When configuring security policies in Fabric Composer, what must be configured to isolate traffic between virtual machines?

Question

Options

• AVLAN Routing
• BMicrosegmentation
• CLink Aggregation
• DSpanning Tree Protocol

• A
  2% (1)
• B
  91% (43)
• C
  2% (1)
• D
  4% (2)

Explanation

Microsegmentation is correct because it is the security mechanism specifically designed to isolate traffic between individual virtual machines by applying granular policies at the workload level - even when VMs share the same physical host or network segment. In Fabric Composer (and similar SDN/SDDC platforms), microsegmentation uses software-defined firewalling to enforce east-west traffic controls between VMs.

• A (VLAN Routing) is wrong because VLANs segment traffic at the network layer but are a traditional construct - they don't provide the fine-grained, per-VM policy control that microsegmentation does, and they're not a "security policy" configuration in Fabric Composer.
• C (Link Aggregation) is wrong because it combines multiple physical links for bandwidth/redundancy - it has nothing to do with traffic isolation or security policy.
• D (Spanning Tree Protocol) is wrong because STP prevents Layer 2 loops in switched networks - it's a loop-prevention mechanism, not a traffic isolation or security tool.

Memory tip: Think of micro as "tiny fence around each VM." Microsegmentation = micro-perimeter per workload. If a question mentions VM-to-VM traffic isolation or east-west security in a software-defined environment, microsegmentation is almost always the answer.

No community discussion yet for this question.