Final answer:
DHCP Guard prevents a rogue DHCP server by blocking DHCP ACK packets, ensuring network security by stopping unauthorized IP distribution.
Step-by-step explanation:
DHCP Guard prevents a virtual machine from being used as a rogue DHCP server by blocking DHCP Reply messages, which includes the DHCP ACK packet. When DHCP Guard is enabled on a Hyper-V virtual network, it will not allow the virtual machine to issue DHCP responses, which effectively prevents the VM from acting as a DHCP server. This is crucial in maintaining network security and preventing unauthorized devices from distributing IP addresses that could lead to network conflicts or breaches.
DHCP Guard prevents a virtual machine from being used as a rogue DHCP server by blocking DHCP Discover packets. When a client device wants to obtain an IP address from a DHCP server, it sends a DHCP Discover packet to the network. DHCP Guard monitors these packets and ensures that only authorized DHCP servers respond. If it detects a DHCP Discover packet coming from a virtual machine, it will block it, preventing the virtual machine from acting as a rogue DHCP server.