A cloud architect is creating a solution to allow virtual machines to be provisioned into a DMZ. Security requirements specify that all traffic between DMZ and internal networks must pass through the firewall. As long as this requirement is met, DMZ zone and internal zone resources must be pooled to reduce costs.
Which action is the most likely to meet these requirements?
A. Ensure that DMZ virtual machines reside on a dedicated DMZ compute cluster that is separate from compute clusters that are used for non-DMZ virtual machines.
B. Ensure that DMZ virtual port groups are separate from non-DMZ virtual port groups.
C. Ensure that any Fibre Channel traffic for DMZ virtual machines utilizes a dedicated VSAN that is separate from non-DMZ virtual machines.
D. Ensure that iSCSI traffic for DMZ virtual machines is on separate networks from iSCSI traffic for internal virtual machines.
E. Ensure that DMZ virtual machine traffic uses dedicated physical NICs.
