nerdexam
CompTIA

CV0-002 · Question #375

A technician deploys multiple virtual clients on the same host and connects them through a virtual switch. The clients use peer-to-peer enabled software to share videos amongst each other. Which of th

The correct answer is B. Software-based firewall. To control and authorize communication between virtual clients on the same host connected by a virtual switch, a software-based firewall is the appropriate solution.

Security

Question

A technician deploys multiple virtual clients on the same host and connects them through a virtual switch. The clients use peer-to-peer enabled software to share videos amongst each other. Which of the following should the technician deploy to ensure only authorized communication is allowed between the virtual clients?

Options

  • AVPN concentrator
  • BSoftware-based firewall
  • CDMZ
  • DHost-based IDS

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    80% (16)
  • C
    5% (1)
  • D
    10% (2)

Why each option

To control and authorize communication between virtual clients on the same host connected by a virtual switch, a software-based firewall is the appropriate solution.

AVPN concentrator

A VPN concentrator is used to manage secure remote access or site-to-site VPN tunnels, not to regulate internal communication between virtual machines on a single host.

BSoftware-based firewallCorrect

A software-based firewall, whether implemented as a virtual appliance or directly on the host operating system, can inspect and filter network traffic between virtual clients connected to a virtual switch, enforcing rules to ensure only authorized peer-to-peer communication occurs.

CDMZ

A DMZ (Demilitarized Zone) is a network segment used to host public-facing services, isolating them from internal networks, and is not designed for controlling internal peer-to-peer VM traffic.

DHost-based IDS

A Host-based IDS (Intrusion Detection System) primarily detects suspicious activities and alerts administrators, but it does not actively prevent or authorize communication as a firewall does.

Concept tested: Virtualization security - VM network isolation

Source: https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/best-practices/run-firewall-on-vms

Topics

#virtualization security#software firewall#virtual switch#network isolation

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice