2V0-41.24 Question 457
Single answerAn administrator is troubleshooting an issue where VMs in a specific Tier-1 Logical Segment cannot communicate with each other. The VMs are on the same subnet, and the administrator has verified that the VMs have correct IP configurations. What is the most likely cause of the issue?
- A
The Tier-1 Logical Router is not linked to the Tier-0 Logical Router.
- B
The Logical Segment is not attached to the correct Tier-1 Gateway.
- C
The firewall rules on the Distributed Firewall (DFW) are blocking traffic between the VMs.
- D
The Edge Node associated with the Tier-1 Gateway is in a degraded state.
Show answer and explanation
Correct answer: C
Explanation
When troubleshooting logical infrastructure issues, it is crucial to consider how components like the Distributed Firewall (DFW) interact with the logical segments. In this scenario, since the VMs are on the same subnet but unable to communicate, the problem is most likely caused by a DFW rule blocking traffic. Logical routing through Tier-1 or Tier-0 routers, or the state of the Edge Node, is not relevant for intra-segment communication.
- A. Incorrect.
This is incorrect because the Tier-0 Logical Router is not relevant for intra-segment communication. VMs on the same subnet should communicate without requiring the Tier-0 router.
- B. Incorrect.
This is incorrect because if the Logical Segment was not attached to the Tier-1 Gateway, the VMs would not even have IP connectivity, which the question states is already verified.
- C. Correct.
This is correct because the Distributed Firewall (DFW) operates at the logical switch level, and misconfigured rules could block traffic between VMs even if they are on the same logical segment and subnet.
- D. Incorrect.
This is incorrect because the Edge Node is only involved in North-South traffic or when services like NAT or load balancing are required. Since the issue is specific to intra-segment communication, the Edge Node state is unrelated.