[2023] Pass Juniper JN0-611 Exam in First Attempt Easily [Q10-Q28]

NEW QUESTION 10
To which Contrail object does the Kubernetes namespace object translate?

project

tag

firewall policy

load balancer

NEW QUESTION 11
You are considering different designs for your Contrail Enterprise Multicloud installation. Several designs have been submitted.
Referring to the exhibit, which design model does this represent?

routed overlay using EVPN Type 6 routes

edge-routed bridging overlay

centrally-routed bridging overlay

bridged overlay

NEW QUESTION 12
An administrator has created a deployment and exposed the front-end Python service. The Python service is not available.
Referring to the exhibit, what is the problem?

The LoadBalancer objects require a load balancer appliance.

A Kubemetes network policy must be added to permit the traffic.

Contrail SNAT overlay forwarding must be enabled.

A floating IP pool in Contrail must be associated with the service’s namespace to allocate external IPs.

NEW QUESTION 13
Into which namespace are the Contrail system components deployed in an OpenShift cluster?

contrail-system

openshift-sdn

networking

default

NEW QUESTION 14
Which two features of Kubernetes are supported by the Contrail CNI? (Choose two.)

black list rules

network isolation

service chaining

pod traffic shaping

NEW QUESTION 15
After implementing VMware as your orchestrator. You notice that the automatic provisioning of networks and ports using Contrail is not working.
Referring to the exhibit, which Contrail component must be installed on your ContrailVM in this scenario?

Contrail vCenter Manager (CVM)

Linux Kernel

Contrail security

AppFormix

NEW QUESTION 16
Referring to the exhibit, which two statements about OpenShift namespace isolation with a Contrail network is true? (Choose two.)

Pod 1 can communicate with Pod 2.

Pod 1 cannot communicate with Pod 2.

Pod 2 can communicate with Pod 1.

Pod 2 cannot communicate with Pod 1.

NEW QUESTION 17
You are asked to implement a diverse set of secure tunnel solutions between two locations using a virtual SRX. You are responsible for managing resource usage and must decide whether to use the vSRX or cSRX device.
Which statement is true in this scenario?

You should use the vSRX, the vSRX uses less resources and it encrypts data faster than the cSRX.

You should use the vSRX, the vSRX uses more resources; however, it performs all required IPsec functions.

You should use the cSRX, the cSRX uses more resources; however, it encrypts data faster than the vSRX.

You should use the cSRX, the cSRX uses less resources and it offers the same feature set as the vSRX.

NEW QUESTION 18
You are working with Contrail multicloud using Azure cloud. You want to modify the topology to add extra resources. Which two steps must be performed to accomplish this task? (Choose two.)

Edit the topology.dat file.

Execute the modify.yml Ansible playbook.

Edit the topology.yml file.

Execute the modify.sh script.

NEW QUESTION 19
Your orchestrator has deployed three virtual machines on the compute nodes and deployed a VNF as shown in the exhibit. You request that a service chain be established so that traffic from VM-1 to VM- 2 is steered through VNF-1. Because of a connectivity problem, you must now verify that the necessary routes are present in the routing tables on the required nodes.
In this scenario, which nodes should you inspect?

H-1, H-2, H-3, H-4 compute nodes only

the spine and leaf nodes only

H-1, H-2, H-3 compute nodes only

H-1 and H-2 compute nodes only

NEW QUESTION 20
What is a core component of an AWS cloud environment?

a resource group

a VPC

a VNET

a vRouter

NEW QUESTION 21
You are using Contrail Command to configure AWS. You are unable to ping your VMs within the instance you created.
Referring to the exhibit, what is the problem?

You must change the protocols allowed in the “Allow-all-inbound” rule to “ANY”.

Your subnets are in different availability zones.

You must change the direction of the “Allow-all-inbound” rule to “Ingress”.

Your subnets for “Availability zone 1” and “Availability zone 2” must be the same.

NEW QUESTION 22
You are provisioning Contrail for vCenter using the config/instances.yaml file shown in the exhibit.

Which two statements are correct in this scenario? (Choose two.)

10.1.0.14 is the IP address of a physical host.

10.1.0.14 is the IP address of Contrail VM.

10.1.0.15 is the IP address of Contrail VM.

10.1.0.15 is the IP address of a physical host.

NEW QUESTION 23
Which statement is correct about Contrail Enterprise Multicloud (CEM)?

CEM can only be used to connect private clouds together.

CEM can connect any type of cloud environment.

CEM can only manage network overlay functions.

CEM can only connect to BMS and VM resource workloads.

NEW QUESTION 24
You are using Contrail integrated with Kubernetes.
In this scenario, which Kubernetes service is replaced with the Contrail vRouter for dataplane processing?

kube-controller-manager

kube-scheduler

kube-proxy

kubelet

NEW QUESTION 25
Contrail security tags and their values in AWS multicloud deployments are evaluated in which order?

virtual machine, project, virtual network, and virtual machine interface

virtual machine interface, virtual machine, virtual network, and project

project, virtual network, virtual machine, and virtual machine interface

virtual network, project, virtual machine interface, and virtual machine

NEW QUESTION 26
Referring to the exhibit, which role is the router device performing when implementing a PNF service chain?

customer gateway

service control gateway

virtual private gateway

multicloud gateway

NEW QUESTION 27
You are connecting your private cloud with services running in a Microsoft Azure public cloud. In this scenario, which two actions must be completed to accomplish this task? (Choose two.)

Time must be synchronized on all the nodes with NTP.

All the on-premises nodes must have private IP addresses except the management interfaces.

DNS settings on all devices must point to Microsoft for resolution.

You must enable NETCONF on all devices in your private cloud environment.

NEW QUESTION 28
You are using Kubernetes in your Contrail Enterprise Multicloud environment. You must create an isolated Kubernetes namespace. In this scenario, which two statements are correct? (Choose two.)

A networking port is automatically created.

A pod network is automatically created.

A network policy is automatically created.

A project is automatically created.