What should the cloud administrator check first to resolve this issue?

A cloud administrator successfully configures a policy-based VPN between an on-premises data center and an instance of VMware Cloud Software-defined data center (SDDC). Although the workloads are reachable from both locations over the IP network, the cloud virtual machines cannot access an on-premises web service.

What should the cloud administrator check first to resolve this issue?
A . On-premises DNS settings
B. VMware Cloud DNS settings
C. On-premises gateway settings
D. VMware Cloud gateway settings

Answer: B

Explanation:

https://docs.vmware.com/en/VMware-Cloud-on-AWS/services/com.vmware.vmc-aws-networking-security/GUID-586C053D-9553-461E-B6A8-FF508C8F091C.html