Matt, the IT Manager, wants to create a new network available to virtual servers on the same hypervisor, and does not want this network to be routable to the firewall. How could this BEST be…

Creating a VLAN without a default gateway still involves the physical switching infrastructure and does not guarantee the network is invisible to the firewall or other physical devices.

Removing a network from the routing table affects reachability at layer 3 but the network would still physically exist on the switch fabric and potentially be accessible at layer 2.

A virtual switch (vSwitch) is a software-defined switch that exists entirely within the hypervisor, allowing VMs on the same host to communicate with each other without any traffic traversing the physical network or reaching the firewall. Because it has no uplink to a physical NIC, the network is inherently isolated and non-routable to external devices.

Commissioning a stand-alone physical switch would achieve isolation but requires additional hardware, making it far from the best or most efficient solution for virtual servers on the same hypervisor.