A company is extending a subnet from their on-premises environment to an NC2 cluster on Azure. The company is considering using either a Virtual Tunnel End Point (VTEP) or a layer 2 subnet Extension over VPN.
In which two scenarios would it be advantageous to use VTEP for this requirement? (Choose two.)
Scenario Analysis:
A . Connectivity between sites already provides encryption: Using VTEP in this scenario is advantageous because VTEP does not inherently provide encryption. If encryption is already provided, VTEP can be effectively used without additional security concerns.
D . Multiple remote Availability Zones exist to add to the same VTEP-based extended Layer 2 subnet: VTEP is well-suited for scenarios where multiple remote Availability Zones need to be connected to the same extended Layer 2 subnet. This allows for efficient management and seamless connectivity across different zones.
Scenarios B and C:
B . Only one remote Availability Zone exists that needs the subnet extended: This scenario does not leverage the strengths of VTEP, as it is better suited for multiple zones.
C . Connectivity between sites already does not provide encryption: Using VTEP without existing encryption is not ideal as VTEP itself does not encrypt the traffic.
Conclusion: VTEP is advantageous when encryption is already in place and when multiple remote zones need to be connected to the same extended subnet.
Nutanix NC2 Networking Guide
Azure Networking Documentation