100% Real JN0-611 dumps - Brilliant JN0-611 Exam Questions PDF
JN0-611 Exam PDF [2023] Tests Free Updated Today with Correct 67 Questions
NEW QUESTION 12
While integrating a VMware cluster running Contrail, an application owner has concerns about workload microsegmentation. How would you respond to the customer's concerns?
- A. Show how Contrail's default network policy will prevent inter-VM traffic.
- B. Show how a unique vSwitch VLAN will be allocated to each VM interface.
- C. Show how a route-policy in Contrail will prevent intra-subnet communication.
- D. Show how Contrail's distributed stateful firewall rules will block VM communication.
Answer: B
NEW QUESTION 13
What is a core component of a Microsoft Azure environment?
- A. a vRouter
- B. a resource group
- C. an EC2 instance
- D. a VPC
Answer: B
NEW QUESTION 14
You are connecting your private cloud with services running in a Microsoft Azure public cloud. In this scenario, which two actions must be completed to accomplish this task? (Choose two.)
- A. You must enable NETCONF on all devices in your private cloud environment.
- B. All the on-premises nodes must have private IP addresses except the management interfaces.
- C. Time must be synchronized on all the nodes with NTP.
- D. DNS settings on all devices must point to Microsoft for resolution.
Answer: A,D
NEW QUESTION 15
You are configuring the management and control_data interfaces in a standard switch port group using ContrailVM. In the scenario, which two statements are correct? {Choose two.)
- A. The control_data interface must have the DHCP flag set as true.
- B. The control_data interface can have the DHCP flag set as false.
- C. The management interface must have the DHCP flag set as true.
- D. The management interface can have the DHCP flag set as false.
Answer: A,C
NEW QUESTION 16
Which three orchestrators are supported by Contrail Enterprise Multicloud? (Choose three.)
- A. OpenStack
- B. Network Service Orchestrator
- C. VMware
- D. Kubernetes
- E. Open Flow
Answer: A,C,D
NEW QUESTION 17
Which two statements are correct when deploying or integrating OpenShift with Contrail Enterprise Multicloud? {Choose two.)
- A. Contrail Command for deployment is not supported.
- B. NFS for OpenShift logging is recommended.
- C. When using a load balancer, manually copy the htpasswd file into all of the master nodes.
- D. NTP is installed automatically and synchronized.
Answer: B,D
NEW QUESTION 18
You are deploying a service chain in your cloud environment. You want to have the traffic evaluated by a Layer 3 firewall and a load balancing service before reaching its destination. In this scenario, which service mode should be used?
- A. firewall
- B. transparent
- C. analyzer
- D. in-network
Answer: A
NEW QUESTION 19
Referring to the exhibit, what is the correct order of workflow to delete the vSRX?
- A. Shutdown and delete the instance from the Horizon user interface.
- B. Delete the template, delete the instance, and then delete the policy.
- C. Delete the policy, delete the instance, and then delete the template.
- D. Delete the instance, delete the policy, and then delete the template.
Answer: A
NEW QUESTION 20
Contrail Virtual Network corresponds to which entity in VMware vCenter?
- A. distributed virtual switch
- B. standard virtual switch
- C. standard port group
- D. distributed port group
Answer: A
NEW QUESTION 21
Your customer asks you to create a service VM to be used for deep packet inspection. You are also asked to ensure that the service does not modify the packet.
Which two service modes would you use in this situation? (Choose two.)
- A. transparent NAT
- B. in-network
- C. transparent
- D. in-network NAT
Answer: A,B
NEW QUESTION 22
Referring to the exhibit, which statement is true about virtual networks A and B so that the vSRX can be used as a service instance in a transparent service chain?
- A. Virtual networks A and B must be running on the same host server.
- B. Virtual networks A and B must be running on different host servers.
- C. Virtual networks A and B must have the same CIDR addressing.
- D. Virtual networks A and B must have different CIDR addressing.
Answer: D
NEW QUESTION 23
Your orchestrator has deployed three virtual machines on the compute nodes and deployed a VNF as shown in the exhibit. You request that a service chain be established so that traffic from VM-1 to VM- 2 is steered through VNF-1. Because of a connectivity problem, you must now verify that the necessary routes are present in the routing tables on the required nodes.
In this scenario, which nodes should you inspect?
- A. H-1, H-2, H-3 compute nodes only
- B. the spine and leaf nodes only
- C. H-1 and H-2 compute nodes only
- D. H-1, H-2, H-3, H-4 compute nodes only
Answer: D
NEW QUESTION 24
You are deploying Contrail Enterprise Multicloud in your environment. You must securely connect your private resources with publicly-hosted resources.
What must be included in this scenario?
- A. Contrail Security
- B. Multicloud-Gateway
- C. AppFormix
- D. service chaining
Answer: B
NEW QUESTION 25
Service instance SI2 is performing source NAT using Ihe pool of addresses shown in the exhibit.
You are verifying connectivity by sending ICMP traffic from the G1 host to the R1 host. You notice that the ICMP requests are received on R1, but the ICMP responses are not received on the G1 host.
In this scenario, what would solve this problem?
- A. You must add static routes to the VMs in the Right VN.
- B. You must add static routes to the VMs in the Left VN.
- C. Apply a network policy to allow traffic from the Left VN toward the Right VN.
- D. You must add a static route table to SI2.
Answer: C
NEW QUESTION 26
Which statement is correct about service chaining?
- A. The right service interface is always the ingress for traffic.
- B. Service chaining is always Layer 2 based.
- C. All traffic entering the left interface must exit the right interface.
- D. All hosts must be in the same network subnet.
Answer: A
NEW QUESTION 27
You are deploying resources within AWS integrated with Contrail. Which set of components must be defined in this situation?
- A. region, VPC, security groups, SSH key pair, EC2 instance details
- B. region, VNET, security groups, SSH key pair, EC2 instance details
- C. region, resource group, VPC, security groups, instance details
- D. region, resource group, VNET, security groups, instance details
Answer: B
NEW QUESTION 28
Which statement correctly characterizes the VLAN allocation for tenant VMs when Contrail provides overlay network virtualization in a VMware cluster?
- A. All VMs on the same subnet on a single ESXi host share a common VLAN.
- B. On every ESXi host, each VM has a unique VLAN.
- C. Each virtual network has a unique VLAN on every ESXi host.
- D. All VMs on a single ESXi host have the same unique VLAN.
Answer: A
NEW QUESTION 29
You want to provision Contrail components in the public cloud. Which tools would you use to accomplish this task? (Choose two.)
- A. Ansible
- B. Terraform
- C. Puppet
- D. OpenStack Nova
Answer: B,D
NEW QUESTION 30
You are writing Contrail firewall rule policies for a recently added application on an AWS cloud environment. The application is complex and requires access to a list of s3 databases along with various protocol and port combinations.
In this scenario, which two policy rule constructs would ensure that the number of rules are limited without affecting functionality? (Choose two.)
- A. global tags
- B. application policy sets
- C. service groups
- D. address groups
Answer: A,D
NEW QUESTION 31
You are using Kubernetes in your Contrail Enterprise Multicloud environment. You must create an isolated Kubernetes namespace. In this scenario, which two statements are correct? (Choose two.)
- A. A pod network is automatically created.
- B. A project is automatically created.
- C. A networking port is automatically created.
- D. A network policy is automatically created.
Answer: C,D
NEW QUESTION 32
What is a core component of an AWS cloud environment?
- A. a vRouter
- B. a resource group
- C. a VNET
- D. a VPC
Answer: B
NEW QUESTION 33
You are working with Contrail multicloud using Azure cloud. You want to modify the topology to add extra resources. Which two steps must be performed to accomplish this task? (Choose two.)
- A. Execute the modify.yml Ansible playbook.
- B. Edit the topology.dat file.
- C. Execute the modify.sh script.
- D. Edit the topology.yml file.
Answer: D
NEW QUESTION 34
......
Verified & Correct JN0-611 Practice Test Reliable Source Feb 26, 2023 Updated: https://prep4sure.examtorrent.com/JN0-611-exam-papers.html
