Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Aviatrix ACE Exam - Topic 6 Question 19 Discussion

ACE Inc. had been using a standard marketplace router as an NVA (Network Virtual Appliance) in the hub Virtual Network (VNet) for spoke to spoke communication. The NVA has just been replaced by Azure Firewall.Now the security operations team is reporting that traffic between Virtual Machines in the same VNet is working however any inter-VNet traffic is being dropped by the NSGs (Network Security Groups) at destination.What could be a possible reason?
C) Azure Firewall is doing SNAT for inter-VNet traffic
A) Azure Firewall is blocking all the traffic
B) There is no route at the Azure Firewall
D) BGP routes in UDR need to be updated

Aviatrix ACE Exam - Topic 6 Question 19 Discussion

Actual exam question for Aviatrix's ACE exam
Question #: 19
Topic #: 6
[All ACE Questions]

ACE Inc. had been using a standard marketplace router as an NVA (Network Virtual Appliance) in the hub Virtual Network (VNet) for spoke to spoke communication. The NVA has just been replaced by Azure Firewall.

Now the security operations team is reporting that traffic between Virtual Machines in the same VNet is working however any inter-VNet traffic is being dropped by the NSGs (Network Security Groups) at destination.

What could be a possible reason?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Timothy at May 08, 2022, 07:12 PM

Limited Time Offer

25%

Off

Get Premium ACE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Desirae
10 months ago
Yeah, NSGs could be the culprit too.
upvoted 0 times
...
Dwight
10 months ago
Wait, BGP routes in UDR need updating? That’s surprising!
upvoted 0 times
...
Lili
10 months ago
I disagree, SNAT for inter-VNet traffic sounds off.
upvoted 0 times
...
Louis
10 months ago
Definitely, there might be no route at the Azure Firewall.
upvoted 0 times
...
Coral
11 months ago
I think Azure Firewall is blocking all the traffic.
upvoted 0 times
...
Jerrod
11 months ago
Hmm, I'm not sure about this one. I think the import and verification activities could be automated, but I'm not 100% certain. I'll need to review the question again and consider the details more carefully.
upvoted 0 times
...
Florencia
11 months ago
Conducting performance tests on the production systems when there are no active events seems like the safest bet. That way we can really stress test the system without impacting real users.
upvoted 0 times
...
Jonelle
11 months ago
I remember CON laws mainly deal with healthcare facility regulation, so I'm leaning towards A, but I'm a bit unsure.
upvoted 0 times
...
Hayley
11 months ago
This seems like a straightforward question about checking the execution plan in PolarDB. I think the key is to find a way to view the plan without actually executing the SQL statement on the production data.
upvoted 0 times
...
Carmen
11 months ago
I vaguely recall something about Get-WinEvent being more modern, but I'm not entirely sure which option would specifically produce this log.
upvoted 0 times
...

Save Cancel