In a typical three-node OpenStack deployment, which two components are part of the controller node? (Choose two )

The Neutron Layer 3 agent (l3-agent), which manages virtual routers and floating IP address translation, runs on the dedicated network node, not the controller node.

The Neutron DHCP agent, which allocates IP addresses to tenant VMs via DHCP, also runs on the network node, not the controller node.

The Identity service (Keystone) resides on the controller node because it provides centralized authentication and service catalog functionality for every other OpenStack component, and all services must be able to reach it to validate tokens and discover endpoints.

The Neutron Layer 2 agent (such as the Open vSwitch agent) runs on compute nodes where it manages virtual switching and network connectivity at the hypervisor level for each hosted VM.

The Neutron server (API server with its plugins) runs on the controller node to expose the networking API, process requests, and communicate with agents via the message queue - while the actual network operations are performed by agents running on the network or compute nodes.