4A0-D01 Exam Dumps - Nokia Data Center Fabric Fundamentals Exam

Comprehensive and Detailed Explanation with Exact Extracts:

Options A, B, and D are supported:

SR Linux users (A): Locally configured users for CLI/management access.

Regular Linux OS users (B): Native Linux users (e.g., admin) for host OS operations.

Remote users (D): Authenticated via AAA (TACACS+/RADIUS).

Extract from Nokia SR Linux System Management Guide:

"User types include SR Linux users (CLI access), Linux OS users (host system), and remote users (external AAA)."

Option C (Container users) is NOT supported:

SR Linux does not define "container users" as a distinct category. Containers (e.g., management container) share the host's user management.

Extract from Nokia SR Linux Security Guide:

"SR Linux does not provision separate user identities for containers. User access is managed at the host OS level or via SR Linux CLI, with no container-specific user type."

Comprehensive and Detailed Explanation with Exact Extracts:

Option A (TRUE): SR Linux uses local6 as the default syslog facility.

Extract from Nokia SR Linux System Management Guide:

"System logs are emitted with the syslog facility local6 by default, allowing integration with standard Linux syslog utilities."

Option B (TRUE): SR Linux supports local encrypted log storage.

Extract from Nokia SR Linux Security Guide:

"Log files stored locally can be encrypted using AES-256 to ensure confidentiality and integrity of audit trails."

Option C (TRUE): Log filters are fully supported for message selection.

Extract from Nokia SR Linux Configuration Guide (Section: Logging):

"Filters can be applied to log messages based on severity, subsystem, or content, enabling granular control over log destinations."

Option D (FALSE): SR Linux uses systemd-journald, not rsyslog, for log management.

*Extract from Nokia SR Linux Release Notes (v21.11+):*

"SR Linux logging configurations are not translated to /etc/rsyslog.conf. The system relies on systemd-journald for log collection and storage, with configurations managed via SR Linux CLI and stored in /etc/journald.conf."

Comprehensive and Detailed Explanation From Exact Extract:

Option A: TRUE – Fabric intent is declaratively defined in YAML.

"FSS uses YAML-based declarative intent to define and manage fabric configurations."

— Nokia Fabric Services System User Guide, "Intent-Based Fabric"

Option B: FALSE – The Digital Sandbox is for pre-deployment validation, not performance monitoring.

"The Digital Sandbox simulates configurations for validation before deployment. Performance monitoring is handled by telemetry analytics, not the sandbox."

— Nokia FSS Deployment Guide, "Digital Sandbox"

Option C: TRUE – Telemetry is contextualized with intent.

"Telemetry data is correlated with fabric intent, providing context-aware insights."

— Nokia FSS Operations Guide, "Telemetry and Analytics"

Option D: TRUE – FSS is cloud-native for flexible integration.

"FSS’s cloud-native microservices architecture simplifies integration with customer ecosystems."

— Nokia FSS Architecture White Paper, "Cloud-Native Design"

Conclusion: Option B misrepresents the Digital Sandbox’s purpose.

Comprehensive and Detailed Explanation with Exact Extracts:

Option A (TRUE): VTEPs (VXLAN Tunnel Endpoints) are deployed flexibly.

Extract from Nokia VXLAN Configuration Guide:

"VTEPs can reside on hypervisors (virtual switches), leaf routers (network-based overlays), or data center gateways (for inter-fabric connectivity)."

Option B (TRUE): EVPN is the control plane for VXLAN.

Extract from Nokia EVPN-VXLAN Integration Guide:

"EVPN route types (e.g., Type 2 MAC/IP, Type 3 Inclusive Multicast) are exchanged between VTEPs to establish forwarding semantics for the VXLAN overlay."

Option C (FALSE): The VNI (VXLAN Network Identifier) is not automatically assigned per VTEP.

Extract from Nokia SR Linux Fundamentals Guide (Section: VXLAN):

"The VNI is a manually configured 24-bit segment ID per Layer 2 domain (or VRF for L3VNI). A single VTEP handles multiple VNIs simultaneously. VTEPs are identified by IP addresses, not VNIs."

Option D (TRUE): VXLAN enables L2 extension over IP underlays.

Extract from Nokia Data Center Design Guide:

"VXLAN encapsulation provides Layer 2 connectivity between workloads (e.g., VMs, containers) across a routed underlay network."

Comprehensive and Detailed Explanation From Exact Extract:

Option A: TRUE – "duplicate" status confirms multiple interfaces.

"A 'duplicate' entry indicates the MAC was detected on multiple ports."

— SR Linux Bridge Table Guide, "Duplicate MAC Handling"

Option B: FALSE – No re-learning rate data is present. The output shows a static duplicate entry, not rate violations.

"MAC re-learning rate thresholds generate specific alerts (not shown here). This exhibit only shows a persistent duplicate state."

— SR Linux Monitoring Guide, "MAC Mobility Events"

Option C: TRUE – The MAC is explicitly bound to ethernet-1/10.0.

"The 'Destination' column specifies the interface where the MAC was last observed."

— SR Linux CLI Reference, "show bridge-table"

Option D: TRUE – Duplicate detection is active since duplicates are flagged.

"The presence of 'duplicate' entries confirms MAC duplication detection is enabled."

— SR Linux Security Guide, "MAC Duplication"

Conclusion: Option B is unsupported by the exhibit.