Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

VMware 6V0-21.25 Exam - Topic 3 Question 10 Discussion

Distributed IDS cannot be implemented on which of the following?
A) Standard switch portgroup
B) Distributed portgroup
C) NSX backed VLAN segment
D) NSX backed Overlay Segment

VMware 6V0-21.25 Exam - Topic 3 Question 10 Discussion

Actual exam question for VMware's 6V0-21.25 exam
Question #: 10
Topic #: 3
[All 6V0-21.25 Questions]

Distributed IDS cannot be implemented on which of the following?

Show Suggested Answer Hide Answer
Suggested Answer: A

VMware vDefend Distributed IDS/IPS performs deep packet inspection right at the virtual machine's network interface card (vNIC). To intercept this traffic at the hypervisor kernel level, it requires the advanced networking hooks and abstraction provided by modern virtual switches.

It fully supports workloads connected to modern NSX Overlay Segments, NSX VLAN Segments, and traditional vSphere Distributed Switches (vDS). However, legacy vSphere Standard Switches (vSS) lack the centralized management plane, distributed architecture, and necessary kernel APIs required to enforce NSX-based distributed security features. Therefore, you cannot implement Distributed IDS on a standard switch portgroup.


by Truman at Jun 26, 2026, 09:25 PM

Limited Time Offer

25%

Off

Get Premium 6V0-21.25 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Shawna
3 days ago
I feel like A could be a contender too.
upvoted 0 times
...
Hyun
9 days ago
Agreed, D makes sense. Overlay segments are tricky.
upvoted 0 times
...
Nobuko
14 days ago
I think it's D) NSX backed Overlay Segment.
upvoted 0 times
...
Shelton
19 days ago
Totally agree with Cheryl, Overlay Segment is a no-go!
upvoted 0 times
...
Lisha
24 days ago
Wait, are we sure about D? That seems off.
upvoted 0 times
...
Johna
29 days ago
No way, it's A) Standard switch portgroup for sure!
upvoted 0 times
...
Kenneth
1 month ago
I thought it could work on B) Distributed portgroup?
upvoted 0 times
...
Cheryl
1 month ago
It's definitely D) NSX backed Overlay Segment.
upvoted 0 times
...
Eden
1 month ago
I recall that distributed portgroups are generally compatible, but I’m not clear on the specifics for the other options. This is tricky!
upvoted 0 times
...
Lyndia
2 months ago
I’m uncertain, but I think distributed IDS can be implemented on NSX backed VLAN segments. Could it be the overlay segment that’s the issue?
upvoted 0 times
...
Antonio
2 months ago
I feel like we went over a similar question in practice, and it was about NSX backed segments. Maybe it's related to that?
upvoted 0 times
...
Floyd
2 months ago
I think I remember something about distributed IDS not working well with standard switch portgroups, but I'm not completely sure.
upvoted 0 times
...

Save Cancel