JN0-412 Real Exam Questions and Verified Answers

Question 1 Multiple choice

Which two statements are true about AppFormix Heat maps? (Choose two.)

A
AppFormix Heat maps show historical performance at a glance.
B
AppFormix Heat maps show a visual chart of the relationship between hosts and VMs.
C
AppFormix Heat maps show real-time performance at a glance.
D
AppFormix Heat maps show a visual chart of the relationship between control and config nodes.

Show answer and explanation

Correct answers: B, C

Explanation

References:
https://www.juniper.net/documentation/en_US/appformix/topics/concept/appformix-heat-map.html

Question 2 Multiple choice

Which two statements describe the Kubernetes network policy? (Choose two.)

A
If a policy is not applied to a pod, then the pod accepts traffic from all sources.
B
A policy can define traffic in only one direction.
C
A policy can define traffic in both directions.
D
If a policy is not applied to a pod, then the pod blocks traffic from all sources.

Show answer and explanation

Correct answers: A, C

Explanation

References:
https://www.juniper.net/documentation/en_US/day-one-books/topics/topic-map/kubernetes-in-practice.html#id-kubernetes-network-policy

Question 3 Multiple choice

What are two Contrail Command BMS life cycle management functions? (Choose two.)

A
PXE interface management
B
BIOS updates
C
image management
D
IPAM

Show answer and explanation

Correct answers: A, C

Explanation

References:
https://www.fedscoop.com/juniper/Enterprise-Contrail-Multicloud.pdf

Question 4 Single choice

What is AppFormix used for in Contrail?

A
to deploy an underlay fabric
B
to create VNFs
C
to analyze network performance
D
to secure application traffic

Show answer and explanation

Correct answer: B

Question 5 Multiple choice

You are configuring a Contrail Security firewall policy rule and need to specify an exact port.

Which two statements describe how to accomplish this task? (Choose two.)

A
You should create a tag and specify it in the firewall policy rule.
B
You should create an address group and specify it in the firewall policy rule.
C
You should create a service group and specify it in the firewall policy rule.
D
You should specify the service in the firewall policy rule.

Show answer and explanation

Correct answers: A, B

Explanation

References:
https://www.juniper.net/documentation/en_US/contrail20/information-products/pathway-pages/
contrail-networking-security-user-guide.pdf

Question 6 Single choice

Which network type is created in Neutron and mapped to physical networks?

A
transient
B
tenant
C
provider
D
management

Show answer and explanation

Correct answer: C

Question 7 Multiple choice

Which two statements regarding tags, within the Contrail Security framework, are correct? (Choose two.)

A
RBAC determines which user accounts can modify or remove attached tags.
B
Tags are communicated from the control node to vRouters through route updates.
C
Only the CSPadmin user account can modify or remove attached tags.
D
Tags are communicated from the config node to vRouters through route updates.

Show answer and explanation

Correct answers: A, B

Question 8 Single choice

Click the Exhibit button.

Within your Contrail cluster, a BGP peer is not advertising routes as expected. After issuing the curl http://
<host ip address>:8081/analytics/uves/bgp-peers command, you receive the output show in the exhibit.

What is causing this problem?

A
an incorrect local ID
B
an incorrect peer type
C
an incorrect IP address
D
an incorrect family

Show answer and explanation

Correct answer: D

Question 9 Multiple choice

Click the Exhibit button.

The exhibit displays a Contrail analyzer virtual machine's console.

Which two statements are true in this scenario? (Choose two.)

A
The ping traffic is initiated by a virtual machine with an IP address of 20.0.0.3.
B
The ping traffic is initiated by a virtual machine with an IP address of 20.0.0.4.
C
The Contrail analyzer virtual machine's IP address is 10.85.29.11.
D
The Contrail analyzer virtual machine's IP address is 20.0.0.4.

Show answer and explanation

Correct answers: A, C

Question 10 Single choice

Which Kubernetes resource defines the traffic allowed to reach the pod?

A
SecurityGroup
B
NetworkPolicy
C
Ingress
D
IPAM

Show answer and explanation

Correct answer: B

Explanation

References:
https://www.juniper.net/documentation/en_US/contrail19/topics/concept/k8s-network-policy.html