Question 1

How can the administrator discover the root cause of the issue?

Options :

A : Confirm that Inter-VM connectivity is enabled within the VM networking settings and that VMs in the Database tier are configured correctly to accept inbound traffic.

B : Check if traffic isolation has been configured on the Database tier and ensure that there is no policy preventing App tier communication with the Database tier.

C : Check the security policies again to ensure that the rule allowing port 3306 from Web -> Database is applied and active, then check the policy enforcement mode to ensure it is in Enforcement Mode.

D : Verify that the port 3306 is open on the external gateway and that SNAT is not being applied for internal communication.

Answer: C

Question 2

An administrator configures a VPN gateway with eBGP for dynamic route exchange. After setup, routes are not advertised to the remote peer. Which configuration is most likely missing?

Options :

A : DHCP options for assigning IP addresses to remote endpoints.

B : ASN configuration for the local gateway to identify its autonomous system.

C : VLAN ID alignment between local and remote networks.

D : Peer IP address required for establishing the BGP session.

Answer: B

Question 3

An administrator needs to configure a security policy that controls VM-to-VM communication within a category defined as secured entity. Which configuration action should the administrator take to restrict all intra-tier communication between the VMs within a category defined as secured entity?

Options :

A : Apply the policy with inbound rules that block all inter-VM communication.

B : Configure the security policy with allow-all intra-tier traffic.

C : Set the security policy to allow-specific traffic for intra-tier communication.

D : Use deny-all intra-tier traffic configuration in the policy.

Answer: D

Question 4

An administrator has configured a VPC with multiple overlay subnets and attached a VPN gateway using IPSec. After enabling Jumbo Frames on the physical network, VMs are still experiencing packet drops. What is the most likely reason?

Options :

A : MTU on guest VMs exceeds recommended size for IPSec.

B : DHCP relay is misconfigured.

C : Jumbo frames are not supported on overlay subnets.

D : Floating IP is missing on the VPN gateway.

Answer: A

Question 5

An administrator receives a ticket reporting unwanted traffic between production and development servers. The administrator reviews the Flow Network Security logs and finds the following:How can the administrator resolve the issue?

Options :

A : Update the policy to disallow the unwanted traffic.

B : Move the servers to separate IP subnets.

C : Enable the Network Controller for the policy

D : Change the enforcement mode for the policy

Answer: A