nerdexam
(ISC)2

CISSP · Question #593

Why might a network administrator choose distributed virtual switches instead of stand-alone switches for network segmentation?

The correct answer is D. To reduce the risk of configuration errors. Distributed virtual switches (dvSwitches) centralize switch configuration management across multiple hosts, reducing the risk of per-host misconfiguration that is common with stand-alone virtual switches.

Submitted by lars.no· Mar 5, 2026Communication and Network Security

Question

Why might a network administrator choose distributed virtual switches instead of stand-alone switches for network segmentation?

Options

  • ATo standardize on a single vendor
  • BTo ensure isolation of management traffic
  • CTo maximize data plane efficiency
  • DTo reduce the risk of configuration errors

How the community answered

(20 responses)
  • A
    5% (1)
  • C
    5% (1)
  • D
    90% (18)

Why each option

Distributed virtual switches (dvSwitches) centralize switch configuration management across multiple hosts, reducing the risk of per-host misconfiguration that is common with stand-alone virtual switches.

ATo standardize on a single vendor

Distributed virtual switches do not require or enforce single-vendor standardization; they are a management architecture feature unrelated to vendor selection.

BTo ensure isolation of management traffic

While VLANs and port groups on any switch type can isolate management traffic, this is not the distinguishing architectural advantage of distributed virtual switches over stand-alone switches.

CTo maximize data plane efficiency

Data plane efficiency is not the primary benefit of distributed virtual switches; the data plane still operates locally on each host regardless of whether the switch is distributed or stand-alone.

DTo reduce the risk of configuration errorsCorrect

Distributed virtual switches maintain a single, centralized configuration plane managed at the vCenter level, meaning port groups, policies, and settings are consistently applied across all hosts in the datacenter simultaneously. This eliminates the need for administrators to manually replicate identical configurations on each stand-alone switch, which is a primary source of configuration drift and human error in large environments.

Concept tested: Distributed virtual switch benefits for configuration consistency

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.networking.doc/GUID-375B45C7-684C-4C51-BA3C-70E48DFABF04.html

Topics

#Network segmentation#Virtual networking#Distributed virtual switches#Configuration management

Community Discussion

No community discussion yet for this question.

Full CISSP Practice