To ensure a hypervisor's VM can communicate with others on the host while keeping traffic from leaving the host network, which action is appropriate?

To ensure a hypervisor's VM can communicate with others on the host while keeping traffic from leaving the host network, which action is appropriate?

• A. Install and configure a virtual switch
• B. Enable external routing on the VM
• C. Disable the VM's network adapter
• D. Use a hardware firewall on the host

Answer: (A)

Virtual networking on a hypervisor uses a virtual switch as the internal hub that links the VMs’ virtual NICs. Installing and configuring a virtual switch creates the network path that allows VMs on the same host to communicate with each other and with the host itself. By design, you can set this switch to an internal or host-only configuration (no uplink to a physical NIC) so the traffic stays on the host and doesn’t leak out to the broader network, while still enabling inter-VM and host communication. Enabling external routing on a VM would push traffic onto the physical network, defeating the goal of keeping traffic inside the host. Disabling the VM’s network adapter would prevent any connectivity. Using a hardware firewall on the host can filter traffic, but it doesn’t establish the necessary internal connectivity between the VMs and the host by itself.

Virtual networking on a hypervisor uses a virtual switch as the internal hub that links the VMs’ virtual NICs. Installing and configuring a virtual switch creates the network path that allows VMs on the same host to communicate with each other and with the host itself. By design, you can set this switch to an internal or host-only configuration (no uplink to a physical NIC) so the traffic stays on the host and doesn’t leak out to the broader network, while still enabling inter-VM and host communication.

Enabling external routing on a VM would push traffic onto the physical network, defeating the goal of keeping traffic inside the host. Disabling the VM’s network adapter would prevent any connectivity. Using a hardware firewall on the host can filter traffic, but it doesn’t establish the necessary internal connectivity between the VMs and the host by itself.