2V0-21.23 · Question #30
An administrator is asked to configure a security policy at the port group level of a standard switch. The following requirements must be met: - The security policy must apply to all virtual machines
The correct answer is D. Promiscuous mode set to accept. To ensure all traffic is forwarded to VMs on portgroup-1, regardless of its destination, the administrator must configure promiscuous mode to accept at the port group level of the standard switch.
Question
An administrator is asked to configure a security policy at the port group level of a standard switch. The following requirements must be met:
- The security policy must apply to all virtual machines on portgroup-
- All traffic must be forwarded, regardless of the destination.
Which security policy must the administrator configure?
Options
- AForged transmits set to reject
- BMAC address changes set to accept
- CPromiscuous mode set to reject
- DPromiscuous mode set to accept
How the community answered
(43 responses)- A2% (1)
- C2% (1)
- D95% (41)
Why each option
To ensure all traffic is forwarded to VMs on portgroup-1, regardless of its destination, the administrator must configure promiscuous mode to accept at the port group level of the standard switch.
Setting forged transmits to 'reject' prevents a VM from sending packets with a source MAC address different from its own, which is unrelated to receiving all traffic regardless of destination.
Setting MAC address changes to 'accept' allows a VM to change its effective MAC address, which does not address the requirement for forwarding all traffic regardless of destination.
Setting promiscuous mode to 'reject' would prevent VMs from seeing traffic not explicitly destined for them, directly contradicting the requirement to forward all traffic regardless of destination.
Setting promiscuous mode to 'accept' on a vSphere standard switch port group allows all virtual machines connected to that port group to receive all network traffic observed on the switch, regardless of the traffic's intended destination MAC address.
Concept tested: vSphere Standard Switch Promiscuous Mode
Source: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-networking/GUID-A5868694-DA74-4C21-9F91-1C04F0E708D5.html
Topics
Community Discussion
No community discussion yet for this question.