2V0-21.23 Question 178
Select 3An administrator is tasked with configuring advanced networking options on a Virtual Standard Switch (VSS) to ensure improved security and traffic management. They need to configure a port group to block promiscuous mode, prevent forged transmits, and disable MAC address changes. Which combination of security settings should the administrator apply to achieve this?
- A
Enable Promiscuous Mode
- B
Reject Promiscuous Mode
- C
Accept Forged Transmits
- D
Reject Forged Transmits
- E
Accept MAC Address Changes
- F
Reject MAC Address Changes
Show answer and explanation
Correct answers: B, D, F
Explanation
To configure advanced security options on a Virtual Standard Switch (VSS), the administrator must set Promiscuous Mode to 'Reject' to prevent VMs from intercepting traffic not intended for them, set Forged Transmits to 'Reject' to ensure that VMs cannot send packets with a falsified MAC address, and set MAC Address Changes to 'Reject' to ensure that VMs cannot use a MAC address different from their assigned one. These settings together provide enhanced security and traffic management for the VSS.
- A. Incorrect.
Enabling Promiscuous Mode allows a virtual machine to intercept all network traffic on the vSwitch, violating security. This is not the correct setting to block promiscuous mode.
- B. Correct.
Rejecting Promiscuous Mode ensures that virtual machines cannot listen to traffic not intended for them, improving security.
- C. Incorrect.
Accepting Forged Transmits allows virtual machines to send packets with a source MAC address different from their assigned MAC address, which violates security. This is not the desired configuration.
- D. Correct.
Rejecting Forged Transmits ensures that only packets with the correct source MAC address are sent, improving traffic integrity and security.
- E. Incorrect.
Accepting MAC Address Changes allows virtual machines to use a MAC address that differs from the one assigned to them, which can pose a security risk. This is not the desired configuration.
- F. Correct.
Rejecting MAC Address Changes ensures that virtual machines cannot use a different MAC address than the one assigned, which improves security.