JN0-210.

65q

Number: JN0-210
Passing Score: 800
Time Limit: 120 min
File Version: 1.0

Juniper JN0-210

Cloud, Associate
Exam A

QUESTION 1
Which Junos Space application integrates with the Sky ATP application?

A. Virtual Director
B. Connectivity Services Director
C. Security Director
D. Network Director

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 2
Which two products are considered SDN controllers? (Choose two)

A. VMware NSX
B. AppFormix
C. Junos Space
D. Contrail Networking

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 3
What operates below the virtualization layer in an NFV system?

A. The NFV management and orchestration components

B. the virtualized network functions (VNFs)
C. the compute, storage, and network hardware
D. the OSS and BSS management systems

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 4
What is a primary function of an underlay network?

A. to advertise Internet routes into an overlay network

B. to advertise loopback interfaces to establish an overlay network
C. to advertise server interfaces to establish an overlay network
D. to advertise client host routes into an overlay network
Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Reference: https://www.juniper.net/documentation/en_US/release-independent/solutions/topics/concept/
solution-evpn-vxlan-understanding.html

QUESTION 5
What are two virtualized components of a vMX? (Choose two)

A. VFP
B. vNIC
C. vSwitch
D. VCP

Correct Answer: AD
Section: (none)
Explanation

Explanation/Reference:
Reference: https://www.juniper.net/assets/us/en/local/pdf/datasheets/1000522-en.pdf

QUESTION 6
What are two requirements for provisioning a device using ZTP? (Choose two)

A. The network must have a DHCP server

B. The network must support VPN tunnels
C. The network must have a hosted server that stores the device image and configuration
D. The network must have an NTP server

Correct Answer: AC
Section: (none)
Explanation

Explanation/Reference:

QUESTION 7
Juniper Networks SD-WAN feature is part of which product offering?

A. NorthStar
B. Cloud CPE solution
C. Sky ATP
D. Contrail Cloud

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 8
Which two Juniper NFV products would be used to provide IPsec VPN termination between a public cloud
provider and your network? (Choose two)
A. vQFX
B. vSRX
C. vMX
D. vRR

Correct Answer: BC
Section: (none)
Explanation

Explanation/Reference:

QUESTION 9
You have a data center switching fabric that is comprised of Junos switches. You are using an API-based SDN
implementation to manage the devices.
In this scenario, which statement is true?

A. The control plane is managed on the SDN controller

B. The control and forwarding planes are separated
C. The SDN controller makes routing and forwarding decisions
D. The control plane remains on the individual devices

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 10
The NorthStar Controller has identified a shared risk in the network.
Which statement is true in this scenario?

A. Multiple LSPs cross the same path

B. A customer’s VNF is at risk of failing
C. The NorthStar Controller is detecting database errors
D. A PE device hosts multiple edge customers

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 11
Which protocol would be used by the NorthStar Controller to learn the topology of the WAN network?

A. IS-IS
B. RIP
C. PCEP
D. MPLS

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 12
What are two benefits of cloud automation? (Choose two)

A. It simplifies network operations that involve complex configurations

B. It reduces the number of network components
C. It performs repeatable tasks
D. It eliminates all operational configuration errors

Correct Answer: AC
Section: (none)
Explanation

Explanation/Reference:

QUESTION 13
What is an SDN solution?

A. Sky ATP
B. AppFormix
C. OpenFlow
D. Cyphort

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 14
Which node in a Contrail cluster graphically maps overlay traffic flows on top of the underlay topology?

A. control node
B. configuration node
C. analytics node
D. compute node

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 15
Which platform does Junos Space Security Director manage?

A. MX Series
B. PTX Series
C. SRX Series
D. vMX Series

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 16
Which two statements are true about a public cloud? (Choose two)

A. Resources are closed to the public

B. Resources are hosted within your organization
C. Resources are shared with other entities
D. Resources are accessed through a public network

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 17
Click the Exhibit button.
Exhibit:

Which EVPN/VXLAN scenario is shown in the exhibit for QFX5100-1?

A. multihoming
B. VPLS active-active
C. MSTP
D. MC-LAG

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
QUESTION 18
What are two roles of the NorthStar? (Choose two)

A. to push endpoint device images to customer edge devices

B. to distribute routing updates to network devices
C. to optimize paths through the network based on traffic statistics
D. to calculate paths through the network based on topology information

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 19
Which Juniper product will automatically add, remove, and reroute LSPs?

A. Sky ATP
B. NorthStar
C. Steel-Belted Radius Carrier
D. Cloud Analytics Engine

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 20
Which protocol does Juniper Networks recommend to provide real-time updates of the network topology to the
NorthStar Controller?

A. RSVP
B. OSPFv3
C. BGP-LS
D. RIP

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 21
Which statement is true regarding SDN implementations?

A. SDN centralizes the control plane of network devices

B. SDN can only be used in data center environments
C. SDN centralizes the data plane of network devices
D. SDN is a requirement for hybrid cloud environments
Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 22
Which two statements are correct when the vSRX base license expires? (Choose two)

A. The vSRX will stop forwarding traffic

B. The vSRX management CLI access will be preserved
C. The vSRX will be disabled and no configuration will be possible
D. You will have to reinstall the vSRX

Correct Answer: AB
Section: (none)
Explanation

Explanation/Reference:

QUESTION 23
Which platform allows you to monitor any application instance in hybrid, public, private, and telco clouds
simultaneously?

A. Junos Space SDK

B. Connectivity Services Director
C. AppFormix
D. Contrail Cloud

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 24
What are two core projects in OpenStack? (Choose two)

A. Docker
B. Mesosphere
C. Glance
D. Nova

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 25
Which two statements are true regarding the NorthStar Controller API? (Choose two)
A. The southbound interface connects to routers and switches using IS-IS, OSPFv2, BGP-LS, and PCEP
protocols
B. The southbound interface is a RESTful implementation that can be programmed with a programming
language
C. The northbound interface connects to routers and switches using IS-IS, OSPFv2, BGP-LS, and PCEP
protocols
D. The northbound interface is a RESTful implementation that can be programmed with a programming
language

Correct Answer: AD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 26
What are two benefits of NFV? (Choose two)

A. NFV provides methodologies to interconnect data centers

B. NFV provides control over the deployment of all virtual machines
C. NFV allows for the automated control of service chains
D. NFV makes the management of virtualized network functions dynamic

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 27
Which statement is true regarding a hybrid cloud?

A. A hybrid cloud must constitute at least three multi-cloud interconnections

B. A hybrid cloud spans at least one public and one private cloud
C. A hybrid cloud must span at least two public clouds
D. A hybrid cloud only has an on-premises virtualization environment

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 28
A Contrail controller is used in which type of SDN?

A. OpenFlow-based SDN
B. SDN as an underlay
C. SDN as an overlay
D. API-based SDN
Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 29
Which Junos platform was designed to host multiple Juniper and third-party virtualized network functions on a
single device?

A. vMX Series
B. vSRX Series
C. NFX Series
D. PTX Series

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 30
What are two characteristics that make VXLAN preferred over other overlay protocol encapsulation methods?
(Choose two)

A. VXLANs have a theoretical maximum of 16,000,000 VNIs

B. VXLAN is an open standard protocol
C. VXLAN provides easy integration into existing STP implementations
D. VXLANs forward BUM traffic into the underlay on an as needed basis

Correct Answer: AB
Section: (none)
Explanation

Explanation/Reference:

QUESTION 31
Which component in Sky ATP contains a list of servers that includes known sources for malware downloads?

A. whitelists and blacklists

B. command and control
C. malware inspection pipeline
D. infected host cloud feeds

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 32
Click the Exhibit button.
Exhibit:

Which type of cloud system is shown in the exhibit?

A. cloud storage
B. cloud management
C. cloud telemetry
D. cloud security

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 33
Which SRX Series feature provides dynamic cloud-based malware analysis?

A. Sky ATP
B. identity management system
C. security policy
D. IPS policy

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 34
Which two functional blocks enable NFV? (Choose two)

A. public cloud API plugin

B. orchestrator
C. software container management system
D. virtualized infrastructure manager
Correct Answer: BD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 35
Which two statements are true regarding a zero trust network security model? (Choose two)

A. It assumes that security threat management cannot be centralized

B. It assumes that security threats can originate inside the network
C. It assumes that security threats can originate outside of the network
D. It assumes that security devices cannot detect and prevent network threats

Correct Answer: BC
Section: (none)
Explanation

Explanation/Reference:

QUESTION 36
Which statement is correct about VNFs?

A. All containers are VNFs

B. VNFs are inserted into the physical data path when deployed
C. VNFs are software applications used in Network Functions Virtualization (NFV)
D. All virtual machines are VNFs

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 37
What are two protocols NorthStar uses to provision LSPs? (Choose two)

A. IF-MAP
B. XMPP
C. PCEP
D. NETCONF

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 38
According to Juniper Networks, what are two recommended interior routing protocols for the underlay network?
(Choose two)
A. IS-IS
B. RIP
C. OSPF
D. EIGRP

Correct Answer: AC
Section: (none)
Explanation

Explanation/Reference:

QUESTION 39
Which protocol is used to transport data in an overlay network?

A. BGP
B. EVPN
C. OSPF
D. VXLAN

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 40
A customer must provision multiple devices in their data center and would like to automate this process.
What would you use to accomplish this task?

A. NSSU
B. SSO
C. ISSU
D. ZTP

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 41
Which Juniper product is designed to generate threat containment data and continuously monitor network
traffic for security threat activity?

A. Policy Enforcer
B. AppFormix
C. Cyphort
D. Network Director

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 42
Which protocol would you use to share IP and MAC information in the overlay network?

A. OSPF
B. IS-IS
C. EVPN
D. IGMP

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 43
Which Juniper virtual platform is designed to operate in an isolated Linux environment directly on the host
server?

A. VRR
B. vSRX
C. vMX
D. vSRX

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 44
What are two characteristics of an overlay network in a cloud networking data center? (Choose two)

A. An overlay network provides physical connectivity between hosts

B. An overlay network uses Layer 2 tunneling technologies to interconnect hosts
C. An overlay network must reside in virtual machines within the data center
D. An overlay network provides logical connectivity between tenant networks

Correct Answer: BD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 45
What are two benefits of implementing the Juniper Telemetry Interface for network monitoring? (Choose two)

A. It enables real-time security event monitoring

B. It enables real-time performance monitoring
C. It eliminates the need for remote data collectors
D. It eliminates resource-intensive polling of network devices

Correct Answer: BD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 46
Which platform was designed to act as a CPE device?

A. PTX Series
B. MX Series
C. EX Series
D. NFX Series

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 47
What are two design concepts for a Clos IP Fabric? (Choose two)

A. All devices must be the same model

B. All spine devices must connect to all spine devices
C. All link connecting stages should be the same speed
D. All leaf devices must connect to all spine devices

Correct Answer: CD
Section: (none)
Explanation

Explanation/Reference:

QUESTION 48
What is a benefit to using a Cloud CPE solution over a traditional CPE solution?

A. A customer can bring their own hardware for the provider to manage
B. The provider extends their underlay network into the customer site
C. The ability to add or remove services without new networking hardware
D. All infrastructure support is supplied by a single network vendor

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
QUESTION 49
A customer is planning a significant upgrade to their network that requires an increase in bandwidth. They want
to schedule the increase for a specific date and time.
Which feature within the NorthStar Controller allows you to automate this process?

A. LSP and Link Statistics

B. Maintenance Mode
C. Bandwidth Calendaring
D. NorthStar Planner

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 50
Which protocol does a Contrail node use to communicate with vRouters on compute nodes?

A. IF-MAP
B. XMPP
C. BGP
D. NETCONF

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 51
Which API does CSO use to connect with a service provider’s OSS/BSS?

A. Configuration API
B. JET API
C. Analytics API
D. RESTful API

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 52
What is the Web interface component of OpenStack?

A. Horizon
B. Neutron
C. Nova
D. Cinder
Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 53
Which organization is responsible for developing and maintaining the NFV framework standard?

A. Metro Ethernet Forum (MEF)

B. MultiService Forum (MSF)
C. European Telecommunications Standards Institute (ETSI)
D. International Organization for Standardization (ISO)

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 54
A customer wants to deploy a complicated service and needs complete control of all applications, servers, and
server operating systems.
Which type of service should the customer purchase in this scenario?

A. FWaaS
B. SaaS
C. PaaS
D. IaaS

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 55
Which statement is true about the OpenConfig data model?

A. It supports YANG
B. It provides UDP-based transport
C. It is embedded in all devices that run the Junos OS
D. It uses MySQL as the default database structure

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 56
What provisions new switches or routers in your network automatically, with no manual intervention?

A. PCEP
B. ZTP
C. BGP
D. RSVP

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 57
Which statement is true regarding Layer 3 underlay fabric networks?

A. Layer 3 underlay fabric networks can only be used across public networks
B. Layer 3 underlay fabric networks rely on IPsec tunnels to interconnect tenants
C. Layer 3 underlay fabric networks rely on Layer 2 loop prevention protocols
D. Layer 3 underlay fabric networks are more scalable than Layer 2 fabric underlay networks

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 58
Which type of SDN are you using when you automate a Junos device using PyEZ and NETCONF?

A. API-based SDN
B. SDN as an overlay
C. SDN as an underlay
D. OpenFlow-based SDN

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:

QUESTION 59
Which cloud architecture provides developers a framework on which to develop and customize applications?

A. DBaaS
B. PaaS
C. IaaS
D. FWaaS

Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:

QUESTION 60
A customer wants to provide advanced Layer 4 through Layer 7 security services for a VMware NSX
microsegementation deployment.
Which platform would you recommend using in this scenario?

A. ACX Series
B. vMX Series
C. vSRX Series
D. QFX Series

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:

QUESTION 61
Which statement is correct about CSO?

A. CSO is a complete orchestration system and can replace OpenStack

B. CSO has a gateway component and can be used to connect data centers
C. CSO can be used to establish and monitor LSPs in a service provider network
D. CSO can be used to manage VNFs at service provider’s customer site

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 62
What is used to provide secure access to a vSRX in a public cloud?

A. authorized key pairs

B. SSH key pairs
C. private key pairs
D. public key pairs

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 63
Which statement is true about VNFs?

A. VNFs are always physical devices

B. VNFs are virtual devices
C. VNFs are only used in service provider clouds
D. VNFs are only used in data centers

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 64
Which node in a Contrail cluster is used to collect data from the routers?

A. control node
B. analytics node
C. compute node
D. configuration node

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 65
Which two protocols are used in a Contrail system to exchange routing information? (Choose two)

A. XMPP
B. BGP
C. OSPF
D. IS-IS

Correct Answer: AB
Section: (none)
Explanation

Explanation/Reference: