NE NE Network Virtualization 2 — Questions and Answers
Question 1: What is a VTEP (VXLAN Tunnel Endpoint)?
- A protocol for managing VXLAN traffic policies
- A device or software component that encapsulates and decapsulates VXLAN packets (Correct answer)
- A virtual router that connects VXLAN segments to external networks
- A monitoring agent used to track tunnel health metrics
Correct answer: A device or software component that encapsulates and decapsulates VXLAN packets
A VTEP is responsible for encapsulating Ethernet frames into VXLAN UDP packets and decapsulating them at the destination, serving as the edge of the VXLAN tunnel.
Question 2: Which type of hypervisor runs directly on physical hardware without requiring a host operating system?
- Type 2 hypervisor
- Hosted hypervisor
- Type 1 hypervisor (Correct answer)
- Container runtime hypervisor
Correct answer: Type 1 hypervisor
Type 1 (bare-metal) hypervisors run directly on hardware without a host OS; examples include VMware ESXi and Microsoft Hyper-V.
Question 3: What is the primary purpose of GRE (Generic Routing Encapsulation) in network virtualization?
- To encrypt traffic between data center sites
- To encapsulate a wide variety of network layer protocols inside IP tunnels (Correct answer)
- To assign IP addresses dynamically to virtual machines
- To monitor network performance across virtual segments
Correct answer: To encapsulate a wide variety of network layer protocols inside IP tunnels
GRE is a tunneling protocol that encapsulates packets of one protocol within IP, commonly used to create point-to-point logical links over an IP network.
Question 4: What is microsegmentation in the context of network virtualization?
- Dividing a network into multiple physical cable segments
- Applying granular security policies to individual workloads or virtual machines (Correct answer)
- Creating VLANs with fewer than 10 devices each
- Segmenting traffic flows by packet size or protocol
Correct answer: Applying granular security policies to individual workloads or virtual machines
Microsegmentation applies fine-grained security policies at the workload or VM level, enabling east-west traffic control within a data center to limit lateral movement.
Question 5: In an SDN architecture, what is the 'northbound API' used for?
- Communication between the SDN controller and network forwarding devices
- Communication between SDN applications and the SDN controller (Correct answer)
- Routing traffic from southern to northern data center regions
- Connecting physical switches to virtual network overlays
Correct answer: Communication between SDN applications and the SDN controller
The northbound API enables SDN applications and business logic to communicate with and program the SDN controller, abstracting the underlying network capabilities.
Question 6: Which protocol is most commonly used as the control plane for VXLAN in modern data center deployments?
- OSPF
- RIP
- BGP EVPN (Correct answer)
- EIGRP
Correct answer: BGP EVPN
BGP EVPN (Ethernet VPN) is the industry-standard control plane for VXLAN, used to distribute MAC/IP binding information and manage BUM traffic efficiently.
Question 7: What is a virtual switch (vSwitch) primarily responsible for in a virtualized server environment?
- Replacing all physical switches in the data center rack
- Forwarding network traffic between virtual machines and to physical networks (Correct answer)
- Providing DHCP services to virtual machines on the host
- Managing hypervisor licensing and resource allocation
Correct answer: Forwarding network traffic between virtual machines and to physical networks
A virtual switch connects VMs within a host to each other and bridges them to external physical networks, operating as a software-based Layer 2 Ethernet switch.
NE NE Network Virtualization 2
What is a VTEP (VXLAN Tunnel Endpoint)?