Question 1

Which of the following users can create NSG profiles/templates?

Accepted Answer

A)   CSP root group user
B)   CSP CMS group user
C)   Enterprise designer group user
D)   Enterprise admin group user A

Question 2

Which of the following is true regarding the certificate needed for VNS deployment?

Accepted Answer

A)   CA (Certificate Authority)  runs as a service on the utility host.
B)   CA (Certificate Authority)  only generates a certificate for the VSC.
C)   With the certificate, the communication between the VSD and VSC can be encrypted in IPsec.
D)   With the certificate, the communication between the VSC and NSG can be encrypted in TLS. B

Question 3

Which protocol is used between VSAP and the VSC?

Accepted Answer

A)   XMPP
B)   OpenFlow
C)   BGP and OSPF or ISIS
D)   SNMP D

Question 4

What will happen when a virtual/physical appliance in a subnet with encryption enabled is trying to communicate with a virtual/physical appliance in a subnet with encryption disabled?

Accepted Answer

A)   The communication is not possible and traffic will be dropped.
B)   Traffic will be forwarded in an unencrypted VXLAN tunnel.
C)   Traffic will be forwarded in an unencrypted VXLAN over IPsec tunnel.
D)   The communication between these two subnets is only possible through service chaining.

Question 5

Which of the NAT-T variants creates a NAT table similar to the diagram?

Accepted Answer

A)   Symmetric mapping
B)   Port restricted mapping
C)   Address restricted mapping
D)   Endpoint-independent mapping

Question 6

Which of the following is NOT a VSAP web application?

Accepted Answer

A)   Service Navigator
B)   Security Management
C)   Inventory Management
D)   Fault Management

Question 7

Which of the following statements about the Nuage Networks SD-WAN portal is TRUE?

Accepted Answer

A)   It runs directly on any Linux-based bare metal server.
B)   It is packaged as a docker container.
C)   It is deployed as a KVM, Hyper-V or ESXi virtual machine.
D)   It must be hosted in a public cloud such as AWS.

Question 8

Which of the following statements about the SD-WAN portal is TRUE?

Accepted Answer

A)   The SD-WAN portal is an optional addition to the Nuage Networks VNS solution.
B)   The SD-WAN portal cannot be deployed as a high availability cluster.
C)   The SD-WAN portal is configured either by the Graphical User Interface (GUI)  or a Command Line Interface (CLI) .
D)   The SD-WAN portal cannot be used to bootstrap NSGs.

Question 9

Which component of the VNS solution belongs to the data plane?

Accepted Answer

A)   VSD (Virtualized Services Directory) 
B)   VSC (Virtualized Services Controller) 
C)   VRS (Virtual Routing and Switching) 
D)   NSG (Network Services Gateway)

Question 10

Which of the following statements about the NSG support for NAT-T is TRUE?

Accepted Answer

A)   NAT-T is a network port level attribute.
B)   NAT-T NPM probes are disabled by default.
C)   Direct Symmetric to Symmetric mapping is supported.
D)   Address restricted mapping requires the use of two NPM probes.

Question 11

Which statement is FALSE regarding the vport?

Accepted Answer

A)   NSG vPorts are associated with access ports.
B)   There are four types of vPorts: VM, container, host and bridge.
C)   The NSG's vPorts are typically host vPorts.
D)   One vPort can only belong to one subnet or L2 domain.

Question 12

During VNS automated site activation, the domain design and attributes are configured on which of the following device?

Accepted Answer

A)   VSD (Virtualized Services Directory) 
B)   VSC (Virtualized Services Controller) 
C)   NSG (Network Services Gateway) 
D)   Installer PC

Question 13

Which of the following is TRUE about NSG dual uplink?

Accepted Answer

A)   It only provides redundancy for data traffic.
B)   Traffic is load balanced between primary and secondary links.
C)   One primary VSC is selected on each uplink.
D)   Both uplinks can be connected to the same network or to two different networks.

Question 14

Which of the following is true regarding the IPsec VPN between the NSGs?

Accepted Answer

A)   It encrypts and encapsulates the VXLAN traffic.
B)   The key for IPsec needs be manually configured on NSGs and must match each other.
C)   The IPsec tunnel can be directly terminated by VRS in a data center.
D)   To have IPsec VPN, an encryption function needs to be enabled at each individual NSG.

Question 15

Which of the following is true regarding the VLAN-based VPN on Nuage Networks NSG?

Accepted Answer

A)   The NSGs use OpenFlow to exchange routing information between each other.
B)   The NSGs use VXLAN to exchange routing information between each other.
C)   The NSGs forward overlay traffic between each other by using an OpenFlow tunnel.
D)   The NSGs forward overlay traffic between each other by using a VXLAN tunnel.

Question 16

Which of the following statements about the NSG vports is TRUE?

Accepted Answer

A)   The NSG responds to DHCP requests on a host vport by default.
B)   A host MAC address is dynamically leaned on a host vport.
C)   A host vport allows multiple devices to be connected through a switch.
D)   IP address assignment is handled by the NSG for a host on a host vport.

Question 17

Which of the following is a challenge facing enterprise WAN?

Accepted Answer

A)   Manual provisioning slows down the new site turn-up.
B)   There is no Internet access at the remote office.
C)   OPEX is very high whereas CAPEX is low.
D)   MPLS VPN is not supported on CPEs.

Question 18

Which of the following connections does not exist during the VNS bootstrapping process?

Accepted Answer

A)   Proxy to NSG
B)   Proxy to VSD
C)   NSG to VSC OpenFlow-TLS
D)   VSC to proxy

Question 19

Please, refer to the diagram. If the two VMs are on the same subnet, what is MAC address X4?

Accepted Answer

A)   X4 = MAC1
B)   X4 = MAC4
C)   X4 = MAC11
D)   X4 = MAC12

Question 20

Which of the following statements is NOT true regarding the integration of the data center (VCS solution) and branch office (VNS solution)?

Accepted Answer

A)   The VSD in the data center and the VSD for the branch office are running XMPP to synchronize with each other.
B)   The VSC in the data center and the VSC for the NSG branch office are running BGP to update each other's forwarding table.
C)   With integration, the virtual machines in the data center and the devices in the branch office can belong to the same overlay network.
D)   Traffic between the virtual machines in the data center and the devices in the branch office are forwarded in VXLAN tunnels.

Exam 2: Nuage Networks Virtualized Network Services (VNS) Fundamentals