HP2-Z31 Online Practice Questions and Answers

Correct Answer: D

Software-defined networking (SDN) is an architecture purporting to be dynamic, manageable, cost-

effective, and adaptable, seeking to be suitable for the high-bandwidth, dynamic nature of today's

applications.

The SDN architecture is:

Directly programmable: Network control is directly programmable because it is decoupled from forwarding

functions.

Agile: Abstracting control from forwarding lets administrators dynamically adjust network-wide traffic flow to

meet changing needs.

Reference: Wikipedia, Software-defined networking

Correct Answer: D

Openflow 1.3.1: Support for multiple flow tables is introduced Reference: Open Flow 1.3.1 Support: Controller View https://wiki.opendaylight.org/images/d/dc/Openflow1.3_Support_for_Opendaylight.pdf

Correct Answer: A

The Openflow controller component relies on PKI to establish mutual trust (2-way SSL) between itself and the Openflow switches that it manages.

Please note that both the Controller and Device certificates must be signed by the same CA, so that the TLS connection will be established.

Reference: HP VAN SDN Controller Administrator Guide

Correct Answer: B

OpenFlow instance connection interruption mode You can set the type of behavior when the switch loses connection with the controller. fail-standalone If the switch loses connection with all of the controllers, packets and messages of new flows behave as a legacy switch or router would. Existing flows of this OpenFlow instance are removed.

Reference: HP OpenFlow Switches

(page 21) http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c03512348-4.pdf

Correct Answer: C

* Northbound API Relative to figure 1 below, the Northbound API is the API that enables communications between the control layer and the application layer (external business applications.

Southbound API

Relative to Figure 1 below, the Southbound API is the API that enables communications between the control layer and the infrastructure layer (OpenFlow).

Figure 1. ONF's SDN architecture

* Putting the region configurations in place in a controller team ensures seamless failover and failback among the configured controllers for the specified network devices in a region. That is, when a master controller experiences a fault, the Role Orchestration Service ensures that a slave controller immediately assumes the master role over the group of network devices to which the failed controller was in the master role.

Reference: Technical white paper, Mock RFI for Enterprise SDN Solutions Reference: HP VAN SDN Controller Administrator Guide

Correct Answer: CD

You can set general policies for all the hosts in the network to manage and mitigate malicious traffic and host name requests. General policies enable the application to detect changes in network traffic patterns. The general policies prevent the host from acting like a botnet and being controlled by external malicious computers.

When network traffic from a host exceeds the policy limits, you can configure application to perform one of the following actions:

Block

Block and notify

Quarantine

Quarantine and Notify

Note: HIPS Short for host-based intrusion prevention system, HIPS is an IPS or intrusion prevention system designed for security over host-based systems where intrusions and infections are dealt with at the individual workstation level to provide a more effective level of security. Reference: HP Network Protector SDN Application Administrator Guide

Correct Answer: B

OpenFlow version 1.3 is the latest version of OpenFlow that has support from switch vendors. It is significantly different from OpenFlow version 1.0 (which was the previous version several vendors supported). Among others, the main features added since then are:

1.1: Support for MPLS, Q-in-Q, VLANs, multipath, multiple tables, logical ports 1.2: Support for extensible headers (in match, packet_in, set_field), IPv6 1.3: Support for tunneling, per-flow traffic meters, Provider Backbone Bridging

Reference: OpenFlow version 1.3 tutorial

Correct Answer: CDE

The HP VAN SDN Controller ships with a default set of core network service components, which provide

an out-of-box experience in terms of enabling connectivity across network applications in the Openflow

network.

They include:

Topology Manager

Node Manager

Path Daemon

OpenFlow Node Discovery

Link Manager

OpenFlow Link Discovery

Reference: HP VAN SDN Controller Programming Guide

Correct Answer: B

The SDN controller uses Openstack Keystone as an identity management for managing users, generating tokens, as well as token validation.

Reference: HP VAN SDN Controller Administrator Guide

Correct Answer: A

LLDP is used to discover direct links between switches and BDDP is used to discover the switches in the same broadcast domain.

Note: Using a link-discovery module, the controller generates both LLDP and broadcast packets (referred to as BDDPs) and sends them to all neighboring switches on a regular basis.

Reference: OpenFlow Controller