You administer a Windows Server 2012 R2 server thathas the Hyper-V role installed. The server hosts three
virtual machines (VMs).
One of the VMs is managed by a security engineer. The security engineer must capture traffic on another VM
that is running on the same server.
You need to ensure that the security engineer can access the network traffic information from the target VM.
Which networking feature should you enable?
A.
port mirroring
B.
NIC teaming
C.
protected network
D.
MAC address spoofing
With Port Mirroring, traffic sent to or from a Hyper-V Virtual Switch port is copied and sent to a mirror port. There are a range of applications for port mirroring – an entire ecosystem of network visibility companies exist that have products designed to consume port mirror data for performance management, security analysis, and network diagnostics. With Hyper-V Virtual Switch port mirroring, you can select the switch ports that are monitored as well as the switch port that receives copies of all the traffic.
The following examples configure port mirroring so that all traffic that is sent and received by both MyVM and MyVM2 is also sent to the VM named MonitorVM.
Set-VMNetworkAdapter –VMName MyVM –PortMirroring Source
Set-VMNetworkAdapter –VMName MyVM2 –PortMirroring Source
Set-VMNetworkAdapter –VMName MonitorVM –PortMirroring Destination
http://technet.microsoft.com/en-us/library/jj679878.aspx#bkmk_portmirror
Agreed that A is the answer.