Given a Scenario, Troubleshoot VCF Networks with VCF Operations for Networks VCAP-VCF-SUPPORT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A VCF administrator is troubleshooting intermittent packet loss on a specific NSX-T segment. VCF Operations for Networks shows a 'High packet loss' alert on the segment, but the ESXi host's physical NIC counters show no errors or drops. The administrator also notices that the packet loss is only occurring during peak hours. The segment is configured with a distributed firewall rule that uses a security group with a dynamic membership based on VM names. What is the most likely cause of the intermittent packet loss?

   • AThe VCF Operations for Networks collector is not able to keep up with the flow data during peak hours, causing false positive packet loss alerts.
   • BThe Tier-1 gateway is running out of memory during peak hours, causing it to drop packets.
   • CThe physical network is experiencing micro-bursts during peak hours, causing the ESXi host's physical NIC to drop packets.
   • DThe distributed firewall rule is being evaluated for every packet, and the dynamic security group membership is causing a performance bottleneck during peak traffic.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A VCF administrator is troubleshooting a network issue where a VM cannot communicate with a service on another segment. VCF Operations for Networks shows an alert for 'High latency' on the flow between the VMs. The administrator also sees a vSphere alarm for 'Virtual machine network interface reset' on the source VM. What is the most likely root cause?

   • AThe physical network between the two ESXi hosts is congested, causing the high latency.
   • BThe source VM's vNIC is experiencing a driver issue, causing the network interface to reset and leading to high latency.
   • CThe VCF Operations for Networks collector is not synchronized with the vCenter Server, causing inaccurate latency measurements.
   • DThe destination VM's firewall is blocking the traffic, causing the high latency.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is using VCF Operations for Networks to troubleshoot a connectivity issue between two VMs. The flow analytics show that the traffic between the VMs is being dropped. The administrator examines the flow path and sees that the traffic is being dropped at the 'Distributed Firewall' hop. What is the most likely cause of the drop?

   • AThe VMs are configured with the same IP address, causing an IP conflict and packet drops.
   • BThe physical network between the two ESXi hosts is down, causing the traffic to be dropped.
   • CA distributed firewall rule is explicitly denying the traffic between the two VMs.
   • DThe VMs are on different subnets and the Tier-1 gateway is not configured to route between them.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A VCF administrator is setting up VCF Operations for Networks in a new VCF environment. The administrator wants to ensure that flow data from the NSX-T Tier-1 gateways is collected and sent to the VCF Operations for Networks platform. What is the correct component that must be configured to enable this data flow?

   • AEnable the 'Flow Monitoring' feature in the vCenter Server to forward flow data to VCF Operations for Networks.
   • BDeploy a VCF Operations for Networks collector on each ESXi host to capture flow data from the vSwitch.
   • CConfigure the NSX-T Manager to send flow data to the VCF Operations for Networks collector via the IPFIX protocol.
   • DInstall the VCF Operations for Networks agent on the Tier-1 gateway VM to export flow data directly.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator is validating a new NSX-T segment configuration in a VCF environment. The segment is intended to allow only HTTP and HTTPS traffic from a specific application VM to a web server. The administrator uses VCF Operations for Networks to verify the configuration. The flow analytics show that the application VM is successfully communicating with the web server on port 443, but the administrator notices that the flow path shows the traffic is being allowed by a distributed firewall rule that is not the rule they intended. What should the administrator do next?

   • ADelete the current distributed firewall rules and recreate them from scratch to ensure the intended rule is applied.
   • BDisable the distributed firewall temporarily to allow all traffic and then re-enable it to see if the issue resolves.
   • CModify the application VM's security tag to ensure the intended rule is applied.
   • DReview the distributed firewall rules in NSX-T Manager to identify which rule is actually matching the flow and compare it to the intended policy.
   Reveal Solution Discussion Select an answer first