6.automation, Virtualization, Cloud, SDN, DNA
6.automation, Virtualization, Cloud, SDN, DNA
Question 5
In which way does a spine and-leaf architecture allow for scalability in a network when additional
access ports are required?
A. A spine switch and a leaf switch can be added with redundant connections between them
B. A spine switch can be added with at least 40 GB uplinks
C. A leaf switch can be added with a single connection to a core spine switch
D. A leaf switch can be added with connections to every spine switch
Answer: D
Explanation
Spine-leaf architecture is typically deployed as two layers: spines (such as an aggregation layer),
and leaves (such as an access layer). Spine-leaf topologies provide high-bandwidth, low-latency,
nonblocking server-to-server connectivity.
Leaf (aggregation) switches are what provide devices access to the fabric (the network of spine
and leaf switches) and are typically deployed at the top of the rack. Generally, devices connect to
the leaf switches. Devices can include servers, Layer 4-7 services (firewalls and load balancers),
and WAN or Internet routers. Leaf switches do not connect to other leaf switches. In spine-and-
leaf architecture, every leaf should connect to every spine in a full mesh.
Spine (aggregation) switches are used to connect to all leaf switches and are typically deployed at
the end or middle of the row. Spine switches do not connect to other spine switches.
Reference: https://www.cisco.com/c/en/us/products/collateral/switches/nexus-9000-series-
switches/guide-c07-733228.html
Question 1
Answer: A
Explanation
Spine-leaf architecture is typically deployed as two layers: spines (such as an aggregation layer),
and leaves (such as an access layer). Spine-leaf topologies provide high-bandwidth, low-
latency (-> Answer B is not correct), nonblocking server-to-server connectivity.
With a spine-and-leaf architecture, no matter which leaf switch to which a server is connected, its
traffic always has to cross the same number of devices to get to another server (unless
the other server is located on the same leaf) (-> Answer A is correct) . This approach keeps
latency at a predictable level because a payload only has to hop to a spine switch and another leaf
switch to reach its destination.
Reference: https://www.cisco.com/c/en/us/products/collateral/switches/nexus-7000-series-
switches/white-paper-c11-737022.html
With Leaf-Spine, the network uses Layer 3 routing so STP is no longer required. (-> Answer C is
not correct). Spine-leaf architectures rely on protocols such as Equal-Cost Multipath (ECPM)
routing to load balance traffic across all available paths while still preventing network loops. This
allows all connections to be utilized at the same time while still remaining stable and avoiding
loops within the network.
Question 2
What are two descriptions of three-tier network topologies? (Choose two)
A. The core and distribution layers perform the same functions
B. The access layer manages routing between devices in different domains
C. The network core is designed to maintain continuous connectivity when devices fail
D. The core layer maintains wired connections for each host
E. The distribution layer runs Layer 2 and Layer 3 technologies
Answer: C E
Question 3
Answer: C
Question 4
Answer: D
Question 5
What is the name of the layer in the Cisco borderless switched network design that is considered
to be the backbone used for high-speed connectivity and fault isolation?
A. data link
B. access
C. core
D. network
E. network access
Answer: C
Explanation
The key layers are access, distribution, and core. The core layer is the network backbone that
hierarchically connects several layers of the network design, providing for connectivity between
end devices, computing and data storage services located within the data center and other areas,
and services within the network.
Question 6
A company needs to interconnect several branch offices across a metropolitan area. The network
engineer is seeking a solution that provides high-speed converged traffic, including voice, video,
and data on the same network infrastructure. The company also wants easy integration to their
existing LAN infrastructure in their office locations. Which technology should be recommended?
A. VSAT
B. ISDN
C. Frame Relay
D. Ethernet WAN
Answer: D
Explanation
Ethernet WAN offer the ability of using Ethernet over long-distance links.
Question 7
Which two WAN architecture options help a business scalability and reliability for the network?
(Choose two)
A. dynamic routing
B. static routing
C. dual-homed branches
D. single-homed branches
E. asychronous routing
Answer: A C
Explanation
Dual-homed branches (branches connects to two ISPs or one ISP with two connections) increases
reliability for the network.
Dynamic routing automatically use backup routes in the case of main routes fail which increases
reliability. The configuration is remain unchanged or change a little when we expand the network
thus increasing the scalability.
Note: A scalable network can expand quickly to support new users and applications without
impacting the performance of the service being delivered to existing users
Question 8
Which WAN access technology is preferred for a small office / home office architecture?
A. broadband cable access
B. frame-relay packet switching
C. dedicated point-to-point leased line
D. Integrated Services Digital Network switching
Answer: A
Question 9
Which two functions are performed by the core layer in a three-tier architecture? (Choose two)
A. Provide direct connectivity for end user devices
B. Police traffic that is sent to the edge of the network
C. Provide uninterrupted forwarding service
D. Inspect packets for malicious activity
E. Ensure timely data transfer between layers
Answer: C E
Explanation
Reference: https://www.ciscopress.com/articles/article.asp?p=2202410&seqNum=4
Question 10
Answer: C
Explanation
The three-tier hierarchical design maximizes performance, network availability, and the ability to
scale the network design.
However, many small enterprise networks do not grow significantly larger over time. Therefore, a
two-tier hierarchical design where the core and distribution layers are collapsed into one layer is
often more practical. A “collapsed core” is when the distribution layer and core layer
functions are implemented by a single device. The primary motivation for the collapsed core
design is reducing network cost, while maintaining most of the benefits of the three-tier
hierarchical model.
Reference: https://www.ciscopress.com/articles/article.asp?p=2202410&seqNum=4
A collapsed core network is shown below. The collapsed core network may be deployed with
redundant core/distribution router, or consolidated core/distribution router.
Deploying a collapsed core network results in the distribution layer and core layer functions being
implemented in a single device. The collapsed core/distribution device must provide the following:
+ High speed physical and logical paths connecting to the network
+ Layer-2 aggregation and demarcation point
+ Define routing and network access policies -> Answer C is correct
+ Intelligent network services—QoS, Network virtualization, etc.
Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Small_Enterprise_Design_
Profile/SEDP/chap2.html
Cloud Summary
Three cloud supporting services cloud providers provide to customer:
+ SaaS (Software as a Service): SaaS uses the web to deliver applications that are
managed by a third-party vendor and whose interface is accessed on the clients’ side.
Most SaaS applications can be run directly from a web browser without any downloads or
installations required, although some require plugins.
+ PaaS (Platform as a Service): are used for applications, and other development, while
providing cloud components to software. What developers gain with PaaS is a framework
they can build upon to develop or customize applications. PaaS makes the development,
testing, and deployment of applications quick, simple, and cost-effective. With this
technology, enterprise operations, or a third-party provider, can manage OSes,
virtualization, servers, storage, networking, and the PaaS software itself. Developers,
however, manage the applications. PaaS provides everything except applications.
+ IaaS (Infrastructure as a Service): self-service models for accessing, monitoring, and
managing remote datacenter infrastructures, such as compute (virtualized or bare metal),
storage, networking, and networking services (e.g. firewalls). Instead of having to
purchase hardware outright, users can purchase IaaS based on consumption, similar to
electricity or other utility billing.
Virtualization Summary
A major advantage of virtualization is overall reduced cost (less equipment is required,
less energy is consumed, less space is required).
There are two types of hypervisors: type 1 and type 2.
In type 1 hypervisor (or native hypervisor), the hypervisor is installed directly on the
physical server (so it is called “bare metal” approach). Then instances of an operating
system (OS) are installed on the hypervisor. Type 1 hypervisor has direct access to the
hardware resources. Therefore it is more efficient than hosted architectures. Some
examples of type 1 hypervisor are VMware vSphere/ESXi, Oracle VM Server, KVM and
Microsoft Hyper-V. Type 1 hypervior is usually used on enterprise servers and data center
networking devices.
In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of
an operating system and not the physical hardware directly. A big advantage of Type 2
hypervisors is that management console software is not required. Examples of type 2
hypervisors are VMware Workstation (which can run on Windows, Mac and Linux) or
Microsoft Virtual PC (only runs on Windows).
Question 1
Answer: B
Question 2
An organization has decided to start using cloud-provided services. Which cloud service allows the
organization to install its own operating system on a virtual machine?
A. platform-as-a-service
B. software-as-a-service
C. network-as-a-service
D. infrastructure-as-a-service
Answer: D
Explanation
Below are the 3 cloud supporting services cloud providers provide to customer:
+ SaaS (Software as a Service): SaaS uses the web to deliver applications that are managed by a
third-party vendor and whose interface is accessed on the clients’ side. Most SaaS applications can
be run directly from a web browser without any downloads or installations required, although some
require plugins.
+ PaaS (Platform as a Service): are used for applications, and other development, while providing
cloud components to software. What developers gain with PaaS is a framework they can build
upon to develop or customize applications. PaaS makes the development, testing, and deployment
of applications quick, simple, and cost-effective. With this technology, enterprise operations, or a
third-party provider, can manage OSes, virtualization, servers, storage, networking, and the PaaS
software itself. Developers, however, manage the applications.
+ IaaS (Infrastructure as a Service): self-service models for accessing, monitoring, and managing
remote datacenter infrastructures, such as compute (virtualized or bare metal), storage,
networking, and networking services (e.g. firewalls). Instead of having to purchase hardware
outright, users can purchase IaaS based on consumption, similar to electricity or other utility
billing.
In
general, IaaS provides hardware so that an organization can install their own operating system.
Question 3
Anycompany has decided to reduce its environmental footprint by reducing energy costs, moving
to a smaller facility, and promoting telecommuting. What service or technology would support this
requirement?
A. Cisco ACI
B. cloud services
C. APIC-EM
D. data center
Answer: B
Question 4
Answer: B C
Question 5
What role does a hypervisor provide for each virtual machine in server virtualization?
A. control and distribution of physical resources
B. software-as-a-service
C. services as a hardware controller
D. infrastructure-as-a-service
Answer: A
Explanation
Each virtual machine has its own set of virtual hardware (RAM, CPU, NIC) upon which an operating
system and fully configured applications are loaded. The operating system sees a consistent,
normalized set of hardware regardless of the actual physical hardware components.
Question 6
Answer: D
Explanation
Maybe this question is missing some information but software-as-a-service (SaaS) helps save a lot
of time to install OS, softwares for running a business.
Question 7
A manager asks a network engineer to advise which cloud service models are used so employees
do not have to waste their time installing, managing, and updating software which is only used
occasionally. Which cloud service model does the engineer recommend?
A. infrastructure-as-a-service
B. software-as-a-service
C. platform-as-a-service
D. business process as service to support different types of service
Answer: B
Explanation
+ SaaS (Software as a Service): SaaS uses the web to deliver applications that are managed by a
third-party vendor and whose interface is accessed on the clients’ side. Most SaaS applications can
be run directly from a web browser without any downloads or installations required, although some
require plugins.
+ PaaS (Platform as a Service): are used for applications, and other development, while providing
cloud components to software. What developers gain with PaaS is a framework they can build
upon to develop or customize applications. PaaS makes the development, testing, and deployment
of applications quick, simple, and cost-effective. With this technology, enterprise operations, or a
third-party provider, can manage OSes, virtualization, servers, storage, networking, and the PaaS
software itself. Developers, however, manage the applications. PaaS provides everything except
applications.
+ IaaS (Infrastructure as a Service): self-service models for accessing, monitoring, and managing
remote datacenter infrastructures, such as compute (virtualized or bare metal), storage,
networking, and networking services (e.g. firewalls). Instead of having to purchase hardware
outright, users can purchase IaaS based on consumption, similar to electricity or other utility
billing.
SDN Questions
January 9th, 2021Go to comments
Premium Member: You can test your knowledge with these questions first via this link (via
HTML).
Now, in turn, the networking administrators and SDN applications want to control the
controller! So the controller need a northbound interface (NBI) to communicate with us.
The NBI applications included various network services, including network virtualization,
dynamic virtual network provisioning, firewall monitoring, user identity management and
access policy control.
– REST (Representational State Transfer) describes a type of API that allows applications
to sit on different hosts, using HTTP messages to transfer data over the API.
Three SDN controllers which are mentioned in CCNA:
+ OpenDaylight Controller: an OpenFlow-based SDN
+ Cisco Application Centric Infrastructure (ACI)
+ Cisco APIC Enterprise Module (APIC-EM)
Question 1
Answer: C
Question 2
Answer: D
Explanation
Answer: B C
Question 4
Answer: B C
Explanation
OpenFlow is a well-known southbound API. OpenFlow defines the way the SDN Controller should
interact with the forwarding plane to make adjustments to the network, so it can better adapt to
changing business requirements.
The Network Configuration Protocol (NetConf) uses Extensible Markup Language (XML) to install,
manipulate and delete configuration to network devices.
Question 5
Answer: D
Explanation
Most traditional devices use a distributed architecture, in which each control plane is resided in a
networking device. Therefore they need to communicate with each other via messages to work
correctly.
Question 6
What software defined architecture plane assists network devices with making packet forwarding
decisions by providing Layer 2 reachability and Layer 3 routing information?
A. data plane
B. control plane
C. policy plane
D. management plane
Answer: B
Explanation
Control Plane Function
In its simplest form, the control plane provides layer-2 MAC reachability and layer-3 routing
information to network devices that require this information to make packet forwarding decisions.
In the case of firewalls, the control plane would include stateful flow information for inspection.
Control plane functionality can implemented as follows:
+ Distributed – Conventional routers and switches operate using distributed protocols for control,
i.e. where each device makes its own decisions about what to do, and communicate relevant
information to other devices for input into their decision making process. For example, the
Spanning Tree Protocol (STP), Fabric Path, and routing protocols such as IS-IS and BGP provide
distributed control of packet forwarding functionality to networking devices.
+ Centralized – In this case, a centralized controller provides the necessary information for a
network element to make a decision. For example, these controller(s) instruct networking devices
on where to forward packets by explicitly programming their MAC and FIBs.
Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/SDN/
SDN.html
Question 7
What are two benefits of controller-based networking compared to traditional networking? (Choose
two)
A. controller-based increases network bandwidth usage, while traditional lightens the load on the
network.
B. controller-based reduces network configuration complexity, while traditional increases the
potential for errors
C. controller-based inflates software costs, while traditional decreases individual licensing costs
D. controller-based allows for fewer network failure, while traditional increases failure rates
E. controller-based provides centralization of key IT functions. While traditional requires distributes
management function
Answer: B E
Question 8
In software defined architectures, which plane is distributed and responsible for traffic forwarding?
A. management plane
B. control plane
C. data plane
D. policy plane
Answer: C
Explanation
The Open Networking Foundation identifies three main parts of the Software-defined networking
(SDN): Application layer; Control layer and Infrastructure layer. SDN separates a router’s control
plane from the data (forwarding) plane. The control plane makes routing decisions. The data plane
forwards data (packets) through the router. With SDN routing, decisions are made remotely
instead of on each individual router.
DNA Center Questions
January 8th, 2021Go to comments
Premium Member: You can test your knowledge with these questions first via this link (via
HTML).
Question 1
Which two capacities of Cisco DNA Center make it more extensible? (Choose two)
A. adapters that support all families of Cisco IOS software
B. SDKs that support interaction with third-party network equipment
C. customized versions for small, medium, and large enterprises
D. REST APIs that allow for external applications to interact natively with Cisco DNA Center
E. modular design that is upgradable as needed
Answer: B D
Explanation
Cisco DNA Center offers 360-degree extensibility through four distinct types of platform
capabilities:
+ Intent-based APIs leverage the controller and enable business and IT applications to deliver
intent to the network and to reap network analytics and insights for IT and business innovation.
+ Process adapters, built on integration APIs, allow integration with other IT and network
systems to streamline IT operations and processes.
+ Domain adapters, built on integration APIs, allow integration with other infrastructure domains
such as data center, WAN, and security to deliver a consistent intent-based infrastructure across
the entire IT environment.
+ SDKs allow management to be extended to third-party vendor’s network devices to offer
support for diverse environments.
Reference: https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/dna-
center/nb-06-dna-cent-platf-aag-cte-en.html
Question 2
What makes Cisco DNA Center different from traditional network management applications and
their management of networks?
A. It only supports auto-discovery of network elements in a green field deployment.
B. It modular design allows someone to implement different versions to meet the specific needs of
an organization
C. It abstracts policy from the actual device configuration
D. It does not support high availability of management functions when operating in cluster mode
Answer: C
Question 3
How does Cisco DNA Center gather data from the network?
A. Network devices use different services like SNMP, syslog, and streaming telemetry to send data
to the controller
B. Devices establish an iPsec tunnel to exchange data with the controller
C. Devices use the call-home protocol to periodically send data to the controller
D. The Cisco CU Analyzer tool gathers data from each licensed network device and streams it to
the controller
Answer: A
Question 4
How do traditional campus device management and Cisco DNA Center device management differ
in regards to deployment?
A. Cisco DNA Center device management can deploy a network more quickly than traditional
campus device management
B. Traditional campus device management allows a network to scale more quickly than with Cisco
DNA Center device management
C. Cisco DNA Center device management can be implemented at a lower cost than most traditional
campus device management options
D. Traditional campus device management schemes can typically deploy patches and updates
more quickly than Cisco DNA Center device management
Answer: A
Question 5
What is an advantage of Cisco DNA Center versus traditional campus device management?
A. It supports numerous extensibility options including cross-domain adapters and third-party
SDKs
B. It supports high availability for management functions when operating in cluster mode
C. It enables easy autodiscovery of network elements m a brownfield deployment
D. It is designed primarily to provide network assurance
Answer: A
VPN Questions
January 7th, 2021Go to comments
Premium Member: You can test your knowledge with these questions first via this link (via
HTML).
Question 1
Which type of VPN uses a hub-and-spoke configuration to establish a full mesh topology?
A. GRE over IPsec
B. dynamic multipoint VPN
C. MPLS VPN
D. IPsec virtual tunnel interface
Answer: B
Explanation
Dynamic Multipoint VPN (DMVPN) is a solution of Cisco. DMVPN provides the following advantages:
+ Provides full meshed connectivity with simple Hub-and-Spoke topology. The spokes can
communicate between each other without going through Hub
+ Only one static public IP address is required on Hub. Spokes can use dynamic (unknown) public
IP addresses
+ The configuration is simple even in large network. No additional configuration is required on Hub
when new Spokes are added.
Question 2
What mechanism carries multicast traffic between remote sites and supports encryption?
A. ISATAP
B. GRE over IPsec
C. IPsec over ISATAP
D. GRE
Answer: B
Question 3
What is a function of a remote access VPN?
A. used cryptographic tunneling to protect the privacy of data for multiple users simultaneously
B. allows the users to access company internal network resources through a secure tunnel
C. used exclusively when a user is connected to a company’s internal network
D. establishes a secure tunnel between two branch sites
Answer: B
Automation Questions
January 7th, 2021Go to comments
Premium Member: You can test your knowledge with these questions first via this link (via
HTML).
Question 1
Which output displays a JSON data representation?
A.
{
“response”,{
“taskId”,{};
“url”,”string”
};
“version”, “string”
}
B.
{
“response”:{
“taskId”,{};
“url”,”string”
};
“version”; “string”
}
C.
{
“response”- {
“taskId”- {};
“url”-“string”
},
“version”-“string”
}
D.
{
“response”:{
“taskId”:{},
“url”:”string”
},
“version”: “string”
}
Answer: D
Explanation
JSON data is written as name/value pairs.
A name/value pair consists of a field name (in double quotes), followed by a colon, followed by a
value:
“name”:”Mark”
JSON can use arrays. Array values must be of type string, number, object, array, boolean or null.
For example:
{
“name”:”John”,
“age”:30,
“cars”:[ “Ford”, “BMW”, “Fiat” ]
}
Question 2
Which option best describes an API?
A. communication often uses either Java scripting, Python, XML, or simple HTTP
B. an architectural style (versus a protocol) for designing applications
C. a stateless client-server model
D. request a certain type of data by specifying the URL path that models the data
Answer: C
Question 3
Which option about JSON is true?
A. uses predefined tags or angle brackets (<>) to delimit markup text
B. used to describe structured data that includes arrays
C. used for storing information
D. similar to HTML, it is more verbose than XML
Answer: B
Explanation
JSON can use arrays. Array values must be of type string, number, object, array, boolean or null..
For example:
{
“name”:”John”,
“age”:30,
“cars”:[ “Ford”, “BMW”, “Fiat” ]
}
Question 4
Which of the following is the JSON encoding of a dictionary or hash?
A. {“key”: “value”}
B. [“key”, “value”]
C. {“key”, “value”}
D. (“key”: “value”)
Answer: A
Question 5
Which two encoding methods are supported by REST APIs? (Choose two)
A. YAML
B. JSON
C. EBCDIC
D. SGML
E. XML
Answer: B E
Explanation
The Application Policy Infrastructure Controller (APIC) REST API is a programmatic interface that
uses REST architecture. The API accepts and returns HTTP (not enabled by default) or HTTPS
messages that contain JavaScript Object Notation (JSON) or Extensible Markup Language (XML)
documents.
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-
x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configu
ration_Guide_chapter_01.html
Question 6
What are two benefits of network automation? (Choose two)
A. reduced operational costs
B. reduced hardware footprint
C. faster changes with more reliable results
D. fewer network failures
E. increased network security
Answer: A C
Question 7
Which type of API would be used to allow authorized salespeople of an organization access to
internal sales data from their mobile devices?
A. partner
B. open
C. public
D. private
Answer: D
Explanation
Question 8
What is a characteristic of the REST API?
A. evolved into what became SOAP
B. used for exchanging XML structured information over HTTP or SMTP
C. considered slow, complex, and rigid
D. most widely used API for web services
Answer: D
Explanation
REST API is an API that works on top of the HTTP protocol. It defines a set of functions developers
can use to perform requests and receive responses via
HTTP protocol such as GET and POST. REST APIs are the most popular API used for web services
nowadays.
Question 9
Refer to the exhibit.
A. Puppet
B. JSON
C. Chef
D. Ansible
Answer: A
Question 10
Which CRUD operation modifies an existing table or view?
A. read
B. replace
C. create
D. update
Answer: D
Explanation
CRUD is short for CREATE, READ, UPDATE and DELETE operations. Only UPDATE operation
modifies an existing table or view.
Question 11
Which configuration management mechanism uses TCP port 22 by default when communicating
with managed nodes?
A. Ansible
B. Python
C. Puppet
D. Chef
Answer: A
Explanation
TCP port 22 is SSH, which is used by Ansible when communicating with the managed nodes.