Question 310
A policy requires restricted services in a management VRF to reach a shared NTP system but forbids broad connectivity to the production user VRF. Which failure mechanism best explains the observed behavior?
Explanation
Correct Answer
The symptoms fit this mechanism. A targeted response is to implement a narrow supported service reachability or controlled route-leak policy for the NTP destination, followed by verification that management devices synchronize time while unrelated user networks remain unreachable.
Incorrect Answers
That explanation fits a different case, such as when a campus uses policy-based routing to force a selected application through a service appliance, but a catch-all policy inadvertently redirects user DNS traffic too. The symptoms here are better explained by VRF separation blocks required shared services unless an explicit controlled path exists.
That explanation fits a different case, such as when a campus BGP peering to an ISP remains Idle because the local neighbor remote-AS setting is incorrect. The symptoms here are better explained by VRF separation blocks required shared services unless an explicit controlled path exists.
That explanation fits a different case, such as when a device sends packets to a remote IPv6 network, but return traffic fails because the remote router lacks the source-prefix route. The symptoms here are better explained by VRF separation blocks required shared services unless an explicit controlled path exists.