A technician is deploying virtual machines for multiple customers on a single physical host to reduce power consumption in a data center. Which of the following should be recommended to isolate the…

A virtual firewall controls and filters traffic between defined network segments but does not itself create the logical broadcast-domain boundaries that VLANs establish between VMs.

HIPS monitors and protects individual VM operating systems against intrusion attempts but does not segment or isolate network traffic between VMs.

Virtual switches operate at Layer 2 and segment VM traffic into separate VLANs, creating distinct logical broadcast domains for each customer. This prevents inter-VM traffic at the network layer without requiring additional physical hardware. The combination of a virtual switch and VLAN tagging is the standard multi-tenant isolation mechanism for shared hypervisor environments.

A patch management guide is an administrative process for maintaining software currency and has no technical role in isolating network communication between virtual machines.