JN0-610 JNCIP-Cloud Practice Questions
Prepare for JN0-610 with more than an answer.
- 1
Which Contrail component is responsible for translating the high-level data model (Virtual Networks, Policies) into low-level configuration and pushing it to the Control Nodes?
Show answer details
Correct answer: A
The Schema Transformer is a key sub-component of the Config Node. It listens to changes in the high-level configuration (Intent) and transforms them into low-level system configuration objects (like Routing Instances and Route Targets) that the Control Nodes can consume.
- 2
You need to configure a Contrail Analytics alarm that triggers when the CPU usage of any vRouter exceeds 85% for more than 5 minutes. Which construct in AppFormix (Contrail Insights) would you use to define this logic?
Show answer details
Correct answer: A
For a fixed value like '85%', a Static Threshold Alarm is the correct choice. Dynamic alarms are used when the baseline varies over time (anomaly detection). You would configure the metric (CPU), the operator (>), the threshold (85), and the duration/frequency.
- 3
Case Study: A financial institution is deploying a hybrid cloud using Contrail. They have an existing MPLS L3VPN WAN. They want to extend their Contrail overlay networks to communicate with branch offices connected to the WAN.
Which architectural component must be deployed to facilitate route leaking between the Contrail overlay (EVPN/VXLAN) and the physical WAN (MPLS L3VPN)?
Show answer details
Correct answer: A
An SDN Gateway (specifically an L3 Gateway, often a Juniper MX series router) is required. The Control Nodes peer with this Gateway via BGP. The Gateway learns overlay routes (EVPN) and leaks them into the WAN VRF (L3VPN), performing the necessary encapsulation/decapsulation (VXLAN to MPLS) for data plane traffic.
- 4
In a Contrail-integrated Kubernetes cluster, you need to expose a web service to the external internet. You decide to use an Ingress Controller. How does Contrail implement the load balancing for this Ingress?
Show answer details
Correct answer: C
Contrail replaces the need for kube-proxy in many cases. For Service Load Balancing and Ingress, Contrail assigns a Floating IP (or Service IP) and uses ECMP in the vRouter forwarding plane to balance traffic across the available backend Pods directly, providing high performance without extra hops.
- 5
You are designing a Contrail Networking deployment for a large-scale telecommunications provider. The customer requires strict separation of control plane traffic from management traffic. Which specific interface on the Contrail Control Node is utilized to establish XMPP sessions with the vRouter agents running on compute nodes?
Show answer details
Correct answer: C
The Contrail Control Node uses its control interface (often an IP on the management or a dedicated control network) to establish XMPP sessions with vRouters. While it can physically share a NIC with management, logically the XMPP connection targets the Control Node's IP defined in the configuration, distinct from the forwarding plane which handles encapsulated traffic.
- 6
A cloud architect is troubleshooting a Kubernetes cluster integrated with Contrail CNI. Pods in the 'finance' namespace cannot communicate with Pods in the 'hr' namespace, even though no NetworkPolicies have been applied. What is the default behavior of Contrail Networking regarding Kubernetes namespace isolation?
Show answer details
Correct answer: B
When Contrail is integrated with Kubernetes, the default isolation mode maps every Kubernetes namespace to a distinct Contrail Virtual Network (VN). By default, these VNs are isolated from one another unless explicit policies or floating IPs are configured to allow traffic between them.
