Courseiva

CCNA User Interfaces Questions

17 questions · User Interfaces · All types, answers revealed

Practice these questionsDomain overviewAll questions
1
MCQmedium

A network engineer is configuring a Juniper device in a production network. They have applied several changes to the candidate configuration and run 'commit check', which passes. After a brief pause, they run 'commit' but receive the error: 'commit failed: configuration database modified by another user. Please reload the configuration and try again.' The engineer is the only person currently logged into the device, but they know that another engineer was working on the same device earlier and may have left a commit pending. What is the most likely reason for the commit failure?

A.The other engineer committed their changes between the commit check and the commit.
B.The commit check did not validate the syntax of the new changes.
C.The candidate configuration has timed out and must be re-entered.
D.The device has insufficient storage to write the new configuration.
AnswerA

This is the most likely cause of the 'configuration database modified by another user' error.

Why this answer

The error message 'configuration database modified by another user' indicates that another user (the earlier engineer) had a pending commit that was not yet applied or discarded. When the current engineer ran 'commit check', it validated the candidate configuration against the current active configuration, but between that check and the actual 'commit', the other engineer's pending commit was applied (or their session was closed, causing their changes to be committed automatically if they had left a commit pending). This changed the configuration database, causing the commit to fail due to a version mismatch.

Exam trap

The trap here is that candidates may assume 'commit check' passes guarantee a successful commit, but they overlook that the configuration database can be modified by another user between the check and the commit, leading to a commit failure even when no other user is currently logged in.

How to eliminate wrong answers

Option B is wrong because 'commit check' does validate the syntax of the candidate configuration; if it passes, the syntax is correct. Option C is wrong because the candidate configuration does not 'time out' in Junos; it remains in the candidate database until explicitly committed or discarded. Option D is wrong because insufficient storage would typically produce a different error (e.g., 'no space left on device') and is not related to the 'configuration database modified by another user' message.

Practice this question →
2
MCQmedium

Refer to the exhibit. An administrator needs to ensure that all emergency (emerg) messages are logged to the console. Based on the configuration shown, which statement is correct?

A.Emergency messages are logged to the console only.
B.Emergency messages are logged to all destinations.
C.Emergency messages are logged only to the file 'messages'.
D.Emergency messages are logged only to the remote host.
AnswerB

Emergency messages are indeed logged to all destinations because each configured syslog target has a severity threshold that includes 'emerg'. The console's 'any warning' means it logs warning and everything more severe (emerg, alert, crit, err), the file 'messages' with 'any any' logs every severity including emerg, and the remote host with 'any critical' logs critical and above, which again includes emerg. Since all thresholds capture severity level 0, every destination receives emergency messages, making this the correct statement.

Why this answer

The configuration shown includes the 'any' facility and 'emerg' severity for the console, file, and remote host destinations. In JUNOS, when a severity level is set for a syslog destination, all messages of that severity and higher are logged. Since 'emerg' is the highest severity, it applies to all configured destinations, not just one.

Exam trap

The trap here is that candidates may assume that configuring 'emerg' for a specific destination limits logging to that destination, but in JUNOS, the severity level applies independently to each destination, and all destinations with that severity configured will receive the messages.

How to eliminate wrong answers

Option A is wrong because the configuration explicitly defines syslog destinations for console, file, and remote host, so emergency messages are not limited to the console only. Option C is wrong because the file destination is configured with 'any emerg', meaning emergency messages are logged to the file, but they are also logged to other destinations. Option D is wrong because the remote host is configured with 'any emerg', but emergency messages are not logged only to the remote host; they are logged to all destinations.

Practice this question →
3
MCQeasy

Refer to the exhibit. What does this command accomplish?

A.Displays help for syslog messages that include 'error'.
B.Displays all syslog messages.
C.Displays syslog messages containing the word 'error'.
D.Displays the error log file.
AnswerC

This is correct because the command combines a log display command with a match filter. For example, `show log messages | match error` displays every line from the messages log that contains the substring "error" (case-sensitive by default in Junos). This is a standard way for an operator to quickly search a system log for error-related entries without reading the whole file. It is not restricted to a specific severity class; it is simply a text-pattern match against the log output.

Why this answer

The command shown filters the output of the system log file to display only lines containing the substring 'error'. This allows the administrator to quickly see log entries related to errors, rather than viewing all messages or a dedicated error log file.

Exam trap

Candidates often assume that the 'match' operator performs a whole-word search or that there is a dedicated error log file, but in Junos it performs a substring match on the default messages log.

How to eliminate wrong answers

Option B is wrong because 'show log messages' alone displays all syslog messages, but the pipe with 'match error' filters the output, so it does not display all messages. Option C is wrong because the 'match' filter performs a substring match, not a whole-word match; it would also match messages containing 'error' as part of a larger word (e.g., 'error-handling'), so it does not strictly display only messages containing the word 'error'. Option D is wrong because there is no separate 'error log file' in Junos; syslog messages are stored in the messages log file, and this command filters that file, not a dedicated error log.

Practice this question →
4
MCQhard

A network administrator is trying to configure a firewall filter on a Juniper device. They enter configuration mode and type 'set firewall family inet filter BLOCK-ICMP term 1 from protocol icmp'. They then type 'set firewall family inet filter BLOCK-ICMP term 1 then reject'. After committing, they notice that ICMP traffic is not being blocked. They run 'show configuration firewall' and see the filter is present. They run 'show firewall filter BLOCK-ICMP' to see the counters and notice the packet count is zero. What is the most likely reason?

A.The protocol icmp is not correct; it should be 'icmp6'.
B.The filter is not applied to any interface.
C.The term 'then reject' should be 'then discard'.
D.The filter must be applied under the 'edit firewall' hierarchy.
AnswerB

In Junos, a firewall filter takes effect only when it is applied to an interface, typically under the "family" hierarchy using an "apply-filter" statement. Without such a binding, the filter remains defined in the configuration but is never evaluated, so all traffic—including ICMP echo requests—continues to pass. The filter must be attached to the appropriate interface and address family to actually block traffic.

Why this answer

A firewall filter in Junos must be applied to an interface to take effect. Simply configuring the filter under the 'edit firewall' hierarchy does not activate it; the filter must be referenced with a 'family inet' statement under the interface configuration (e.g., 'set interfaces ge-0/0/0 unit 0 family inet filter input BLOCK-ICMP'). Without this application, the filter exists in the configuration but never processes traffic, resulting in zero packet counts.

Exam trap

The trap here is that candidates often assume configuring a firewall filter under the 'edit firewall' hierarchy automatically activates it, similar to Cisco IOS where ACLs are applied globally or to interfaces with separate commands, but Junos requires explicit interface application for the filter to process traffic.

How to eliminate wrong answers

Option A is wrong because 'protocol icmp' is correct for IPv4 ICMP; 'icmp6' is used for IPv6 ICMP, which is not relevant here. Option C is wrong because 'then reject' is a valid action that drops packets and sends an ICMP unreachable message; 'then discard' would also drop packets but without notification, and the issue is not about the action type. Option D is wrong because the 'edit firewall' hierarchy is the correct location for configuring firewall filters; the problem is the filter is not applied to an interface, not that it is configured in the wrong place.

Practice this question →
5
MCQmedium

A network administrator accidentally deleted a vital part of the configuration while in configuration mode. They need to revert to the previous configuration without losing recent changes that are correct. Which action should they take?

A.deactivate
B.rollback 1
C.delete
D.rollback 0
AnswerD

Rollback 0 resets the candidate configuration to match the current active committed configuration, discarding any uncommitted changes. Because the accidental deletion was never committed, this command reverts that deletion while leaving all previously committed correct changes intact. This is exactly the requirement: undo the uncommitted mistake without affecting the committed configuration. It is the standard way to abandon a set of uncommitted edits in Junos.

Why this answer

The 'rollback 0' command reverts the candidate configuration to the most recently committed configuration (the current active configuration), discarding any uncommitted changes. This allows the administrator to undo the accidental deletion without affecting any recently committed correct changes, as those are already part of the active configuration. Option B, 'rollback 1', would revert to the previous commit, which could remove recently committed correct changes if they were made in the most recent commit.

Therefore, 'rollback 0' is the safer choice when you want to preserve correct changes that have already been committed.

Exam trap

The trap is that candidates often confuse 'rollback 0' (reverts to current active config) with 'rollback 1' (reverts to previous config). While 'rollback 1' might seem like it goes back one step, it could discard recently committed changes. The correct approach to undo an uncommitted deletion while preserving committed correct changes is to use 'rollback 0'.

How to eliminate wrong answers

Option A is wrong because 'deactivate' disables a configuration statement without removing it, but it does not revert the configuration to a previous state; it only suppresses the active effect of the specified statement. Option C is wrong because 'delete' removes configuration statements from the candidate configuration, which would worsen the situation by further deleting parts of the configuration. Option D is wrong because 'rollback 0' reverts to the current active configuration (the one that was last committed), which would discard all uncommitted changes, including any correct recent modifications the administrator wants to keep.

Practice this question →
6
MCQmedium

Refer to the exhibit. What is the purpose of the 'unit 0' statement?

A.Enables IPv6.
B.Sets the MTU.
C.Defines a physical interface.
D.Defines a logical interface.
AnswerD

The 'unit 0' statement in Junos defines a logical interface on a physical interface. Logical interfaces allow you to configure separate Layer 3 properties (IP addresses, protocol families, VLAN tags) on the same physical port. Unit 0 is the default logical unit for untagged traffic, and additional units (1, 2, ...) correspond to subinterfaces or VLAN-tagged logical interfaces.

Why this answer

In Junos, the 'unit 0' statement is used to define a logical interface (also known as a subinterface) under a physical interface. Every physical interface must have at least one logical unit, and unit 0 is the default logical interface that carries Layer 3 configuration such as IP addresses. This is fundamental to Junos architecture, where all protocol configurations are applied at the logical unit level, not the physical interface level.

Exam trap

The trap here is that candidates familiar with Cisco IOS might assume 'unit 0' is a physical interface or a default MTU setting, but in Junos, the unit number always defines a logical interface, and physical interfaces are configured separately without a unit keyword.

How to eliminate wrong answers

Option A is wrong because 'unit 0' does not enable IPv6; IPv6 is enabled by configuring a family inet6 address under the logical unit, not by the unit number itself. Option B is wrong because the MTU is set using the 'mtu' statement at the physical interface level (e.g., 'set interfaces ge-0/0/0 mtu 1500'), not by the 'unit 0' statement. Option C is wrong because a physical interface is defined by the interface name (e.g., ge-0/0/0), not by the 'unit' statement; 'unit 0' creates a logical subinterface on top of that physical interface.

Practice this question →
7
MCQhard

A senior network administrator is logged into a Juniper device in operational mode. They need to make a configuration change to the BGP group 'INTERNAL'. They type 'configure terminal' and receive 'unknown command'. They then type 'configure' and enter configuration mode. They make the needed changes and exit configuration mode using 'exit'. They then try to view the active configuration to verify the changes by typing 'show configuration | match INTERNAL'. They see no output. What is the most likely reason?

A.The command 'show configuration' only shows the candidate configuration, not the active.
B.They exited configuration mode without committing, so the changes were lost.
C.They should have used 'commit' before exiting configuration mode.
D.They need to be in configuration mode to run 'show configuration'.
AnswerC

To make configuration changes take effect in Junos, you must execute 'commit' from configuration mode. The commit command copies the candidate configuration to the active configuration, activating the changes. If the administrator exits configuration mode without committing, the active configuration remains unchanged, which explains why the changes did not appear to take effect. Therefore, the correct action before exiting is to commit the candidate configuration.

Why this answer

In Junos, configuration changes made in configuration mode are stored in a candidate configuration until explicitly committed using the 'commit' command. Exiting configuration mode with 'exit' does not discard the candidate configuration; the changes remain in the candidate but are not part of the active configuration. The 'show configuration' command displays the active (committed) configuration, which explains why no output matching 'INTERNAL' was seen.

The administrator needed to use 'commit' to activate the changes before viewing them with 'show configuration'.

Exam trap

The trap here is that candidates familiar with other platforms may expect 'exit' to discard changes (as in some OS) or that 'show configuration' shows the candidate configuration. In Junos, the candidate persists after exit, but the active configuration is only updated upon 'commit'.

How to eliminate wrong answers

Option A is wrong because 'show configuration' in operational mode displays the active (committed) configuration, not the candidate configuration; the candidate configuration is viewed with 'show | compare' or by being in configuration mode. Option B is wrong because exiting configuration mode without committing does not automatically lose changes—the candidate configuration persists until explicitly discarded with 'rollback' or overridden, but the changes are not active until committed; however, the question states they exited and then ran 'show configuration', which shows the active config, so the changes were effectively not visible because they were never committed. Option D is wrong because 'show configuration' can be run from operational mode (it is a valid operational command) and does not require being in configuration mode.

Practice this question →
8
MCQhard

You are a junior network engineer at a company that uses Juniper MX routers. You are troubleshooting a connectivity issue on a branch router. The branch router has two upstream links to the corporate network: ge-0/0/0 (10.1.1.1/30, connected to core router A) and ge-0/0/1 (10.1.1.5/30, connected to core router B). The branch router runs OSPF and has a default route learned from both upstream routers. The routing table shows two equal-cost default routes via both next hops. However, traffic from the branch to the corporate network is experiencing intermittent high latency and some packet loss. You suspect that asymmetric routing is causing issues because the return traffic is not following the same path. You want to influence the router to prefer one upstream link for all traffic to the corporate network. You have decided to adjust the OSPF metric on the branch router to make the link to core router A more preferred. You are in configuration mode on the branch router. Which single configuration change will accomplish this goal?

A.set interfaces ge-0/0/1 unit 0 family inet cost 200
B.set protocols ospf area 0 interface ge-0/0/1 passive
C.set protocols ospf area 0 interface ge-0/0/1 metric 200
D.set interfaces lo0 unit 0 family inet address 10.0.0.1/32 metric 100
AnswerC

This is the correct configuration because in JUNOS, OSPF interface metric is explicitly set with the `metric` statement under `protocols ospf` for the specific interface. By assigning a metric of 200 to ge-0/0/1, the router's OSPF cost calculation makes that interface significantly more expensive than ge-0/0/0 (which retains the default metric, typically 10 for Ethernet), thereby forcing transit traffic to prefer ge-0/0/0. This effectively shifts traffic away from ge-0/0/1 while still allowing the OSPF adjacency to remain established, so the link stays available for redundancy or less-preferred use.

Why this answer

Setting the OSPF metric on interface ge-0/0/1 to a higher value (200) increases the cost of that link, making the default route via ge-0/0/0 (which retains the default OSPF metric of 1 on a Gigabit Ethernet interface) more preferred. This influences the branch router to use the lower-cost path through core router A for all traffic to the corporate network, resolving asymmetric routing issues.

Exam trap

The trap here is that candidates often confuse the 'metric' configuration under the OSPF protocol hierarchy with the 'cost' parameter under interfaces, or mistakenly think that making an interface passive or adjusting loopback metrics will influence OSPF path selection.

How to eliminate wrong answers

Option A is wrong because the 'cost' parameter is not a valid configuration statement under 'set interfaces'; OSPF cost is configured under the OSPF protocol hierarchy, not directly on the interface. Option B is wrong because setting the interface to 'passive' prevents OSPF from sending or receiving hello packets on that interface, which would break OSPF adjacency entirely, rather than simply adjusting path preference. Option D is wrong because the 'metric' statement under the loopback interface is used for static routes or other protocols, not for OSPF interface cost; OSPF uses a cost value derived from interface bandwidth or explicitly set under 'protocols ospf'.

Practice this question →
9
Multi-Selectmedium

Which TWO commands can be used to view the current running configuration?

Select 2 answers
A.show configuration | display inheritance
B.show configuration | display set
C.show configuration | match
D.show configuration
E.show configuration | compare
AnswersB, D

Displays the configuration as a series of set commands.

Why this answer

The 'show configuration | display set' command outputs the current active configuration in 'set' format, which is a flat, line-by-line representation of configuration statements. Option D is correct because 'show configuration' without any pipe modifier displays the entire running configuration in its native hierarchical format. Both commands allow you to view the current running configuration, just in different presentation styles.

Exam trap

The trap here is that candidates confuse pipe modifiers like 'display inheritance' or 'compare' as valid ways to view the current configuration, when in fact they either add inherited data or compare revisions, not display the running config as-is.

Practice this question →
10
MCQmedium

A network engineer needs to view the operational status of all interfaces on a Junos device, including those that are disabled. Which command should be used?

A.show interfaces
B.show configuration interfaces
C.show interfaces terse
D.monitor interface traffic
AnswerC

Correct — 'show interfaces terse' displays a single-line-per-interface summary with columns for Interface, Admin, Link, Proto, and Local address, covering both physical and logical interfaces. It explicitly shows administratively disabled interfaces with an 'admin-down' flag, while also indicating the actual operational link state ('up' or 'down'). This makes it the most efficient command for quickly surveying the operational status of all interfaces on a Junos device.

Why this answer

The 'show interfaces' command displays detailed information for all interfaces, including those that are administratively disabled. However, 'show interfaces terse' provides a concise, one-line-per-interface summary that is more efficient for quickly viewing the operational status of all interfaces, including disabled ones. For the JNCIA exam, 'show interfaces terse' is the recommended command for this purpose because it offers a clear and compact overview of interface status across the device.

Exam trap

The trap is that candidates may assume 'show interfaces' only shows enabled interfaces, but in fact it shows all interfaces including disabled. The common mistake is to choose 'show interfaces' thinking 'show interfaces terse' might omit some interfaces. However, 'show interfaces terse' also includes disabled interfaces and is more efficient for a quick overview of operational status.

How to eliminate wrong answers

Option A is wrong because 'show interfaces' displays detailed information only for interfaces that are physically present and enabled; it does not show interfaces that are administratively disabled unless they are explicitly specified. Option B is wrong because 'show configuration interfaces' displays the configured interface statements from the candidate or active configuration, not the operational status (e.g., up/down, disabled state). Option D is wrong because 'monitor interface traffic' is used for real-time traffic monitoring and statistics, not for viewing the administrative or operational status of interfaces.

Practice this question →
11
MCQhard

You are a network engineer for a service provider that recently deployed a Juniper MX router at a new Point of Presence (PoP). The router is used to aggregate customer connections and exchange routes with upstream providers via BGP. After the initial configuration, you notice that the router is not learning any routes from one of the upstream BGP peers. You have verified that the BGP session is established (state Established) and that the peer is sending routes. You suspect that the issue might be related to the firewall filter or routing policy. You want to determine if any inbound routes are being rejected and why. Which command would provide the most direct information about why routes are being rejected?

A.show route protocol bgp
B.show route receive-protocol bgp 192.0.2.1
C.show bgp summary
D.show firewall filter <filter-name>
AnswerB

show route receive-protocol bgp 192.0.2.1 shows the exact updates received from that specific neighbor before they pass through the routing table, including the import-policy decision. The output marks each prefix with an 'A' (accept) or 'I' (ignore/reject) and, when rejected, prints the policy name and reason. This makes it the right diagnostic for verifying why a route from 192.0.2.1 was not installed, because it exposes the BGP input policy evaluation on every received prefix.

Why this answer

'show route receive-protocol bgp 192.0.2.1', is correct because it displays the exact routes received from a specific BGP peer along with any policy or filter actions applied (e.g., reject, accept). This command directly shows whether routes are being rejected and the reason (e.g., due to an import policy or firewall filter), making it the most direct diagnostic tool for the described issue.

Exam trap

The trap here is that candidates often assume 'show bgp summary' or 'show route protocol bgp' will reveal route rejection details, but they only show aggregated statistics or installed routes, not the per-peer policy decisions that cause routes to be hidden or rejected.

How to eliminate wrong answers

Option A is wrong because 'show route protocol bgp' displays all BGP routes in the routing table, but it does not show why routes were rejected or filtered before installation. Option C is wrong because 'show bgp summary' only shows BGP session state and statistics (e.g., prefixes received), not the specific routes or rejection reasons. Option D is wrong because 'show firewall filter <filter-name>' shows firewall filter counters and rules, but it does not directly correlate to BGP route rejection unless the filter is explicitly applied to the BGP session; it is indirect and less specific than the receive-protocol command.

Practice this question →
12
MCQhard

Refer to the exhibit. An engineer runs the command shown. What does this output indicate?

A.The candidate configuration matches the committed configuration.
B.The candidate configuration has an IP address change.
C.The rollback 0 configuration is being displayed.
D.The interface ge-0/0/0 has been deleted.
AnswerB

In the diff output, the `-` line shows the committed IP address (10.0.0.1) being removed from interface ge-0/0/0, and the `+` line shows the candidate IP address (192.0.2.1) replacing it under `family inet`. This is a classic unified diff format: the `-` line is the old value, the `+` line is the new value. Since only the address line changes while the interface and its family structure remain, this correctly identifies an IP address change.

Why this answer

The output shows the candidate configuration differs from the committed configuration, as indicated by the 'show | compare' command displaying a change under the [edit interfaces ge-0/0/0 unit 0 family inet] hierarchy. Specifically, it shows the address 192.168.1.1/24 being replaced with 192.168.1.2/24, which is an IP address change. This confirms option B is correct because the candidate configuration has an IP address change that has not yet been committed.

Exam trap

The trap here is that candidates often confuse 'show | compare' with 'show configuration | display set' or assume no output means no candidate changes exist, but in reality, 'show | compare' outputs only differences, and any output indicates a pending change that does not match the committed configuration.

How to eliminate wrong answers

Option A is wrong because the output shows a difference between the candidate and committed configurations (the IP address change), so they do not match; a matching configuration would produce no output from 'show | compare'. Option C is wrong because the command 'show | compare' compares the candidate configuration to the active (committed) configuration, not specifically to rollback 0; while rollback 0 is the most recent commit, the command compares to the current active configuration, and the output does not indicate a rollback operation. Option D is wrong because the output shows the interface ge-0/0/0 still exists with a unit and family inet configuration; only the IP address is changed, not the interface being deleted.

Practice this question →
13
MCQmedium

You are a network engineer for a company that has just deployed a Juniper SRX firewall in a branch office. The device has multiple interfaces: ge-0/0/0 connected to the internet, ge-0/0/1 connected to the internal LAN (192.168.1.0/24), and ge-0/0/2 connected to a DMZ (10.0.0.0/24). After initial configuration, you attempt to ping from the SRX to a server on the internet (8.8.8.8) but receive no response. You also notice that internal users can access the internet. You have verified the routing table shows a default route via ge-0/0/0. The security policies appear correct. You suspect the issue is related to interface configuration. What is the most likely cause and the correct course of action?

A.The security policy from the trust zone to the untrust zone is blocking traffic; you should create a policy allowing all traffic from the SRX itself.
B.The interface ge-0/0/0 has an incorrect MAC address; you should clear the ARP cache.
C.The interface ge-0/0/0 is missing the 'host-inbound-traffic' configuration under its security zone; you should add the appropriate system services under the zone.
D.The default route is missing or incorrect; you should add a default route via the internet gateway IP.
AnswerC

This is the most likely cause because the device cannot initiate traffic without explicit host-inbound traffic settings.

Why this answer

The SRX can ping internal hosts but not the internet because the interface ge-0/0/0 is in the untrust zone, which by default blocks all inbound traffic, including pings originated from the device itself. The 'host-inbound-traffic' configuration under the security zone allows system services such as ping, SSH, and SNMP to be received on that interface. Without it, even though the routing table and security policies are correct, the SRX will drop its own outbound ICMP echo requests before they can be sent, or drop the replies if they are treated as inbound traffic.

Exam trap

The trap here is that candidates confuse transit security policies (which control traffic passing through the device) with host-inbound traffic controls (which manage traffic destined to the device itself), leading them to incorrectly modify security policies instead of enabling system services under the zone.

How to eliminate wrong answers

Option A is wrong because the security policy from trust to untrust controls traffic passing through the SRX, not traffic originated from the SRX itself; device-originated traffic is governed by the 'host-inbound-traffic' settings, not security policies. Option B is wrong because an incorrect MAC address would cause a failure to resolve the next-hop MAC, which would prevent all traffic (including internal users) from reaching the internet, but internal users can access the internet, so ARP is working. Option D is wrong because the routing table already shows a default route via ge-0/0/0, and internal users can access the internet, confirming the default route is correct.

Practice this question →
14
MCQhard

During troubleshooting, an engineer needs to view real-time logging messages on a Junos device. Which command should be used?

A.file show /var/log/messages
B.monitor start messages
C.show log messages
D.traceoptions
AnswerB

Displays real-time log messages.

Why this answer

The 'monitor start messages' command enables real-time, tail-like display of the /var/log/messages log file on a Junos device, allowing the engineer to view new log entries as they are generated. This is the correct command for live troubleshooting because it continuously updates the terminal with incoming syslog messages, unlike static file viewing commands.

Exam trap

The trap here is that candidates often confuse 'show log messages' (a static snapshot) with 'monitor start messages' (a live streaming view), because both involve the 'messages' log file, but only the latter provides real-time output.

How to eliminate wrong answers

Option A is wrong because 'file show /var/log/messages' displays the entire contents of the log file at once, not in real-time, and is not suitable for monitoring live events. Option C is wrong because 'show log messages' displays the current contents of the messages log file but does not provide a live, streaming view; it shows a snapshot. Option D is wrong because 'traceoptions' is a configuration statement used to enable debug logging for specific protocols or features, not a command to view real-time log output.

Practice this question →
15
MCQeasy

An engineer needs to view the current active configuration of a Junos device without making any changes. Which CLI mode should they use?

A.Operational mode
B.Privileged mode
C.Configuration mode
D.Exclusive configuration mode
AnswerA

Operational mode is the default Junos CLI state, where an engineer can execute read-only commands such as 'show configuration' and 'show interfaces'. It provides a complete view of the active configuration without permitting any direct edits. To change the configuration, the engineer must explicitly enter configuration mode, making operational mode strictly for monitoring and verification.

Why this answer

Operational mode is the default CLI mode in Junos, used for monitoring, troubleshooting, and viewing the current active configuration without making any changes. Commands in this mode are read-only and do not modify the device's configuration. The active configuration is the one currently running on the device, and it can be viewed using commands like 'show configuration' in operational mode.

Exam trap

The trap here is that candidates familiar with Cisco IOS may confuse 'Privileged mode' (which allows viewing and some changes) with Junos operational mode, but Junos strictly separates read-only (operational) and read-write (configuration) modes.

How to eliminate wrong answers

Option B is wrong because 'Privileged mode' is a Cisco IOS term, not a Junos CLI mode; Junos uses operational mode for read-only access and configuration mode for changes. Option C is wrong because Configuration mode is used to modify the candidate configuration, not just view the active configuration; entering this mode allows changes to be made. Option D is wrong because Exclusive configuration mode is a variant of configuration mode that locks the configuration database to prevent other users from making changes, but it still allows modifications and is not for read-only viewing.

Practice this question →
16
MCQmedium

You are a network engineer responsible for a Juniper MX240 router in a data center. The router is running Junos 18.2R1 and you need to upgrade it to 19.1R2 to fix a critical security vulnerability. You establish an SSH session to the router and enter configuration mode to prepare the upgrade. While in configuration mode, you notice that the candidate configuration contains several uncommitted changes from a previous engineer that attempted to modify BGP settings but introduced a syntax error. The candidate configuration fails any commit operation due to this error. The currently active configuration is stable and the router is handling production traffic. The upgrade process requires you to change the boot media and specify the new image. Which action should you take to clear the candidate configuration and proceed with the upgrade?

A.Reboot the router to clear the candidate configuration and then start the upgrade.
B.Execute the 'rollback 0' command to discard the candidate and replace it with the active configuration, then proceed with the upgrade commands.
C.Run the 'load override terminal' command and paste the active configuration from memory, then commit and upgrade.
D.Use the 'commit force' command to override the syntax error and commit the candidate, then perform the upgrade.
AnswerB

The 'rollback 0' command is the correct recovery action because it discards the entire candidate configuration and copies the last committed active configuration into the candidate, giving you a clean, syntactically valid starting point. This operation is local to the configuration database and does not affect the running system until you commit, so you can safely rollback, verify with 'show configuration', and then proceed with the standard software upgrade commands such as 'request system software add'.

Why this answer

The 'rollback 0' command discards all uncommitted changes in the candidate configuration and replaces it with the active, committed configuration. This clears the syntax error without affecting the running router, allowing you to proceed with the upgrade commands (e.g., 'request system software add') without a reboot or forced commit.

Exam trap

The trap here is that candidates may think a reboot is needed to clear uncommitted changes (Option A) or that 'commit force' can bypass syntax errors (Option D), when in fact Junos provides a dedicated 'rollback' command to safely discard the candidate configuration without impacting the active state.

How to eliminate wrong answers

Option A is wrong because rebooting the router would disrupt production traffic and is unnecessary; the candidate configuration is not stored in active memory that requires a reboot to clear. Option C is wrong because 'load override terminal' is used to load a configuration from a terminal session, not to discard the candidate; it would require manually pasting the active config, which is error-prone and redundant when 'rollback 0' exists. Option D is wrong because 'commit force' does not override syntax errors; it only bypasses certain validation warnings (e.g., missing root password), and a syntax error in the candidate will still cause the commit to fail.

Practice this question →
17
Multi-Selecteasy

Which THREE modes can be used to enter configuration mode in Junos? (Choose three.)

Select 3 answers
A.configure static
B.configure private
C.configure shared
D.configure dynamic
E.configure exclusive
AnswersB, C, E

Creates a private copy of the candidate configuration.

Why this answer

'configure private' creates a private configuration session that isolates candidate changes from other users, allowing multiple users to stage changes simultaneously without interference. This mode is one of the three standard configuration modes in Junos, alongside exclusive and shared.

Exam trap

The trap here is that candidates may confuse Junos configuration modes with Cisco IOS configuration modes (like 'configure terminal' or 'configure memory'), leading them to select non-existent options like 'configure static' or 'configure dynamic'.

Practice this question →

Ready to test yourself?

Try a timed practice session using only User Interfaces questions.

Start 20-question session