Which of the following statements about FusionCompute: security group is wrong?

Question

Options

• AThe security group only supports virtual machine NICs in normal kernel mode
• BOne NIC of a virtual machine can only be added to one security group
• CAll virtual machine NICs in the same security group will use the security group rules for network
• DThe security group rule is a configuration strategy based on the traffic blacklist

• A
  18% (8)
• B
  2% (1)
• C
  7% (3)
• D
  73% (33)

Explanation

Option D is wrong because security group rules in FusionCompute operate as a whitelist, not a blacklist - only traffic explicitly permitted by the rules is allowed, and all other traffic is denied by default. Options A, B, and C are all accurate statements: security groups do only support NICs in normal kernel mode (not DPDK/SR-IOV mode), a single VM NIC can belong to only one security group at a time, and all NICs within the same security group share the same rule set for network filtering.

Memory tip: Think of a security group as a "VIP guest list" (whitelist) - if you're not on the list, you don't get in. A blacklist would be the opposite ("banned list"), which is how D incorrectly describes it. Anytime you see "blacklist" paired with security group rules on this exam, that's your flag to mark it wrong.

No community discussion yet for this question.