VCP-DCV Configure and Manage vSphere Networking Practice Question
Which THREE are valid methods to isolate and secure management traffic on a vSphere Distributed Switch? (Choose three.)
⚠ Common exam trap
Many exam-takers confuse load-balancing policies (like Route based on IP hash) with security features, or they overcomplicate isolation by choosing Private VLANs instead of the simpler and more reliable VLAN assignment.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assign a specific VLAN ID to the management port group.
Assigning a specific VLAN ID to the management port group isolates management traffic at Layer 2 by tagging frames with a unique VLAN identifier. This prevents unauthorized access from other VLANs and ensures that management traffic is logically separated from other network traffic on the same vSphere Distributed Switch.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Route based on IP hash on the management port group.
Why it's wrong here
Load balancing does not isolate.
- ✓
Assign a specific VLAN ID to the management port group.
Why this is correct
VLANs provide isolation.
- ✗
Use Private VLANs on the management port group.
Why it's wrong here
PVLANs are for VM isolation, not management.
- ✓
Configure the ESXi firewall to restrict management access.
Why this is correct
Firewall rules control access.
- ✓
Create a dedicated VMkernel port group for management.
Why this is correct
Dedicated port groups isolate traffic.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every VCP-DCV question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.