nerdexam
Broadcom-VMware

VCP550 · Question #29

A virtual machine is unable to communicate with another virtual machine. Both virtual machines are connected to the Production port group on the same virtual switch and are running on the same host. W

The correct answer is C. The Production port group is configured to use a secondary PVLAN.. Private VLANs can isolate virtual machines within the same port group. A secondary PVLAN configured in isolated mode prevents intra-port-group communication even on the same host and vSwitch.

Configure and Administer vSphere Networking

Question

A virtual machine is unable to communicate with another virtual machine. Both virtual machines are connected to the Production port group on the same virtual switch and are running on the same host. Which configuration is causing the inability of the virtual machines to communicate?

Options

  • ALLDP was enabled instead of CDP for the vSphere Distributed Switch.
  • BPromiscuous Mode has been set to Allow on the Production port group.
  • CThe Production port group is configured to use a secondary PVLAN.
  • DThe speed and duplex settings for the virtual machine vmnics do not match.

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    22% (12)
  • C
    65% (35)
  • D
    9% (5)

Why each option

Private VLANs can isolate virtual machines within the same port group. A secondary PVLAN configured in isolated mode prevents intra-port-group communication even on the same host and vSwitch.

ALLDP was enabled instead of CDP for the vSphere Distributed Switch.

LLDP versus CDP is a link-layer discovery protocol setting that has no effect on the VM-to-VM data plane switching within a vSwitch.

BPromiscuous Mode has been set to Allow on the Production port group.

Setting Promiscuous Mode to Allow causes a port to receive all traffic on the vSwitch, which broadens traffic visibility rather than blocking communication between VMs.

CThe Production port group is configured to use a secondary PVLAN.Correct

Private VLANs use a primary VLAN paired with secondary VLANs to segment traffic at layer 2. An isolated secondary PVLAN blocks all communication between ports in that secondary VLAN, so VMs on the same Production port group cannot reach each other despite sharing the same vSwitch and host.

DThe speed and duplex settings for the virtual machine vmnics do not match.

Speed and duplex settings on vmnics apply to physical uplinks, but intra-host VM-to-VM traffic is switched entirely within the virtual switch and never traverses physical NICs.

Concept tested: Private VLAN isolated mode blocking intra-port-group VM communication

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.networking.doc/GUID-83A0FB8D-A295-4F7E-8EC8-5DB11B30A7C2.html

Topics

#PVLAN#secondary PVLAN#port group isolation#VM communication

Community Discussion

No community discussion yet for this question.

Full VCP550 Practice