A large organization is deploying an SDN controller to automate network policies across multiple data centers. The security team requires that all API calls to the controller be authenticated and that the controller itself be protected from unauthorized access. The operations team wants to expose the northbound API to a third-party orchestration platform. Which combination of security measures should be implemented to meet both requirements?

Disable the northbound API and use only the CLI for all changes

Expose the northbound API directly to the internet and rely on API keys

Use only a shared secret embedded in the orchestration platform's configuration

Place the controller behind a firewall, require mutual TLS for northbound API calls, and use RBAC for API users

In Software-Defined Networking (SDN), which architectural change is the primary characteristic that distinguishes it from traditional networking?

The data plane is responsible for making forwarding decisions based on MAC addresses.

The management plane is merged with the data plane to simplify device configuration.

The control plane is centralized and separated from the data plane, allowing programmatic control of forwarding behavior.

Each network device independently runs routing protocols to build its own forwarding table.

Which approach is often used to allow SDN and traditional networking protocols to coexist in a hybrid network?

Running SDN and legacy protocols simultaneously on the same device

Replacing all legacy protocols with SDN protocols

Using a gateway to translate between SDN and legacy protocols

Isolating SDN and legacy networks completely with no interaction

Which security concern is unique to SDN compared to traditional networks?

MAC address spoofing is impossible

The centralized SDN controller becomes a single point of failure and a high-value target for attackers

Encryption of data in transit is not possible

Network devices are more vulnerable to physical attacks

A cloud provider is integrating an SDN controller with OpenStack. The provider wants to offer self-service network provisioning to tenants. The SDN controller must be able to create isolated L2 networks on demand. Which integration approach should the provider use?

Use the SDN controller's southbound API to create networks

Use the OpenStack Horizon dashboard to configure the SDN controller

Use the SDN controller's CLI to manually create networks

Use the Neutron ML2 plugin to connect OpenStack to the SDN controller

F5Certified Solution Expert, Cloud

Domain 3Objective 4

3.04 Apply Key Concepts Required to Leverage Technologies to Integrate with Various SDN Environments 402 Practice Questions (Page 4)

Part of the Section 3 : CLOUD MIGRATION domain, which makes up ~21% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~8–15 in this domain), expect 2–3 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

Questions 16–20

16expert · hard
A large organization is deploying an SDN controller to automate network policies across multiple data centers. The security team requires that all API calls to the controller be authenticated and that the controller itself be protected from unauthorized access. The operations team wants to expose the northbound API to a third-party orchestration platform. Which combination of security measures should be implemented to meet both requirements?
Select an answer first
17foundation · easy
In Software-Defined Networking (SDN), which architectural change is the primary characteristic that distinguishes it from traditional networking?
Select an answer first
18foundation · easy
Which approach is often used to allow SDN and traditional networking protocols to coexist in a hybrid network?
Select an answer first
19foundation · easy
Which security concern is unique to SDN compared to traditional networks?
Select an answer first
20expert · hard
A cloud provider is integrating an SDN controller with OpenStack. The provider wants to offer self-service network provisioning to tenants. The SDN controller must be able to create isolated L2 networks on demand. Which integration approach should the provider use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 402

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “402” is a trademark of its owner, used for identification only.