VMware vSphere 6 Beta — Question 21

Which three methods can be used by the NSX Distributed Firewall to discover IP addresses? (Choose three.)

Answer options

• A. DHCP Snooping
• B. IP Sets
• C. Spoofguard configured for Trust on First Use.
• D. VMware Tools installed on every guest virtual machine.
• E. ARP Snooping

Correct answer: A, D, E

Explanation

The correct answers are A, D, and E because DHCP Snooping helps track IP addresses assigned by DHCP servers, VMware Tools provides IP address information from guest VMs, and ARP Snooping monitors ARP packets for IP-to-MAC address mappings. Option B, IP Sets, does not discover IP addresses but rather defines groups for firewall rules, and option C, Spoofguard, is related to preventing spoofing rather than discovering IPs.