Aviatrix ACE Exam - Topic 6 Question 19 Discussion

Actual exam question for Aviatrix's ACE exam

Question #: 19
Topic #: 6

[All ACE Questions]

ACE Inc. had been using a standard marketplace router as an NVA (Network Virtual Appliance) in the hub Virtual Network (VNet) for spoke to spoke communication. The NVA has just been replaced by Azure Firewall.

Now the security operations team is reporting that traffic between Virtual Machines in the same VNet is working however any inter-VNet traffic is being dropped by the NSGs (Network Security Groups) at destination.

What could be a possible reason?

AAzure Firewall is blocking all the traffic

BThere is no route at the Azure Firewall

CAzure Firewall is doing SNAT for inter-VNet traffic

DBGP routes in UDR need to be updated

Show Suggested Answer

Suggested Answer: C

by Timothy at May 08, 2022, 07:12 PM

Limited Time Offer

25%

Off

Get Premium ACE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Desirae

4 months ago

Yeah, NSGs could be the culprit too.

upvoted 0 times

...

Dwight

4 months ago

Wait, BGP routes in UDR need updating? That’s surprising!

upvoted 0 times

...

Lili

4 months ago

I disagree, SNAT for inter-VNet traffic sounds off.

upvoted 0 times

...

Louis

4 months ago

Definitely, there might be no route at the Azure Firewall.

upvoted 0 times

...

Coral

5 months ago

I think Azure Firewall is blocking all the traffic.

upvoted 0 times

...

Jerrod

5 months ago

Hmm, I'm not sure about this one. I think the import and verification activities could be automated, but I'm not 100% certain. I'll need to review the question again and consider the details more carefully.

upvoted 0 times

...

Florencia

5 months ago

Conducting performance tests on the production systems when there are no active events seems like the safest bet. That way we can really stress test the system without impacting real users.

upvoted 0 times

...

Jonelle

5 months ago

I remember CON laws mainly deal with healthcare facility regulation, so I'm leaning towards A, but I'm a bit unsure.

upvoted 0 times

...

Hayley

5 months ago

This seems like a straightforward question about checking the execution plan in PolarDB. I think the key is to find a way to view the plan without actually executing the SQL statement on the production data.

upvoted 0 times

...

Carmen

5 months ago

I vaguely recall something about Get-WinEvent being more modern, but I'm not entirely sure which option would specifically produce this log.

upvoted 0 times

...