VCP550 · Question #56
A network auditing team has observed activity from a virtual machine that may be an organization policy security breach. The vSphere administrator needs to stop network traffic from the virtual…
The correct answer is C. Enable Port Blocking on each vSphere Distributed Switch portgroup in the organization, then block. Port Blocking on vSphere Distributed Switch portgroups is the correct mechanism to stop network traffic from a specific virtual machine.
Question
A network auditing team has observed activity from a virtual machine that may be an organization policy security breach. The vSphere administrator needs to stop network traffic from the virtual machine. Which step should the administrator take?
Options
- AEnable Port Blocking on the vSphere Standard Switches in the organization and block the port on
- BEnable Port Blocking on each vSphere Standard Switch portgroup in the organization, then block the
- CEnable Port Blocking on each vSphere Distributed Switch portgroup in the organization, then block
- DEnable Port Blocking on the vSphere Distributed Switches in the organization and block the port on
How the community answered
(37 responses)- A14% (5)
- B5% (2)
- C70% (26)
- D11% (4)
Why each option
Port Blocking on vSphere Distributed Switch portgroups is the correct mechanism to stop network traffic from a specific virtual machine.
vSphere Standard Switches do not support the Port Blocking feature, which is available only on vSphere Distributed Switches.
Port Blocking is not a capability of vSphere Standard Switch portgroups; the feature exists only on vSphere Distributed Switch portgroups.
Port Blocking is a feature exclusive to vSphere Distributed Switches; enabling it at the portgroup level activates the policy, and the administrator can then override it on the individual distributed port connected to the offending VM, blocking only that VM's traffic without impacting other VMs on the portgroup.
Applying Port Blocking at the vSphere Distributed Switch level would affect all VMs on the switch rather than targeting only the specific offending virtual machine.
Concept tested: vSphere Distributed Switch port blocking for targeted VM isolation
Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.networking.doc/GUID-E8B51A37-B4C0-4B4E-9B5C-2C7A5F5D8C97.html
Topics
Community Discussion
No community discussion yet for this question.