Question 380
A campus VLAN can reach its gateway but cannot access an internet SaaS site although neighboring VLANs can. Which failure mechanism best explains the observed behavior?
Explanation
Correct Answer
The symptoms fit this mechanism. A targeted response is to follow the affected VLAN's gateway, NAT or perimeter policy and DNS path to the external destination, followed by verification that a permitted SaaS transaction succeeds from the affected VLAN without relaxing unrelated policy.
Incorrect Answers
That explanation fits a different case, such as when a single client cannot reach a printer even though other clients in the same VLAN succeed. The symptoms here are better explained by local gateway success does not verify downstream routed, policy or name-resolution service.
That explanation fits a different case, such as when only one floor's wireless clients cannot reach DNS while other floors on the same SSID work. The symptoms here are better explained by local gateway success does not verify downstream routed, policy or name-resolution service.
That explanation fits a different case, such as when a switch appears unreachable from Central yet local console shows healthy data-plane operation. The symptoms here are better explained by local gateway success does not verify downstream routed, policy or name-resolution service.