Question

Difficulty: EasyVirtualization Security Considerations and Network Configurations

A technician is setting up a testing virtual machine (VM) on a desktop computer. The VM requires access to the Internet to download system updates, but it must share the physical host computer's single IP address and be masked from receiving direct, unsolicited incoming connections from the local physical network. Which virtual network interface configuration mode should the technician select?

  1. NAT (Network Address Translation)Answer
  2. B
    Bridged
  3. C
    Host-Only
  4. D
    Internal

Answer

NAT (Network Address Translation) mode provides Internet connectivity to the virtual machine while sharing the host's network identity and hiding the VM from external inbound traffic.
NAT (Network Address Translation) mode configures the hypervisor to act as a virtual router/DHCP server. The guest VM receives an internal IP on a private virtual subnet, and all outbound traffic is translated through the host system's physical IP address. This grants the VM outbound access to download updates while isolating it from unsolicited inbound network traffic.

Step-by-Step Solution

1
Identify the network access requirements for the virtual machine
The VM requires outbound Internet access for updates while being protected from direct inbound access from the physical local network.
Security policy and functionality dictate that the VM should connect out through the host's IP address without having a unique, publicly accessible address on the local network.
2
Compare virtual networking modes against the requirements
NAT grants outbound Internet connectivity by translating VM traffic through the host's IP, while Bridged exposes the VM to the LAN, and Host-Only/Internal block Internet access entirely.
NAT acts as a virtual router/firewall between the guest VM and the physical host interface.

Key Concept

Virtual Machine Network Adapter Modes and Isolation Characteristics
Estimated Time:45s
Rate this question