Question 1

Which security mechanism is commonly used to protect network infrastructure from Distributed Denial of Service (DDoS) attacks by diverting attack traffic away from the target network?

Options :

A : GRE (Generic Routing Encapsulation)

B : RTBH (Remotely Triggered Black Hole)

C : BFD (Bidirectional Forwarding Detection)

D : MACSEC (Media Access Control Security)

Answer: B

Question 2

What is a common approach for automatically detecting and recovering from network faults and failures in cloud environments?

Options :

A : DHCP snooping and ARP inspection

B : Automatic fault management

C : DNSSEC (Domain Name System Security Extensions)

D : ICMP (Internet Control Message Protocol)

Answer: B

Question 3

Which NFVI security measure involves securing the control and management plane communication channels using cryptographic protocols?

Options :

A : VRF (Virtual Routing and Forwarding)

B : SNMP (Simple Network Management Protocol)

C : TLS (Transport Layer Security)

D : GRE (Generic Routing Encapsulation)

Answer: C

Question 4

What is a characteristic of SR-IOV (Single Root I/O Virtualization) technology in service provider cloud environments?

Options :

A : It enables hardware-based virtualization for network functions.

B : It enhances network security through microsegmentation.

C : It provides software-defined overlay networking.

D : It supports multi-tenancy in cloud data centers.

Answer: A

Question 5

What is a characteristic of software-accelerated virtual switch technology (such as DPDK and VPP) in service provider cloud environments?

Options :

A : It enhances network security through microsegmentation.

B : It improves network performance and efficiency.

C : It provides hardware-based packet forwarding.

D : It offloads network processing tasks to dedicated hardware.

Answer: B

Free 300-540 Mock Exam – Practice Online Confidently

Buying Options: