2V0-41.24 Question 435
Single answerA network administrator is troubleshooting a connectivity issue in an NSX-T Data Center deployment where VMs on the same segment cannot communicate with each other. The administrator suspects an issue with the distributed firewall rules. Which log file should the administrator examine to identify whether the firewall is blocking the traffic?
- A
/var/log/nsx-dfw.log
- B
/var/log/nsx-manager.log
- C
/var/log/nsx-switch.log
- D
/var/log/vmkernel.log
Show answer and explanation
Correct answer: A
Explanation
The Distributed Firewall (DFW) is a core component of NSX-T Data Center that enforces security policies. If there is a suspicion that the DFW is blocking traffic, the correct log file to examine is /var/log/nsx-dfw.log, which records all DFW-related activities, including rule hits and drops. Other log files, while useful for different NSX components, do not provide the necessary details for troubleshooting firewall rule enforcement issues.
- A. Correct.
This log file contains information specifically related to the Distributed Firewall (DFW) in NSX-T. It is the correct log file to check for firewall-related issues.
- B. Incorrect.
This log file provides general information about the NSX Manager but does not directly log Distributed Firewall activities.
- C. Incorrect.
This log file focuses on switch-level operations, such as VTEPs and logical switching, and is unrelated to firewall rule enforcement.
- D. Incorrect.
This log file contains logs for the ESXi kernel and is unrelated to NSX-T Distributed Firewall issues.