Vendor: Juniper. Exam Code: JN Exam Name: Enterprise Routing and Switching, Professional (JNCIP-ENT) Version: Demo

Transcription

1 Vendor: Juniper Exam Code: JN0-643 Exam Name: Enterprise Routing and Switching, Professional (JNCIP-ENT) Version: Demo

2 QUESTION 1 Which connection method do OSPF routers use to communicate with each other? A. IP protocol number 89 B. TCP port 179 C. UDP port 179 D. IP protocol number 6 Correct Answer: C /Reference: QUESTION 2 Which statement is true about default BGP route redistribution behavior? A. IBGP-learned routes are advertised only to other IBGP peers. B. EBGP-learned routes are redistributed into any IGPs. C. EBGP-learned routes are advertised only to other EBGP peers. D. EBGP-learned routes are advertised to other IBGP and EBGP peers. Correct Answer: B /Reference: QUESTION 3 In a PIM-SM network, which type of node helps to build a tree towards an unknown multicast source? A. DIS B. RP C. DR D. BSR Correct Answer: A /Reference: QUESTION 4 Which statement is true about MVRP? A. It allows you to split a broadcast domain into multiple isolated broadcast subdomains. B. It dynamically manages VLAN registration in a LAN. C. It maps multiple independent spanning-tree instances onto one physical topology. D. It is a Layer 2 protocol that facilitates network and neighbor discovery. Correct Answer: A /Reference: QUESTION 5

3 Which statement is true about LLDP? A. It allows you to split a broadcast domain into multiple isolated broadcast subdomains. B. It dynamically manages VLAN registration in a LAN. C. It maintains a separate spanning-tree instance for each VLAN. D. It is a Layer 2 protocol that facilitates network and neighbor discovery. Correct Answer: D /Reference: QUESTION 6 Which CoS feature avoids congestion in a device by limiting traffic on ingress interfaces? A. rewrite rule B. scheduler C. drop profile D. policer Correct Answer: A /Reference: QUESTION 7 -- Exhibit Which statement is true about the IPv6 network shown in the exhibit? A. OSPFv2 must be configured to route IPv4 prefixes. B. Areas 1 and 2 cannot be a stub or NSSA. C. OSPFv3 can use MD5 authentication. D. OSPFv3 can route IPv4 prefixes. Correct Answer: D

4 /Reference: QUESTION 8 -- Exhibit Referring to the exhibit, what is the shortest path from R6 to R5? A. R6, R4, R2, R1, R3, R5 B. R6, R4, R2, R3, R5 C. R6, R4, R5 D. R6, R5 Correct Answer: D /Reference: QUESTION 9 R1 and R2 are ASBRs in the same area, each with an equal cost external path to the same external network prefix. R1 advertises an external route into OSPF with a Type 1 metric. R2 advertises an external route into OSPF with a Type 2 metric. Which route would be preferred? A. R1's route is preferred because Type 1 metrics take into account the external cost only. B. R1's route is preferred because Type 1 metrics take into account the internal and external cost. C. R2's route is preferred because Type 2 metrics take into account the internal and external cost. D. R2's route is preferred because Type 2 metrics take into account the external cost only. Correct Answer: D /Reference:

5 QUESTION Exhibit Referring to the exhibit, which LSA type will Router R2 inject into Area 1? A. Type 3 LSA B. Type 4 LSA C. Type 5 LSA D. Type 7 LSA Correct Answer: A /Reference: QUESTION 11 [edit protocols ospf] user@r2# show area { nssa { default-lsa default-metric 10; area-range /24; interface ge-1/1/4; [edit protocols ospf] user@r2# show ospf database OSPF database, Area Type ID Adv Rtr Seq Age Opt Cksum Len Router * x x22 0x87c2 60 Router x x22 0x94b5 60 Summary * x x22 0xe2e4 28 Summary * x x22 0xbda7 28 OSPF database, Area

6 Type ID Adv Rtr Seq Age Opt Cksum Len Router x x20 0x76db 60 Router * x x20 0x319b 48 Summary * x x20 0xf5d3 28 Summary * x x20 0xc5a0 28 Summary * x x20 0xc79d 28 NSSA * x x20 0xcbf1 36 NSSA x x28 0xb93f 36 OSPF AS SCOPE link state database Type ID Adv Rtr Seq Age Opt Cksum Len Extern * x x22 0x28d6 36 Referring to the exhibit, which two statements are correct? (Choose two.) A. R2 injects a Type 3 LSA for /24 into the backbone. B. R2 is an ABR. C. R2 injects a Type 5 LSA for /24 into the backbone. D. R2 is an ASBR. Correct Answer: BC /Reference: QUESTION Exhibit Referring to the exhibit, which type of LSA will be seen on router A for routes originating in Customer A's network? A. Type 7 LSA B. Type 2 LSA C. Type 5 LSA D. Type 1 LSA Correct Answer: C /Reference:

7 QUESTION 13 Which statement is true regarding OSPF multi-area adjacencies? A. A type 3 (stub) link is advertised for a multi-area adjacency. B. Configuring a multi-area adjacency allows the corresponding link to be considered an interarea link, so it will be less preferred over an intra-area link. C. One logical interface will be a primary link, and the other configured as a secondary link; the secondary link will be established as an unnumbered point-to-point interface. D. A DR and a BDR will be elected over the secondary interface, because it is not point-to-point. Correct Answer: C /Reference: QUESTION Exhibit Referring to the exhibit, which two statements are correct? (Choose two.) A. Traffic destined for R2 will be blackholed. B. Transit traffic will follow the R1-R2-R4 path. C. Traffic destined for R2 will reach R2. D. Transit traffic will follow the R1-R3-R4 path. Correct Answer: CD /Reference: QUESTION 15 Which statement is true about using an OSPF import policy? A. Import policies are not allowed in OSPF, applying the policy will do nothing.

8 B. Applying an import policy to OSPF may block normal LSA flooding. C. Import policies are allowed only for external route types. D. Applying this policy will cause a commit failure. Correct Answer: C /Reference: QUESTION 16 Which statement is true regarding the SPF algorithm? A. The SPF algorithm is run on a per-domain basis. B. If you apply an import policy to OSPF, it keeps LSAs from being flooded, and the SPF calculation can be affected. C. There are two databases used in the calculation, the link-state database and the tree database. D. The SPF calculation is run on a per-area basis on each router. Correct Answer: D /Reference: QUESTION 17 You are asked to configure graceful restart in your network. Which OSPF LSA type would you expect to see in the LSDB? A. Type 8 B. Type 9 C. Type 10 D. Type 11 Correct Answer: B /Reference: QUESTION Exhibit

9 Referring to the exhibit, which answer is correct? A. R2 is the DR and R1 is the BDR. B. R4 is the DR and R2 is the BDR.

10 C. R2 is the DR and R3 is the BDR. D. R3 is the DR and R2 is the BDR. Correct Answer: C /Reference: QUESTION 19 user@router> show ospf database network extensive OSPF link state database, area Type ID Adv Rtr Seq Age Opt Cksum Len Network x x2 0x 32 mask attached router attached router Aging timer 00:46:27 Installed 00:13:32 ago, expires in 00:46:27, sent 1w5d 01:07:09 ago Referring to the exhibit, which statement is true regarding the OSPF network LSA? A. The ID field value shows the router ID of the advertising router. B. The ID field is the local interface IP address from which the LSA will be advertised. C. The options field indicates this is a Type 2 LSA. D. The output shows that is the designated router. Correct Answer: D /Reference: QUESTION 20 user@router> show log ospf Sep 19 00:22: OSPF packet ignored. MTU mismatch from on intf ge-0/0/2.0 area Sep 19 00:22: OSPF periodic xmit from to (IFL 75 area ) Sep 19 00:22: OSPF periodic xmit from to (IFL 84 area ) Sep 19 00:22: OSPF packet ignored. no matching interface from , IFL 85 Sep 19 00:22: OSPF packet ignored. MTU mismatch from on intf ge-0/0/2.0 area Sep 19 00:22: OSPF packet ignored. subnet mismatch from on intf ge-0/0/1.0 area Sep 19 00:22: OSPF rcvd Hello > (ge-0/0/1.0 IFL 75 area ) Sep 19 00:22: Version 2, length 44, ID , area Sep 19 00:22: checksum 0x0, authtype 0 Sep 19 00:22: mask , hello_ivl 10, opts 0x12, prio 128 Sep 19 00:22: dead_ivl 40, DR , BDR Sep 19 00:22: OSPF packet ignored. MTU mismatch from on intf ge-0/0/2.0 area Sep 19 00:22: OSPF packet ignored. area mismatch ( ) from on intf ge- 0/0/4.0 area Sep 19 00:22: OSPF rcvd Hello > (ge-0/0/4.0 IFL 84 area ) Sep 19 00:22: Version 2, length 44, ID , area Sep 19 00:22: checksum 0xd51e, authtype 0 Sep 19 00:22: mask , hello_ivl 10, opts 0x12, prio 128 Sep 19 00:22:

11 dead_ivl 40, DR , BDR Sep 19 00:22: OSPF packet ignored. no matching interface from , IFL 85 Sep 19 00:22: OSPF hello from (IFL 83, area ) absorbed Sep 19 00:22: OSPF periodic xmit from to (IFL 84 area ) Sep 19 00:22: OSPF packet ignored. no matching interface from , IFL 85 Sep 19 00:22: OSPF periodic xmit from to (IFL 83 area ) Sep 19 00:22: OSPF periodic xmit from to (IFL 75 area ) Sep 19 00:22: OSPF packet ignored. MTU mismatch from on intf ge-0/0/2.0 area Sep 19 00:22: OSPF hello from (IFL 83, area ) absorbed Sep 19 00:22: OSPF packet ignored. MTU mismatch from on intf ge-0/0/2.0 area Sep 19 00:22: OSPF packet ignored. subnet mismatch from on intf ge-0/0/1.0 area Sep 19 00:22: OSPF rcvd Hello > (ge-0/0/1.0 IFL 75 area ) Sep 19 00:22: Version 2, length 44, ID , area Sep 19 00:22: checksum 0x0, authtype 0 Sep 19 00:22: mask , hello_ivl 10, opts 0x12, prio 128 Sep 19 00:22: dead_ivl 40, DR , BDR Referring to the exhibit, what is preventing the OSPF adjacency on interface ge-0/0/4 from forming? A. area mismatch B. subnet mismatch C. MTU mismatch D. authentication mismatch Correct Answer: A /Reference: QUESTION 21 [edit protocols ospf] user@r2# show area { stub default-metric 10 no-summaries; interface ge-0/1/1.0; Referring to the output in the exhibit, which statement is true? A. R2 is an ABR and will send a Type 7 LSA 0/0 route down into the nonbackbone area. B. R2 is an ABR and will send a Type 3 LSA 0/0 route down into the nonbackbone area. C. R2 will not send a Type 3 LSA 0/0 route into the nonbackbone area. D. R2 will add a metric cost of 10 to the existing metric of a 0/0 route it receives from the backbone area and then send it into the nonbackbone area in a Type 5 LSA. Correct Answer: B /Reference: QUESTION 22 user@router> show ospf route Topology default Route Table:

12 Prefix Path Route NH Metric NextHop Nexthop Type Type Type Interface Address/LSP /24 Intra Network IP 10 ge-0/0/1.0 Which two configurations result in the output shown in the exhibit? (Choose two.) A. [edit protocols ospf] show reference-bandwidth 10g; area { interface ge-0/0/1.0; B. [edit protocols ospf] user@router# show reference-bandwidth 1g; area { interface ge-0/0/1.0; C. [edit protocols ospf] user@router# show reference-bandwidth 1m; area { interface ge-0/0/1.0 { metric 10; D. [edit protocols ospf] user@router# show reference-bandwidth 100m; area { interface ge-0/0/1.0; Correct Answer: AC /Reference: QUESTION Exhibit

13 Referring to the exhibit, you are asked to prevent the /24 route from entering the backbone. Which configuration statements would accomplish the task? A. On router R1, issue the set protocols ospf area 3 nssa area-range /24 restrict command. B. On router R3, issue the set protocols ospf area 0 area-range /24 restrict command. C. On router R3, issue the set protocols ospf area 3 area-range /24 restrict command. D. On router R3, issue the set protocols ospf area 3 nssa area-range /24 restrict command. Correct Answer: D /Reference: QUESTION Exhibit

14 You are asked to connect Area 2 to the backbone. Which configuration would be required on R3? A. [edit protocols ospf3] user@r3# show area { virtual-link neighbor-id transit-area ; interface ge-0/0/5.0; B. [edit protocols ospf] user@r3# show area { virtual-link neighbor-id transit-area ; interface ge-0/0/5.0 { interface-type p2p; C. [edit protocols ospf3] user@r3# show area { virtual-link neighbor-id transit-area ; interface ge-0/0/5.0; D. [edit protocols ospf3] user@r3# show area { virtual-link neighbor-id transit-area ; interface ge-0/0/5.0; Correct Answer: C /Reference: QUESTION 25

15 [edit protocols ospf] show area { nssa { default-lsa { default-metric 10; metric-type 2; type-7; no-summaries; interface so-0/1/1.0; Referring to the exhibit, which statement is true? A. The ABR will generate a Type 3 summary default route into the NSSA. B. The ASBR will generate a Type 7 default route into the NSSA. C. The type-7 parameter allows interoperability with newer versions of the Junos OS. D. The only LSA types allowed into the area are Type 1, Type 2, Type 3, and Type 7. Correct Answer: B /Reference: QUESTION Exhibit

16 Referring to the exhibit, you are asked to verify certain routing information within your OSPFv3 routing domain. You must review the prefixes learned from R3. Which two LSA types from the output shown in the exhibit must be reviewed? (Choose two.) A. the Router LSAs from RID B. the Extern LSAs from RID C. the InterArPfx LSAs from RID D. the Network LSAs from RID Correct Answer: BC /Reference: QUESTION Exhibit

17 ISP-A is advertising the /24 route to R1. R1 is advertising this BGP route to R2 but the route is hidden on R2. Referring to the exhibit, which statement is correct about the /24 route? A. The route is unusable because the next hop is not reachable from R2. B. The route is unusable because it has not been verified. C. The route is hidden because R1 is changing the next hop to D. The route is hidden because R2 has a more preferred route. Correct Answer: A /Reference: QUESTION 28 user@router> show route protocol bgp detail inet6.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden) 4444:4444::/32 (1 entry, 1 announced) *BGP PreferencE. 170/-101 Next hop type. Router, Next hop index: Address: 0x934c688 Next-hop reference count: 2 SourcE Next hop: :: via ge-0/0/1.0, selected StatE. Local AS: 3 Peer AS: 701 AgE. 3:22 Task: BGP_ Announcement bits (1): 0-KRT

18 AS path: I Aggregator: Accepted LocalpreF. 100 Router ID Referring to the exhibit, which two statements are true? (Choose two.) A. The IPv6 route was learned from an IPv6 BGP neighbor. B. The IPv6 route was learned from an IPv4 BGP neighbor. C. The IPv6 destination will use IPv4 as the next hop. D. The IPv6 destination will use IPv6 as the next hop. Correct Answer: BD /Reference: QUESTION 29 user@router# run show route receive-protocol bgp detail inet.0: 18 destinations, 20 routes (18 active, 0 holddown, 0 hidden) * /24 (1 entry, 1 announced) Accepted Nexthop: LocalpreF. 100 AS path: I * /24 (1 entry, 1 announced) Accepted Nexthop: LocalpreF. 100 AS path: I * /24 (1 entry, 1 announced) Accepted Nexthop: LocalpreF. 100 AS path: I * /24 (1 entry, 1 announced) Accepted Nexthop: LocalpreF. 100 AS path: I Referring to the exhibit, which AS path regular expression will match only the /24 and /24 routes? A..* ( ).* B..+ ( ).* C..( ).* D.. ( ).*

19 Correct Answer: C /Reference: QUESTION 30 Referring to the exhibit, you must ensure that traffic to the 2001:10:5::/64 network leaves AS 2 through R3. Given that all BGP attributes are at their default, how would you accomplish this task? A. On R1, configure a MED of 50 for the 2001:10:5::/64 route. B. On R2, configure a MED of 50 for the 2001:10:5::/64 route. C. On R3, configure a MED of 50 for the 2001:10:5::/64 route. D. On R4, configure a MED of 50 for the 2001:10:5::/64 route. Correct Answer: B /Reference: QUESTION Exhibit

20 On AS1, which two attributes are used to influence inbound traffic from the other ASs shown in the exhibit? (Choose two.) A. AS path B. MED C. local preference D. origin Correct Answer: AD /Reference: QUESTION Exhibit

21 Referring to the exhibit, R2 is sending a route to R1 with a community value. Which statement is correct? A. Routes will be accepted without change in the attributes. B. All routes will be rejected. C. Routes will be accepted with the community value removed. D. Routes will be rejected with the community value removed. Correct Answer: C /Reference: QUESTION 33 Which set of BGP attributes is preferred by the Junos OS? A. MED. 100 AS path: Local preference. 50 Origin: I B. MED. 50 AS path: Local preference. 1 Origin: E C. MED. 100 AS path: Local preference. 50 Origin: I D. MED. 50 AS path: Local preference. 50 Origin: E Correct Answer: A

22 /Reference: QUESTION Exhibit Referring to the exhibit and based on the output below from Sw-1 and Sw-2, which statement is true? Sw-1> show spanning-tree mstp configuration MSTP information Context identifier : 0 Region name : juniper Revision : 1 Configuration digest : 0x9357ebb7a8d74dd5fef4f2bab50531aa MSTI Member VLANs 0 0-9,11-19, Sw-2# run show spanning-tree mstp configuration MSTP information Context identifier : 0 Region name : juniper Revision : 1 Configuration digest : 0x387b5f2ea2394b14e091f0921ee7b9a8 MSTI Member VLANs 0 0-9,11-14,16-19, , A. There will be only one MSTI 2 root bridge. B. There will be only one CST root bridge. C. Sw-1 and Sw-2 are in different MSTP regions. D. There will be only one CIST root bridge. Correct Answer: C /Reference: QUESTION Exhibit

23 R4 receives BGP prefixes for AS 50 from both R2 and R3. You want to ensure that R4 chooses R3 as the preferred path to reach /24. Referring to the information shown in the exhibit, where would you apply a policy containing the parameter local-preference 110 to accomplish this task? A. on R3, as import from R1 B. on R3, as export towards R4 C. on R2, as import from R1 D. on R2, as export towards R4 Correct Answer: D /Reference: QUESTION 36 You want to provide reachability to your data center by advertising its subnet throughout your upstream peer AS. However, you do not want this prefix advertised any further. Which BGP community value would be used to meet this requirement? A. no-advertise B. no-export C. no-export-subconfed D Correct Answer: B /Reference: QUESTION Exhibit

24 Referring to the exhibit, you want router A to have an EBGP peering with router C. They are both connected through router B, which does not have BGP running, and has static routes configured. What must be configured in the EBGP peer groups on routers A and C to make this connection possible? A. MED B. multihop C. multipath D. next-hop Correct Answer: B /Reference: QUESTION Exhibit

25 Referring to the exhibit, your AS is connected to ISP-A and ISP-B using BGP. R1 and R2 are advertising your AS's /16 prefix upstream to both ISPs, and both ISPs are providing a full BGP route table. You want to influence traffic flow so that traffic towards your network enters through R1. Which action would meet the requirement? Apply the following as an export policy towards ISP-B: A. [edit policy-options] user@r2# show policy-statement prefer-for-inbound { term prepend { then { as-path-prepend " "; accept; Apply the following as an export policy towards ISP-A: B. [edit policy-options] user@r1# show policy-statement prefer-for-inbound { term prepend { then { as-path-prepend " "; accept; Apply the following as an export policy towards R1 and R3: C. [edit policy-options] user@r2# show policy-statement prefer-for-inbound { term local-pref { then { local-preference 110; accept; Apply the following as an export policy towards R2 and R3: D. [edit policy-options] user@r1# show policy-statement prefer-for-inbound { term local-pref { then { local-preference 110; accept; Correct Answer: A /Reference: QUESTION Exhibit

26 R1 is connected to both R2 and R3 and you want to load-balance outbound traffic. You have provided the configuration shown in the exhibit; however, after checking the links you notice that the traffic is not loadbalancing. Which configuration must be added? A. set protocols bgp group external multihop B. set protocols bgp group external multipath C. set protocols bgp group external advertise-external D. set policy-options policy-statement loadbal then accept Correct Answer: B /Reference: QUESTION 40 [edit policy-options] user@router# show policy-statement LB { term 1 { then { load-balance per-packet;

27 Two routers are joined by redundant BGP connections. You want to load-balance traffic across these links, and have configured the policy shown in the exhibit on each device. Which configuration, applied on each device, correctly applies the policy to accomplish this task? A. [edit protocols bgp group LB] show type external; import LB; peer-as <peer_as>; neighbor <neighbor>; B. [edit protocols bgp group LB] show type external; export LB; peer-as <peer_as>; neighbor <neighbor>; C. [edit] show routing-options aggregate { route /0 policy LB; D. [edit] user@router# show routing-options forwarding-table { export LB; Correct Answer: D /Reference: QUESTION 41 You are asked to create a BGP routing policy that will delete all communities and reject routes with the community 64321:1234. Which policy will accomplish this task? A. user@router# show policy-options policy-statement filter-on-community { term remove-as65001 { from community AS65001-community; then { community delete AS65001-community; term nothing-with-1234 { from community AS64321-community; then reject; community AS64321-community members 64321:1234; community AS65001-community members 65001:1001;

28 B. show policy-options policy-statement filter-on-community { term remove-all-communities { then { community delete all-communities; term nothing-with-1234 { from community AS64321-community; then reject; community AS64321-community members 64321:1234; community all-communities members *:*; C. user@router#show policy-options policy-statement filter-on-community { term nothing-with-1234 { from community AS64321-community; then reject; term remove-all-communities { then { community delete all-communities; community all-communities members *:*; community AS64321-community members 64321:1234; D. user@router#show policy-options policy-statement filter-on-community { term nothing-with-1234 { from community AS64321-community; then reject; term remove-as65001 { from community AS65001-community; then { community delete AS65001-community; community AS64321-community members 64321:1234; community AS65001-community members 65001:1001; Correct Answer: C /Reference: QUESTION 42 user@router>show route advertising-protocol bgp inet.0: 31 destinations, 31 routes (31 active, 0 holddown, 0 hidden) Prefix Nexthop MED Lclpref ASpath * /24 Self I * /24 Self I Referring to the exhibit, which three actions would summarize these routes to a BGP peer? (Choose three.)

29 A. Create a policy that accepts the more specific contributing routes. B. Create a route to /21 with a next hop of under the [edit routing- options static] hierarchy. C. Create a policy that rejects the more specific contributing routes. D. Create a policy to accept aggregate routes. E. Create a /22 route under the [edit routing-options aggregate] hierarchy. Correct Answer: CDE /Reference: QUESTION Exhibit AS4 is using the default path to get to AS1. This path is not modified by any of the ASs shown in the exhibit. AS1 wants to influence this path so that traffic from AS4 comes through AS3. Where do you apply the policy shown in the exhibit? A. AS1 B. AS2 C. AS3

30 D. AS4 Correct Answer: A /Reference: QUESTION Exhibit You are the administrator for the network shown in the exhibit. R1 receives the /24 route from routers R2, R3, and R4. Local preference values have not been modified in this network. You are asked to ensure that R1 prefers the path through AS 3149 for traffic destined to /24. Which two methods will accomplish this task? (Choose two.) A. Configure a lower local preference on R3. B. Configure as-path-prepend on R2 and R4. C. Configure local-as on R3. D. Configure always-compare-med on R1. Correct Answer: BD /Reference: QUESTION 45 user@r1> show pim join extensive InstancE. PIM.master Family: INET R = Rendezvous Point Tree, S = Sparse, W = Wildcard

31 Group: SourcE. * RP: Flags: sparse,rptree,wildcard Upstream interface. ge-0/0/10.0 Upstream neighbor: Upstream state. Join to RP UptimE. 00:00:10 Downstream neighbors: InterfacE. ge-0/0/ StatE. Join Flags: SRW Timeout: 209 Group: SourcE Flags: sparse,spt Upstream interface. ge-0/0/6.0 Upstream neighbor: Upstream state. Join to Source, Prune to RP UptimE. 00:00:10 Keepalive timeout: 276 Downstream neighbors: InterfacE. ge-0/0/ StatE. Join Flags: S Timeout: 209 Referring to the output shown in the exhibit, which three statements are true about the PIM implementation on R1? (Choose three.) A. R1 is receiving multicast traffic over the RPT. B. R1 is receiving multicast traffic over the SPT. C. Interface ge-0/0/10 provides the shortest path to the source. D. The multicast stream flows from to E. Interface ge-0/0/6 provides the shortest path to the source. Correct Answer: BDE /Reference: QUESTION Exhibit

32 Referring to the exhibit, the RPT from R3 towards R2 is established. What happens if the multicast source connected to R1 starts sending multicast traffic towards R1? A. R1 encapsulates the multicast packets into a PIM register multicast packet. B. R1 encapsulates the multicast packets into PIM join unicast messages. C. R1 forwards the multicast packets on the (S,G) tree towards the RP. D. R1 tunnels the multicast packets in PIM register messages towards the RP. Correct Answer: D /Reference: QUESTION 47 Which two statements are true about the configuration shown below? (Choose two.) [edit routing-options multicast] user@router# show ssm-groups /24; asm-override-ssm; A. It allows SSM operations in only the /24 range. B. It allows SSM operations in the /24 range and the dedicated range. C. It allows only ASM operations in the dedicated SSM range. D. It allows both ASM and SSM operations in the dedicated SSM range. Correct Answer: BD /Reference: QUESTION 48

33 Which two statements are true about MSDP mesh groups? (Choose two.) A. The MSDP mesh group was originally designed to limit SA flooding. B. SA messages received from a mesh group member flood these messages to all peers that are not members of this mesh group. C. SA messages received from a peer not in any mesh group do not flood to all peers. D. SA messages received from a peer not in any mesh group perform a peer-rpf check and, if successful, flood to all peers (except the advertising router). Correct Answer: AB /Reference: QUESTION Exhibit Referring to the exhibit, the RPs are set up for anycast. Multicast traffic is currently flowing from the source to the receivers. Which statement is true when RP2 goes down? A. Multicast traffic is interrupted for receiver 2 until RP2 recovers. B. Receiver 2 needs to rejoin RP1. C. Multicast traffic flows uninterrupted. D. RP1 starts sending multicast traffic to receiver 2. Correct Answer: C /Reference: QUESTION Exhibit

34 Referring to the exhibit, USER1 wants to only receive multicast traffic for group and USER2 wants to only receive multicast traffic for group Both users are connected to an EX Series switch and are receiving unwanted multicast traffic. What will resolve the problem? A. Create IGMP static groups with the exclude parameter. B. Enable the IGMP immediate-leave parameter. C. Use PIM sparse mode instead of PIM dense mode. D. Enable IGMP snooping. Correct Answer: D /Reference: QUESTION 51 Which multicast group is used for all PIM routers? A B C D Correct Answer: B /Reference: QUESTION 52 You are configuring PIM-SM for your network, and want to use a statically configured RP. What are two ways to accomplish this task? (Choose two.) A. [edit protocols pim] uesr@router# show rp { static { address ; interface ge-0/0/0.0 {

35 mode sparse; interface ge-0/0/5.0 { mode sparse; interface lo0.0 { mode sparse; B. [edit protocols pim] user@router# show rp { local { address ; interface ge-0/0/0.0; interface ge-0/0/5.0; interface lo0.0; C. [edit protocols pim] user@router# show rp { static { address { group-ranges { /4; interface all { mode sparse; D. [edit protocols pim] user@router# show rp { local { address ; group-ranges { /8; interface ge-0/0/0.0 { version 1; interface ge-0/0/5.0 { version 1; interface lo0.0 { version 1; Correct Answer: BD /Reference: QUESTION Exhibit

36 Your company has PIM running on some critical routers in your network, but another engineer has requested that you configure a PIM policy to prevent R2 from becoming a PIM neighbor of R1 by dropping the hello packets. Referring to the exhibit, which three commands are necessary for preventing R2 from becoming a PIM neighbor of R1? (Choose three.) A. set protocols pim interface ge-0/0/1.0 neighbor-policy block-pim B. set policy-options policy-statement block-pim term 1 from route-filter /32 exact C. set policy-options policy-statement block-pim term 1 from route-filter /32 exact D. set policy-options policy-statement block-pim term 1 then reject E. set policy-options policy-statement block-pim term 1 from route-filter /32 exact Correct Answer: ACD /Reference: QUESTION 54 Your company asks you to configure multicast routing on a Junos device. They tell you that the router at IP address is the root of the shared multicast delivery tree. Which command allows you to configure the Junos device as a non-rp router for PIM? A. set protocols pim rp local family inet disable B. set protocols pim rp local address C. set protocols pim rp static address D. set protocols pim rp auto-rp announce Correct Answer: C /Reference: QUESTION Exhibit

37 Referring to the configuration shown in the exhibit, which statement is true? A. RP2 stops sending all SA messages to its peer. B. RP1 stops sending all SA messages to its peer. C. RP2 stops sending SA messages for the group from source to RP1. D. RP1 stops sending SA messages for the group from source to RP2. Correct Answer: C /Reference: QUESTION 56 When enabling MVRP for dynamic VLAN registration, which three timers would be configured on an interface? (Choose three.) A. hello-interval B. join-timer C. leave-timer D. max-age E. leaveall-timer Correct Answer: BCE /Reference:

38 QUESTION 57 Which two statements are correct about L2PT? (Choose two.) A. L2PT requires 802.1Q tunneling enablement to effectively tunnel L2 protocols. B Q tunnels all L2 protocols by default. C. L2PT encapsulates L2 PDUs by enabling the ingress switch to rewrite the PDUs' source MAC addresses before forwarding them onto the service provider network. D. You cannot enable L2PT and VLAN translation on the same VLAN. Correct Answer: AD /Reference: QUESTION Exhibit Referring to the exhibit, a customer noticed that the 802.1Q-tunneled packets received on SwitchB are being dropped. What is causing this problem? A. There is an ether-type mismatch on SwitchA and SwitchB.

39 B. Customer VLANs are not configured on SwitchB. C. The SwitchB interface connecting to SwitchA is not a trunk port. D. Customer VLANs are mismatched on both switches. Correct Answer: A /Reference: QUESTION 59 You are a service provider and have multiple customers in a building. You are installing a new switch that can host all of your customers. However, you would like to ensure that one customer cannot see or broadcast to another customer. You would also like to have them use a common gateway IP address from the building. What should be used to provide this access? A. VLAN B. private VLAN C. filter-based VLAN D. Layer 2 tunneling Correct Answer: B /Reference: QUESTION 60 What are three types of PVLAN broadcast domains? (Choose three.) A. primary VLAN B. dynamic VLAN C. isolated VLAN D. community VLAN E. S-VLAN Correct Answer: ACD /Reference: QUESTION 61 Two PCs are attached to a hub, which is attached to port ge-0/0/0 on your EX Series switch. You must separate the incoming traffic from the PCs into two VLANs. What should you use to accomplish this task? A. dynamic VLAN registration with MVRP B. private VLAN C. filter-based VLAN D. guest VLAN Correct Answer: C /Reference:

40 QUESTION 62 Mar 16 17:54: OSPF periodic xmit from to (IFL 69 area ) Mar 16 17:54: ospf_trigger_build_telink_lsas : No peer found Mar 16 17:54: ospf_trigger_build_telink_lsas : No peer found Mar 16 17:54: ospf_set_lsdb_state. Router LSA adv-rtr state QUIET->GEN_PENDING Mar 16 17:54: OSPF trigger router LSA 0x156d0f0 build for area lsa-id Mar 16 17:54: ospf_set_lsdb_state. Router LSA adv-rtr state GEN_PENDING->QUIET Mar 16 17:54: OSPF built router LSA, area , link count 2 Mar 16 17:54: OSPF sent Hello > (ge-0/0/1.0 IFL 69 area ) Mar 16 17:54: Version 2, length 44, ID , area Mar 16 17:54: mask , hello_ivl 10, opts 0x2, prio 128 Mar 16 17:54: dead_ivl 40, DR , BDR Mar 16 17:54: OSPF DR is , BDR is Mar 16 17:54: OSPF sent Hello > (ge-0/0/1.0 IFL 69 area ) Mar 16 17:54: Version 2, length 44, ID , area Mar 16 17:54: mask , hello_ivl 10, opts 0x2, prio 128 Mar 16 17:54: dead_ivl 40, DR , BDR Mar 16 17:54: OSPF DR is , BDR is Mar 16 17:54: OSPF rcvd Hello > (ge-0/0/1.0 IFL 69 area ) Mar 16 17:54: Version 2, length 44, ID , area Mar 16 17:54: checksum 0x0, authtype 0 Mar 16 17:54: mask , hello_ivl 10, opts 0x2, prio 128 Mar 16 17:54: dead_ivl 40, DR , BDR Looking at the traceoptions output in the exhibit, why are the OSPF routers stuck in Init state? A. There is an MTU mismatch. B. There are duplicate router IDs. C. The routers are in different areas. D. No BDR has been elected. Correct Answer: B /Reference: QUESTION 63 {master:0[edit] user@switch# show vlans v1 { vlan-id 1; interface { ge-0/0/1.0; v2 { vlan-id 2; interface { ge-0/0/2.0; v3 { vlan-id 3; interface { ge-0/0/1.0 {

41 {master:0[edit] show interfaces ge-0/0/3 unit 0 { family ethernet-switching { port-mode trunk; {master:0[edit] user@switch# run show vlans Name Tag Interfaces default None v1 1 ge-0/0/1.0*, ge-0/0/3.0* v2 2 ge-0/0/2.0*, ge-0/0/3.0* v3 3 ge-0/0/1.0*, ge-0/0/3.0* Referring to the exhibit, what would explain interface ge-0/0/3.0 being active in VLANs v1, v2, and v3? A. You have enabled RSTP for interface ge-0/0/3.0. B. You have enabled MVRP for interface ge-0/0/3.0. C. You have enabled MSTP for interface ge-0/0/3.0. D. You have enabled L2PT for interface ge-0/0/3.0. Correct Answer: B /Reference: QUESTION 64 You are asked to implement a filter-based VLAN assignment. You have created the firewall filter and must apply this filter to the incoming interface. Where must this filter be applied? A. to the access interface configuration B. to the interface under the primary VLAN assignment C. to the interface under the secondary VLAN assignment D. to the trunk interface configuration Correct Answer: A /Reference: QUESTION 65 {master:0[edit] user@switch# show vlans v200 { vlan-id 200; interface {

42 ge-0/0/7.0; ge-0/0/8.0; dot1q-tunneling { customer-vlans [ ]; layer2-protocol-tunneling { all { drop-threshold 800; shutdown-threshold 700; Referring to the exhibit, you are attempting to configure L2PT for VLAN v200 but the configuration will not commit. Which three configuration statements would resolve the problem? (Choose three.) A. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all drop-threshold 600 B. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all shutdown-threshold 600 C. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all shutdown-threshold 900 D. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all drop-threshold 700 E. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all drop-threshold 900 Correct Answer: ACD /Reference: QUESTION Exhibit Referring to the exhibit, you are asked to ensure that CE1 can communicate with CE2 using VLAN 150. Which configuration meets this requirement on S1? A. user@s1# show customer-a { vlan-id 200;

43 dot1q-tunneling { customer-vlans 150; {master:0[edit vlans] B. user@s1# show customer-a { vlan-id 150; interface { ge-0/0/0.0; ge-0/0/1.0; dot1q-tunneling { customer-vlans 200; {master:0[edit vlans] C. user@s1# show customer-a { vlan-id 200; interface { ge-0/0/0.0; ge-0/0/1.0; dot1q-tunneling { customer-vlans 150; {master:0[edit vlans] D. user@s1# show customer-a { vlan-id 150; interface { ge-0/0/0.0; v200 { vlan-id 200; interface { ge-0/0/1.0; Correct Answer: C /Reference: QUESTION 67 [edit] user@switch# commit error: Trunk interface <ge-0/0/10.0> can not be member of both dot1q-tunneling enabled vlan <cust-1>, and a non dot1q-tunneled vlan <v11> when dot1q-tunneling ethernet-type is not <0x8100> error: configuration check-out failed When you try to commit your 802.1Q tunneling configuration, you receive the error shown in the exhibit. Which configuration statement will allow the configuration to commit?

44 A. set vlans cust-1 interface ge-0/0/10 egress B. set interfaces ge-0/0/10 ether-options mdi-mode auto C. set vlans v11 dot1q-tunneling customer-vlans native D. set ethernet-switching-options dot1q-tunneling ether-type 0x8100 Correct Answer: D /Reference: QUESTION Exhibit You are asked to separate the human resources group from the finance group on the company network even though they share the same VLAN. You consider using PVLANs, and you delegate the task to a junior engineer who submits the configuration shown in the exhibit to accomplish this task. After review, you realize that the PVLAN implementation will not work correctly. Referring to the exhibit, which three commands must be included to resolve the problem? (Choose three.)

45 A. set vlans pvlan no-local-switching B. set vlans hr-group no-local-switching C. set vlans finance-group no-local-switching D. set vlans hr-group primary-vlan pvlan E. set vlans finance-group primary-vlan pvlan Correct Answer: ADE /Reference: QUESTION Exhibit You have implemented a firewall-based VLAN filter to map traffic from subnet /24 to a VLAN named vlan_40. However, you have not been successful in getting the traffic mapped correctly. In addition, all traffic must be passed to the Layer 2 network. Referring to the exhibit, which three commands are required to accomplish this behavior? (Choose three.)

46 A. set interfaces ge-0/0/19.0 family ethernet-switching filter output assign_vlan B. set interfaces ge-0/0/19.0 family ethernet-switching filter input assign_vlan C. set vlans vlan_40 interface ge-0/0/19.0 mapping policy D. set vlans vlan_30 interface ge-0/0/19.0 mapping policy E. set interfaces ge-0/0/20 unit 0 family ethernet-switching port-mode trunk vlan members all Correct Answer: BCE /Reference: QUESTION 70 [edit protocols vstp] 'vlan all' Cannot configure VSTP on all VLANs when more than 253 VLANs are configured. Configure vstp vlangroup along with STP or RSTP to cover all VLANs [edit protocols] 'vstp' Failed to configure vstp on all vlans error: configuration check-out failed What are two reasons for the commit error shown in the exhibit? (Choose two.) A. The set protocols vstp vlan all configuration is not supported. B. There are more than 253 VLANs configured on the switch. C. MSTP is not configured with VSTP. D. STP or RSTP is not configured along with VSTP on the switch. Correct Answer: BD /Reference: QUESTION Exhibit

47 Referring to the exhibit, which two statements are true regarding the MSTP port role and port state of ge- 0/0/0 and ge-0/0/1 on SW1? A. Port ge-0/0/0 is a root port and ge-0/0/1 is an alternate port. B. Both ports are designated ports. C. Both ports are in a forwarding state. D. Port ge-0/0/0 is a root port and ge-0/0/1 is in a forwarding state. Correct Answer: BC /Reference: QUESTION 72 Which two statements are correct about MSTP? (Choose two.) A. It allows you to preprovision VLAN IDs to spanning tree instances. B. It provides a more scalable solution than VSTP. C. It is not supported when using MVRP. D. It allows you to use VLAN groups to simplify configuration tasks when groups of VLANs use the same parameters. Correct Answer: AB /Reference: QUESTION 73 You are asked to implement MSTP on all devices in your Layer 2 network. Which three parameters must match on all devices within the same region? (Choose three.) A. region name B. hello timer C. maximum age D. revision level E. VLAN mapping table Correct Answer: ADE /Reference: QUESTION 74 You are asked to implement VSTP on all devices in your Layer 2 network. Which three statements are correct? (Choose three.) A. VSTP supports up to 256 different spanning-tree topologies. B. A BPDU is sent for each spanning-tree instance. C. Each VLAN will be assigned to a unique spanning-tree instance.

48 D. MSTP can be used in addition to VSTP to account for VLANs outside of the supported range. E. VSTP can be used to load-balance Layer 2 traffic using VLANs. Correct Answer: BCE /Reference: QUESTION 75 user@switch> show spanning-tree bridge STP bridge parameters Context ID : 0 Enabled protocol : MSTP STP bridge parameters for CIST Root ID : :19:e2:55:1a:01 Root cost : 0 Root port : ge-0/0/10.0 CIST regional root : :19:e2:55:1a:01 CIST internal root cost : Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Hop count : 19 Message age : 0 Number of topology changes : 2 Time since last topology change : seconds Topology change initiator : ge-0/0/10.0 Topology change last recvd. from : 00:19:e2:55:24:8c Local parameters Bridge ID : b0:c6:9a:73:27:90 Extended system ID : 0 Internal instance ID : 0 STP bridge parameters for MSTI 1 MSTI regional root : 4097.b0:c6:9a:73:27:90 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Number of topology changes : 2 Time since last topology change : seconds Topology change initiator : ge-0/0/1.0 Topology change last recvd. from : b0:c6:9a:73:39:81 Local parameters Bridge ID : 4097.b0:c6:9a:73:27:90 Extended system ID : 0 Internal instance ID : 1 STP bridge parameters for MSTI 2 MSTI regional root : 4098.b0:c6:9a:73:39:90 Root cost : Root port : ge-0/0/1.0 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Hop count : 19 Number of topology changes : 2 Time since last topology change : seconds Topology change initiator : ge-0/0/1.0 Topology change last recvd. from : b0:c6:9a:73:39:81 Local parameters Bridge ID : 8194.b0:c6:9a:73:27:90 Extended system ID : 0

49 Internal instance ID : 2 Referring to the exhibit, which two statements are correct about the MSTP configuration? (Choose two.) A. The local switch is not the root bridge for MSTI 1. B. The local switch is the root bridge for MSTI 1. C. The local switch is the root bridge for MSTI 2. D. The local switch is not the root bridge for MSTI 2. Correct Answer: BD /Reference: QUESTION 76 user@switch-1> show spanning-tree bridge STP bridge parameters Context ID : 0 Enabled protocol : MSTP STP bridge parameters for CIST... STP bridge parameters for MSTI 1 MSTI regional root : 4097.b0:c6:9a:73:27:90 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Number of topology changes : 4 Time since last topology change : 42 seconds Topology change initiator : ge-0/0/10.0 Topology change last recvd. from : 00:19:e2:55:24:8c Local parameters Bridge ID : 4097.b0:c6:9a:73:27:90 Extended system ID : 0 Internal instance ID : 1 STP bridge parameters for MSTI 2 MSTI regional root : 8194.b0:c6:9a:73:27:90 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Number of topology changes : 4 Time since last topology change : 42 seconds Topology change initiator : ge-0/0/10.0 Topology change last recvd. from : 00:19:e2:55:24:8c Local parameters Bridge ID : 8194.b0:c6:9a:73:27:90 Extended system ID : 0 Internal instance ID : 2 user@switch-1> show spanning-tree mstp configuration MSTP information Context identifier : 0 Region name : my-mstp-config Revision : 1 Configuration digest : 0x91ee8012e6851d931adae71da MSTI Member VLANs 0 0,

50 user@switch-2> show spanning-tree bridge STP bridge parameters Context ID : 0 Enabled protocol : MSTP STP bridge parameters for CIST... STP bridge parameters for MSTI 1 MSTI regional root : 8193.b0:c6:9a:73:39:90 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Number of topology changes : 3 Time since last topology change : 320 seconds Topology change initiator : ge-0/0/9.0 Topology change last recvd. from : b0:c6:9a:73:27:81 Local parameters Bridge ID : 8193.b0:c6:9a:73:39:90 Extended system ID : 0 Internal instance ID : 1 STP bridge parameters for MSTI 2 MSTI regional root : 4098.b0:c6:9a:73:39:90 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Number of topology changes : 3 Time since last topology change : 320 seconds Topology change initiator : ge-0/0/9.0 Topology change last recvd. from : 00:19:e2:55:24:8d Local parameters Bridge ID : 4098.b0:c6:9a:73:39:90 Extended system ID : 0 Internal instance ID : 2 user@switch-2> show spanning-tree mstp configuration MSTP information Context identifier : 0 Region name : my-mstp-config Revision : 10 Configuration digest : 0x91ee8012e6851d931adae71da MSTI Member VLANs 0 0, A colleague recently implemented MSTP in your Layer 2 network and is having trouble determining why it is not working properly. You are asked to review the outputs provided in the exhibit to determine the cause. Referring to the exhibit, what is causing the issue? A. The region name is configured the same on both devices. B. The VLAN mapping is configured incorrectly. C. The MSTP revision is configured incorrectly. D. The bridge priority has not been configured correctly. Correct Answer: C

51 /Reference: QUESTION 77 MSTP information Context identifier : 0 Region name : Juniper Revision : 1 Configuration digest : 0xfdbe318c0ae799ae6dfdae4c882c67ee MSTI Member VLANs 0 0, A network engineer has configured MSTP on several switches for loop protection. You must verify the work and ensure that the appropriate parameters match on all switches. Which operational command provides the required output shown in the exhibit? A. show spanning-tree interface B. show spanning-tree mstp configuration C. show spanning-tree bridge D. show ethernet-switching interfaces Correct Answer: B /Reference: QUESTION 78 user@switcha# show protocols mstp configuration-name region1; bridge-priority 16k; msti 1 { bridge-priority 16k; vlan [10 20]; msti 2 { bridge-priority 8k; vlan [30 40]; user@switchb# show protocols mstp configuration-name region1; bridge-priority 8k; msti 1 { bridge-priority 16k; vlan [10 20]; msti 2 { bridge-priority 8k; vlan [ ];

52 Referring to the exhibit, a customer observes that the MSTP instance between SwitchA and SwitchB is not converging correctly. What is causing the problem? A. The bridge priority values of MSTI 2 are the same. B. There is a VLAN mismatch between the two switches for MSTI 2. C. There is a bridge priority mismatch. D. MSTI 1 and MSTI 2 are part of the same the MSTP region. Correct Answer: B /Reference: QUESTION 79 Your company makes extensive use of VSTP in your network for loop protection. The network is at the VSTP VLAN limit and must protect additional VLANs. Which command allows you to protect additional VLANs? A. set protocols mstp interface all B. set protocols vstp vlan all C. set protocols vstp vlan-group D. set protocols rstp Correct Answer: D /Reference: QUESTION 80 You are asked to set up 802.1X port authentication for all access ports on your EX Series switch. You must ensure that only one user is allowed to authenticate per port and all other attempts are denied. Which supplicant mode must be used? A. single mode B. single-secure mode C. default mode D. multiple mode Correct Answer: B /Reference: QUESTION 81 You are asked to set up 802.1X port authentication for all access ports on your EX Series switch. You have a device that does not support 802.1X supplicants and you must ensure this device is authenticated. You must also ensure that no unnecessary delay occurs when authenticating this device. Which statement is correct? A. You should enable MAC RADIUS on the interface and use 802.1X multiple mode. B. You should enable MAC RADIUS on the interface and statically add the MAC address to the 802.1x