HP HP ASE - FlexNetwork Architect V2, HP ASE - FlexNetwork Integrator V1 HP2-Z31 Questions & Answers

• Question 31:

  Which table functionality was introduced with OpenFlow 1.3?

  A. ARP

  B. Metering

  C. Flow

  D. Matching

  Correct Answer: B

  OpenFlow version 1.3 is the latest version of OpenFlow that has support from switch vendors. It is significantly different from OpenFlow version 1.0 (which was the previous version several vendors supported). Among others, the main features added since then are:

  1.1: Support for MPLS, Q-in-Q, VLANs, multipath, multiple tables, logical ports 1.2: Support for extensible headers (in match, packet_in, set_field), IPv6 1.3: Support for tunneling, per-flow traffic meters, Provider Backbone Bridging

  Reference: OpenFlow version 1.3 tutorial

• Question 32:

  A customer wants to implement an OpenFlow solution where packets that do not match any flow entries in the OpenFlow table on the switch are not sent to the controller Rather, packets not matching should be handled normally by the switch. Which command enables this functionality on an HP 3800 series switch?

  A. openflow instance sales mode active

  B. openflow instance sales mode normal

  C. openflow instance sales mode passive

  D. openflow instance sales mode hybrid

  Correct Answer: C

  OpenFlow instance mode

  OpenFlow can work either in active or passive mode.

  Passive mode

  There is one-way communication from the OpenFlow controller to the switch. Packets that do not match

  any flow in the flow table on the switch are not sent to the controller. Such packets of new flows are

  handled normally by the switch.

  Active mode

  New packets of a flow that the switch is not aware of are sent to the OpenFlow controller.

  Reference: HP Switch Software OpenFlow Administrator's Guide K/KA/WB 15.14 http://

  h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c03991489-1.pdf (OpenFlow instance mode, passive

  mode)

• Question 33:

  What are examples of information that the Topology Service returns for an OpenFlow switch port? (Select two.)

  A. Whether the port is a connection point

  B. Whether the port can be used as an observation point

  C. Whether the port has BDDP enabled

  D. Whether the port has LLDP medium endpoint discovery enabled

  E. Whether the port can participate in forwarding mode in a looped topology

  Correct Answer: AE

• Question 34:

  What are advantages of using the HP Network Protector SDN application in a BYOD Network for Malware protection? (Select two.)

  A. To provide updates to filtered host lists

  B. To provide centralized management of client based firewall

  C. To provide full HIPS functionality for BYOD devices

  D. To provide security at the network core to provide prevention before connection

  Correct Answer: CD

  You can set general policies for all the hosts in the network to manage and mitigate malicious traffic and host name requests. General policies enable the application to detect changes in network traffic patterns. The general policies prevent the host from acting like a botnet and being controlled by external malicious computers.

  When network traffic from a host exceeds the policy limits, you can configure application to perform one of the following actions:

  Block

  Block and notify

  Quarantine

  Quarantine and Notify

  Note: HIPS Short for host-based intrusion prevention system, HIPS is an IPS or intrusion prevention system designed for security over host-based systems where intrusions and infections are dealt with at the individual workstation level to provide a more effective level of security. Reference: HP Network Protector SDN Application Administrator Guide

• Question 35:

  Which framework allows for dynamic insertion and removal of applications in an HP VAN SDN Controller?

  A. cURL

  B. JSON

  C. OSI

  D. OSGi

  Correct Answer: D

  OSGi was thus selected to allow elasticity of applications. The applications can be dynamically introduced and dynamically removed from a running environment without having to shut down the whole controller and then restart it. Using a network analogy again, the applications are "hot- swappable".

  Reference: HP Virtual Application Networks SDN Controller Technical Solution Guide http://www8.hp.com/ h20195/v2/GetPDF.aspx%2Fc04219919.pdf (page 11 and 12)

• Question 36:

  An administrator wants to configure the HP Network Protector SDN Application to allow access to a specific corporate website when a host is quarantined. The DNS response should still be NXDomain for websites such as piratesmustdie.com. What should the administrator configured?

  A. Permit statement on the ACLs that are pushed to the switches

  B. ACL list with the IP address of the website

  C. Ensure that OpenFlow 1.3 is enabled on the switch and that no redirection server address is specified

  D. DNS Response Type to DNS redirection server address

  Correct Answer: D

  Setting policies to quarantine hosts

  The application quarantines a host if the host satisfies the quarantine criteria set in the general threshold

  policy. You can set policies to direct the host to a safe site and access limited resources on the network.

  To set the general policies, complete the following steps.

  1.

  Select Policies Policy Enforcement Settings. The Policies/Policy Enforcement Settings page appears.

  2.

  Click the icon to edit the policy enforcement settings.

  3.

  Select Non-existent Domain option to display a message that the domain does not exist.

  4.

  Enter time in seconds in the TTL(sec) text box to cache the response.

  5.

  Select Redirection Server option to redirect the host to a known safe site.

  6.

  Enter the domain name or IP address of the known safe site in the DNS Redirection Server Address text box.

  7.

  Click icon to add the domain name or IP address of the resources that the host can access when it is quarantined.

  8.

  Click icon to save the setting.

  Reference: HP Network Protector SDN Application Administrator Guide

• Question 37:

  Refer to the exhibits.

  

  

  What happens when the switch shown in the exhibit loses connectivity to the HP VAN SDN Controller?

  A. The switch removes all flow entries and reverts to the normal forwarding process,

  B. The switch removes all flow entries and continues to use the OpenFlow pipeline.

  C. The switch forwards traffic based on flow tables and does not delete unexpired flow entries.

  D. The switch uses the normal forwarding process and does not delete the flow entries.

  Correct Answer: C

• Question 38:

  How does an HP VAN SDN Controller team provide high availability for OpenFlow switches?

  A. By using the northbound controller interface tied to a region configuration

  B. By using the northbound controller interface with a secondary interface

  C. By using the southbound controller interface tied to a region configuration

  D. By using the southbound controller interface with a secondary interface

  Correct Answer: C

  * Northbound API Relative to figure 1 below, the Northbound API is the API that enables communications between the control layer and the application layer (external business applications.

  Southbound API

  Relative to Figure 1 below, the Southbound API is the API that enables communications between the control layer and the infrastructure layer (OpenFlow).

  Figure 1. ONF's SDN architecture

  

  * Putting the region configurations in place in a controller team ensures seamless failover and failback among the configured controllers for the specified network devices in a region. That is, when a master controller experiences a fault, the Role Orchestration Service ensures that a slave controller immediately assumes the master role over the group of network devices to which the failed controller was in the master role.

  Reference: Technical white paper, Mock RFI for Enterprise SDN Solutions Reference: HP VAN SDN Controller Administrator Guide

• Question 39:

  Spanning Tree Protocol is disabled on a network edge port. The port is assigned to a VLAN, which is a member of an aggregate OpenFlow 1.0 instance. What is the default behavior of all ingress traffic when no flow entry exists?

  A. Only SDN classified traffic is forwarded to the SDN Controller.

  B. All traffic is discarded.

  C. All traffic is forwarded to the egress port to the final destination address.

  D. All traffic is forwarded to the SDN Controller.

  Correct Answer: B

  Flowchart detailing packet flow through an OpenFlow switch.

  

  Reference: OpenFlow Switch Specification Version 1.3.1

• Question 40:

  Which statement best describes software-defined networking (SDN)?

  A. SDN allows software to leverage the network infrastructure, enabling a centralized and policy-based approach to network provisioning and traffic forwarding.

  B. SDN allows administrators to share software, policies, templates, and applications between multiple virtual machines that are running on the same network.

  C. SDN is another name for OpenFlow, a protocol that lets switches handle traffic with OpenFlow tables rather than MAC forwarding tables and routing tables.

  D. SDN lets IT developers manage physical infrastructure devices directly without pre-defined templates or intermediary devices.

  Correct Answer: A

  The HP VAN SDN Controller is a Java-based OpenFlow controller enabling SDN solutions such as network controllers for the data center, public cloud, private cloud, and campus edge networks. This includes providing an open platform for developing experimental and special- purpose network control protocols using a built-in OpenFlow controller. The HP VAN SDN Controller is a platform for developing SDN applications and deploying SDN applications. The controller can be characterized as providing a Base Control Platform, a Distributed Platform for High-Availability and Scalability, and an Extensible Platform.

  Reference: HP VAN SDN Controller Administrator Guide