ACE Inc. had been using a standard marketplace router as an NVA (Network Virtual Appliance) in the hub Virtual Network (VNet) for spoke to spoke communication. The NVA has just been replaced by Azure Firewall.
Now the security operations team is reporting that traffic between Virtual Machines in the same VNet is working however any inter-VNet traffic is being dropped by the NSGs (Network Security Groups) at destination.
What could be a possible reason?
Suggested Answer: C
Get Premium ACE Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
10 comments · newest first
DE
Desirae
11 months ago
Yeah, NSGs could be the culprit too.
DW
Dwight
12 months ago
Wait, BGP routes in UDR need updating? That’s surprising!
LI
Lili
12 months ago
I disagree, SNAT for inter-VNet traffic sounds off.
LO
Louis
12 months ago
Definitely, there might be no route at the Azure Firewall.
CO
Coral
1 year ago
I think Azure Firewall is blocking all the traffic.
JE
Jerrod
1 year ago
Hmm, I'm not sure about this one. I think the import and verification activities could be automated, but I'm not 100% certain. I'll need to review the question again and consider the details more carefully.
FL
Florencia
1 year ago
Conducting performance tests on the production systems when there are no active events seems like the safest bet. That way we can really stress test the system without impacting real users.
JO
Jonelle
1 year ago
I remember CON laws mainly deal with healthcare facility regulation, so I'm leaning towards A, but I'm a bit unsure.
HA
Hayley
1 year ago
This seems like a straightforward question about checking the execution plan in PolarDB. I think the key is to find a way to view the plan without actually executing the SQL statement on the production data.
CA
Carmen
1 year ago
I vaguely recall something about Get-WinEvent being more modern, but I'm not entirely sure which option would specifically produce this log.