Answer is D. https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.logging.doc/GUID-6F9DC53E-222D-464B-8613-AB2D517CE5E3.html

The correc answer is D. If logging is enabled for firewall rules, you can look at the firewall packet logs to troubleshoot issues. The log file is /var/log/dfwpktlogs.log for both ESXi and KVM hosts. https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.0/administration/GUID-D57429A1-A0A9-42BE-A299-0C3C3546ABF3.html

From https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/com.vmware.nsx.logging.doc/GUID-6F9DC53E-222D-464B-8613-AB2D517CE5E3.html "Rules message logs include all access decisions such as permitted or denied traffic for each rule, if logging was enabled for that rule. These logs are stored on each host in /var/log/dfwpktlogs.log."

I tested it in NSX-v in my environment

The log file is /var/log/dfwpktlogs.log for both ESXi and KVM hosts.

The correct answer is D.

D is correct

The correc answer is D.

Agree with D Rules message logs include all access decisions such as permitted or denied traffic for each rule, if logging was enabled for that rule. These logs are stored on each host in /var/log/dfwpktlogs.log. Here are examples of firewall log message: # more /var/log/dfwpktlogs.log 2015-03-10T03:22:22.671Z INET match DROP domain-c7/1002 IN 242 UDP 192.168.110.10/138->192.168.110.255/138 # more /var/log/dfwpktlogs.log 2017-04-11T21:09:59.877Z ESXi_FQDN dfwpktlogs: 50047 INET TERM domain-c1/1001 IN TCP RST 10.1.2.3/33491->10.4.5.6/1

Answer id D. ICM 3.0guide 7-36 You can configure several settings for distributed firewall rules: • Logging: You can turn logging off or on. Logs are stored in the /var/log/dfwpktlogs.log file on ESXi and KVM hosts.