policy exception vmware

What are the three configurable security policy exceptions for a virtual switch?