[2022年04月] 検証済み Juniper 試験問題集 JN0-412 試験学習ガイド [Q58-Q83]

[2022年04月] 検証済みJuniper試験問題集でJN0-412試験学習ガイド

ベスト品質のJuniper JN0-412試験解答リアル練習試験問題集で[2022]

質問 58
Refer to the exhibit.

You are trying to connect virtual machine A to virtual machine B.
Virtual machine A belongs to the security group WebServers. Virtual machine B belongs to the default security group.
Referring to the exhibit, which two actions would you perform on the default security group to allow access to virtual machine A? (Choose two.)

A. Add an ingress rule to the default security group to allow the WebServers security group.
B. Add an egress rule to the default security group to allow VM A's IP address.
C. Add an ingress rule to the default security group to allow VM A's IP address.
D. Add an egress rule to the default security group to allow the WebServers security group.

正解: A,D

質問 59
Which mechanism creates unique tenants within OpenStack?

A. Guest
B. Project
C. Profile
D. Group

正解: B

質問 60
Which statement is true regarding a network underlay in an SDN environment?

A. It provides physical connectivity from any physical device to any physical device.
B. It is aware of customer virtual domains and individual tenants on edge devices.
C. It maintains routing and switching information of end customer devices.
D. It manages and maintains tunnels between customer resources.

正解: A

質問 61
Which Kubernetes resource defines the traffic allowed to reach the pod?

A. NetworkPolicy
B. IPAM
C. SecurityGroup
D. Ingress

正解: A

質問 62
Two virtual machines that belong to the same virtual network are not able to communicate with each other.
Which statement is true in this scenario?

A. Images used to spawn the two virtual machines have different flavors.
B. The two virtual machines are in different availability zones.
C. A floating IP address is assigned to the virtual machine.
D. A security group is blocking the communication.

正解: D

解説:
Explanation

質問 63

A. The packet sniffing service can be implemented on any switch within the underlay fabric.
B. Customer A wants to add a packet capture service to their network to analyze traffic flowing to and from the Internet.
Referring to the exhibit, which statement is true?
C. The packet sniffing service must be performed on the edge routers facing the Internet.
D. The packet sniffing service can be implemented on any physical host in the cloud environment.
E. The packet sniffing service must be enabled on the vRouter directly attached to the customer's VM.

正解: E

質問 64
What does the Contrail Analytics service do with flows that are greater than or equal to the sampling threshold?

A. A modified flow sample is exported according to the probability of bytes during the interval divided by the sampling threshold.
B. The flow sample is not exported.
C. The flow sample is exported.
D. A modified flow sample is exported only after normalizing the byte and packet count during the interval.

正解: C

質問 65
You are deploying Contrail in your existing network and you must ensure that it manages your current IP fabric underlay.
Which two routing protocols are supported in this scenario? (Choose two.)

A. EIGRP
B. OSPF
C. EBGP
D. RIP

正解: B,C

質問 66
Refer to the exhibit.

A Contrail service instance is created in a scale-out mode with three instances (Sl-1, Sl-2, and Sl-3) between the left virtual network and the right virtual network.
Referring to the exhibit, which two statements are correct in this scenario?
(Choose two.)

A. Every packet between the virtual networks is forwarded to each of the three service instances.
B. The traffic between the virtual networks is load sharing using ECMP.
C. A Contrail policy can be used to block traffic initiated from the right virtual network to the left virtual network.
D. A Contrail policy has options to configure load sharing between the three service instances.

正解: C,D

質問 67
In which type of database is Contrail analytics node information stored?

A. MySQL
B. SQLite
C. NoSQL
D. PostreSQL

正解: B

質問 68
A vRouter includes which two containers? (Choose two.)

A. dns
B. api
C. nodemgr
D. agent

正解: C,D

質問 69
You have deployed a Contrail cluster that must support bare-metal servers.
Which protocol is used to communicate between the bare-metal server's virtual tunnel endpoints and the Contrail cluster to establish sessions with the VM servers?

A. EVPN/VXLAN
B. SRTP
C. BGP
D. XMPP

正解: A

質問 70
Refer to the exhibit.

Referring to the exhibit, when the user attempts the API request, which HTTP return code is generated by OpenStack?

A. HTTP 404 (Not Found)
B. HTTP 400 (Bad Request)
C. HTTP 401 (Unauthorized)
D. HTTP 503 (Service Unavailable)

正解: C

質問 71
Refer to the exhibit.

After provisioning a group of 20 VMs, the client reports that one of the VMs has unidirectional traffic problem.
Referring to the exhibit, what is causing the problem?

A. The VM is not provisioned with the correct flavor.
B. The vRouter does not have an appropriate route.
C. The VM did not fully initialize after booting.
D. The vRouter has a policy preventing the traffic.

正解: D

質問 72
Which three encapsulations does Contrail support for overlay networking? (Choose three.)

A. MPLS over IPsec
B. MPLS over UDP
C. EVPN
D. MPLS over GRE
E. VXLAN

正解: B,D,E

質問 73
What is AppFormix used for in Contrail?

A. to analyze network performance
B. to create VNFs
C. to deploy an underlay fabric
D. to secure application traffic

正解: B

質問 74
Refer to the exhibit.

The exhibit shows that the curl command is creating a virtual network in which project?

A. Default-project
B. Default-domain
C. Demo
D. Project

正解: D

質問 75
In which OpenStack core service would you find disk snapshots?

A. Glance
B. Cinder
C. Swift
D. Trove

正解: A

質問 76
Which endpoint type in Contrail Security provides multidimensional segmentation such as application, tier, deployment or site parameters?

A. address group
B. domain
C. virtual network
D. tag

正解: D

解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/contrail20/topics/concept/security-policy- enhancements.html

質問 77
Which two statements describe the Kubernetes network policy? (Choose two.)

A. A policy can define traffic in both directions.
B. A policy can define traffic in only one direction.
C. If a policy is not applied to a pod, then the pod blocks traffic from all sources.
D. If a policy is not applied to a pod, then the pod accepts traffic from all sources.

正解: A,D

質問 78
Refer to the exhibit.

Referring to the exhibit, when the user attempts the API request, which HTTP return code is generated by OpenStack?

A. HTTP 404 (Not Found)
B. HTTP 400 (Bad Request)
C. HTTP 401 (Unauthorized)
D. HTTP 503 (Service Unavailable)

正解: C

質問 79
You are asked to create a connection between a VM and two ports on a QFX leaf device in the fabric.
Which Contrail feature must you configure to accomplish this task?

A. virtual network with route leaking
B. floating IP
C. virtual port group
D. virtual network policy

正解: C

質問 80
Which SDN solution allows the control plane to remain on legacy hardware as a stop-gap measure until you are ready to replace the current hardware?

A. SDN as an overlay
B. open SDN
C. SDN using NVGRE
D. SDN using an API

正解: A

質問 81
Click the Exhibit button.

What will be the result of deploying the Heat template shown in the exhibit?

A. Neither VM will be deployed.
B. Only vm_2 will be deployed and vm_1 will be overwritten.
C. Only vm_1 will be deployed and vm_2 will fail.
D. Both vm_1 and vm_2 will be deployed.

正解: D

質問 82
Your company has decided to instantiate an OpenStack cluster based on the Mitaka release. Since OpenStack is new to your environment, you want to generate diagnostic snapshots to aid in troubleshooting issues that may arise.
Which action will accomplish this task?