nerdexam
CompTIA

SY0-301 · Question #76

Matt, the IT Manager, wants to create a new network available to virtual servers on the same hypervisor, and does not want this network to be routable to the firewall. How could this BEST be accomplis

The correct answer is C. Create a virtual switch.. Creating a virtual switch within the hypervisor establishes an internal-only network that is visible solely to the virtual machines on that hypervisor. It does not connect to any physical network interface and therefore is not routable to the firewall or beyond. Creating a VLAN w

Security architecture

Question

Matt, the IT Manager, wants to create a new network available to virtual servers on the same hypervisor, and does not want this network to be routable to the firewall. How could this BEST be accomplished?

Options

  • ACreate a VLAN without a default gateway.
  • BRemove the network from the routing table.
  • CCreate a virtual switch.
  • DCommission a stand-alone switch.

How the community answered

(31 responses)
  • A
    13% (4)
  • B
    3% (1)
  • C
    77% (24)
  • D
    6% (2)

Explanation

Creating a virtual switch within the hypervisor establishes an internal-only network that is visible solely to the virtual machines on that hypervisor. It does not connect to any physical network interface and therefore is not routable to the firewall or beyond. Creating a VLAN without a default gateway (A) would still use physical infrastructure. Removing a route from the routing table (B) is a workaround that does not truly isolate the network. A stand-alone physical switch (D) defeats the purpose of keeping everything virtual and isolated within the hypervisor.

Topics

#virtual switch#network isolation#hypervisor networking#VLAN

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice