get-virtualswitch policy exceptions

What are the three configurable security policy exceptions for a virtual switch?