A technician deploys multiple virtual clients on the same host and connects them through a virtual switch. The clients use peer-to-peer enabled software to share videos amongst each other. Which of…

A VPN concentrator is designed to aggregate and manage encrypted remote access tunnels between remote users and a network, not to filter or control traffic between virtual machines sharing the same local host.

A software-based firewall can be deployed directly on the virtualization host or integrated with the virtual switch to inspect and filter east-west traffic between virtual clients, allowing administrators to define rules that permit communication only between authorized virtual machines. This approach provides the access control needed to restrict P2P software usage without requiring physical network appliances or changes.

A DMZ is a network architecture segment that isolates publicly accessible services from an internal network, but it does not provide packet-level filtering between virtual machines communicating through the same internal virtual switch.

A host-based IDS passively monitors network traffic for suspicious patterns and generates alerts, but it is a detection-only tool that does not actively block or enforce authorization rules between communicating virtual clients.