H13-531: HCIE-Cloud Computing V3.0 (Write)Demo

By Huawei · Question Mode

QuestionQ49

HUAWEI CLOUD Stack Security Service Instruction

In HUAWEI CLOUD Stack, which of the following statements are correct about traffic between one VM and another?

Choose two
  • A The compute node where the first VM is deployed determines whether the traffic is transmitted across VPCs. If yes, the traffic is encapsulated into VXLAN packets and then forwarded to vRouter.
  • B If the two VMs are in different subnets, the traffic must be encapsulated into VXLAN packets.
  • C When the traffic passes through the qbr bridge, security groups filter the traffic and forward traffic that is allowed by the security group rules.
  • D The compute node where the first VM is deployed encapsulates the traffic into VXLAN packets and sends the traffic to vRouter. vRouter checks whether the two subnets where the two VMs are deployed are in the same VPC. If yes, vRouter directly forwards the traffic. If no, vRouter forwards or discards the traffic based on whether VPC Peering is available.
Explanation

Security-group rules are enforced as traffic traverses the qbr bridge, allowing only traffic permitted by those rules. vRouter connects subnets and acts as their gateway; it can forward traffic directly within a VPC, while communication between VPCs requires an available VPC peering connection and appropriate routing. VXLAN encapsulation is associated with the overlay forwarding path, not simply with the fact that two VMs are in different subnets.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!