Tenant Traffic Isolation and Routing Instances JN0-683 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A data center has multiple tenants, and the network team is planning to implement tenant isolation. The team is considering using VRFs. Which statement correctly describes a key benefit of using VRFs for tenant isolation?

   • AVRFs automatically encrypt tenant traffic.
   • BVRFs eliminate the need for any firewall filtering.
   • CVRFs require dedicated physical hardware for each tenant.
   • DVRFs allow each tenant to use overlapping IP address space without conflict.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A service provider hosts three enterprise tenants in a single Junos-based data center. Each tenant requires complete isolation of its routing and forwarding tables. The provider's design uses a single physical access switch per tenant, with each tenant's servers connected to that switch. Which configuration approach satisfies the isolation requirement while minimizing administrative overhead?

   • ACreate a single routing instance for all tenants and use VLAN tagging to separate traffic within that instance.
   • BPlace all tenant interfaces in the default routing instance and use firewall filters to block inter-tenant traffic.
   • CConfigure a separate routing instance for each tenant on the access switch, assign each tenant's interfaces to its routing instance, and enable IP forwarding in each instance.
   • DAssign each tenant a unique autonomous system number and run a separate OSPF process per tenant in the default routing instance.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In a multitenant data center, what is the primary reason for isolating tenant traffic at the network layer?

   • ATo reduce the number of IP addresses required for tenant devices
   • BTo improve network performance by prioritizing tenant traffic over management traffic
   • CTo simplify the physical cabling by using virtual LANs instead of separate switches
   • DTo prevent tenants from accessing each other's resources and to maintain independent routing and forwarding domains
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A service provider is implementing MPLS L3VPNs for multiple tenants. Each tenant has multiple sites, and the provider needs to ensure that routes from one tenant's site are not leaked to another tenant's site. The provider is using route targets to control route distribution. Which configuration ensures that only routes with the correct route target are imported into each tenant's VRF?

   • AUse the same route target for all tenants to simplify configuration.
   • BConfigure a VRF import policy that matches the tenant's route target and apply it to the VRF.
   • CConfigure the route distinguisher to be unique per tenant and rely on it for isolation.
   • DConfigure a VRF export policy that sets the tenant's route target on all exported routes.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network engineer is configuring a new VRF on a Junos switch. The VRF is intended to carry tenant traffic between two access switches. The engineer has created the routing instance and assigned the interfaces. What additional configuration is required to ensure that the VRF can forward traffic between the two interfaces?

   • AEnable IP forwarding in the routing instance.
   • BCreate a static route in the VRF for each destination.
   • CApply a VRF export policy to the routing instance.
   • DConfigure a route distinguisher for the VRF.
   Reveal Solution Discussion Select an answer first