Free VNX100 sample questions

Correct answer: SLA Probes generated by the branch CPE (VOS)

The Versa Operating System (VOS) running on the branch CPE is responsible for generating and sending SLA probes across the available WAN paths to measure real-time performance metrics like latency, jitter, and packet loss. These measurements are then used by the traffic steering engine on the CPE to make dynamic path selection decisions based on the configured policies. Versa Director is for management, and Versa Analytics is for historical data, while the Controller manages the control plane.

Correct answer: False

This statement is false. The Versa Controller operates on the control plane. It is responsible for establishing and maintaining the routing and policy information for the SD-WAN fabric. The actual data plane traffic is forwarded directly between the Versa CPE appliances (spokes) and the hub appliance, or directly between spokes in a mesh topology. The Controller facilitates the setup of these data paths but does not sit in the path of the data itself.

Correct answer: A Versa Gateway appliance.

The Versa Gateway is the component specifically designed for interconnecting the SD-WAN overlay fabric with traditional WAN underlays like MPLS L3-VPNs. It facilitates route exchange and data plane forwarding between the two disparate networks, enabling a seamless migration and hybrid WAN operation. While a hub CPE can centralize traffic, the Gateway role has specific features for this MPLS integration purpose.

Correct answer: In a Next-Gen Firewall or Service Template applied to the branch devices.

URL filtering is a security service. In the Versa template model, services that can be shared across multiple device types and groups are typically configured in Service Templates (specifically, a Next-Gen Firewall template in this case). This allows the policy to be defined once and then applied to any Device Template or Device Group that requires it, ensuring consistency and ease of management. Configuring it directly on each device or in a Device Template would be less scalable.

Correct answer: To logically separate routing tables and interfaces for different security zones or tenants, such as separating LAN-side traffic from WAN-side transport traffic.

The primary purpose of Virtual Routers (VRs) in VOS is to create logically isolated routing and forwarding instances within a single physical appliance. This is analogous to VRFs in traditional networking. It allows for the clean separation of different network segments, such as the trusted LAN side (e.g., LAN-VR) from the untrusted WAN transport side (e.g., WAN-VR). This segmentation is fundamental to Versa's security and multi-tenancy architecture, ensuring that routing decisions and policies for one zone do not improperly influence another.

Correct answers: The Application Definition for VoIP traffic.; The QoS policy to ensure VoIP traffic is marked with the correct high-priority forwarding class.; The Traffic Steering policy associated with the high-priority forwarding class.

The first step is to ensure that the system is correctly identifying the VoIP traffic. If the application definition is wrong, no subsequent policies will be applied correctly.

VoIP traffic must be classified and marked with a high-priority forwarding class (e.g., Expedited Forwarding) so it can be treated appropriately by other policies.

This policy dictates which WAN path should be used based on application or forwarding class. It should be configured to steer the VoIP forwarding class to the link that meets strict latency and jitter requirements, which is typically the MPLS link.

Correct answer: It suppresses SLA probes to remote branches after a configurable period of traffic inactivity.

Adaptive monitoring is a feature that optimizes the SD-WAN fabric by reducing control plane overhead. It works by temporarily stopping the transmission of SLA probes over paths to remote sites with which there has been no data traffic for a configured inactivity interval. When data traffic destined for that remote site resumes, the SLA probes are automatically restarted to ensure path quality is measured before forwarding.

Correct answer: Auto-Merge combines the template configuration with the existing device configuration, preserving local changes, while Overwrite replaces the entire device configuration with the full template stack.

The core difference lies in how local or out-of-band configurations on the device are handled. 'Auto-Merge' intelligently combines the configuration from the template stack (Device, Service, Common) with the current running configuration on the CPE, preserving any settings that do not conflict with the template. 'Overwrite' is a more destructive option that completely replaces the CPE's running configuration with the configuration derived purely from the template stack, discarding any local modifications.

Correct answer: Versa Controller

The Versa Controller is the brain of the SD-WAN control plane. It is responsible for establishing secure control connections with all CPEs in an organization, managing routing information (typically acting as a BGP route reflector), and distributing policies. When setting up an Organization, you must assign one or more Controllers to it to manage its control plane.

Correct answer: Security Package (SPack) / Versa Director

Versa Networks bundles its security signatures (for IPS, AV, Application ID, URL filtering, etc.) into a file called a Security Package (SPack). The management, scheduling, and distribution of these SPacks to the CPE appliances are handled centrally from the Versa Director management platform.