Question

Difficulty: EasyVirtualization Security Considerations and Network Configurations

A system administrator is configuring a virtual machine (VM) on a hypervisor. The VM must be able to communicate with other VMs on the same hypervisor host, but it must be completely isolated from the external physical network. Additionally, the administrator wants to prevent this single VM from exhausting the physical host's memory resources. Which TWO of the following configurations should the administrator implement?

  1. Configure the virtual network switch mode to Internal / Host-OnlyAnswer
  2. Set explicit RAM allocation limits and resource caps on the virtual machineAnswer
  3. C
    Configure the virtual network adapter to use Bridged mode
  4. D
    Assign a static APIPA address (169.254.x.x) to the physical network card

Answer

To isolate the VM from the external network while maintaining inter-VM communication, the administrator should set the virtual network switch mode to Internal / Host-Only. To safeguard host memory resources, explicit RAM allocation limits should be set on the VM.
Selecting an Internal or Host-Only virtual switch configuration restricts guest network adapter traffic strictly within the hypervisor host environment, keeping it off the physical network. Setting resource limits prevents virtual machine resource overcommitment from crashing the host server.

Step-by-Step Solution

1
Identify the network isolation requirement.
Internal / Host-Only virtual network mode isolates VM traffic to the internal virtual switch, preventing communication with the physical LAN.
Bridged networking exposes the VM directly to the physical network, violating isolation goals.
2
Identify the resource security requirement.
Configuring vCPU and RAM caps/limits on guest VM settings prevents host memory exhaustion.
Without resource limits, a guest VM could request excessive host RAM, degrading hypervisor stability.

Key Concept

Virtual Machine Isolation and Resource Allocation Management
Rate this question