Examkin

Question

Difficulty: MediumVirtualization Security Considerations and Network Configurations

A network administrator is configuring virtual networking settings for multiple virtual machines (VMs) deployed on a hypervisor host. Match each virtual network interface card (vNIC) mode on the left with its corresponding network access requirement on the right.

  • Bridged ModeBinds the vNIC directly to the physical network card, assigning the VM its own unique IP address on the physical subnet for direct inbound and outbound connectivity.
  • Network Address Translation (NAT) ModeTranslates the VM IP address behind the host system's IP address, allowing outbound external access while concealing the VM from unrequested inbound connections.
  • Host-Only ModeCreates a private virtual switch restricted strictly to communication between hosted VMs and the hypervisor host OS, with no access to external networks.
  • Internal / Private ModeIsolates network communications strictly among virtual machines on the same host switch, blocking all traffic to external networks and the host OS.

Answer

Bridged Mode pairs with direct physical subnet access and unique IP assignment; NAT Mode pairs with outbound external access using host IP address translation; Host-Only Mode pairs with restricted communication between guest VMs and host OS only; Internal / Private Mode pairs with complete network isolation restricted strictly to inter-VM communication.
Each virtual networking mode defines specific communication boundaries between the guest VM, the hypervisor host OS, and external physical networks. Bridged mode treats the VM as an independent entity on the physical subnet. NAT mode uses host address translation for outbound requests. Host-Only mode limits traffic to the host and local VMs. Internal mode restricts traffic exclusively to local VMs on the host.

Step-by-Step Solution

1
Analyze physical local area network integration requirements.
Identify that Bridged Mode connects the VM's vNIC directly to the physical adapter, giving it a separate IP address on the physical LAN.
Bridged networking allows the VM to participate as a full peer node on the physical network.
2
Analyze outbound routing and host protection requirements.
Identify that NAT Mode routes traffic using the host IP address.
NAT mode provides internet connectivity to guest VMs while preventing unsolicited inbound traffic from reaching the VM directly.
3
Evaluate host-to-guest isolated communication requirements.
Identify that Host-Only Mode connects the VM to a virtual switch accessible only by the host OS and other VMs on that switch.
Host-Only mode blocks external physical network connectivity while maintaining access for administrative management from the host.
4
Evaluate sandbox or strictly inter-VM isolation requirements.
Identify that Internal / Private Mode completely isolates traffic to connected VMs only.
Internal networking prevents any traffic from reaching the host OS or external network, creating a secure environment for testing or multi-tier VM communication.

Key Concept

Virtual Network Adapter Operating Modes and Isolation Boundaries
Rate this question

Topics

Virtualization Security Considerations and Network Configurations

More questions from this topic