Matt, the network engineer, has been tasked with separating network traffic between virtual machines on a single hypervisor. Which of the following would he implement to BEST address this…

A virtual switch (vSwitch) provides the internal Layer 2 switching infrastructure that connects VMs on the same hypervisor, and is the foundational component required for VM-to-VM communication and traffic control.

NAT translates IP addresses between network zones but does not create logical separation or segmentation between VMs sharing the same hypervisor.

System partitioning divides physical hardware resources (CPU, memory) between partitions, not network traffic between VMs.

Access-lists can filter traffic after it traverses a path, but they do not create the network separation mechanism needed between VM segments.

Disabling spanning tree removes loop prevention from the switching topology and would cause broadcast storms, not traffic separation.

VLANs applied to the virtual switch enable logical traffic segmentation between VMs, ensuring that traffic from one group of VMs cannot reach another group even though they share the same physical host and virtual switch.