A security team is validating policy settings in a vSphere environment.
By default, which security policy is set to reject on a vSphere Standard Switch?
A.
Promiscuous mode
B.
MAC address changes
C.
Forged transmit
D.
Use explicit failover
Explanation:
A is correct
By default, Promiscuous Mode is set to Reject. MAC Address Changes and Forced Transmits are set to Accept.
0
0
When Does A Forged Transmit Make Sense?
A common poster child for Forged Transmits is the use of Microsoft’s Network Load Balancing (NLB) unicast mode configuration.
In this scenario, multiple virtual machines are participating in the NLB cluster and all have the same MAC address. Other cases revolve around the concept of utilizing a common MAC address to own a cluster resource when one or more nodes fail. Realistically, you won’t encounter all that many use cases that require Forged Transmits, and the default DISTRIBUTED switch security setting is to Reject any MAC impersonations (the STANDARD switch still Accepts them by default).
0
0
https://communities.vmware.com/servlet/JiveServlet/showImage/2-2246095-28625/Promiscuous.jpg
0
0
http://pubs.vmware.com/vsphere-55/index.jsp#com.vmware.vsphere.networking.doc/GUID-891147DD-3E2E-45A1-9B50-7717C3443DD7.html
0
0