VCP-DCV vSphere Security Practice Question
A company uses vSphere with Tanzu to run container workloads. The security team requires that all container traffic between namespaces be encrypted. What is the best approach to achieve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy NSX-T and enable the Network Encryption feature for East-West traffic.
NSX-T's Network Encryption feature provides encryption for East-West traffic between namespaces, meeting the security requirement. Option A is incorrect because the NSX Container Plugin has been deprecated and is not the best approach. Option B is incorrect as vSAN encryption only protects data at rest, not in transit. Option D is incorrect because while Calico can encrypt traffic, it lacks the native integration and centralized management that NSX-T offers with vSphere with Tanzu.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the NSX Container Plugin with IPsec to encrypt traffic.
Why it's wrong here
NSX Container Plugin is deprecated; NSX-T is the current solution.
- ✗
Enable vSAN encryption to encrypt data at rest and assume it covers in-transit traffic.
Why it's wrong here
vSAN encryption protects data on disk, not network traffic.
- ✓
Deploy NSX-T and enable the Network Encryption feature for East-West traffic.
Why this is correct
NSX-T provides encryption for container overlay traffic as part of its micro-segmentation capabilities.
- ✗
Install a third-party CNI like Calico with IPsec enabled.
Why it's wrong here
Third-party CNIs are not officially supported for vSphere with Tanzu and lack full integration.
Go deeper
Related to this question
About these practice questions
One of 498 original VCP-DCV practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.