1. Home
  2. Nokia
  3. Nuage Networks Professional - Software Defined Datacenter (NNP SD-DC)
  4. 4A0-N02
  5. Nuage Networks Virtualized Network Services (VNS) Fundamentals Questions and Answers

Pass the Nokia Nuage Networks Professional - Software Defined Datacenter (NNP SD-DC) 4A0-N02 Questions and answers with CertsForce

 Nokia Exams      Go to Exam Detail      Get Premium Access
Viewing page 1 out of 2 pages
Viewing questions 1-10 out of questions
Questions # 1:

Which of the following is false regarding overlay solutions?

Options:
A.

An ‘overlay network’ is a virtual abstraction built on top of an existing physical network.

B.

Both VXLAN and TRILL are host-centric overlay solutions.

C.

Nuage Networks VNS uses a VXLAN-based overlay solution.

D.

Overlay networks are totally transparent to their physical underlay network.

Questions # 2:

Which statement about ACL entries is FALSE?

Options:
A.

They can track both TCP and UDP flows.

B.

They can be created in either ingress or egress directions.

C.

A packet in the direction of the stateful ACL rules will automatically create a “related” rule in the reverse direction.

D.

The automatically created rules will not go away until the ACL is manually deactivated and reactivated.

Questions # 3:

Which of the following features is NOT supported by Nuage Networks VNS?

Options:
A.

Service chaining

B.

Centralized control plane

C.

MPLS VPN

D.

IPsec encryption

Questions # 4:

What will happen when a virtual/physical appliance in a subnet with encryption enabled is trying to communicate with a virtual/physical appliance in a subnet with encryption disabled?

Options:
A.

The communication is not possible and traffic will be dropped.

B.

Traffic will be forwarded in an unencrypted VXLAN tunnel.

C.

Traffic will be forwarded in an unencrypted VXLAN over IPsec tunnel.

D.

The communication between these two subnets is only possible through service chaining.

Questions # 5:

Which of the following statements is NOT correct about the communication between two NSGs in different branch offices?

Options:
A.

These two NSGs exchange OpenFlow-TLS with their controller to establish the tunnel for overlay traffic.

B.

These two NSGs must be managed by the same VSD/VSD HA cluster.

C.

The overlay tunnels established between the NSGs must be VXLAN encapsulation.

D.

The overlay tunnels are established during bootstrapping.

Questions # 6:

Which of the following is NOT defined in the NSG infrastructure G/W profile?

Options:
A.

Identify the VSD proxy

B.

Enable two-factor installer authentication

C.

Port speed and mode

D.

NTP, stats, syslog server

Questions # 7:

Which of the following VSD service abstractions maps to a VRF instance in standard networking terminology?

Options:
A.

Domain

B.

Zone

C.

Subnet

D.

L2 domain

Questions # 8:

Which of the following statements is NOT true regarding the integration of the data center (VCS solution) and branch office (VNS solution)?

Options:
A.

The VSD in the data center and the VSD for the branch office are running XMPP to synchronize with each other.

B.

The VSC in the data center and the VSC for the NSG branch office are running BGP to update each other’s forwarding table.

C.

With integration, the virtual machines in the data center and the devices in the branch office can belong to the same overlay network.

D.

Traffic between the virtual machines in the data center and the devices in the branch office are forwarded in VXLAN tunnels.

Questions # 9:

Which of the following statements about the Nuage Networks SD-WAN portal is TRUE?

Options:
A.

It runs directly on any Linux-based bare metal server.

B.

It is packaged as a docker container.

C.

It is deployed as a KVM, Hyper-V or ESXi virtual machine.

D.

It must be hosted in a public cloud such as AWS.

Questions # 10:

Which of the following is true regarding the IPsec VPN between the NSGs?

Options:
A.

It encrypts and encapsulates the VXLAN traffic.

B.

The key for IPsec needs be manually configured on NSGs and must match each other.

C.

The IPsec tunnel can be directly terminated by VRS in a data center.

D.

To have IPsec VPN, an encryption function needs to be enabled at each individual NSG.

Viewing page 1 out of 2 pages
Viewing questions 1-10 out of questions