COA Networking and Storage Configuration 2

Question 1

Which Neutron agent is responsible for implementing security groups on compute nodes using iptables?

Accepted Answer

neutron-openvswitch-agent

Answer

The neutron-openvswitch-agent (or linuxbridge-agent) runs on compute nodes and enforces security group rules via iptables.

Question 2

What is the purpose of a Neutron floating IP?

Accepted Answer

Map a public IP to an instance's private IP via NAT

Answer

Floating IPs use NAT on the L3 agent to map an externally routable address to an instance's fixed private IP.

Question 3

In Cinder, which command creates a volume from an existing bootable volume snapshot?

Accepted Answer

cinder create --snapshot-id <id>

Answer

cinder create --snapshot-id <id> provisions a new volume pre-populated with the snapshot's data.

Question 4

Which OpenStack networking object defines allowed IP/MAC pairs on a port to prevent spoofing?

Accepted Answer

Allowed address pair

Answer

Allowed address pairs let administrators declare additional IP/MAC combinations permitted on a port beyond the primary assignment.

Question 5

What Swift container ACL grants any authenticated user read access?

Accepted Answer

*:*

Answer

The ACL value *:* grants read access to any authenticated OpenStack user across all projects.

(COA) Certified OpenStack Administrator Exam Practice Test