Given a Scenario, Troubleshoot Issues with NSX Virtual Private Cloud (VPC) VCP-VCF-SUPPORT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A VCF administrator is troubleshooting connectivity between two NSX VPCs in the same VCF environment. Both VPCs are connected to the same Tier-0 gateway. The administrator verifies that the VPCs have overlapping IP subnets. What is the most likely cause of the connectivity failure?

   • AThe Tier-0 gateway is not configured with a route between the two VPCs.
   • BOverlapping IP subnets cause routing ambiguity at the Tier-0 gateway.
   • CThe VPCs are using the same Tier-1 gateway, causing a routing loop.
   • DThe VPCs are not in the same NSX transport zone.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A VCF administrator is troubleshooting an intermittent connectivity issue in an NSX VPC. Workloads in the VPC can sometimes reach the internet, but at other times they cannot. The administrator has verified that the VPC's routing and firewall policies are correct. What is the most likely cause?

   • AThe Tier-1 gateway is experiencing high CPU usage.
   • BThe Edge node's uplink is experiencing intermittent link flaps.
   • CThe BGP session between the Tier-0 gateway and the upstream router is flapping.
   • DThe VPC's security policy has a time-based rule that is sometimes active.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A VCF administrator is troubleshooting a connectivity issue in an NSX VPC where a workload can ping a server, but cannot connect to it via TCP. The administrator has used Traceflow and it shows the packet is dropped at the distributed firewall. What is the most likely cause?

   • AThe Tier-1 gateway is not configured with a route to the server's subnet.
   • BThe VPC's default route is pointing to the wrong gateway.
   • CA distributed firewall rule is blocking TCP traffic while allowing ICMP.
   • DThe server's security group does not include the server's VM.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which log source would you examine to find detailed information about NSX VPC gateway routing decisions?

   • AESXi host logs
   • BNSX Edge node logs
   • CSDDC Manager logs
   • DvCenter Server logs
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A VCF administrator is troubleshooting a scenario where workloads in an NSX VPC can reach the internet, but cannot reach on-premises networks connected via a VPN. The VPC has a Tier-1 gateway connected to a Tier-0 gateway. What is the most likely cause?

   • AThe on-premises network is not advertised to the VPC via BGP.
   • BThe VPN tunnel is not configured on the Tier-1 gateway.
   • CThe Tier-0 gateway does not have a route to the on-premises network via the VPN.
   • DThe VPC's security policy is blocking traffic to the on-premises network.
   Reveal Solution Discussion Select an answer first