Question 1

Which of the following is NOT a function of Nuage Networks VNS?

Accepted Answer

A)  Automation of the enterprise WAN 
B)  Virtualization of the branch office CPE 
C)  Orchestration of cloud networks 
D)  Providing unified policy across the data center and enterprise WAN

Question 2

Which statement regarding the forwarding policies used in VNS for traffic redirection (also known as service chaining) is FALSE?

Accepted Answer

A)  Forwarding policies can be applied to ingress and egress traffic. 
B)  Redirection targets should be created in advance and associated with vports. 
C)  Redirection targets cannot be associated with bridge vports (physical appliances). 
D)  Traffic between two branch offices or between two devices in the same branch office can be redirected to an appliance located in the data center.

Question 3

Which of the following is FALSE regarding VNS bootstrapping?

Accepted Answer

A)  The bootstrapping configuration templates on VSD ensures NSG configuration conformance. 
B)  NSG is ready for dispatch without prior configuration. 
C)  It solves the problem of site CPE activation without having to send a skilled technician on site. 
D)  NSG exchanges the plain text proprietary bootstrap protocol with VSD.

Question 4

Which of the following is false regarding overlay solutions?

Accepted Answer

A)  An 'overlay network' is a virtual abstraction built on top of an existing physical network. 
B)  Both VXLAN and TRILL are host-centric overlay solutions. 
C)  Nuage Networks VNS uses a VXLAN-based overlay solution. 
D)  Overlay networks are totally transparent to their physical underlay network.

Question 5

Which of the following statements about uplink ingress policing is FALSE?

Accepted Answer

A)  It can be applied to the overlay. 
B)  It can be applied to the underlay. 
C)  VSD raises an alarm when the policing threshold is crossed. 
D)  The policer can be configured by enterprise admin.

Question 6

Which statement about ACL entries is FALSE?

Accepted Answer

A)  They can track both TCP and UDP flows. 
B)  They can be created in either ingress or egress directions. 
C)  A packet in the direction of the stateful ACL rules will automatically create a "related" rule in the reverse direction. 
D)  The automatically created rules will not go away until the ACL is manually deactivated and reactivated.

Question 7

What type of NAT is used so that any external host can send to iAddr: iPort by sending traffic to eAddr: ePort? (i=internal, e=external)

Accepted Answer

A)  Full-cone NAT 
B)  Address-restricted NAT 
C)  Port-restricted NAT 
D)  Symmetric NAT

Question 8

Which statement about the security policies implemented by Nuage Networks is FALSE?

Accepted Answer

A)  A security policy is composed of entries defining the conditions to redirect a packet. 
B)  Ingress policy acts on traffic flow towards the network (or the OVS component). 
C)  The security policies are defined at the domain level. 
D)  The security policies deployed on the VSD are distributed ACLs implemented on the VRSs and NSGs.

Question 9

Which one of the following statements is correct regarding bridge vPorts in the VNS solution?

Accepted Answer

A)  A DHCP pool can be configured on a subnet connected to an NSG bridge vPort, the NSG then becomes the DHCP server. 
B)  VSD is in charge of the IP address assignment to the devices behind the NSG vPort. 
C)  There must be more than one device behind the bridge vPort. 
D)  The static IP to MAC mapping configuration is not on the bridge vPort.

Exam 2: Nuage Networks Virtualized Network Services (VNS) Fundamentals