4A0-N02 practice question 9 of 10

Which of the following is FALSE regarding VNS bootstrapping?

Full set: 40 questions
Answer options
A: The bootstrapping configuration templates on VSD ensures NSG configuration conformance.
B: NSG is ready for dispatch without prior configuration.
C: It solves the problem of site CPE activation without having to send a skilled technician on site.
D: NSG exchanges the plain text proprietary bootstrap protocol with VSD. Correct answer
Correct Answer:
D. NSG exchanges the plain text proprietary bootstrap protocol with VSD.
Explanation

The VNS bootstrapping process is designed with security as a fundamental requirement. The communication between the Network Services Gateway (NSG) and the Virtualized Services Directory (VSD) for authentication and configuration download is conducted over a secure, encrypted channel. This is typically achieved using Transport Layer Security (TLS) to encapsulate the bootstrap protocol messages. Transmitting this sensitive information, which includes credentials and network configuration, in plain text would expose the network to significant security risks, which is contrary to the design of the Nuage VNS solution.

Why Incorrect

A. VSD uses templates to define policies and configurations, which are then pushed to NSGs during bootstrapping. This ensures that all devices conform to a centralized, standardized configuration.
B. The zero-touch provisioning (ZTP) model is a core feature of VNS, allowing unconfigured NSGs to be shipped directly to a site for automatic activation and configuration download.
C. A primary business driver for VNS bootstrapping is the elimination of operational expenses associated with sending skilled engineers to remote sites for manual CPE/NSG activation.

References

1. Nokia Nuage Networks VNS Fundamentals, Release 21.10.R1

Reference: In the "Zero-Touch Provisioning Workflow" section, the process is described as: "The NSG initiates a secure connection to the VSD and sends a bootstrap request..." This confirms the use of a secure channel, directly contradicting the claim of a "plain text" protocol. The document details the use of unique identifiers and one-time passwords for secure authentication.

2. Nokia Courseware: Nuage Networks Virtualized Network Services (VNS) Operations

Reference: Module 2, "VNS Components and Architecture," explains that the control plane communication between the NSG and the VSC/VSD is secured using TLS. This ensures the confidentiality and integrity of the bootstrap and ongoing management traffic, making the "plain text" statement false. The course emphasizes ZTP as a key feature, validating options B and C. It also details the role of VSD templates in ensuring configuration conformance, validating option A.

Scroll to Top