NSX-T Distributed Firewall for Secure Containerized Applications

B.

The correct answer is B. Micro-segmentation.

NSX-T Distributed Firewall provides a micro-segmentation solution that helps customers achieve security for newly migrated containerized applications. Micro-segmentation is the practice of dividing a network into smaller segments to isolate workloads and restrict unauthorized access. With NSX-T Distributed Firewall, administrators can create security policies that are enforced at the virtual machine (VM) or container level.

NSX-T Distributed Firewall also provides visibility and control over east-west traffic within a data center. This is particularly important for containerized applications that are highly distributed and may communicate with multiple services across different hosts. The firewall policies can be applied to VMs and containers as they move within the data center, providing consistent security regardless of where the workloads are running.

NSX-T Distributed Firewall also includes advanced threat detection capabilities such as intrusion prevention and detection, network introspection, and distributed denial-of-service (DDoS) protection. This helps ensure that even if an attacker gains access to one segment of the network, they will be unable to move laterally and compromise other segments.

In conclusion, NSX-T Distributed Firewall provides micro-segmentation capabilities that help customers achieve security for newly migrated containerized applications. It enables administrators to create security policies that are enforced at the virtual machine or container level, providing consistent security regardless of where the workloads are running.