In the Horizon dashboard, where can you manage security groups?

Under the 'Compute' section, then 'Instances'

Under the 'Identity' section, then 'Projects'

Under the 'Network' section, then 'Security Groups'

Under the 'Admin' section, then 'System Information'

A cloud administrator is designing a network for a multi-tier application. The administrator wants to ensure that only the web tier can communicate with the application tier, and only the application tier can communicate with the database tier. Which approach should the administrator use?

Assign each tier to a different subnet and use the default security group for all instances.

Create separate security groups for each tier and add rules that allow traffic only from the appropriate source security group.

Use a single security group for all instances and rely on network ACLs to control traffic between tiers.

Create a security group for each tier and add rules that allow traffic from any source IP.

A security group has the following rules: inbound TCP port 80 from 0.0.0.0/0, inbound TCP port 443 from 0.0.0.0/0, and outbound TCP port 80 to 0.0.0.0/0. An instance in this group needs to download updates from an external repository on port 443. What is the issue?

The instance needs a floating IP to access the external repository.

The inbound rule for port 443 is not needed for outbound connections.

The outbound rule only allows port 80, so traffic to port 443 is blocked.

The outbound rule should be changed to allow all traffic.

Which components are used to define a security group rule in OpenStack?

Direction, protocol, port range, and remote IP range

Network ID, subnet ID, and router ID

Instance name, flavor, and image

Project name, user name, and role

An administrator has an existing instance that was created with the default security group. The administrator wants to add a new security group named 'web' to the instance without removing the default group. Which command should the administrator use?

openstack server update --security-group web my-instance

openstack security group add instance my-instance web

openstack server add security group my-instance web

openstack server set --security-group web my-instance

Juniper NetworksCertified Associate, Cloud

Domain 5Objective 5

OpenStack Security Groups JN0-214 Practice Questions (Page 1)

Part of the Cloud Orchestration with OpenStack domain, which makes up ~14% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

7concepts

Questions 1–5

1foundation · easy
In the Horizon dashboard, where can you manage security groups?
Select an answer first
2application · medium
A cloud administrator is designing a network for a multi-tier application. The administrator wants to ensure that only the web tier can communicate with the application tier, and only the application tier can communicate with the database tier. Which approach should the administrator use?
Select an answer first
3application · medium
A security group has the following rules: inbound TCP port 80 from 0.0.0.0/0, inbound TCP port 443 from 0.0.0.0/0, and outbound TCP port 80 to 0.0.0.0/0. An instance in this group needs to download updates from an external repository on port 443. What is the issue?
Select an answer first
4foundation · easy
Which components are used to define a security group rule in OpenStack?
Select an answer first
5application · medium
An administrator has an existing instance that was created with the default security group. The administrator wants to add a new security group named 'web' to the instance without removing the default group. Which command should the administrator use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-214

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-214” is a trademark of its owner, used for identification only.