nerdexam
Broadcom-VMware

VCP550 · Question #56

A network auditing team has observed activity from a virtual machine that may be an organization policy security breach. The vSphere administrator needs to stop network traffic from the virtual…

The correct answer is C. Enable Port Blocking on each vSphere Distributed Switch portgroup in the organization, then block. Port Blocking on vSphere Distributed Switch portgroups is the correct mechanism to stop network traffic from a specific virtual machine.

Configure and Administer vSphere Networking

Question

A network auditing team has observed activity from a virtual machine that may be an organization policy security breach. The vSphere administrator needs to stop network traffic from the virtual machine. Which step should the administrator take?

Options

  • AEnable Port Blocking on the vSphere Standard Switches in the organization and block the port on
  • BEnable Port Blocking on each vSphere Standard Switch portgroup in the organization, then block the
  • CEnable Port Blocking on each vSphere Distributed Switch portgroup in the organization, then block
  • DEnable Port Blocking on the vSphere Distributed Switches in the organization and block the port on

How the community answered

(37 responses)
  • A
    14% (5)
  • B
    5% (2)
  • C
    70% (26)
  • D
    11% (4)

Why each option

Port Blocking on vSphere Distributed Switch portgroups is the correct mechanism to stop network traffic from a specific virtual machine.

AEnable Port Blocking on the vSphere Standard Switches in the organization and block the port on

vSphere Standard Switches do not support the Port Blocking feature, which is available only on vSphere Distributed Switches.

BEnable Port Blocking on each vSphere Standard Switch portgroup in the organization, then block the

Port Blocking is not a capability of vSphere Standard Switch portgroups; the feature exists only on vSphere Distributed Switch portgroups.

CEnable Port Blocking on each vSphere Distributed Switch portgroup in the organization, then blockCorrect

Port Blocking is a feature exclusive to vSphere Distributed Switches; enabling it at the portgroup level activates the policy, and the administrator can then override it on the individual distributed port connected to the offending VM, blocking only that VM's traffic without impacting other VMs on the portgroup.

DEnable Port Blocking on the vSphere Distributed Switches in the organization and block the port on

Applying Port Blocking at the vSphere Distributed Switch level would affect all VMs on the switch rather than targeting only the specific offending virtual machine.

Concept tested: vSphere Distributed Switch port blocking for targeted VM isolation

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.networking.doc/GUID-E8B51A37-B4C0-4B4E-9B5C-2C7A5F5D8C97.html

Topics

#port blocking#vSphere Distributed Switch#network security#port group isolation

Community Discussion

No community discussion yet for this question.

Full VCP550 Practice