Comment by Jeeetendra

good reminder that 'no internet access' includes all the stuff you forget is network access. dns is exactly the kind of egress path nobody writes a test for.