:

The two VMware solutions that can meet the customer's requirement for a self-managed VDI

solution are

D. VMware Horizon and

E. VMware Workspace ONE Access. VMware Horizon is a virtual

desktop and application virtualization platform that enables customers to set up and deploy a virtual

desktop infrastructure in any cloud environment. VMware Workspace ONE Access provides secure

access to applications, data, and devices in any cloud environment.

To deploy an instance of Azure VMware Solutions, an administrator must take the following two

steps:

Create a support request with Microsoft Azure Support to create a host quota. This is required

because Azure VMware Solution hosts are dedicated bare-metal servers that are not shared with

other customers1. The host quota determines the number and size of hosts that can be provisioned

in a subscription1. The host quota can be requested for an eligible Azure plan, such as Microsoft

Enterprise Agreement or Cloud Solution Provider2.

Deploy and configure Microsoft Azure ExpressRoute. This is required because Azure VMware Solution

uses ExpressRoute to connect the private cloud to the Azure virtual network and the on-premises

network3. ExpressRoute provides a secure, high-bandwidth, and low-latency connection that

enables seamless workload migration and hybrid cloud scenarios3. The administrator must deploy

and configure an ExpressRoute circuit, a virtual network gateway, and a virtual

network3. Reference: 1: Deploy and configure Azure VMware Solution, 2: Plan the Azure VMware

Solution deployment, 3: Tutorial: Deploy an Azure VMware Solution private cloud

Customer responsibility “Security in the Cloud” – Customers are responsible for the deployment and

ongoing configuration of their SDDC, virtual machines, and data that reside therein. In addition to

determining the network firewall and VPN configuration, customers are responsible for managing

virtual machines (including in guest security and encryption) and using VMware Cloud on AWS User

Roles and Permissions along with vCenter Roles and Permissions to apply the appropriate controls

for users.

The responsibility for the encryption of virtual machines in VMware Cloud lies with the customer. The

customer is responsible for configuring and managing any encryption or security related settings and

configurations in the virtual machines, such as disk encryption or the configuration of security

protocols. The VMware Cloud Provider Partner (VCPP) is responsible for the overall security of the

cloud environment [1][2], including the encryption of data at rest, but the customer is responsible for

configuring and managing the encryption settings within their virtual machines.

Reference: https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmcaws.encryption/GUID-6F6921CA-44D6-4D9D-B0C0-12C18A545B7C.html

The two steps that the cloud administrator should complete on I/O-intensive workloads to ensure

the best performance possible are to configure the VMware Paravirtual SCSI (PVSCSI) adapter and to

ensure that the VMware hardware version is 7 or later. The PVSCSI adapter provides improved

performance and scalability compared to the LSI Logic Parallel SCSI controller. Additionally, the

hardware version should be 7 or later to ensure that the virtual machine is able to take advantage of

the latest features and enhancements. Enabling the memory hot-add feature and configuring a

maximum of two CPU cores per socket will not improve the performance of I/O-intensive workloads.

https://communities.vmware.com/t5/VMware-Education-Services/Why-does-VMware-refuse-toeducate-their-customers/td-p/2005973

Why does VMware refuse to educate their customers ... - VMware ...

https://communities.vmware.com/t5/VMware-Education-Services/Why-does-VMware-refuse-toeducate-their-customers/td-p/2005973

https://www.vmware.com/pdf/techsupportguide.pdf

VMware Technical Support Guide

https://www.vmware.com/pdf/techsupportguide.pdf

https://vcdx.vmware.com/content/dam/digitalmarketing/vmware/ru/pdf/techpaper/vmwarehorizon-7-application-publishing.pdf

Publishing Applications with VMware Horizon 7

https://vcdx.vmware.com/content/dam/digitalmarketing/vmware/ru/pdf/techpaper/vmwarehorizon-7-application-publishing.pdf

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/VMware_2V0-33.22_/page_15_img_1.jpg

https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/vmc-aws-performance.pdf

VMware Cloud on AWS also includes a paravirtualized SCSI storage adapter, PVSCSI (also called

VMware Paravirtual). The PVSCSI adapter offers a significant reduction in CPU utilization as well as

potentially increased throughput compared to the default virtual storage adapters, and is thus the

best choice for environments with very I/O-intensive guest applications. In order to use PVSCSI,

virtual machine must be using virtual hardware version 7 .or later

https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/vmc-aws-performance.pdf

A private network segment is an isolated network segment that is used for disaster recovery testing.

Private network segments provide a secure and isolated environment for testing, allowing

administrators to test their disaster recovery plans without risking the stability of their production

environment. Private network segments also provide additional security, as they are not connected

to the public internet, making them less vulnerable to external attacks. [1]

[1] https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmcaws.networking/GUID-64D7A8F3-45C9-4A83-8528-A8C2A2C7001D.html

https://cloud.google.com/vmware-engine/docs/concepts-vlans-subnets

Option C is the best design decision that meets the network connectivity requirements. Configuring a Direct Connect from headquarters to VMware Cloud on AWS with a private VIF will ensure high- throughput data transfer and eliminate the single point of failure. To ensure that all network traffic between on-premises company locations is sent over a private IP address space, a route-based IPsec VPN tunnel should be configured as a secondary method of connectivity from headquarters to VMware Cloud on AWS, taking care to enable the "Use VPN as Backup to Direct Connect" option. Finally, dual, redundant, route-based IPsec VPN connections should be configured from each regional office to VMware Cloud on AWS. A route-based VPN creates an IPsec tunnel interface and routes traffic through it as dictated by the SDDC routing table. A route-based VPN provides resilient, secure access to multiple subnets. When you use a route-based VPN, new routes are added automatically when new networks are created. https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws-networkingsecurity/GUID-5AF45CE6-FA53-45C0-83E5-25F8E3A055E9.html

The problem could be that the new password is not synchronized with the password that is displayed

for the Default vCenter user account. The administrator must make sure that the same password is

used in both the vSphere Client and the VMware Cloud console in order for the user to access the

account. Changing the password in one place does not automatically change it in the other, so this

must be done manually.

https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-awsoperations/GUID-7F72EA90-5BFA-404F-A2EC-B93070A52A67.html

VMware HCX Network Extension is a layer-two bridging function initiated at the source site1. It

allows customers to extend their on-premises networks to a VMware Cloud SDDC without changing

the IP addresses of the virtual machines2. When extending a network, a corresponding NSX segment

is created at the destination site1. The network segment type that HCX Network Extension creates in

the VMware Cloud SDDC is Extended2. This means that the network is stretched across both sites

and the routing is handled at the source site2. The Extended network segment type preserves the

network identity and connectivity of the virtual machines that are migrated or created on the

extended segment at the remote site2. Reference: 1: Extending Networks Using VMware HCX, 2:

About VMware HCX Network Extension