nerdexam
Broadcom-VMware

2V0-21.23 · Question #30

An administrator is asked to configure a security policy at the port group level of a standard switch. The following requirements must be met: - The security policy must apply to all virtual machines

The correct answer is D. Promiscuous mode set to accept. To ensure all traffic is forwarded to VMs on portgroup-1, regardless of its destination, the administrator must configure promiscuous mode to accept at the port group level of the standard switch.

Installing, Configuring, and Setup

Question

An administrator is asked to configure a security policy at the port group level of a standard switch. The following requirements must be met:

  • The security policy must apply to all virtual machines on portgroup-
  • All traffic must be forwarded, regardless of the destination.

Which security policy must the administrator configure?

Options

  • AForged transmits set to reject
  • BMAC address changes set to accept
  • CPromiscuous mode set to reject
  • DPromiscuous mode set to accept

How the community answered

(43 responses)
  • A
    2% (1)
  • C
    2% (1)
  • D
    95% (41)

Why each option

To ensure all traffic is forwarded to VMs on portgroup-1, regardless of its destination, the administrator must configure promiscuous mode to accept at the port group level of the standard switch.

AForged transmits set to reject

Setting forged transmits to 'reject' prevents a VM from sending packets with a source MAC address different from its own, which is unrelated to receiving all traffic regardless of destination.

BMAC address changes set to accept

Setting MAC address changes to 'accept' allows a VM to change its effective MAC address, which does not address the requirement for forwarding all traffic regardless of destination.

CPromiscuous mode set to reject

Setting promiscuous mode to 'reject' would prevent VMs from seeing traffic not explicitly destined for them, directly contradicting the requirement to forward all traffic regardless of destination.

DPromiscuous mode set to acceptCorrect

Setting promiscuous mode to 'accept' on a vSphere standard switch port group allows all virtual machines connected to that port group to receive all network traffic observed on the switch, regardless of the traffic's intended destination MAC address.

Concept tested: vSphere Standard Switch Promiscuous Mode

Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-networking/GUID-A5868694-DA74-4C21-9F91-1C04F0E708D5.html

Topics

#standard switch#port group security#promiscuous mode#network configuration

Community Discussion

No community discussion yet for this question.

Full 2V0-21.23 Practice