Question 110
A policy requires restricted services in a management VRF to reach a shared NTP system but forbids broad connectivity to the production user VRF. Which immediate engineering change most directly addresses this issue?
Explanation
Correct Answer
The underlying issue is that VRF separation blocks required shared services unless an explicit controlled path exists. This intervention addresses that cause directly. A useful result to confirm is: management devices synchronize time while unrelated user networks remain unreachable.
Incorrect Answers
This is suited to a different condition, such as when a campus core has a default route toward a failed WAN link, while the healthy standby WAN is not preferred. The reported fault instead arises because VRF separation blocks required shared services unless an explicit controlled path exists.
This is suited to a different condition, such as when a BGP peer is Established but upstream routes are not accepted due to a prefix filter that rejects the approved campus CIDR. The reported fault instead arises because VRF separation blocks required shared services unless an explicit controlled path exists.
This is suited to a different condition, such as when a distribution switch cannot reach an application subnet because its static route references an incorrect next-hop IP. The reported fault instead arises because VRF separation blocks required shared services unless an explicit controlled path exists.