Free VNX100 sample questions

Correct answer: A traffic steering policy that forwards all 0.0.0.0/0 traffic through the SD-WAN overlay to the data center hub.

To meet the requirement of forcing all branch internet traffic through a centralized NGFW at the data center, the correct approach is to configure a traffic steering policy. This policy should match all internet-bound traffic (represented by the default route 0.0.0.0/0) and direct it through the secure SD-WAN overlay tunnels to the data center hub. This process is known as backhauling. A DIA policy would send traffic directly to the internet from the branch, bypassing the central firewall. A QoS policy only prioritizes traffic, it doesn't control its path. A full mesh topology defines branch-to-branch connectivity but does not enforce centralized internet egress.

Correct answers: The device's serial number has not been added to the device inventory in Versa Director.; A firewall between the branch appliance and the Versa Director is blocking HTTPS (TCP port 443).

If the device's serial number is not in the Versa Director inventory, the Director will reject the onboarding request, causing the ZTP process to fail after the initial contact.

The branch appliance communicates with the Versa Director over HTTPS to download its configuration. If this port is blocked by an intermediate firewall, the ZTP process will fail at this stage.

Correct answer: SLA Probes generated by the branch CPE (VOS)

The Versa Operating System (VOS) running on the branch CPE is responsible for generating and sending SLA probes across the available WAN paths to measure real-time performance metrics like latency, jitter, and packet loss. These measurements are then used by the traffic steering engine on the CPE to make dynamic path selection decisions based on the configured policies. Versa Director is for management, and Versa Analytics is for historical data, while the Controller manages the control plane.

Correct answer: False

This statement is false. The Versa Controller operates on the control plane. It is responsible for establishing and maintaining the routing and policy information for the SD-WAN fabric. The actual data plane traffic is forwarded directly between the Versa CPE appliances (spokes) and the hub appliance, or directly between spokes in a mesh topology. The Controller facilitates the setup of these data paths but does not sit in the path of the data itself.

Correct answer: A Versa Gateway appliance.

The Versa Gateway is the component specifically designed for interconnecting the SD-WAN overlay fabric with traditional WAN underlays like MPLS L3-VPNs. It facilitates route exchange and data plane forwarding between the two disparate networks, enabling a seamless migration and hybrid WAN operation. While a hub CPE can centralize traffic, the Gateway role has specific features for this MPLS integration purpose.

Correct answer: In a Next-Gen Firewall or Service Template applied to the branch devices.

URL filtering is a security service. In the Versa template model, services that can be shared across multiple device types and groups are typically configured in Service Templates (specifically, a Next-Gen Firewall template in this case). This allows the policy to be defined once and then applied to any Device Template or Device Group that requires it, ensuring consistency and ease of management. Configuring it directly on each device or in a Device Template would be less scalable.

Correct answer: To logically separate routing tables and interfaces for different security zones or tenants, such as separating LAN-side traffic from WAN-side transport traffic.

The primary purpose of Virtual Routers (VRs) in VOS is to create logically isolated routing and forwarding instances within a single physical appliance. This is analogous to VRFs in traditional networking. It allows for the clean separation of different network segments, such as the trusted LAN side (e.g., LAN-VR) from the untrusted WAN transport side (e.g., WAN-VR). This segmentation is fundamental to Versa's security and multi-tenancy architecture, ensuring that routing decisions and policies for one zone do not improperly influence another.

Correct answers: The Application Definition for VoIP traffic.; The QoS policy to ensure VoIP traffic is marked with the correct high-priority forwarding class.; The Traffic Steering policy associated with the high-priority forwarding class.

The first step is to ensure that the system is correctly identifying the VoIP traffic. If the application definition is wrong, no subsequent policies will be applied correctly.

VoIP traffic must be classified and marked with a high-priority forwarding class (e.g., Expedited Forwarding) so it can be treated appropriately by other policies.

This policy dictates which WAN path should be used based on application or forwarding class. It should be configured to steer the VoIP forwarding class to the link that meets strict latency and jitter requirements, which is typically the MPLS link.

Correct answer: It suppresses SLA probes to remote branches after a configurable period of traffic inactivity.

Adaptive monitoring is a feature that optimizes the SD-WAN fabric by reducing control plane overhead. It works by temporarily stopping the transmission of SLA probes over paths to remote sites with which there has been no data traffic for a configured inactivity interval. When data traffic destined for that remote site resumes, the SLA probes are automatically restarted to ensure path quality is measured before forwarding.

Correct answer: Auto-Merge combines the template configuration with the existing device configuration, preserving local changes, while Overwrite replaces the entire device configuration with the full template stack.

The core difference lies in how local or out-of-band configurations on the device are handled. 'Auto-Merge' intelligently combines the configuration from the template stack (Device, Service, Common) with the current running configuration on the CPE, preserving any settings that do not conflict with the template. 'Overwrite' is a more destructive option that completely replaces the CPE's running configuration with the configuration derived purely from the template stack, discarding any local modifications.