JN0-611 by Juniper Valid Free Exam Practice Test

Question 1

Service instance SI2 is performing source NAT using Ihe pool of addresses shown in the exhibit.
You are verifying connectivity by sending ICMP traffic from the G1 host to the R1 host. You notice that the ICMP requests are received on R1, but the ICMP responses are not received on the G1 host.
In this scenario, what would solve this problem?

A. You must add static routes to the VMs in the Left VN. B. You must add a static route table to SI2. C. You must add static routes to the VMs in the Right VN. D. Apply a network policy to allow traffic from the Left VN toward the Right VN.

Correct Answer: D

Question 2

To which Contrail object does the Kubernetes namespace object translate?

A. firewall policy B. tag C. project D. load balancer

Correct Answer: D

Question 3

Kubernetes Service maps to which object in Contrail?

A. the HAProxy-based load balancer B. the namespace-based service proxy C. the Contrail service appliance-based load balancer D. the native load balancer implemented using vRouter

Correct Answer: C

Question 4

You are provisioning a service chain to process external subscriber's traffic in a Contrail OpenStack cluster. Service instances SI-1, SI-2, and SI-3 are firewall instances that permit all traffic. Referring to the exhibit, which two statements are correct? (Choose two.)

A. The default security group configuration does not need to be modified. B. The access control lists on vRouters are provisioned automatically. C. The access control lists on vRouters must be modified to permit traffic from the external hosts. D. The default security group configuration must be modified to permit traffic from the external hosts.

Correct Answer: B,C

Question 5

In a Contrail multicloud environment with Azure and AWS cloud, which two components must be provisioned? (Choose two.)

A. AppFormix node B. Contrail analytic database C. Contrail Controller D. multicloud gateway

Correct Answer: B,C

Question 6

Which Contrail daemon set is responsible for listening to the Kubernetes API messages and creating resources in the Contrail API database?

A. contrail-controller-config B. contrail-configdb C. contrail-analytics-alarm D. contrail-Jcube-manager

Correct Answer: A

Question 7

You are using an application spread across a multicloud Azure and AWS environment. You are using the Contrail Security feature to visualize flows and session information. Which Contrail Command Ul parameter must you enable to view session details as shown in the exhibit?

A. Enable Session Export Rate/sec. B. Enable Security Logging. C. Enable Draft mode. D. Enable Flow Aging.

Correct Answer: B

Juniper Cloud, Professional (JNCIP-Cloud) - JN0-611 Exam Practice Test