not global policy enforcement.

(C - Gateway Firewall Instead of Distributed Firewall):

Gateway Firewalls secure North-South traffic but do not provide per-tenant segmentation at the workload level.

(D - Tier-1 Instead of Tier-0 for Multi-Tenancy):

Multi-tenancy is best implemented at the Tier-0 level to handle global routing efficiently.

3. NSX Federation Best Practices for Multi-Tenancy and DR

Deploy a Global Manager (GM) for centralized security policy enforcement.

Ensure Tier-0 Gateway is configured in Active-Active mode for scalability.

Use BGP for dynamic routing between data centers.

VMware NSX 4.x Reference:

NSX Federation Architecture and Multi-Tenancy Guide

Disaster Recovery and Multi-Site Network Extension in NSX-T