VCP-VMC 2024 Question 200
Single answerAn administrator is tasked with troubleshooting a security issue in a VMware Cloud on AWS environment. Users are reporting that they cannot access a specific workload running on a virtual machine (VM). Upon investigation, the administrator confirms that the VM is powered on, the network is configured correctly, and no recent changes have been made to the firewall rules in the VMware Cloud console. Which action should the administrator take next to identify the root cause of the issue?
- A
Verify the associated security groups in the AWS Management Console.
- B
Check the VMware Cloud on AWS Activity Log for recent changes to the environment.
- C
Test connectivity using the ping command from the local user device to the VM.
- D
Ensure the VM's operating system firewall is disabled to allow unrestricted access.
Show answer and explanation
Correct answer: A
Explanation
In VMware Cloud on AWS, security is managed both in the VMware Cloud console and in the AWS Management Console. If the VMware Cloud firewall rules are configured correctly, the issue might be caused by restrictive rules in the associated AWS security groups. Verifying these groups is the next logical step to identify and resolve the root cause of the access issue.
- A. Correct.
Correct. Security groups in the AWS Management Console may have rules blocking access to the workload, even if the VMware Cloud configuration appears correct.
- B. Incorrect.
While reviewing activity logs is a good practice, it does not directly assist in identifying issues with access caused by security group rules.
- C. Incorrect.
Testing connectivity with the ping command can provide basic information but does not specifically address potential security group issues in this scenario.
- D. Incorrect.
Disabling the VM's operating system firewall is not a recommended troubleshooting step as it exposes the VM to unnecessary risks.