Certified Network Administrator and Engineer Free Sample Questions

BGP is the standard protocol for WAN multihoming and enterprise edge routing. However, its default timers (e.g., 60-second keepalive, 180-second hold) are too slow for rapid convergence. Pairing BGP with Bidirectional Forwarding Detection (BFD) provides sub-second failure detection, allowing the router to switch to the backup VPN path almost immediately. OSPF and EIGRP are typically internal gateway protocols (IGPs) and are less suited for peering across disparate provider networks like internet VPNs and MPLS simultaneously without complex redistribution.

In a spine-leaf architecture, every leaf switch connects to every spine switch, creating a non-blocking fabric with equidistant endpoints. This ensures that traffic between any two leaf switches is always exactly two hops away (Leaf -> Spine -> Leaf), which provides highly predictable latency for east-west traffic. Spine switches do not connect to each other, and endpoints (servers) only connect to leaf switches.

NFV (Network Function Virtualization) is the concept of replacing dedicated network appliances (like firewalls, load balancers, or routers) with software running on commercial off-the-shelf (COTS) servers. VNF (Virtual Network Function) is the actual software instance that performs the function. Both are core to modern cloud and hybrid networking abstraction. SDN separates the control and data planes but doesn't inherently replace appliances with software instances in the same way, while VPC is a logical cloud isolation boundary.

In the Differentiated Services (DiffServ) architecture, the Expedited Forwarding (EF) DSCP value (decimal 46) is the industry standard for voice traffic. It provides a low-loss, low-latency, low-jitter, assured bandwidth end-to-end service, which is critical for real-time VoIP. AF41 is typically used for interactive video, CS3 for call signaling, and default routing for best-effort data.

False. By default, container networking models (such as those managed by CNI in Kubernetes or Docker's default bridge) assign private, internal IP addresses to containers. They rely on Network Address Translation (NAT), ingress controllers, or load balancers to communicate with or be accessed from external networks or the public internet.

Dedicated private circuits (like Direct Connect or ExpressRoute) bypass the public internet, satisfying the requirement for high-throughput, low-latency, and predictable performance. Using dual circuits to separate data centers provides the necessary redundancy. BGP is the required and optimal dynamic routing protocol for these types of hybrid connections, as it easily handles large routing tables and dynamic failover.