VCP-VMC 2024 Question 193
Single answerA VMware Cloud on AWS administrator is troubleshooting connectivity issues between two workloads running in different segments within the same SDDC. The administrator has confirmed that both workloads are powered on and properly assigned to their respective segments. However, they cannot communicate with each other. What should the administrator check next?
- A
Ensure that a firewall rule exists to allow traffic between the two segments.
- B
Verify that both workloads are connected to the same distributed switch.
- C
Check if the NSX Tier-1 gateway is properly configured to route traffic between the segments.
- D
Confirm that the VMware Tools version is up-to-date on both workloads.
Show answer and explanation
Correct answer: A
Explanation
In VMware Cloud on AWS, NSX-T manages networking, including routing and firewall rules between segments. If workloads in different segments cannot communicate, the first step is to verify that there are no firewall rules blocking the traffic. Routing is typically handled automatically by NSX-T, so the most common cause of this issue is restrictive firewall policies.
- A. Correct.
Firewall rules control traffic between segments in VMware Cloud on AWS. If a rule blocking the traffic exists, workloads on separate segments will not communicate, even if they are properly routed.
- B. Incorrect.
Workloads in VMware Cloud on AWS do not need to be on the same distributed switch if they are in different segments. Routing and connectivity are handled by NSX-T.
- C. Incorrect.
The Tier-1 gateway is automatically configured in VMware Cloud on AWS to route traffic between segments. Unless it was manually misconfigured, it is not the first place to check.
- D. Incorrect.
While keeping VMware Tools up-to-date is a best practice, it does not impact network communication between workloads in different segments.