2V0-41.24 Question 423
Single answerA network administrator is troubleshooting connectivity issues between two VMs in a VMware NSX-T Data Center environment. The VMs are located in different logical segments. The administrator confirms that the NSX-T Tier-1 Gateway is properly configured and connected to both segments, but the VMs still cannot communicate. What should the administrator check next to resolve the issue?
- A
Verify the firewall rules configured at the Tier-0 Gateway level.
- B
Check the Distributed Firewall rules for any blocking policies.
- C
Ensure that the Edge Node is healthy and operational.
- D
Verify that the Logical Segment Subnets are properly configured.
Show answer and explanation
Correct answer: B
Explanation
The Distributed Firewall in NSX-T Data Center is responsible for controlling east-west traffic between VMs, even if they are on different logical segments. If communication is blocked, it is important to verify the Distributed Firewall rules for any misconfigurations or blocking policies that might prevent traffic between the two VMs.
- A. Incorrect.
Firewall rules at the Tier-0 Gateway level control north-south traffic, not east-west traffic between segments connected to the same Tier-1 Gateway.
- B. Correct.
Distributed Firewall rules control east-west traffic within the NSX-T Data Center. Misconfigured or overly restrictive rules could block communication between the VMs.
- C. Incorrect.
While the Edge Node's health is essential for certain services, it is not directly involved in east-west traffic within the same Tier-1 Gateway.
- D. Incorrect.
Logical Segment Subnets are important for routing, but if the Tier-1 Gateway and logical segments are already confirmed to be configured correctly, the issue is more likely related to firewall policies.