VRF POWERSWITCH-DATA-CENTER-DEPLOY Practice Questions (Page 3)

Questions 11–15

1. 11application · easy

   A data center uses OS10 switches to provide services to two different business units. Business unit A uses the 192.168.1.0/24 network, and business unit B also uses the 192.168.1.0/24 network. The switches must route traffic for both units without conflict. What is the most effective way to achieve this?

   • AConfigure two VRFs, one for each business unit, and assign the respective interfaces to each VRF.
   • BUse NAT to translate the overlapping addresses.
   • CChange the IP addresses of one business unit to avoid overlap.
   • DUse policy-based routing to direct traffic based on source address.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An engineer is configuring a VRF on an OS10 switch and needs to assign a physical interface to the VRF. The interface is currently configured as a Layer 2 switchport. What must be done before the interface can be assigned to the VRF?

   • ACreate a VLAN interface and assign the physical port to that VLAN.
   • BConvert the interface to a Layer 3 interface using 'no switchport'.
   • CEnable routing on the switch globally.
   • DAssign an IP address to the interface.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A data center switch in OS10 must carry two isolated production tenants. Tenant A uses VLAN 100 with subnet 10.1.0.0/24, and Tenant B uses VLAN 200 with the same subnet 10.1.0.0/24. Both tenants connect to the same physical switch. The network engineer needs to ensure traffic from Tenant A can never reach Tenant B, even if a routing protocol is later enabled. What is the most appropriate configuration?

   • ACreate two VRF instances, assign VLAN 100 to VRF-A and VLAN 200 to VRF-B, and configure the same subnet in each VRF.
   • BCreate one VRF instance and assign both VLAN 100 and VLAN 200 to it, then rely on ACLs to block inter-VLAN traffic.
   • CUse different subnets for each tenant and configure static routes between them to control traffic flow.
   • DConfigure both VLANs in the default VRF and use private VLANs to isolate traffic at Layer 2.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A data center uses OS10 switches to provide routing for multiple tenants. Each tenant has its own VRF. A new tenant requires connectivity to a shared service (e.g., a firewall) that is in the default VRF. The engineer needs to allow the new tenant's VRF to reach the shared service without allowing the tenant to see other tenants' routes. What is the most appropriate approach?

   • AUse a static route in the tenant's VRF pointing to the default VRF's next-hop.
   • BEnable OSPF between the tenant's VRF and the default VRF.
   • CPlace the shared service in the tenant's VRF.
   • DConfigure route leaking between the tenant's VRF and the default VRF, selectively advertising only the shared service's subnet.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An OS10 switch has a VRF named 'VRF-CUSTOMER' with a VLAN interface (vlan100) assigned to it. The engineer notices that the VRF is not routing traffic between two subnets that are both in VRF-CUSTOMER. The engineer has verified that the VLAN interface is up and has IP addresses configured. What is the most likely cause of the routing failure?

   • AThe VLAN interface is not assigned to the VRF, or the VRF is not correctly configured.
   • BThe switch's routing table is full.
   • CThe switch does not have a default route configured.
   • DThe two subnets are in different VLANs, and inter-VLAN routing is not enabled.
   Reveal Solution Discussion Select an answer first