OpenStack OpenStack Networking (Neutron) 1 — Questions and Answers
Question 1: Which OpenStack service provides Networking-as-a-Service (NaaS) and is the primary networking component?
- Cinder
- Neutron (Correct answer)
- Nova
- Swift
Correct answer: Neutron
Neutron is the OpenStack Networking service that provides Networking-as-a-Service capabilities.
Question 2: What is a Neutron 'provider network' in OpenStack?
- A network managed entirely by tenants
- A network connected directly to the physical network infrastructure (Correct answer)
- A virtual private network for inter-tenant traffic
- A network only used for floating IPs
Correct answer: A network connected directly to the physical network infrastructure
A provider network in Neutron is directly mapped to an existing physical network in the data center.
Question 3: Which Neutron component acts as the L3 routing agent responsible for routing traffic between subnets?
- neutron-dhcp-agent
- neutron-l3-agent (Correct answer)
- neutron-openvswitch-agent
- neutron-metadata-agent
Correct answer: neutron-l3-agent
The neutron-l3-agent handles Layer 3 routing, including routing between subnets and managing floating IPs.
Question 4: What is a 'security group' in Neutron?
- A group of admin users with elevated network permissions
- A set of firewall rules applied to VM network interfaces (Correct answer)
- A VLAN reserved for secure management traffic
- A pool of IP addresses for floating IP allocation
Correct answer: A set of firewall rules applied to VM network interfaces
Security groups are sets of IP filter rules (firewall rules) that are applied to a VM's network interface.
Question 5: Which network type in Neutron uses 802.1Q VLAN tagging to isolate tenant networks?
- flat
- vxlan
- vlan (Correct answer)
- gre
Correct answer: vlan
The 'vlan' network type uses 802.1Q VLAN tags to provide network isolation between tenants.
Question 6: What is the purpose of a 'floating IP' in OpenStack Neutron?
- An IP that migrates with a VM during live migration
- A publicly routable IP that can be dynamically associated with a VM (Correct answer)
- An IP reserved for the router gateway interface
- A secondary IP assigned to a VM's secondary NIC
Correct answer: A publicly routable IP that can be dynamically associated with a VM
A floating IP is a publicly routable IP address that can be dynamically associated with or disassociated from a VM instance.
OpenStack OpenStack Networking (Neutron) 1
Which OpenStack service provides Networking-as-a-Service (NaaS) and is the primary networking component?