2V0-21.23 Question 64
Select 3You are configuring a vSphere Distributed Switch (vDS) for a virtualized environment. The organization requires that all virtual machines in a specific port group must limit outbound traffic to 500 Mbps, ensure inbound traffic is not throttled, and prevent MAC spoofing. Which combination of networking policies should you configure to meet these requirements?
- A
Traffic Shaping with an enforced average bandwidth and peak bandwidth for outbound traffic
- B
Traffic Shaping with no limits on inbound traffic
- C
Port Security to enforce MAC address learning limits
- D
Port Mirroring to monitor MAC spoofing attempts
- E
NetFlow to analyze and control traffic patterns
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the requirements, Traffic Shaping should be configured to enforce outbound traffic limits while leaving inbound traffic unrestricted. Port Security is necessary to prevent MAC spoofing. Port Mirroring and NetFlow are monitoring tools and do not address the specified requirements in this scenario.
- A. Correct.
Traffic Shaping is used to enforce bandwidth limits on outbound traffic. By configuring an average bandwidth and peak bandwidth, you can ensure outbound traffic does not exceed 500 Mbps.
- B. Correct.
Traffic Shaping can also be configured to not impose any restrictions on inbound traffic, meeting the requirement of unthrottled inbound traffic.
- C. Correct.
Port Security policies can prevent MAC spoofing by restricting the number of MAC addresses learned on a port and dropping unauthorized traffic.
- D. Incorrect.
Port Mirroring is used for monitoring traffic by duplicating it to a designated port, but it does not prevent MAC spoofing.
- E. Incorrect.
NetFlow is used for traffic analysis and monitoring, but it doesn't provide mechanisms to enforce bandwidth limits or prevent MAC spoofing.