Exam AZ-802 Topic 1 Question 124 Discussion

Explanation:

Processor configuration: Expose virtualization extensions. Network configuration: Enable MAC address spoofing.
Nested virtualization, running the Hyper-V role inside a VM so that VM itself can host further, nested virtual machines, requires the parent VM ' s virtual processor to expose the hardware virtualization extensions (Intel VT-x/EPT or AMD-V equivalents) that the guest hypervisor inside VM1 needs to create and run its own nested VMs; this is enabled with the -ExposeVirtualizationExtensions $true parameter on Set-VMProcessor, and without it, VM1 ' s own attempt to enable Hyper-V would fail because the guest OS would detect no hardware virtualization support at all. Increasing the number of virtual processors or enabling processor compatibility mode (which is for live-migrating between hosts with different CPU generations) do nothing to expose the extensions nested virtualization depends on. On the networking side, nested VMs inside VM1 use their own, further-virtualized MAC addresses that VM1 ' s own virtual network adapter did not originally advertise to HV1 ' s external switch; unless MAC address spoofing is enabled on VM1 ' s virtual network adapter, HV1 ' s virtual switch will drop outbound frames from those nested VM MAC addresses as spoofed traffic, silently blocking their connectivity to the physical LAN. Enabling NIC Teaming, Router Guard, or port mirroring on VM1 ' s adapter address entirely different scenarios (link aggregation, rogue DHCP/router protection, and traffic monitoring, respectively) and would not allow nested VMs ' distinct MAC addresses to reach the physical network.