Deck 1: Nuage Networks Virtualized Cloud Services (VCS) Fundamentals

Question 1

What statement is TRUE regarding multiple virtual IP addresses assigned to a single vPort?

A) The virtual IP addresses can be in a different subnet than the VM interface IP address.
B) All virtual IP addresses of a vPort must be in the same subnet.
C) One of the virtual IP addresses can be the same as the VM interface IP address.
D) Every virtual IP address must be associated with a virtual MAC, which differs from the VM interface MAC address.

Answer 1

The virtual IP addresses can be in a different subnet than the VM interface IP address.

Question 2

What statement regarding Openflow sessions in data center networks is TRUE?

A) By default, the Openflow session is established with TCP port 6633.
B) Openflow sessions run between VSCs.
C) Security in mandatory with SSL encryption.
D) Openflow sessions can be established over either the data plane or the management plane.

Answer 2

Security in mandatory with SSL encryption.

Question 3

What statement is FALSE regarding the relationship between a zone and a subnet within a domain?  

A) Each zone can have multiple subnets.
B) Each subnet can belong to multiple zones.
C) A QoS policy defined at the subnet level takes precedence over a QoS policy defined at the zone level.
D) A security policy applied to the zone impacts all subnets associated to that zone.

Answer 3

Each subnet can belong to multiple zones.

Question 4

What benefits does virtualization bring to a data center?

A) Mobility, flexibility, and better resource utilization.
B) Multitasking with prioritized process scheduling.
C) More processing power, memory and disk space.
D) Higher bandwidth, control plane simplification and reduced forwarding tables.

Question 5

What statement regarding VSC deployment is TRUE?

A) VSC can be deployed in standalone mode or in high-availability cluster mode.
B) VSC can only be installed as virtual machines.
C) VSC is based on SR OS, and thus can be integrated module on the 7750 SR.
D) XMPP is used to synchronize the active and standby VSCs.

Question 6

What statement regarding VSD user management is TRUE?

A) We can create CMS user groups for each enterprise.
B) Each enterprise user belongs to only one user group.
C) Open LDAP and Active Directory can be integrated into VSD.
D) LDAP integration is configured at the VSD global level, and it is not configurable enterprise.

Question 7

What statement about statistics rules on Nuage VCS is FALSE?

A) Users can define statistics rules for domain/zones/subnets/vPorts. The rule applied to the most granular object is the one used.
B) Statistics are collected in an Elasticsearch statistics engine and are aggregated over hours, days, and months.
C) Statistics are pushed from VRS up to VSC, which in turn sends them to the VSD stats engine.
D) When a TCA threshlod is exceeded, an event is displayed in the UI and a message is sent on the JMS bus.

Question 8

What information is included in the VTEP (virtual tunnel endpoint) forwarding table?

A) The remote VM IP addresses, the VXLAN ID (VNI) and the remote VTEP.
B) The remote VM MAC addresses, the VXLAN ID (VNI) and the remote VTEP.
C) The remote VM IP addresses, the VXLAN ID (VNI) and the local VTEP.
D) The remote VM MAC addresses, the VXLAN ID (VNI) and the local VTEP.

Question 9

Which of the following is NOT a goal of NFV?

A) Reduce equipment cost
B) Faster time-to-market for new services
C) Efficiency through automation
D) Increase network bandwidth

Question 10

Which of the following is NOT an improvement provided by the backhaul VPLS?

A) Reducing the number of EVPN on the HV.
B) Reducing the number of VXLAN tunnels.
C) Reducing the size of MAC address table.
D) Reducing the consumption of bandwidth.

Question 11

What statement about floating public IP addresses in the Nuage environment is CORRECT?

A) They are managed by enterprise admin users.
B) NAT is performed for the traffic leaving the enterprise domain and entering the public network.
C) Once a floating IP is configured on the vPort , the VM will stop using its enterprise private IP address.
D) There can be more that one floating IP address associated with one vPort.

Question 12

What statement is TRUE regarding service chaining provided by Nuage VCS?

A) Service chaining is flow-based traffic redirection.
B) Service chaining only works for virtual appliances.
C) A virtual firewall is required to perform service chaining.
D) It consists of packets being forwarded by the local VPLS, then through the enterprise VPRN and lastly the backhaul VPLS.

Question 13

Which VSD component provides a south-bound interface for communication with the VSC?

A) VSD Mediator
B) Statistics Engine
C) Policy Management Engine
D) RESTful API

Question 14

What is the difference between host vPort and bridge vPort?

A) A host vPort is provisioned on VRS-G, while a bridge vPort is provisioned on VSG.
B) A host vPort is provisioned for VLAN traffic, while a bridge vPort is for VxLAN traffic.
C) A host vPort only supports one VLAN, while a bridge vPort can be configured with multiple VLANs.
D) A host vPort requires static MAC address configuration, while a bridge vPort learns MAC addresses dynamically.

Question 15

What is NOT a requirement for modern data center networks to facilitate cloud computing?

A) Multi-tenancy
B) Network automation
C) Virtual machine live migration
D) Network function virtualization

Question 16

If we compare a Nuage Virtual Service Node to a physical service router, which module is VSC mapped to?

A) Switch fabric
B) Line card
C) CPU module
D) Internal clock

Question 17

Refer to the diagram. What is the correct sequence of events for a VM to be instantiated, and for its required network connectivity to be created with the Nuage VCS solution? a. Network domain and policy templates are defined on VSD. b. VSC queries VSD on network service and policies. c. VSD provides VSC with network service and policies. d. VRS agent informs VSC of the new VM placement. e. VSC deploys policy to applicable VRS agents. f. VM instantiated on the hypervisor.

A) a->b->c->d->e->f
B) a->b->c->f->d->-e
C) a->f->d->b->c->-e
D) f->d->b->a>c->-e

Question 18

What statement about virtual switches is FALSE?

A) A virtual switch is typically implemented within the hypervisor so that the network is extended onto the server.
B) Virtual switches are VLAN capable.
C) Typically, virtual switches are as capable as physical switches, eg: LAG, hardware-based QoS.
D) If a virtual switch is not on the hypervisor, all traffic will go out of the physical NIC.

Question 19

What statement correctly describes the difference between a managed Layer 2 domain and an undamaged Layer 2 domain?

A) A managed L2 domain has one or more zones and each zone can have multiple subnets, each with its own IP address pool, while an unmanaged L2 domain does not have zones or subnets.
B) Managed L2 domains can have overlapping IP address pools, while unmanaged L2 domains are not allowed to have overlapping IP address pools.
C) In a managed L2 domain, Nuage VCS manages security policies, while in an unmanaged domain, Nuage VCS cannot manage the security policies.
D) In a managed L2 domain, Nuage VCS performs DHCP and ARP proxy functions, while in an unmanaged domain VCS has no visibility of IP addresses.

Question 20

What does VSD stand for?

A) Virtualized Services Description
B) Virtualized Services Definition
C) Virtualized Services Domain
D) Virtualized Services Directory

Question 21

What statement about policy groups is FALSE?

A) Several vPorts ( in the same or different subnets) can be associated with one policy group.
B) One vPort can be associated with multiple policy groups.
C) For an ingress security policy, if a hardware endpoint policy group is chosen as the source, the destination must also be hardware endpoints.
D) The policy group is the syntactic equivalent of the security group used by cloud management systems.

Question 22

What statement regarding active/standby VSD cluster is TRUE?

A) Both the primary and secondary cluster are running all VSD services.
B) XMPP connections to the secondary cluster are blocked.
C) The active/standby mode is also supported in standalone VSD.
D) VSP components (eg: VSCs) need reconfiguration after failover.

Question 23

Which of the following is a host-centric overlay solution for a modern data center?

A) SPBM
B) TRILL
C) VxLAN
D) VPLS

Question 24

Which statement about SDN is correct?

A) Network control is fully integrated into the forwarding plane.
B) SDN supports cloud computing by automating virtual machine instantiation.
C) The API interface provides a way to program the SDN switch directly.
D) The SDN controller provides global provisioning of network devices.

Question 25

To auto-instantiate services on a 7750 DCI, which protocol needs to be enabled between the 7750 SR and VSD?

A) SNMP
B) Openflow
C) XMPP
D) BGP EVPN

Question 26

What statement is TRUE regarding the workflow for live migration of a virtual machine with Nuage VCS?

A) Only the destination hypervisor's VRS agent notifies the VSC of the VM migration.
B) Both the source and destination hypervisor's VRS agents notify the VSC of the VM migration.
C) VSD is not notified of the VM migration.
D) CMS (if used) is not notified of the VM migration.

Question 27

Which statement correctly describes cloud computing?

A) Services are statically provisioned by a cloud service provider.
B) Services are offered as needed through the Internet.
C) SDN is the key enabler for cloud computing.
D) It provides convenient, permanent network access to a shared pool of computing resources.

Question 28

What statement is TRUE regarding the security policies provided by Nuage VCS?

A) The match criteria in security policies can be based on MAC address, IP address and TCP/UDP port number.
B) Each policy entry has an associated priority that defines the order in which policy entries are evaluated.
C) Ingress security policy controls the traffic flowing into the virtual machine.
D) The default ingress security policy allows all traffic to be forwarded.

Question 29

What statement about floating public IP addresses in the Nuage environment is CORRECT?

A) They are managed by enterprise admin users.
B) NAT is performed for the traffic leaving the enterprise domain and entering the public network.
C) Once a floating IP is configured on the vPort, the VM will stop using its enterprise private IP address.
D) There can be more than one floating IP address associated with one vPort.

Question 30

The ML2 plug-in is part of which OpenStack project?

A) Neutron
B) Ironic
C) Nova
D) Heat

Question 31

What statement best describes the concept of Policy-Based Automation provided by Nuage Networks?

A) The virtual machines are automatically instantiated according to the specific policy defined in the CMS.
B) Network devices as TOR/EOR switch, and leaf/spine routers, are automatically provisioned based on the configuration policy.
C) The Nuage Networks VCS solution can integrate with any CMS, operate on any hypervisor, and be deployed in any data center network.
D) The overlay network instances are automatically created according to the configuration details defined in a specific policy.

Question 32

Which domain can be extended to a 7750 DCI by GRE tunnels?

A) A managed L2 domain.
B) An unmanaged L2 domain.
C) A subnet within an L3 domain.
D) An L3 domain.

Question 33

What is NOT a function of VRS?

A) VXLAN tunneling
B) Detecting VM events
C) DHCP and ARP proxy
D) Libvirtd

Question 34

On which Kubernetes node is the Nuage-kube-mon component installed?

A) On the worker node.
B) On the master node.
C) On the network node.
D) On a dedicated gateway node.

Question 35

What three main components comprise the Nuage Networks VCS solution?

A) VSD, VSC, and VSG
B) VSD, VSC, and VRS
C) VNS, VSC, and VSG
D) VNS, VRS, and VSG

Question 36

What task is NOT part of VSD policy evaluation for a newly-instantiated virtual machine?

A) Checking metadata.
B) Creating a virtual port.
C) Building a forwarding table.
D) Assigning an IP address.

Question 37

Which protocol is used for VSC federation?

A) BGP VPN-IPv4
B) BGP EVPN
C) Openflow
D) XMPP

Question 38

What function is NOT supported on the Nuage 7850 VSG?

A) Hardware VXLAN/VLAN gateway
B) Cloud orchestration
C) Top of Rack switch/Leaf router
D) VSC functionality

Question 39

Which mapping between a VSD service abstraction and an overlay service instance is correct?

A) Domain- VPRN service instance
B) Zone-VPLS service instance
C) Subnet-VPRN service instance
D) Virtual machine -SAP