A security audit has revealed that a virtual machine on vSwitch1 is receiving all traffic sent to the
virtual switch, violating corporate policy. The vSphere administrator examines the properties for
vSwitch1, as shown in the exhibit:
— Exhibit —
– Exhibit
Which configuration explains why the virtual machine is receiving all traffic sent to vSwitch1?
A.
The Production port group has the Promiscuous Mode policy set to Accept.
B.
vSwitch1 has the Promiscuous Mode policy set to Reject.
C.
The Network Failure Detection policy on the Production port group is set to Link Status plus
Beaconing.
D.
The Network Failure Detection policy on vSwitch1 is set to Link Status only.
Can someone please explain why ‘A’ is the correct answer?
The graphic is wrong, but the concept is correct.
Promiscuous mode would allow all VMs in on that vswitch / port group see all other traffic on that vswitch.
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1002934
You can actually set the Promiscuous mode at the vSwitch and portgroup level. So what you really want is a exhibit of the Production portgroup.