Online Access Free 4A0-N02 Practice Test

Which of the following is false regarding overlay solutions?

• A.Both VXLAN and TRILL are host-centric overlay solutions.
• B.Overlay networks are totally transparent to their physical underlay network.
• C.Nuage Networks VNS uses a VXLAN-based overlay solution.
• D.An 'overlay network' is a virtual abstraction built on top of an existing physical network.

What type of NAT is used so that any external host can send to iAddr: iPort by sending traffic to eAddr: ePort?
(i=internal, e=external)

• A.Port-restricted NAT
• B.Symmetric NAT
• C.Address-restricted NAT
• D.Full-cone NAT

Which of the following statements about uplink ingress policing is FALSE?

• A.VSD raises an alarm when the policing threshold is crossed.
• B.It can be applied to the underlay.
• C.The policer can be configured by enterprise admin.
• D.It can be applied to the overlay.

Which of the following is NOT true regarding the certificate authority component on VSD?

• A.It provides secure communication (TLS) between the VSC and VRSs.
• B.It provides secure communication (TLS) between NSGs and the VSC.
• C.It provides secure communication (TLS) between NSGs and VRSs.
• D.It provides secure communication (TLS) between NSGs and the VSD by an HTTPS proxy.

Which of the following statements is NOT correct about the communication between two NSGs in different branch offices?

• A.These two NSGs exchange OpenFlow-TLS with their controller to establish the tunnel for overlay traffic.
• B.The overlay tunnels are established during bootstrapping.
• C.These two NSGs must be managed by the same VSD/VSD HA cluster.
• D.The overlay tunnels established between the NSGs must be VXLAN encapsulation.