JNCIP-ENT Practice Test 5 — 10 Questions

Question 1

How do you examine the specific OSPF routing table entries learned via OSPF on a Junos device?

Accepted Answer

show route protocol ospf. The 'show route protocol ospf' command displays routes learned specifically through the OSPF routing protocol.

Answer

show protocols ospf route-table

Answer

show ospf routes

Answer

show ip route ospf

Question 2

Which THREE configuration tasks are required when implementing OSPFv3 on Junos devices? (Choose three)

Accepted Answer

Enabling OSPFv3 under the protocols ospf3 hierarchy. Configuring OSPFv3 requires specifying protocols ospf3, configuring areas, and enabling OSPFv3 on specific interfaces (IPv6 enabled).

Answer

Configuring BGP autonomous system numbers for OSPFv3 operation

Answer

Enabling IPv4 address families inside protocols ospf3

Question 3

Which THREE statements describe the behavior of LLDP-MED capability on Junos EX Series switches? (Choose three.)

Accepted Answer

It automates network policy configuration for voice, video, and guest VLANs.. LLDP-MED enables advanced capabilities like device location, inventory management, and network policies for endpoints.

Answer

It replaces the need for Ethernet switching entirely by converting access ports into routed links.

Answer

It requires OSPFv3 to be running on all connected IP phones.

Question 4

An administrator notices that broadcast, unknown unicast, and multicast (BUM) traffic sent from a local host is looping back to the originating multi-homed PE when using an all-active Ethernet segment. Which mechanism prevents this loop in EVPN?

Accepted Answer

EVPN Split Horizon filtering using ESI labels. EVPN uses Split Horizon filtering via the ESI Label Extended Community or local split-horizon checks to ensure that BUM traffic received from a remote PE on a shared Ethernet segment is not sent back out to the same segment.

Answer

BGP Best Path Selection algorithm

Answer

Designated Forwarder (DF) election

Answer

Spanning Tree Protocol (STP) root guard

Question 5

Which TWO options are valid authentication methods that can be specified in the 'authentication-order' statement on an EX Series switch interface? (Choose two)

Accepted Answer

mac-radius. On Juniper EX Series switches, the 'authentication-order' statement under an interface (or globally) accepts authentication methods such as 'dot1x', 'mac-radius', and 'captive-portal'. Option D (dot1x) is correct because IEEE 802.1X is a supported access-control authentication method that can be listed in the authentication order to authenticate supplicants via an AAA server. Option A (mac-radius) is correct because MAC RADIUS authentication is also a supported method, allowing the switch to authenticate a device by its MAC address against a RADIUS server. Option B (kerberos) is not a valid authentication-order method on EX switches, as Kerberos is not implemented as an interface authentication method there. Option C (tacacs-plus) is not valid because TACACS+ is an AAA protocol used for administrative login/authorization, not a client authentication method in the interface authentication-order list. Option E (ldap-direct) is not valid because EX switches do not support a direct LDAP authentication method in the authentication-order statement; LDAP would be reached through a RADIUS server instead.

Answer

kerberos

Answer

tacacs-plus

Answer

ldap-direct

Question 6

You are configuring a captive portal on an EX Series switch. You want to ensure that specific management traffic and critical server subnets are accessible to clients *before* they authenticate through the captive portal. Which configuration feature accomplishes this?

Accepted Answer

Captive portal firewall exemption filters or walled garden (bypass) configuration.. Pre-authentication access lists or firewall filters / bypass lists allow traffic to specific destinations before captive portal authentication occurs.

Answer

RADIUS dynamic authorization profiles with pre-auth attributes.

Answer

Global access profile authentication-bypass statements.

Answer

Static MAC bypass configuration under the protocols dot1x hierarchy.

Question 7

Which THREE parameters are part of the standard Junos BGP route selection algorithm prior to evaluating the router ID? (Choose three)

Accepted Answer

Weight (local to the router). Before router ID, Junos evaluates Weight, Local Preference, AS path length, Origin, MED, and IBGP vs EBGP preference.

Answer

Cluster List length

Answer

Originator ID value

Question 8

You want to apply a rewrite rule on an outgoing interface to remark the DSCP bits of packets leaving your Juniper router. Where must this rewrite rule be applied within the CoS hierarchy?

Accepted Answer

[edit class-of-service interfaces]. Rewrite rules in Junos are applied on egress interfaces under the interfaces statement within the class-of-service configuration hierarchy.

Answer

[edit firewall]

Answer

[edit routing-options]

Answer

[edit class-of-service classifiers]

Question 9

An administrator configures EVPN with VXLAN encapsulation and wants to ensure that interfaces assigned to bridge domains drop frames whose source MAC address is not learned or is unauthorized. Which feature should be enabled?

Accepted Answer

MAC security / MAC limit with drop action. Configuring MAC limit or bpdu protection/port security features on access interfaces prevents unauthorized MAC learning, while EVPN sticky MAC features can lock MACs to specific interfaces.

Answer

Ingress replication disabling

Answer

BGP route filtering

Answer

EVPN Route Type 4 filtering

Question 10

You are troubleshooting an issue where an 802.1X supplicant on a Windows client fails to connect to an EX Series switch port. The switch logs show 'EAPOL-TIMEOUT' errors. What does this error indicate?

Accepted Answer

The switch did not receive an EAPOL response from the client after sending an EAPOL request.. An EAPOL-TIMEOUT error indicates that the switch sent an EAPOL packet (such as EAPOL-Request/Identity) but did not receive a response from the client within the timeout window.

Answer

The RADIUS server took too long to validate the client credentials and dropped the session.

Answer

The switch port's operational mode reverted from access to trunk, dropping EAPOL frames.

Answer

The client sent an invalid EAP message that failed integrity checks.