VCP-VCF Administrator 2024 Question 217
Single answerYou are a VMware Cloud Foundation Administrator, and your organization has deployed VMware NSX as part of their Cloud Foundation environment. The networking team has reported that a new application cannot communicate across subnets, even though the application VMs are in the same NSX-T segment. Upon investigation, you discover that the Tier-1 Gateway is misconfigured. What Day 2 operation should you perform to resolve this issue?
- A
Reconfigure the Tier-1 Gateway to include the necessary static routes.
- B
Add a new NSX Edge Node to the transport zone.
- C
Modify the security policy to allow cross-segment communication.
- D
Recreate the NSX-T segment and reattach the VMs.
Show answer and explanation
Correct answer: A
Explanation
In VMware NSX, Tier-1 Gateways are responsible for routing between connected segments and other routing entities. Misconfigured static routes on the Tier-1 Gateway can prevent communication between subnets. By reconfiguring the Tier-1 Gateway to include the necessary static routes, you can restore connectivity for the application without making unnecessary changes to other parts of the network configuration.
- A. Correct.
Reconfiguring the Tier-1 Gateway with the necessary static routes ensures proper routing between subnets. This is the correct Day 2 operation for resolving the issue.
- B. Incorrect.
Adding a new NSX Edge Node would not resolve the immediate issue of misconfigured routing. NSX Edge Nodes are typically used for north-south traffic or external connectivity, not for fixing routing within a Tier-1 Gateway.
- C. Incorrect.
While modifying security policies could resolve communication issues caused by firewall rules, the problem in this scenario is related to routing, not security.
- D. Incorrect.
Recreating the NSX-T segment and reattaching the VMs is unnecessary and would not address the misconfiguration at the Tier-1 Gateway layer.