Software Define Networking Sec and Network Programamability Flashcards

1
Q
  • Traditional Routing and Switching Planes
  • Configuration and monitoring
  • Typically done via the traditional CLI or GUI
  • Each Vendor has this proprietary way to configure its devices
A

Management plane

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q
  • Traditional Routing and Switching Planes
  • Layer 2 protocols and Control
  • Layer 3 Protocols (OSPF,BGP,RIP etc)
A

Control Plane

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q
  • Traditional Routing and Switching Planes

- institutes how data is forwarded inside the hardware from interface to interface

A

Data Plane

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Introduced the notion of centralized controller. Has a global view of the network and it uses the common management protocol to configure the network infra devices

  • centralizes management by abstracting the control plane from the data forwarding function in the discrete networking devices.
  • is an architecture designed to make a network more flexible and easier to manage
A

SDN

SDN Controller

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Provide the ability to automate settings and networking policies and configurations in a very flexible and scalable way.
-is an industry-leading secure, open, and comprehensive Software-Defined Networking (SDN) solution. It radically simplifies, optimizes, and accelerates infrastructure deployment and governance and expedites the application deployment lifecycle.

A

Cisco ACI Solution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

is a network virtualization technology that leverages encapsulation technique similar to vlan to encapsulates layer 2 ethernet frames within UDP packets (over udp 4789 , by default

A

Virtual Extensible LAN (VXLAN)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

the ip address that represents the leaf VTEP is called?

A

Physical Tunnel endpoint (PTEP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Additional functions of APIC

A
  • “observer”: monitors the health, state and performances information of CISCO ACI pod
  • “boot director”: in charge of booting process and firmware updates
  • “application director”: manages the formation and control of the APIC appliance cluster
  • “virtual machine manager” is an agent between the policy repository and hypervisor management system (VMware centre”
  • “event manager: manages and stores all the events and faults initiated from the APIC and CISCO ACI fabric nodes
  • “appliance element”: maintains the inventory and state of the local APIC appliance
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

allows you to tunnel layer 2 ethernet packets with different encapsulation over a layer 3 network

A

Overlay network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

enforce network segmentation in VM Level or containers regardless of VLAN or subnet

A

micro-segmentation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Open source initiative trying to provide micro segmentation

A
Neutron from openstack
Open vswitch (OVS)
Open Virtual network (OVN)
Opendaylight (ODL)
Open platfrom for network function vritualizatio(OPNFV)
Contiv
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

are used to communicate between the SDN controller and the switches and routers within the infra. Enable SDN to dynamically makes changes based on real-time demands and scalability needs.

A

Southbound API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

are typically restful API that are used to communicate between the SDN controller and the services and applicaiton running over the network. in short it is the link between the application and sdn controller

A

Northbound APPI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

is a technology that addresses the virtualization of layer 4 through layer 7 services. Eg firewall, load balancer, security services

A

Network Functions Virtualization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Open source solutions of. NFV. aims to be the base infrastructure layer for running virtual network functions

A

OPNVF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

is a solution created by cisco often referred to as the “intent-based networking”. provides automation and assurance services across campus networks, wide area networks and branch networks

A

Cisco Digital Network Achitecture(DNA)

17
Q

are northbound REST APIs that expose specific capabilties of the cisco DNA centre platfrom

A

Intent API

18
Q

Components of the Cisco DNA security solution. allows you to detect security threats in encrypted traffic without decrypting the packets

A

Cisco ETA (Encrypted traffic analytics)

19
Q

standard-based web services access protocol that was originally developed by microsoft and has been used by numerous legaccy applications for many years
-Exclusively uses XML to provide API services

A

Simple Object Access protocol(SOAP)

20
Q

is an API standard that is easier to use than SOAP. uses JSON instead of XML. and it uses standards like swagger and OpenAPI specificatation

A

Representational State Transfer (REST) Api

21
Q

another query language for API that provides many developers tool. now used for many mobile applicaitons and online dashboards

A

GraphQL and queryable API

22
Q

is a modern framework of API documentation and is now the basis of the Open API specifications (OAS)

A

swagger (openAPI)

23
Q

is an XML based language that is used to document the functionality of a web services

A

Web services description language (WSDL)

and Web application description language (WADL)

24
Q

is an api contract language used in many networking devices. defined in RFC6020

A

YANG

25
Q

specification written in YANG is referred to as ?

A

YANG module

26
Q

collection of yang module is called

A

YANG model

27
Q

yang model of a devices is often called?

defining the structure and content of messages between the application and the devices

A

schema

28
Q

defined in RFC 6421 and 6422. created to overcome the challenges in SNMP

A

NETCONF

29
Q

defined is RFC 8040 and it follows the REST principles

A

RESTCONF

30
Q

is a collaborative effort to provide vendor neutral data models (in YANG) for network devices

A

OpenConfig

31
Q

similar to NETCONF and RESTCONF. uses YANG models but it can be used with other interface descriptio language (IDL)

A

gRPC Network Management interface (gNMI)

32
Q

an appliance that provides graphical and programming interface to design, configure, monitor and troubleshoot your network devices
-A takes a software-delivered approach to automating and assuring services across your campus, WAN, and branch networks.

A

Cisco DNA

33
Q

VXLAN uses an identifier that represent a logical segment that is called ?

A

VXLAN Network Identifier

34
Q

IP Tunneling mechanism sample

A

Virtual Extensible Lan (VXLAN)
Network Virtualization using generic encapsulation (NVGRE)
Stateless Transport Tunneling (STT)
Generic Network Virtualization Encapsulation (GENEVE)