Given a Scenario, Troubleshoot Issues with NSX Services (DHCP, VPN, Etc.) VCP-VCF-SUPPORT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An IPsec VPN tunnel between an NSX Tier-0 gateway and a third-party firewall is down. The administrator has verified that the pre-shared key, IKE version, and encryption algorithms match on both sides. The tunnel status shows 'DOWN' in the NSX UI. What should the administrator check next to narrow down the issue?

   • ACheck the NSX Manager's API logs for configuration errors.
   • BRestart the IPsec VPN service on the Edge node.
   • CVerify that the ESXi hosts have the correct route to the peer's public IP.
   • DVerify that the local and peer public IP addresses are reachable from the NSX Edge node.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A VCF administrator notices that virtual machines in a segment are not receiving IP addresses from the NSX DHCP service. The DHCP service is configured and enabled. Which initial check should the administrator perform to diagnose the issue?

   • AVerify that the DHCP service is running on the NSX Edge node and that the segment is associated with the correct DHCP profile.
   • BCheck that the virtual machines have a static IP address configured in their guest operating system.
   • CConfirm that the NSX Manager is connected to the vCenter Server and that the VMs are in the same cluster.
   • DEnsure that the segment's gateway is configured with a valid IP address and subnet mask.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A VCF administrator is troubleshooting an NSX DHCP service that is not allocating IP addresses to VMs on a specific segment. The DHCP server is UP, and the pool has free addresses. The administrator checks the segment's DHCP configuration and sees that 'DHCP Config' is set to 'Relay'. What is the most likely reason for the failure?

   • AThe DHCP server's lease time is set too long, causing the pool to be exhausted.
   • BThe DHCP server is not attached to the correct Tier-1 gateway.
   • CThe segment is configured to relay DHCP requests to an external server, bypassing the local NSX DHCP server.
   • DThe NSX Edge node hosting the DHCP server is experiencing high CPU load.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An administrator needs to restart an NSX service on an Edge node. What should be done before performing the restart to minimize disruption to the VCF fleet?

   • ATake a snapshot of the Edge node's configuration.
   • BCheck if the Edge node is in a maintenance window and if there are redundant services available.
   • CDisable all firewall rules on the Edge node.
   • DNotify all VM users to save their work.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An administrator is troubleshooting an NSX IPsec VPN tunnel that is down. The tunnel configuration appears correct. What should the administrator check first to determine the cause?

   • AThe firewall rules on the VM's guest OS.
   • BThe MTU size of the underlay network.
   • CThe status of the IPsec VPN service on the NSX Edge node.
   • DThe DNS resolution of the peer's hostname.
   Reveal Solution Discussion Select an answer first