Examkin

Question

Difficulty: HardVirtualization Security Considerations and Network Configurations

An enterprise network technician is configuring a virtual machine (VM) to host an internal application testing environment. The VM requires outbound access to the internet to download software updates, but corporate security policy strictly forbids the VM from being directly addressable or reachable by other physical workstations on the local area network (LAN). During an audit, the technician discovers that physical workstations on the physical subnet can directly ping and initiate Remote Desktop Protocol (RDP) sessions to the VM using an IP address provided by the building's physical DHCP server. Which virtual network configuration is currently active on the VM, and what setting should be applied to satisfy the security requirement?

  1. Bridged mode is currently active; reconfigure the virtual network interface card (vNIC) to Network Address Translation (NAT) mode.Answer
  2. B
    Host-Only mode is currently active; reconfigure the virtual network interface card (vNIC) to Bridged mode.
  3. C
    NAT mode is currently active; reconfigure the virtual network interface card (vNIC) to Internal networking mode.
  4. D
    Internal networking mode is currently active; reconfigure the virtual network interface card (vNIC) to Host-Only mode.

Answer

Bridged mode is currently active; reconfigure the virtual network interface card (vNIC) to Network Address Translation (NAT) mode.
Bridged mode connects the virtual machine directly to the physical network segment, enabling it to request an IP address from the physical network's DHCP server and making it reachable by external physical endpoints. To satisfy the policy requirement of granting outbound internet access while preventing external LAN workstations from initiating direct incoming connections, the virtual adapter must be changed to NAT mode.

Step-by-Step Solution

1
Analyze the reported connectivity behavior and IP address assignment.
The guest VM obtained an IP address directly from the physical DHCP server on the host's local network segment and allows incoming RDP sessions from physical LAN workstations.
Bridged networking binds the vNIC directly to the host's physical network adapter, causing the guest VM to behave as an independent physical host on the local subnet.
2
Evaluate the security policy requirements against virtual network interface modes.
The policy mandates outbound internet access for updates while blocking incoming connections and addressability from physical LAN workstations.
Bridged mode violates this policy by exposing the VM directly to the physical LAN.
3
Select the correct remediation mode.
Configuring the vNIC for NAT mode uses the hypervisor's internal virtual router to translate guest traffic through the host's physical IP address.
NAT provides outbound connectivity to external networks while blocking unrequested inbound connection attempts initiated from external physical endpoints.

Key Concept

Virtualization Network Interface Modes (Bridged vs NAT vs Host-Only vs Internal)
Estimated Time:2m 0s
Rate this question

Topics

Virtualization Security Considerations and Network Configurations

More questions from this topic