CV0-004 · Question #216
A network administrator is building a site-to-site VPN tunnel from the company's headquarters office to the company's public cloud development network. The network administrator confirms the…
The correct answer is A. Review the development network routing table. Since the VPN tunnel is established and traffic is reaching the development network, the issue may be related to routing. The next logical step is to check whether the development network has the correct routes to send return traffic back to the office subnet. If the…
Question
A network administrator is building a site-to-site VPN tunnel from the company’s headquarters office to the company’s public cloud development network. The network administrator confirms the following:
- The VPN tunnel is established on the headquarters office firewall.
- While inside the office, developers report that they cannot connect
to the development network resources.
- While outside the office on a client VPN, developers report that they
can connect to the development network resources.
- The office and the client VPN have different IP subnet ranges.
- The firewall flow logs show that traffic is reaching the development
network from the office. Which of the following is the next step the network administrator should take to troubleshoot the VPN tunnel?
Options
- AReview the development network routing table.
- BChange the ciphers on the site-to-site VPN.
- CRestart the site-to-site VPN tunnel.
- DCheck the ACLS on the development workloads
How the community answered
(63 responses)- A67% (42)
- B17% (11)
- C6% (4)
- D10% (6)
Explanation
Since the VPN tunnel is established and traffic is reaching the development network, the issue may be related to routing. The next logical step is to check whether the development network has the correct routes to send return traffic back to the office subnet. If the development network routing table does not contain a route for the office subnet, the traffic cannot be properly returned, resulting in the developers not being able to connect.
Topics
Community Discussion
No community discussion yet for this question.