HP HP ASE - FlexNetwork Architect V2, HP ASE - FlexNetwork Integrator V1 HP2-Z31 Questions & Answers

• Question 11:

  A multicast application is used in a customer's environment that relies on IGMP. On an edge switch an Openflow 1.3 instance is configured in aggregation mode. By default, what happens to the IGMP traffic if no matching flow entry exists?

  A. IGMP traffic is forwarded on the data plane.

  B. IGMP traffic is forwarded to the SON Controller.

  C. IGMP traffic is dropped.

  D. IGMP traffic is forwarded on the control plane.

  Correct Answer: C

  In Aggregation mode, all VLANs in the switch are part of an OpenFlow instance. When Aggregation is configured, there is only OpenFlow traffic, no production traffic.

  Reference: HP OpenFlow 1.3 Administrator Guide, Wired Switches K/KA/KB/WB 15.15

• Question 12:

  What are the OpenFlow flow entry timeout values? (Select two.)

  A. Flow timeout

  B. Idle timeout

  C. Soft timeout

  D. Controller timeout

  E. Hard timeout

  Correct Answer: BE

  OpenFlow flow entry timers include the idle timeout, the hard timeout, and the purge flow timer.

  Reference: Understanding OpenFlow Flow Entry Timers on Devices Running Junos OS http:// www.juniper.net/techpubs/en_US/junos13.3/topics/concept/junos-sdn-openflow-flow- entry-timersoverview.html

• Question 13:

  Refer to the exhibit.

  

  A customer has configured a VLAN to use OpenFlow. An HP Comware switch is used and configured to communicate with an HP VAN SDN Controller version 2.0. How was the flow entry in the exhibit added to the flow table of the switch?

  A. An application added the flow entry by making an API call against the southbound OpenFlow API of the HP VAN SDN Controller.

  B. The HP VAN SDN Controller topology service added this flow entry to the switch's flow table

  C. The HP VAN SDM Controller link discovery service added this flow entry to the switch's flow table

  D. An application added the flow entry by making an API call against the northbound REST API or JAVA API of the HP VAN SDN Controller.

  Correct Answer: D

  Incorrect:

  Not A: Southbound API is not used by external Applications.

  Not B:

  Topology service to create a network graph and compute the shortest path between two hosts.

  Not C:

  The link discovery service is responsible for discovering and maintaining the status of links in the OpenFlow network. The link discovery would record Mac Addresses, not IP addresses.

  * Northbound API Relative to figure 1 below, the Northbound API is the API that enables communications between the control layer and the application layer (external business applications. Southbound API

  Relative to Figure 1 below, the Southbound API is the API that enables communications between the control layer and the infrastructure layer (OpenFlow).

  Figure 1. ONF's SDN architecture

  

  *

  Putting the region configurations in place in a controller team ensures seamless failover and failback among the configured controllers for the specified network devices in a region. That is, when a master controller experiences a fault, the Role Orchestration Service ensures that a slave controller immediately assumes the master role over the group of network devices to which the failed controller was in the master role. Reference: Technical white paper, Mock RFI for Enterprise SDN Solutions Reference: HP VAN SDN Controller Administrator Guide

  Note:

  *

  The exhibit shows that the IPv4 source address, 10.10.10.0 is a private network. The exhibit shows that the IPv4 destination address, 192.168.56.0 is also a private network.

  *

  display openflow instance instance-id flow-table [ table-id ] Display flow table entries for an OpenFlow instance.

• Question 14:

  Refer to the exhibit.

  

  A network engineer wants to use dpctl to make flow modifications directly on an HP 3800 switch flow table. Can the engineer make the changes using dpctl on the switch in the exhibit?

  A. The engineer is unable to connect to the switch directly. Dpctl requires OpenFlow 1.0, and (he switch is currently configured to use OpenFlow 1.3.

  B. The engineer is able to connect to the switch directly using dpctl, but is unable to use dpctl to update the flow entries on the switch. Ovs-ofctl is required to make flow modifications when using OpenFlow

  1.3.

  C. The engineer is able to connect to the switch directly using dpctl. The engineer will then need to use the correct OpenFlow 1 3 syntax to make flow modifications using dpctl.

  D. The engineer is unable to connect to the switch directly. Once the correct configuration is completed on the switch, the engineer will be able to connect directly and then use the correct OpenFlow 1.3 syntax to make flow modifications using dpctl

  Correct Answer: C

  dpctl

  The HP supports a passive listening port per OpenFlow instance. This is super-useful when you want to

  debug an individual switch without going through the controller.

  Add a listener port:

  openflow listener ptcp:6633

  Then use dpctl. Examples:

  dpctl dump-tables tcp::

  dpctl dump-flows tcp::

  dpctl add-flow tcp:: 'in_port=104 actions=output:98'

• Question 15:

  An administrator has created a whitelist entry for the website www.piratesmustdie.com. This has been applied to the test group, which contains VLANs 10-20. VLANs 1 - 20 are configured on switches in the network. A time range has been applied to the whitelist for the time period 9:00am to 5:00pm.

  Which users would be able to access the website?

  A. The website is blocked for all users because it has a reputation score of 80 in the RepDV database

  B. Users in VLAN 10 will be able to access the website at 10:00am.

  C. All users will be able to access the website at 4:00pm.

  D. Users in VLAN 5 will be able to access the website at 11:00pm.

  Correct Answer: B

• Question 16:

  Which component of OpenStack is used by the HP VAN SDN Controller for identity services?

  A. Glance

  B. Keystone

  C. Swift

  D. Horizon

  Correct Answer: B

  The SDN controller uses Openstack Keystone as an identity management for managing users, generating tokens, as well as token validation.

  Reference: HP VAN SDN Controller Administrator Guide

• Question 17:

  What is a key advantage of implementing malware protection by using the HP Network Protector SDN application?

  A. To provide central management of antivirus software

  B. To provide rule-based access control

  C. To provide VLAN assignment without supplicant

  D. To provide clientless operation

  Correct Answer: B

  About VLAN group policies Policies are a collection of filters or rules that provide a method for setting up security configuration options for VLAN groups. You can create customized policies for each VLAN group based on the requirements and the threat type for each group.

  You can customize the policies for the groups by setting the reputation scores. You can set up policies for each group to protect your network from the following threat types: Botnet, Malware, etc

  Reference: HP Network Protector SDN Application Administrator Guide

• Question 18:

  Refer to the exhibit.

  

  A network administrator is trying to install a new internal application on the HP VAN SDN Controller and receives the error shown in the exhibit. Which valid options are available to ensure that the application is installed successfully? (Select two.)

  A. Set up an internal CA server and digitally sign the application. This will be accepted by the HP VAN SDN Controller without further configuration.

  B. Use the HP VAN SDN Controller software to digitally sign the application

  C. Modify the /opt/sdn/virgo/configuration/serviceability .xml configuration file and include this line: Dsdn signedJar=none

  D. Modify the /opt/sdn/virgo/bin'dmk sh script and include this line: Dsdn.signedJar=none

  E. Ensure the application is signed by a CA recognized by the HP VAN SDN Controller.

  Correct Answer: BD

  D_ The SDN controller enforces jar-signing validation by default. For an experimental/development environment where unsigned applications need to be deployed, jar- signing validation can be turned off altogether:

  Stop the SDN controller: sudo service sdnc stop

  2.

  Modify the /opt/sdn/virgo/bin/dmk.sh script to include the line "-Dsdn.signedJar=none \"

  3.

  Start the SDN controller:

  sudo service sdnc start

  B: Adding Certificates to Jar-Signing Truststore

  To deploy other signed applications onto the controller, use the Java keytool to import the public certificate

  that was used to sign the application jars into the controller jar-signing truststore (/opt/sdn/admin/

  sdnjar_trust.jks):

  keytool -importcert -keystore /opt/sdn/admin/sdnjar_trust.jks -file signed_app.cer -alias mysignedcert

  The controller needs to be restarted for the new truststore to take effect.

  Reference: HP VAN SDN Controller Administrator Guide

• Question 19:

  Refer to the exhibit.

  

  Which version of OpenFlow has the switch shown in the exhibit with DPID 00 0a:00 9c 02:d8

  18:00

  negotiated to use with the HP VAN SDN Controller version 2.0?

  A.

  1.0.0

  B.

  1.3.0

  C.

  1.5.0

  D.

  1.6.0

  Correct Answer: B

  *

  The HP VAN controller supports the following:

  Versions 1.0 and 1.3 of OpenFlow on HPN ProVision and Comware switches

  *

  Openflow 1.3.1: Support for multiple flow tables is introduced

  Reference: Open Flow 1.3.1 Support: Controller View

• Question 20:

  An administrator wants to increase the number of log files held by the HP VAN SDN Controller. What would the administrator need to do to change this?

  A. Modify the /opt/sdn/virgo/configuration/serviceability.xml configuration file.

  B. Log in to the Virgo console and change the logging settings.

  C. Adjust the logging setting via the Support Logs web interface.

  D. Modify the /opt/sdn/virgo/bin/dmk.sh script.

  Correct Answer: C

  The Support Logs function automatically maintains an internal record of events of interest from the operations of an active SDN controller.

  Configure the Support Log for Queue Size The default queue size is 100 lines. To configure a different queue size, change the value for the max.display.rows key in the adm.log.impl.LogManager Configurations component.

  Reference: HP VAN SDN Controller Administrator Guide