Creating HP Software-defined Networks: HP2-Z31

Correct Answer: CD

You can set general policies for all the hosts in the network to manage and mitigate malicious traffic and host name requests. General policies enable the application to detect changes in network traffic patterns. The general policies prevent the host from acting like a botnet and being controlled by external malicious computers.

When network traffic from a host exceeds the policy limits, you can configure application to perform one of the following actions:

Block

Block and notify

Quarantine

Quarantine and Notify

Note: HIPS Short for host-based intrusion prevention system, HIPS is an IPS or intrusion prevention system designed for security over host-based systems where intrusions and infections are dealt with at the individual workstation level to provide a more effective level of security. Reference: HP Network Protector SDN Application Administrator Guide

Correct Answer: C

OpenFlow instance mode

OpenFlow can work either in active or passive mode.

Passive mode

There is one-way communication from the OpenFlow controller to the switch. Packets that do not match

any flow in the flow table on the switch are not sent to the controller. Such packets of new flows are

handled normally by the switch.

Active mode

New packets of a flow that the switch is not aware of are sent to the OpenFlow controller.

Reference: HP Switch Software OpenFlow Administrator's Guide K/KA/WB 15.14 http://

h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c03991489-1.pdf (OpenFlow instance mode, passive

mode)

Correct Answer: A

Virtualization mode With Virtualization Mode, some VLANs can be designated as members of OpenFlow instances. Each OpenFlow instance is independent and has its own OpenFlow configuratio

Note: OpenFlow can be configured for Virtualization Mode or Aggregation Mode.

*

Virtualization Mode Each OpenFlow instance is independent and has its own OpenFlow configuration and OpenFlow controller connection. Some VLANs are designated as members of OpenFlow instances while other VLANs are not. The VLANs that are not members of OpenFlow instances could be thought of as VLANs carrying production traffic.

*

Aggregation Mode Provides a single OpenFlow instance that includes all of the VLANs configured on the switch except the VLAN(s) that connect to the controller(s) and the Management VLAN on the switch. Production traffic is not allowed

Reference: HP OpenFlow Switches Administrator's Guide