Home » VMware » 2V0-642 » Which three methods can be used by the NSX Distributed Firewall to discover IP addresses?
Which three methods can be used by the NSX Distributed Firewall to discover IP addresses? (Choose three.)
A. DHCP Snooping
B. IP Sets
C. Spoofguard configured for Trust on First Use.
D. VMware Tools installed on every guest virtual machine.
E. ARP Snooping
Correct Answer: ADE
Explanation/Reference:
Reference https://kb.vmware.com/selfservice/microsites/ search. do?lanauaae=en_US&cmd=displavKC&externalld=2125437
A, D, E are correct
“Before NSX 6.2, if VMware Tools was not installed on a VM, its IP address was not learned. In NSX 6.2 you can configure clusters to detect virtual machine IP addresses with DHCP snooping, ARP snooping, or both. ”
https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.2/com.vmware.nsx.admin.doc/GUID-B0CD973F-67DD-49D1-8B9E-8C404F92E528.html