Networking and Storage Configuration Flashcards

Which command lists all subnets associated with a specific Neutron network by its ID?

Answer: Both A and B are valid

Both 'openstack subnet list --network ' and 'openstack network show ' (which lists subnet IDs) reveal subnets for a given network.

What is the role of the Neutron metadata agent?

Answer: Proxies instance HTTP requests to the Nova metadata API

The metadata agent forwards requests from instances to the Nova metadata service (169.254.169.254) through a secure proxy chain.

Which Swift storage policy feature allows administrators to define different replica counts or erasure coding schemes per container?

Answer: Storage policies

Storage policies let operators create named tiers with distinct replication or EC configurations, selectable per container at creation time.

When creating a Neutron router with 'openstack router create', what additional step is required to enable internet access for instances?

Answer: Set the router's external gateway to the public network

Setting the external gateway (openstack router set --external-gateway ) connects the router to the provider network and enables SNAT for tenant instances.

Which Cinder scheduler filter ensures a volume is placed on a backend that supports the requested volume type's extra specs?

Answer: ExtraSpecsFilter

ExtraSpecsFilter matches the volume type's extra specs (e.g., volume_backend_name) against capabilities reported by each backend.

Which Swift feature allows clients to retrieve only a byte range of a stored object?

Answer: HTTP Range header support

Swift honors the standard HTTP Range header, returning the requested byte range from an object without downloading the full file.

What does enabling 'port security' on a Neutron network enforce by default?

Answer: Prevents MAC and IP spoofing on all ports in the network

Port security enables anti-spoofing rules that drop packets whose source MAC or IP does not match the port's assigned values.