Question 1

Which of the following connections does not exist during the VNS bootstrapping process?

Accepted Answer

D

Explanation: During the VNS bootstrapping process, the Network Services Gateway (NSG) initiates a connection to the NSG-Proxy. The Proxy, in turn, communicates with the Virtualized Services Directory (VSD) to authenticate the NSG and retrieve its configuration, including the address of its assigned Virtualized Services Controller (VSC). This information is relayed back from the Proxy to the NSG. Finally, the NSG establishes a direct OpenFlow-over-TLS control plane connection to the VSC. The VSC is a passive entity in the initial bootstrap phase and awaits the connection from the NSG; it does not initiate any communication with the NSG-Proxy.

Question 2

Which Nokia product is the core component of VNO?

Accepted Answer

B

Explanation: The core component of a Virtualized Network Operator (VNO) is the system responsible for management and orchestration (MANO) of virtualized network functions (VNFs) and network services (NS). The Nokia CloudBand Application Manager (CBAM) fulfills this role. As a combined NFV Orchestrator (NFVO) and VNF Manager (VNFM), CBAM is the central "brain" that automates the entire lifecycle of virtualized services—from onboarding and instantiation to scaling and termination. This orchestration capability is the fundamental enabler for a VNO to create, manage, and deliver services over a virtualized infrastructure.

Question 3

Which of the following statements about the NSG vports is TRUE?

Accepted Answer

D

Explanation: The Network Services Gateway (NSG) acts as the Layer 3 gateway for endpoints connected to its host vports. A primary function in this role is to manage the IP address lifecycle for the connected host. The Nuage VNS (Virtualized Network Services) system, of which the NSG is a key component, allocates an IP address from the vport's associated subnet. The NSG then uses its integrated DHCP server to deliver this IP configuration to the host. Therefore, the NSG is the entity that directly handles the IP address assignment for the host. This is a core capability of the NSG in the VNS architecture.

Question 4

Which of the following is NOT a function of Nuage Networks VNS?

Accepted Answer

C

Explanation: Nuage Networks Virtualized Network Services (VNS) is the Software-Defined WAN (SD-WAN) solution focused on automating network connectivity for enterprise branches and remote sites. Its primary functions include automating the WAN, virtualizing the branch CPE, and extending network policies from the data center to the WAN. The orchestration of cloud networks—that is, the automation and management of virtual networks, subnets, and workloads within a data center or public cloud environment—is the primary function of the Nuage Networks Virtualized Services Platform (VSP), not VNS. VNS connects the branch to the cloud, but VSP orchestrates the network within it.

Question 5

Which of the following users can create NSG profiles/templates?

Accepted Answer

A

Explanation: The creation of Network Services Gateway (NSG) profiles/templates is a foundational administrative task performed at the global level of the Nuage Networks Virtualized Services Platform (VSP). The CSP root group user is the super-administrator with unrestricted permissions across the entire platform. This role is explicitly designed to perform all system-level configurations, including the creation and management of core infrastructure templates that define the capabilities of network gateways for all tenants.

Question 6

Which of the following statements about the NSG support for NAT-T is TRUE?

Accepted Answer

A

Explanation: In the Nokia Network Services Gateway (NSG), NAT Traversal (NAT-T) for IPsec is a feature that is configured on a per-port basis. This means it is an attribute of a specific network port, typically an uplink port used for WAN connectivity. Administrators can enable or disable NAT-T on individual ports, allowing for granular control over which connections will use the NAT-T mechanism to establish IPsec tunnels through Network Address Translation (NAT) devices. This port-level configuration is fundamental to how the NSG manages its WAN interfaces and VPN connectivity.

Question 7

Which statement regarding the forwarding policies used in VNS for traffic redirection (also known as service chaining) is FALSE?

Accepted Answer

D

Explanation: Nuage/Nokia VNS forwarding (advanced) policies enable service-chaining by matching traffic on an NSG-vPort and “redirecting” it to the IP/MAC of a service appliance that is represented by a Redirect-Target object. • A Redirect-Target must first be created and linked to the appliance vPort; it is then invoked by the forwarding policy. • Policies can be attached to the ingress or egress direction of a domain, zone or subnet. • A Redirect-Target cannot be bound to a bridge-vPort (used for L2 bypass appliances). Only flows that already traverse the data-centre where the appliance resides can be steered; purely intra-branch or inter-branch flows never enter the DC fabric, therefore cannot be redirected there. Hence statement D is false.

Question 8

During VNS automated site activation, the domain design and attributes are configured on which of the following device?

Accepted Answer

C

Explanation: During the automated site activation process, also known as bootstrapping or Zero-Touch Provisioning (ZTP), the Network Services Gateway (NSG) is the device that receives and applies its configuration. The NSG powers on at the branch site, obtains network connectivity, and contacts the central Virtualized Services Directory (VSD). Upon successful authentication, the VSD pushes the pre-provisioned domain design, service templates, and site-specific attributes down to the NSG. The NSG then configures itself with these parameters, effectively instantiating the defined network and security policies for that specific site.

Question 9

Which of the following is FALSE regarding VNS bootstrapping?

Accepted Answer

D

Explanation: The VNS bootstrapping process is designed with security as a fundamental requirement. The communication between the Network Services Gateway (NSG) and the Virtualized Services Directory (VSD) for authentication and configuration download is conducted over a secure, encrypted channel. This is typically achieved using Transport Layer Security (TLS) to encapsulate the bootstrap protocol messages. Transmitting this sensitive information, which includes credentials and network configuration, in plain text would expose the network to significant security risks, which is contrary to the design of the Nuage VNS solution.

Question 10

Which of the following is true regarding the IPsec VPN between the NSGs?

Accepted Answer

A

Explanation: In the Nokia Nuage Networks VNS (Virtualized Network Services) solution, an overlay network is created using VXLAN to carry traffic between different sites. When this traffic must traverse an untrusted underlay network, such as the public internet, IPsec is used to provide security. The IPsec tunnel is established between the Network Services Gateways (NSGs). The entire VXLAN packet, including its headers and the original payload, is encapsulated and encrypted by IPsec (typically using ESP). This ensures the confidentiality and integrity of the overlay traffic as it transits the underlay.

Free Nokia 4A0-N02 Actual Exam Questions