VCP-VMC 2024 Question 194
Select 3A VMware Cloud on AWS environment has been deployed, and a new VM was created in the Software-Defined Data Center (SDDC). The VM cannot reach the internet, and troubleshooting reveals that the network traffic is not leaving the SDDC. Which of the following actions should you take to resolve this issue?
- A
Verify that the Compute Gateway (CGW) firewall rules allow outbound internet traffic.
- B
Ensure that the VM is connected to a network segment that has internet access enabled.
- C
Check if the Management Gateway (MGW) firewall rules are blocking traffic from the VM.
- D
Verify that a NAT rule exists to translate the VM's private IP address for internet access.
- E
Ensure the VM has the correct DNS server settings configured.
Show answer and explanation
Correct answers: A, B, D
Explanation
To resolve the issue, you must ensure that the Compute Gateway (CGW) firewall rules allow outbound traffic, the VM is connected to a segment with internet access, and a NAT rule is in place for translating the private IP to a public IP. These are the key configurations required for the VM to communicate with the internet. The Management Gateway (MGW) is irrelevant for workload traffic, and incorrect DNS settings would not prevent the traffic from leaving the SDDC.
- A. Correct.
The Compute Gateway (CGW) firewall rules control access to and from the workload VMs in the SDDC. If outbound internet traffic is blocked by these rules, the VM will not be able to access the internet.
- B. Correct.
The VM must be connected to a network segment that is configured to allow internet access. If the segment is isolated or restricted, the VM cannot reach the internet.
- C. Incorrect.
The Management Gateway (MGW) controls traffic to and from management components, not workload VMs. It is not relevant to the VM's internet connectivity in this scenario.
- D. Correct.
Network Address Translation (NAT) is required for private IP addresses of VMs to communicate with the public internet. If a NAT rule is missing, the VM's traffic will not be routed correctly.
- E. Incorrect.
While DNS settings are important for resolving domain names, they are not the root cause of the issue in this scenario where traffic is not leaving the SDDC.