VCP-VMC 2024 Question 202
Select 3A VMware Cloud Administrator is troubleshooting a security issue where users are unable to access a specific workload running on VMware Cloud due to a firewall rule blocking traffic. The administrator suspects that recent changes in the security group configuration might be the cause. Which steps should the administrator prioritize to resolve this issue?
- A
Verify the firewall rules applied to the security group associated with the workload.
- B
Check the NSX Manager logs for recent rule changes and their applied policies.
- C
Revert the workload virtual machine to the last known good snapshot.
- D
Verify the security group membership of the workload to ensure the correct group is assigned.
- E
Disable all firewall rules temporarily to test connectivity.
Show answer and explanation
Correct answers: A, B, D
Explanation
Troubleshooting a security issue with firewall rules involves systematically verifying configurations and logs. By focusing on the firewall rules, security group membership, and NSX Manager logs, the administrator can pinpoint the root cause of the issue without introducing unnecessary risks to the environment. Reverting snapshots or disabling all firewall rules are not best practices for addressing such issues.
- A. Correct.
Verifying the firewall rules applied to the security group is a critical step as misconfigured rules can block traffic unexpectedly.
- B. Correct.
Checking the NSX Manager logs allows the administrator to identify recent changes and understand how policies have been applied.
- C. Incorrect.
Reverting the workload to a snapshot does not address the root cause of the firewall issue and is not a recommended troubleshooting step in this scenario.
- D. Correct.
Ensuring the workload is part of the correct security group is essential, as incorrect group membership can lead to misapplied firewall rules.
- E. Incorrect.
Disabling all firewall rules temporarily is not a recommended action as it can expose the environment to security risks.