Courseiva

Juniper Networks Enterprise Routing and Switching, Professional (JNCIP-ENT, JN0-650) (JNCIP-ENT) (JNCIP-ENT) — Questions 76–150

336 questions total · 5pages · All types, answers revealed

Take a mock examExam hub
Page 1

Page 2 of 5

Page 3
76
MCQhard

In an enterprise network running PIM sparse-mode, an engineer notices that multicast traffic is switched from the shared tree (*,G) to the source-specific tree (S,G) prematurely, causing micro-bursts on core links. Which command disables this automatic switchover behavior on a Junos router?

A.set routing-options multicast spt-mode disable
B.set protocols pim disable-spt-switchover
C.set protocols igmp spt-threshold 0
D.set protocols pim spt-threshold infinity
AnswerD

Setting the SPT threshold to infinity prevents the last-hop router from switching to the source-specific tree, keeping it on the shared tree.

Why this answer

By default, last-hop routers switch from (*,G) to (S,G) upon receiving the first packet from source S. To prevent this, the 'spt-threshold infinity' command is configured under [edit protocols pim].

Full explanation →
77
MCQhard

An enterprise design requires configuring an Anycast RP setup using two Junos routers to provide redundancy for PIM sparse-mode. Which mechanism is required to synchronize source state information between the two Anycast RPs within the same AS?

A.Multicast Source Discovery Protocol (MSDP)
B.Protocol Independent Multicast Dense-Mode (PIM-DM)
C.IGMPv3 snooping
D.Multicast BGP (MBGP)
AnswerA

MSDP is used between Anycast RPs to exchange source-active information so that receivers joined to one RP learn about sources registered to the other RP.

Why this answer

When deploying Anycast RP within a single PIM domain using MSDP, MSDP peer connections are established between the Anycast RP addresses to exchange SA (Source Active) messages, ensuring both RPs know about sources registered to either RP.

Full explanation →
78
Multi-Selecthard

Which THREE actions occur during the BGP next-hop resolution process on a Junos device when evaluating an eBGP-learned route? (Choose THREE)

Select 3 answers
A.The BGP next-hop IP address is automatically rewritten to the local router loopback address by default for eBGP.
B.The resolved next-hop information along with the egress interface and MAC address are installed into the forwarding table.
C.Junos checks the active routing table (RIB) to find a resolving route for the BGP next-hop IP address.
D.Junos automatically ignores next-hop resolution if multipath is enabled.
E.If the next-hop IP address resolves to a discard or reject route, the BGP route is considered unusable and is hidden.
AnswersB, C, E

Once resolved, the forwarding plane programs the next hop with specific interface and adjacency details.

Why this answer

When eBGP routes are learned, the next hop is typically the IP address of the external peer. Junos must resolve this next-hop IP in the routing table (RIB-local) via an active IGP or static route, verify that the resolving route is valid and active, and program the forwarding table (FIB) with the resolved next hop.

Full explanation →
79
MCQeasy

Which command allows an administrator to verify the active supplicant states and authentication status on a specific EX Series switch interface?

A.show ethernet-switching table dot1x
B.show access security clients
C.show radius-server authentication statistics
D.show dot1x interface
AnswerD

Correct. This command shows the operational state of 802.1X on interfaces.

Why this answer

The 'show dot1x interface' command displays detailed information about 802.1X states on switch ports.

Full explanation →
80
MCQmedium

An administrator configures EVPN with VXLAN encapsulation and wants to ensure that interfaces assigned to bridge domains drop frames whose source MAC address is not learned or is unauthorized. Which feature should be enabled?

A.MAC security / MAC limit with drop action
B.Ingress replication disabling
C.BGP route filtering
D.EVPN Route Type 4 filtering
AnswerA

MAC limit features with action drop protect bridge domains from MAC flooding and unauthorized source MACs.

Why this answer

Configuring MAC limit or bpdu protection/port security features on access interfaces prevents unauthorized MAC learning, while EVPN sticky MAC features can lock MACs to specific interfaces.

Full explanation →
81
MCQeasy

What is the default authentication order when authentication is enabled on an EX Series switch interface without explicit ordering configuration?

A.captive-portal
B.dot1x
C.local database
D.mac-radius
AnswerB

Correct. Dot1x is the default primary method when order is omitted.

Why this answer

By default, if authentication order is not specified, dot1x is evaluated first.

Full explanation →
82
MCQeasy

A network administrator needs to verify the PoE status, power draw, and allocated class for all connected IP phones across all interfaces on an EX2300 switch. Which operational command should be used?

A.show poe interface
B.show ethernet-switching poe status
C.show lldp med interface
D.show chassis power detail
AnswerA

show poe interface displays power consumption, operational status, and status per port.

Why this answer

The command show poe interface provides detailed information about PoE status, power consumption, class, and priority on EX switches.

Full explanation →
83
MCQhard

An enterprise network uses PIM sparse-mode across multiple routing instances. An administrator notices that source registration messages are looping between the designated router (DR) and the RP. Which configuration statement under [edit protocols pim] will prevent the DR from continuously encapsulating and sending register messages when no receivers are joined?

A.set protocols pim interface all no-bsr
B.set protocols pim rp static address 192.168.1.1 register-policy REJECT-REG
C.set protocols pim rp static address 192.168.1.1 no-registration-suppression
D.set protocols pim rp static address 192.168.1.1
AnswerD

Configuring a static RP properly ensures the DR knows the unicast destination for register encapsulation, and Junos handles register-stop suppression natively when configured correctly.

Why this answer

Using register-suppression or configuring an MSDP peer is common, but on the Junos DR side, ensuring proper register-policy or verifying register-stop timers helps. However, Juniper implements register-suppression by default via register-stop messages from the RP. To alter register behavior, register-policy can be applied.

Full explanation →
84
MCQmedium

You are configuring OSPFv2 on a Junos device and need to inject default routes into an OSPF NSSA area. Which configuration command under protocols ospf area should be used?

A.set protocols ospf area 0.0.0.1 nssa default-metric 10
B.set protocols ospf area 0.0.0.1 stub default-metric 10
C.set protocols ospf area 0.0.0.1 nssa originate-default
D.set protocols ospf area 0.0.0.1 nssa default-route-advertise
AnswerA

This command correctly generates a Type 7 default LSA into the NSSA area with the specified metric.

Why this answer

To inject a default route into an NSSA area in Junos OSPF, the stub default-metric command or nssa no-summarize with default-metric is configured under the specific area. Specifically, 'nssa default-metric' generates a Type 7 default LSA.

Full explanation →
85
Multi-Selectmedium

Which TWO attributes are required to establish an OSPF adjacency on a broadcast multi-access network? (Choose two)

Select 3 answers
A.Membership in the same OSPF area
B.Matching hello and dead timer intervals
C.Identical OSPF reference bandwidths
D.Matching process IDs
E.Identical router priority values
AnswersA, B, E

Neighbors must be configured in the same OSPF area.

Why this answer

To form an OSPF adjacency on a broadcast network, interfaces must share matching hello and dead intervals, and be in the same OSPF area. Subnet masks must match as well.

Full explanation →
86
MCQhard

An administrator configures PoE management mode on an EX4300 switch to 'consumption'. An IP phone connects, but before booting up completely, the switch denies power. Upon investigation, you find that the switch's static power reservation table is maxed out. What is the reason for this behavior in consumption mode?

A.Consumption mode still requires an initial allocation based on maximum class rating until LLDP-MED or CDP successfully negotiates the lower actual consumption value.
B.Consumption mode only works with non-PoE+ devices.
C.Consumption mode requires manual CLI power limits for every single port.
D.Consumption mode disables all dynamic power allocations permanently.
AnswerA

The switch must initially reserve enough power based on the hardware class until runtime negotiation reduces the allocation.

Why this answer

Even in consumption mode, Junos initially allocates power based on class or a default maximum until the device negotiates its actual consumption via LLDP-MED or CDP.

Full explanation →
87
MCQeasy

A network administrator needs to display the multicast routing table entries, including incoming interfaces and outgoing interface lists (OIL), on a Junos device. Which operational command should be used?

A.show ospf route
B.show multicast route
C.show igmp interface
D.show pim join
AnswerB

This command displays the active multicast forwarding cache and routing state.

Why this answer

The 'show multicast route' command displays the Multicast Forwarding Information Base (MFIB) entries, including source, group, incoming interface, and outgoing interfaces.

Full explanation →
88
MCQeasy

An administrator is configuring a Junos device to support IGMPv3 on user-facing VLAN interfaces. Which configuration statement enables IGMPv3 processing on interface irb.10?

A.set protocols pim interface irb.10 igmp-version 3
B.set interfaces irb.10 family inet igmp-version v3
C.set protocols igmp interface irb.10 version 3
D.set routing-options multicast igmp-version 3
AnswerC

The 'version 3' statement under protocols igmp interface explicitly sets the IGMP version to 3.

Why this answer

IGMP version selection on Junos interfaces is configured under protocols igmp interface.

Full explanation →
89
MCQmedium

An administrator wishes to configure VXLAN data plane encapsulation on an MX Series router with an EVPN instance. Which statement under the routing-instances hierarchy defines the local VTEP source interface?

A.encapsulation-source-interface fxp0.0;
B.vxlan-source-ip lo0.0;
C.tunnel-source loopback 0;
D.vtep-source-interface lo0.0;
AnswerD

The vtep-source-interface command specifies the loopback interface used as the source IP for VXLAN packets.

Why this answer

In Junos OS, the VXLAN source interface is defined using the 'vtep-source-interface' statement under the EVPN routing instance or switch-options hierarchy.

Full explanation →
90
MCQhard

An engineer configures a two-color policer on an MX router. What are the two states or outcomes for evaluated packets in a standard two-color policer?

A.In-profile and Out-of-profile only with temporal buffers
B.Green and Red
C.Green, Yellow, and Red
D.Discard and Forward without loss priority marking
AnswerB

Two-color policers classify traffic into conforming (green) and non-conforming (red).

Why this answer

A two-color policer evaluates packets as either conforming (within the rate limit) or non-conforming (exceeding the rate limit).

Full explanation →
91
Multi-Selecthard

Which TWO parameters can be configured within a Junos scheduler definition? (Choose two)

Select 2 answers
A.rewrite-rule
B.bandwidth-limit
C.transmit-rate
D.drop-profile-map
E.policer-action
AnswersC, D

transmit-rate defines the minimum bandwidth guarantee.

Why this answer

Schedulers include parameters such as transmit-rate, buffer-size, priority, and drop-profile-map.

Full explanation →
92
MCQeasy

Which EVPN route type is responsible for advertising MAC addresses combined with IP addresses (MAC/IP Advertisement Route)?

A.Route Type 3
B.Route Type 2
C.Route Type 4
D.Route Type 1
AnswerB

Route Type 2 advertises MAC and IP bindings.

Why this answer

Route Type 2 is the MAC/IP Advertisement Route, which carries a MAC address and optionally an IP address, facilitating both L2 bridging and L3 host routing.

Full explanation →
93
MCQhard

You are analyzing BGP EVPN updates and observe an Extended Community attached to a Type-2 route containing a sequence number. What is the primary function of this MAC Mobility Extended Community?

A.It signals the EVPN split-horizon label for BUM traffic.
B.It facilitates loop-free MAC movement tracking by incrementing sequence numbers when a host changes attachment PEs.
C.It determines the Designated Forwarder for multi-homed Ethernet segments.
D.It defines the VXLAN Network Identifier (VNI) mapping for data-plane decapsulation.
AnswerB

MAC mobility sequence numbers ensure that the network correctly updates MAC locations and prevents blackholing during rapid MAC moves.

Why this answer

The MAC Mobility Extended Community carries a sequence number used to resolve MAC moves. If a host moves from one PE to another, the new PE advertises the MAC with an incremented sequence number, causing all other PEs to update their tables to point to the new location.

Full explanation →
94
Multi-Selecthard

An administrator is troubleshooting an MSDP deployment between two autonomous systems. Which THREE factors can cause an MSDP peer session to fail to establish? (Choose three)

Select 3 answers
A.TCP port 639 being blocked by a firewall between the peers
B.Incorrect local source IP address specified in the MSDP peer configuration
C.A mismatch in configured MD5 authentication passwords between the peers
D.An incorrect IGMPv2 timer setting on the receiver VLAN
E.An invalid PIM dense-mode setting on the core interface
AnswersA, B, C

MSDP relies on TCP connections over port 639, so blocking this port prevents session establishment.

Why this answer

MSDP runs over TCP port 639. Session establishment requires correct peer IP configuration, functional TCP connectivity, and matching authentication keys if configured.

Full explanation →
95
Multi-Selectmedium

Which TWO actions occur when an 802.1X supplicant fails authentication and a guest VLAN is configured on the EX Series switch port? (Choose two)

Select 2 answers
A.The switch assigns the interface to the specified guest VLAN.
B.The client retains access to network resources restricted by the guest VLAN boundaries.
C.The switch sends a RADIUS accounting stop packet for the failed session.
D.The switch permanently disables the physical port until a manual reset is issued.
E.The supplicant is automatically migrated to the critical authentication server group.
AnswersA, B

Correct. Failure moves the port into the guest VLAN.

Why this answer

When authentication fails and a guest VLAN is defined, the port is moved to the guest VLAN, and standard re-authentication timers or failure actions apply.

Full explanation →
96
Multi-Selecthard

Which TWO of the following statements regarding EVPN Route Type 1 (Ethernet Auto-Discovery Route) are correct? (Choose two)

Select 2 answers
A.Type 1 routes are only used in single-homed network topologies.
B.Type 1 routes are advertised either per-EVI or per-Ethernet Segment (ES).
C.Type 1 routes are exclusively used for mapping IP prefixes to IP-VRFs.
D.Per-EVI Type 1 routes enable multi-homing aliasing so PEs can load balance traffic even before learning a MAC locally.
E.Type 1 routes replace Type 3 routes for handling BUM traffic replication.
AnswersB, D

Type 1 routes have two distinct encodings: per-EVI (for aliasing) and per-ES (for fast convergence/mass withdrawal).

Why this answer

Route Type 1 comes in two variants: per-EVI and per-ES. Per-EVI routes provide aliasing for load-balancing across multi-homed PEs, and per-ES routes facilitate fast convergence during node failures.

Full explanation →
97
MCQhard

An EX4300 switch is configured with captive portal authentication. Unauthenticated users are successfully redirected when attempting HTTP traffic, but HTTPS traffic fails to redirect properly and instead shows a certificate warning or connection timeout in the user's browser. What is the fundamental reason for this behavior with standard captive portal implementations?

A.Standard captive portal redirects rely on intercepting unencrypted HTTP traffic; intercepting HTTPS without SSL proxy causes certificate mismatch errors.
B.HTTPS traffic is blocked by default firewall filters and is excluded from the captive portal bypass list.
C.The captive portal server only listens on TCP port 80 and drops all incoming TCP port 443 SYN packets.
D.The captive portal profile lacks a valid SSL certificate for HTTPS traffic decryption.
AnswerA

Correct. HTTPS encryption prevents seamless Layer 2 HTTP redirection.

Why this answer

Standard Layer 2 captive portal implementations intercept HTTP traffic via destination NAT or HTTP redirection. HTTPS traffic cannot be intercepted without a Man-in-the-Middle (MITM) proxy and SSL decryption because the TLS handshake fails due to certificate mismatch.

Full explanation →
98
MCQhard

You are configuring traffic shaping on an egress interface and need to ensure that the shaper accounts for Layer 2 framing overhead (such as Ethernet headers and preambles). Which configuration statement achieves this?

A.set routing-options forwarding-table l2-accounting
B.set firewall family inet filter <filter> overhead-accounting
C.set class-of-service traffic-control-profiles <profile> shaping-rate ... layer-2-overhead
D.set class-of-service interfaces <interface> encapsulation-overhead
AnswerC

layer-2-overhead ensures framing bytes are included in shaping calculations.

Why this answer

The explicit specification of accounting for layer 2 overhead in Junos CoS shaping is done via the explicit-tracking or layer-2-overhead options under the traffic-control-profile or scheduler.

Full explanation →
99
MCQmedium

An enterprise network uses BGP communities to tag routes at regional branch offices. Headquarters needs to strip these specific communities from routes before advertising them to external transit providers. Which Junos routing policy action accomplishes this?

A.community delete target_community
B.community set target_community
C.as-path-remove target_community
D.metric set 0
AnswerA

The 'community delete' action removes the matched community string from the route.

Why this answer

Using the 'community delete' action within a routing policy removes specified communities from routes matching the policy.

Full explanation →
100
Multi-Selectmedium

Which TWO statements are correct regarding the behavior and configuration of multi-supplicant mode on EX Series switches? (Choose two)

Select 2 answers
A.It restricts the port to operating exclusively as an access trunk port.
B.It requires all connected devices to use identical EAP methods and credentials.
C.Each authenticated client on the port can be placed into its own dynamic VLAN via RADIUS.
D.It is mutually exclusive with MAC RADIUS fallback configurations.
E.It allows multiple supplicants to authenticate independently on the same physical port.
AnswersC, E

Correct. Dynamic VLAN assignment works per supplicant in multi-supplicant mode.

Why this answer

Multi-supplicant mode allows multiple clients on a single port to authenticate independently. Each client maintains its own authentication state machine.

Full explanation →
101
MCQhard

You are redistributing BGP routes into OSPF on an MX Series router. By default, what metric type and cost are assigned to these redistributed routes when they enter the OSPF domain?

A.Metric-type 2 with a cost of 1
B.Metric-type 1 with a cost of 20
C.Metric-type 1 with a cost of 0
D.Metric-type 2 with a cost of 10
AnswerA

Junos assigns external metric-type 2 and a cost of 1 by default to all routes redistributed into OSPF.

Why this answer

By default, routes redistributed into OSPF are assigned metric-type 2 (E2) and a default metric value of 1.

Full explanation →
102
MCQhard

In a Juniper Virtual Chassis scaling deployment comprising 10 EX4600 switches, how are control and management planes structured across member switches to maintain high availability and failover resilience?

A.Two switches are elected as Master and Backup Routing Engines, while remaining switches act as line cards.
B.Every switch runs its own independent Spanning Tree instance to prevent loops across the virtual backplane.
C.Control traffic is load-balanced across all 10 member switches using ECMP across the dedicated stacking ports.
D.All 10 switches run independent routing engines with separate control planes and synchronized MAC tables.
AnswerA

The Virtual Chassis architecture assigns Routing Engine roles to two members for redundancy, with the rest acting as line-card members.

Why this answer

A Virtual Chassis designates a Routing Engine (RE) Master and Backup across designated members, while all switches participate in the distributed forwarding plane.

Full explanation →
103
Multi-Selecthard

Which TWO statements are correct regarding OSPF NSSA (Not-So-Stubby Area) behavior and configuration in Junos OS? (Choose two)

Select 2 answers
A.NSSAs allow the injection of external routes into the area using Type-7 LSAs.
B.Virtual links are fully supported to transit across an NSSA area.
C.An NSSA ABR automatically floods a default summary route into the NSSA by default.
D.NSSAs fully support external Type-5 LSAs originating from normal areas directly within the NSSA.
E.Type-7 LSAs are translated into Type-5 LSAs by the NSSA ABR when exiting into the OSPF backbone.
AnswersA, E

Type-7 LSAs are specifically designed for NSSAs to originate external routes without accepting Type-5 LSAs from the backbone.

Why this answer

NSSA areas allow external routes to be injected via Type-7 LSAs. By default, an NSSA does not flood default routes unless explicitly configured with 'default-lsa'.

Full explanation →
104
MCQeasy

Which Junos configuration hierarchy is used to define a BGP peer group to simplify neighbor configurations?

A.routing-options autonomous-system
B.interfaces <interface-name> unit 0 family inet bgp
C.protocols bgp group <group-name>
D.policy-options community
AnswerC

The 'protocols bgp group' hierarchy allows shared configuration parameters across multiple BGP neighbors.

Why this answer

BGP peer groups and neighbor settings are configured under the 'protocols bgp group' hierarchy in Junos.

Full explanation →
105
MCQhard

An EX Series switch is configured with 802.1X and MAC RADIUS. A client device connects that does not support 802.1X. The switch attempts 802.1X, times out, and successfully falls back to MAC RADIUS. However, the administrator notices a significant delay (several seconds) before the MAC RADIUS request is sent to the server. What parameter should be tuned to reduce this delay?

A.Reduce the 'supp-timeout' and 'max-retries' parameters under the 802.1X interface configuration.
B.Increase the 'server-timeout' parameter in the access-profile configuration.
C.Disable EAPOL-start message generation on the switch port.
D.Enable fast-reauth under the system authentication options.
AnswerA

Correct. Tuning down dot1x retry counts and timeouts accelerates the transition to fallback methods.

Why this answer

The delay is caused by the 802.1X supplicant timeout and retries before giving up and falling back to MAC RADIUS. Reducing 'supp-timeout' and 'max-retries' minimizes this delay.

Full explanation →
106
Multi-Selecthard

Which TWO statements describe the characteristics of Random Early Detection (RED) and drop profiles in Junos? (Choose two)

Select 2 answers
A.Drop profiles are configured under the forwarding-classes hierarchy
B.Drop profiles drop 100% of packets immediately once the queue fill level reaches the start point
C.Drop profile curves plot drop probability against queue buffer fill level
D.Drop profiles help prevent TCP global synchronization by dropping packets before buffers are completely full
E.Drop profiles operate exclusively on Layer 2 control frames
AnswersC, D

The graph maps drop probability versus fill level percentage.

Why this answer

Drop profiles define drop probability against fill level, helping prevent TCP global synchronization.

Full explanation →
107
Multi-Selectmedium

Which THREE parameters must match between two OSPF routers on a shared broadcast segment for an adjacency to successfully form? (Choose three)

Select 3 answers
A.Router ID
B.Area ID
C.Hello and Dead interval timers
D.Interface MTU size
E.Interface primary IP address subnet
AnswersA, B, C

Duplicate Router IDs will prevent adjacencies from forming, and they must be unique within the OSPF domain.

Why this answer

OSPF hello/dead timers, area ID, and authentication parameters must match between neighbors to establish an adjacency.

Full explanation →
108
MCQhard

You are configuring an EX Series switch to support IP phones that require both data and voice VLAN segregation on a single access port. You implement an access port configured with a voice VLAN. Which underlying Junos mechanism allows the switch to process untagged data traffic into the native/access VLAN and tagged voice traffic into the voice VLAN simultaneously?

A.Configuring a trunk port with native-vlan-id and voice-vlan parameters.
B.Implementing IEEE 802.1ad provider bridging to double-tag voice and data frames.
C.Enabling port-based authentication with dynamic VLAN assignment via RADIUS.
D.Configuring an access port with the voice-vlan statement, which automatically handles tagging for the specified voice VLAN ID while keeping data untagged.
AnswerD

Defining a voice-vlan on an access port enables automatic handling of tagged voice traffic alongside untagged data.

Why this answer

Junos handles voice VLANs on access ports by accepting untagged frames into the access VLAN and specific tagged frames (matching the voice VLAN ID) by utilizing internal VLAN tagging rules automatically applied when a voice VLAN is configured on an access interface.

Full explanation →
109
MCQmedium

An engineer is troubleshooting a BGP route reflection topology where a non-client IBGP peer sends a route to a route reflector. Will the route reflector reflect this route to other non-client IBGP peers?

A.Yes, all routes received by a route reflector are reflected to all peers regardless of client status.
B.No, route reflectors never reflect routes received from any IBGP peer.
C.No, routes received from a non-client peer are only reflected to client peers, not to other non-client peers.
D.Yes, provided the routes contain the same Cluster ID as the receiving non-client peer.
AnswerC

Non-client routes are reflected only to clients, enforcing partial mesh requirements for non-clients.

Why this answer

A route reflector reflects routes from clients to clients, clients to non-clients, and non-clients to clients, but it does NOT reflect routes received from a non-client to other non-client peers.

Full explanation →
110
MCQmedium

An engineer needs to verify the Rendezvous Point (RP) currently learned via the Bootstrap Router (BSR) mechanism on a Junos device. Which operational command should be used?

A.show pim rps
B.show igmp rp
C.show msdp rp-list
D.show multicast rp-table
AnswerA

This command shows the active RP set and how each RP was discovered.

Why this answer

The 'show pim rps' command displays all active RPs known to the router, including whether they were learned via static configuration, Auto-RP, or BSR.

Full explanation →
111
MCQeasy

An administrator needs to verify the operational state of an MSTP instance named 'MSTI-1' on an EX Series switch, including its designated root and regional parameters. Which operational command should be executed?

A.show ethernet-switching mstp detail
B.show bridge mstp-status instance-1
C.show spanning-tree instance msti-1
D.show mstp instance detail
AnswerD

show mstp instance provides detailed operational parameters for MSTP instances.

Why this answer

The command 'show mstp instance detail' or 'show spanning-tree mstp instance' displays instance details. In Junos, it is 'show mstp instance [name]'.

Full explanation →
112
MCQeasy

Which command allows an operator to view the local and remote MAC addresses learned via EVPN control plane and data plane across all bridge domains on an MX Series router?

A.show bridge domain
B.show route table inet.0
C.show evpn database
D.show mpls lsp
AnswerC

This command outputs the complete EVPN MAC/IP database learned across all PEs.

Why this answer

The 'show evpn database' command displays the EVPN routing/MAC table containing MAC addresses learned via BGP EVPN control plane and local data plane learning.

Full explanation →
113
MCQhard

An administrator configures 802.1X authentication with local server fallback on an EX Series switch. When the external RADIUS server is unreachable, the switch fails over to the local user database. However, users authenticated via the local database are placed in the default access VLAN instead of the VLAN specified in their local user profile. What is the cause of this behavior?

A.The local fallback profile was not bound to the interface using the 'fallback-profile' command.
B.Local database user profiles on Junos do not support dynamic VLAN assignment attributes natively, requiring interface-level default fallback VLANs.
C.The local database uses PAP, which strips VLAN assignment attributes from the authentication reply.
D.RADIUS accounting was disabled, preventing local attribute synchronization.
AnswerB

Correct. Junos local authentication has limited attribute return capabilities compared to external RADIUS.

Why this answer

When using local fallback authentication on Junos switches, local user database entries lack the rich attribute support (like dynamic VLAN assignment via RADIUS VSA equivalents) unless explicitly mapped or configured via local database profiles.

Full explanation →
114
Multi-Selectmedium

Which THREE types of classifiers are natively supported in Junos Class of Service? (Choose three)

Select 3 answers
A.exp
B.dscp
C.ieee-802.1
D.tcp-port
E.mac-address
AnswersA, B, C

exp is used for MPLS experimental bits classification.

Why this answer

Junos supports multiple classifier types including dscp, exp, and ieee-802.1.

Full explanation →
115
Multi-Selecthard

An enterprise engineer is configuring Multicast Source Discovery Protocol (MSDP) on a Junos device. Which THREE statements accurately describe MSDP behavior and functions? (Choose three)

Select 3 answers
A.MSDP uses Source-Active (SA) messages to advertise active multicast sources to peer RPs.
B.MSDP is required for Anycast RP deployments within the same or different PIM domains.
C.MSDP replaces PIM sparse-mode for forwarding multicast data traffic to receivers.
D.MSDP peer connections are maintained via reliable TCP sessions.
E.MSDP runs directly over IP protocol number 46.
AnswersA, B, D

SA messages contain the source IP, group IP, and originating RP address.

Why this answer

MSDP is used between RPs to share active sources, uses TCP for transport, and uses SA (Source-Active) messages.

Full explanation →
116
MCQmedium

An administrator is deploying EVPN multi-homing with all-active mode on an MX Series router. Which configuration element uniquely identifies the provider edge (PE) router's attachment circuit to an Ethernet segment?

A.Route Distinguisher (RD)
B.Ethernet Tag ID
C.Ethernet Segment Identifier (ESI)
D.ESI Label Extended Community
AnswerC

The ESI uniquely identifies the multi-homed segment across the network.

Why this answer

The Ethernet Segment Identifier (ESI) is a 10-octet unique identifier configured under the interface or access link to identify an Ethernet segment for multi-homing.

Full explanation →
117
MCQmedium

You are configuring MAC limiting on an EX Series switch interface to restrict the maximum number of learned MAC addresses to 10. What happens when the 11th unique MAC address attempts to communicate through the interface?

A.The switch drops packets from the new MAC address and optionally logs or generates an SNMP trap.
B.The switch immediately reboots the line card to protect the control plane.
C.The switch forwards the frame and clears the oldest learned MAC entry from the forwarding table.
D.The switch dynamically converts the port into a routed Layer 3 interface.
AnswerA

Exceeding the MAC limit triggers the configured action, typically dropping new source MACs and logging.

Why this answer

By default, MAC limit drop or log actions occur. The standard configurable action when a limit is exceeded includes dropping the packet or shutting down the port.

Full explanation →
118
Multi-Selectmedium

Which THREE components are required to fully configure a custom Class of Service scheme on an MX Series router? (Choose three)

Select 3 answers
A.schedulers
B.dynamic-profiles
C.forwarding-classes
D.classifiers
E.bgp-routes
AnswersA, C, D

Schedulers define queue scheduling and drop profiles.

Why this answer

Implementing custom CoS requires forwarding classes, classifiers, and schedulers.

Full explanation →
119
MCQeasy

What is the default OSPF reference bandwidth in Junos OS?

A.100 Mbps
B.10 Gbps
C.10 Mbps
D.1 Gbps
AnswerA

100 Mbps is the standard default reference bandwidth for OSPF.

Why this answer

The default OSPF reference bandwidth in Junos OS is 100 Mbps (100,000,000 bps).

Full explanation →
120
MCQeasy

Which LLDP TLV (Type-Length-Value) is mandatory for LLDP-MED operation and is used to distinguish media endpoint devices from standard network switches and routers?

A.MAC Address TLV
B.LLDP-MED Capabilities TLV
C.Port ID TLV
D.System Description TLV
AnswerB

The Capabilities TLV is fundamental for LLDP-MED to identify device classes (e.g., IP phone, gateway).

Why this answer

The Capabilities TLV allows devices to advertise whether they are standard bridge/router devices or LLDP-MED endpoints.

Full explanation →
121
MCQeasy

Which command allows you to view the real-time tracing of OSPF packet exchanges and state changes on a Junos device?

A.set debug ospf packets enable
B.monitor protocols ospf debug
C.set system tracing ospf enable
D.set protocols ospf traceoptions file ospf-log size 10m files 5
AnswerD

Traceoptions logging for OSPF debugging is configured via this hierarchy.

Why this answer

OSPF tracing is configured and viewed using standard Junos traceoptions, and operational debugging is viewed using 'clear' or 'show log' or real-time tracing commands. For checking active traces or running traces, traceoptions are configured under protocols ospf.

Full explanation →
122
Multi-Selecthard

An EX4300 switch running Junos OS supports multiple PoE power management options. Which THREE PoE management modes or settings are valid in Junos configuration? (Choose three.)

Select 3 answers
A.Setting automatic PoE routing metrics via OSPF.
B.Setting port priority (e.g., high, medium, low) for power shedding during overload.
C.Configuring inline power encryption keys for VoIP security.
D.Configuring power allocation based on device class or actual consumption.
E.Setting manual maximum power consumption limits per interface in milliwatts.
AnswersB, D, E

Port priority settings dictate shedding behavior.

Why this answer

Junos PoE configuration supports keywords such as management-mode, priority, and consumption limits.

Full explanation →
123
Multi-Selectmedium

An administrator is configuring LLDP-MED on an EX Series switch for a new deployment of IP phones. Which TWO configuration steps are required to properly advertise network policies to these endpoints? (Choose two.)

Select 2 answers
A.Configure an LLDP-MED device policy for voice specifying the VLAN ID and priority.
B.Enable spanning tree fast-convergence on all voice VLAN ports.
C.Enable LLDP globally under the protocols hierarchy.
D.Enable CDP compatibility mode globally.
E.Configure a static ARP entry for every IP phone MAC address.
AnswersA, C

Defining the device policy specifies the exact voice VLAN and QoS marking sent to the phone.

Why this answer

Configuring LLDP-MED network policies requires enabling LLDP globally and defining the policy parameters under the appropriate protocol hierarchy.

Full explanation →
124
MCQmedium

You are troubleshooting an 802.1X deployment on an EX4300 switch. Clients fail to authenticate when using Supplicant-based authentication combined with MAC RADIUS fallback. You notice that the switch does not attempt MAC RADIUS after 802.1X times out. Which configuration error most likely caused this?

A.You enabled static MAC pinning on the access port, which disables fallback mechanisms.
B.You omitted the mac-radius statement from the global protocols access-profile configuration.
C.You configured the supplicant mode as single-supplicant instead of multi-supplicant.
D.You failed to include both dot1x and mac-radius within the interface authentication-order statement.
AnswerD

Correct. The switch evaluates authentication methods based on the defined authentication-order.

Why this answer

To fall back to MAC RADIUS when 802.1X fails, the 'authentication-order' statement must explicitly list both dot1x and mac-radius, and the fallback mechanism must be configured properly.

Full explanation →
125
Multi-Selecthard

Which THREE configuration tasks are required when implementing OSPFv3 on Junos devices? (Choose three)

Select 3 answers
A.Configuring BGP autonomous system numbers for OSPFv3 operation
B.Enabling OSPFv3 under the protocols ospf3 hierarchy
C.Assigning interfaces to OSPFv3 areas
D.Defining OSPFv3 area identifiers
E.Enabling IPv4 address families inside protocols ospf3
AnswersB, C, D

OSPFv3 is configured under protocols ospf3.

Why this answer

Configuring OSPFv3 requires specifying protocols ospf3, configuring areas, and enabling OSPFv3 on specific interfaces (IPv6 enabled).

Full explanation →
126
MCQmedium

You want to tune the speed at which OSPF processes link-state updates by modifying the SPF calculation delay and hold timers. Where are these timers configured?

A.set routing-options ospf spf-timers delay 200 hold 1000
B.set protocols ospf area 0.0.0.0 timers spf 200 1000
C.set protocols ospf interface xe-0/0/0.0 spf-timer 200
D.set protocols ospf spf-delay 200 spf-holdtime 1000
AnswerD

SPF timers are tuned globally under protocols ospf.

Why this answer

SPF calculation timers (delay and hold) are configured under the protocols ospf hierarchy using the spf-delay and spf-holdtime statements.

Full explanation →
127
MCQmedium

You are configuring an EX Series switch to support MAC RADIUS authentication. You want to ensure that the switch sends accounting start and stop packets to the RADIUS server. Which configuration hierarchy is required to enable RADIUS accounting for access clients?

A.[edit protocols dot1x accounting-options]
B.[edit system radius-server accounting]
C.[edit protocols access-profile profile-name accounting]
D.[edit access-control accounting-profile]
AnswerC

Correct. Accounting is configured under the access-profile hierarchy.

Why this answer

RADIUS accounting for access control clients in Junos is configured under the access profile hierarchy using the 'accounting' statement.

Full explanation →
128
Multi-Selecthard

Which THREE features or protocols are used in Juniper enterprise switching environments to prevent Layer 2 bridging loops while avoiding traditional Spanning Tree blocking ports? (Choose three)

Select 3 answers
A.Rapid PVST+ with bridge priority overrides
B.Virtual Chassis technology
C.Ethernet VPN (EVPN) with VXLAN data plane
D.MSTP with MSTI region mapping
E.Multi-Chassis Link Aggregation (MC-LAG)
AnswersB, C, E

Virtual Chassis combines multiple physical switches into a single logical device, eliminating internal loops.

Why this answer

MC-LAG, Virtual Chassis, and EVPN-VXLAN eliminate loops via active-active multi-pathing or distributed control planes without traditional STP blocking links.

Full explanation →
129
Multi-Selectmedium

An administrator is configuring IGMP snooping on an EX Series switch. Which TWO benefits does IGMP snooping provide in a switched Ethernet environment? (Choose two)

Select 2 answers
A.It automatically acts as the PIM Rendezvous Point for the VLAN.
B.It conserves bandwidth on switch links by filtering unwanted multicast streams.
C.It translates IPv4 multicast addresses to IPv6 multicast addresses.
D.It replaces PIM sparse-mode on Layer 3 core routers.
E.It prevents multicast traffic from flooding all ports in a VLAN by forwarding it only to ports with active receivers.
AnswersB, E

By pruning multicast streams from links without receivers, network bandwidth is conserved.

Why this answer

IGMP snooping inspects IGMP traffic to constrain multicast traffic to ports with active receivers, preventing unnecessary flooding on non-listening ports.

Full explanation →
130
MCQmedium

You are configuring Power over Ethernet (PoE) on an EX4300 switch to power an IP phone requiring 15.4W (802.3af). By default, the switch allocates power based on dynamic classification. However, the IP phone frequently reboots under heavy traffic load. Which command should you configure on the switch interface to ensure the phone receives a guaranteed dedicated power budget?

A.set protocols lldp-med interface ge-0/0/14 power-over-ethernet budget 15400
B.set interfaces ge-0/0/14 poe priority high
C.set poe interface ge-0/0/14 consumption 15400
D.set poe interface ge-0/0/14 max-power 15.4w
AnswerC

The consumption command manually overrides dynamic classification by setting a specific power limit in milliwatts.

Why this answer

Configuring the power consumption limit manually via CLI ensures the switch reserves the exact required wattage rather than relying on dynamic classification which can sometimes underestimate bursts.

Full explanation →
131
MCQhard

You are troubleshooting a suboptimal traffic forwarding issue in an EVPN-VXLAN fabric with multi-homed devices. Traffic destined for a multi-homed server is being sent to only one of the PEs despite all-active mode being configured. Which EVPN route type and mechanism are responsible for enabling load balancing across all available PEs attached to the same Ethernet segment?

A.Route Type 1 (Ethernet Auto-Discovery per EVI)
B.Route Type 2 with MAC mobility extended community
C.Route Type 4 (Ethernet Segment Route)
D.Route Type 3 (Inclusive Multicast)
AnswerA

Type 1 routes per EVI provide the aliasing function required for load balancing traffic across all PEs attached to a multi-homed segment.

Why this answer

Type 1 Ethernet A-D routes per EVI are used for multi-homing aliasing, allowing PEs that do not learn a specific MAC address locally to still load-balance traffic to that MAC across all PEs advertising the ESI via Type 1 routes.

Full explanation →
132
MCQmedium

You need to modify the priority of a Junos OSPF interface to ensure it becomes the designated router (DR). Which command accomplishes this?

A.set interfaces xe-0/0/0.0 ospf-priority 200
B.set protocols ospf area 0.0.0.0 interface xe-0/0/0.0 priority 200
C.set protocols ospf priority 200 interface xe-0/0/0.0
D.set protocols ospf area 0.0.0.0 interface xe-0/0/0.0 dr-priority 200
AnswerB

The 'priority' command sets the OSPF interface priority (default is 1, higher wins).

Why this answer

OSPF interface priority is configured under the interface level within protocols ospf using the 'priority' command.

Full explanation →
133
MCQeasy

What does the LLDP-MED acronym stand for in the context of enterprise networking and IP telephony?

A.Link Layer Device Protocol - Managed Ethernet Deployment
B.Link Layer Discovery Protocol - Media Endpoint Discovery
C.Local Loop Discovery Protocol - Mobile Ethernet Device
D.Logical Link Discovery Protocol - Multi-access Equipment Design
AnswerB

LLDP-MED is an extension of LLDP tailored for IP communication endpoints.

Why this answer

LLDP-MED stands for Link Layer Discovery Protocol - Media Endpoint Discovery.

Full explanation →
134
MCQeasy

A network administrator is configuring an enterprise router to join the Source-Specific Multicast (SSM) range. According to RFC standards, what is the standard IPv4 address block reserved for SSM?

A.239.0.0.0/8
B.232.0.0.0/8
C.224.0.0.0/24
D.224.0.1.0/24
AnswerB

The 232.0.0.0/8 block is allocated specifically for Source-Specific Multicast applications.

Why this answer

The range 232.0.0.0/8 is globally reserved by IANA for Source-Specific Multicast (SSM).

Full explanation →
135
MCQeasy

Which statement correctly describes the function of an OSPF Stub Area?

A.Stub areas allow bidirectional redistribution of BGP routes.
B.Stub areas block inter-area summary (Type-3) LSAs.
C.Stub areas block external AS-external (Type-5) LSAs and use a default route injected by the ABR.
D.Stub areas allow Type-7 LSAs from external ASBRs.
AnswerC

Stub areas do not accept external LSAs; ABRs inject a default route to reach external destinations.

Why this answer

Stub areas block external Type-5 LSAs and instead rely on a default route injected by the ABR.

Full explanation →
136
MCQhard

In a Juniper Q-in-Q deployment, customer frames are received with an EtherType of 0x8100 (IEEE 802.1Q). The service provider network uses a custom provider EtherType of 0x9100 for outer tags. Where and how is this custom EtherType configured on an MX Series router?

A.Under 'protocols l2-learning provider-tpid 0x9100'
B.Under 'system ethernet-switching tpid-table add 0x9100'
C.Under 'routing-instances bd bridge-options tpid 0x9100'
D.Under 'interfaces ge-0/0/1 tpid 0x9100' on the physical interface
AnswerD

Configuring the TPID on the physical interface allows the router to recognize non-standard outer tag EtherTypes.

Why this answer

Custom inner/outer TPIDs (Tag Protocol Identifiers) are configured on the physical interface using 'tpid 0x9100'.

Full explanation →
137
Multi-Selectmedium

Which TWO statements describe characteristics of EVPN All-Active Multi-Homing compared to Single-Active Multi-Homing? (Choose two)

Select 2 answers
A.All-active multi-homing restricts host MAC learning to only one PE at a time.
B.In all-active mode, only the Designated Forwarder handles unicast traffic from the core.
C.All-active multi-homing requires Spanning Tree Protocol to block redundant links.
D.All-active multi-homing allows multiple PEs attached to the same Ethernet segment to forward traffic simultaneously.
E.All-active multi-homing utilizes EVPN Route Type 1 per-EVI routes to enable load-balancing (aliasing) across PEs.
AnswersD, E

In all-active mode, all attached PEs actively forward traffic for the multi-homed segment.

Why this answer

All-active multi-homing allows multiple PEs connected to the same Ethernet segment to actively forward traffic simultaneously and load-balance unicast traffic using aliasing, unlike single-active where only the DF forwards traffic.

Full explanation →
138
MCQhard

An administrator implements MAC RADIUS authentication on an EX Series switch. Several legacy printers connected to the ports fail to authenticate because they send their MAC addresses in uppercase letters with no separators (AABBCCDDEEFF), while the RADIUS server expects lowercase with colons (aa:bb:cc:dd:ee:ff). How can you resolve this mismatch on the Junos switch?

A.Enable MAC-address translation (MAT) on the Ethernet switching table.
B.Configure the local user database to normalize MAC addresses automatically.
C.Configure the MAC address format under the access-profile mac-radius options using the lowercase and colon-delimiter settings.
D.Configure a regex-based rewriting firewall filter on the interface facing the printers.
AnswerC

Correct. Access profiles support formatting options for MAC RADIUS requests.

Why this answer

Junos OS allows configuring the MAC address format in MAC RADIUS requests via the 'mac-radius' settings under access profiles, allowing conversion to lowercase or specific separator formats.

Full explanation →
139
MCQmedium

You are configuring captive portal on an EX Series switch. You want users to be redirected to an external web server hosted at https://portal.enterprise.com/login. Where do you specify this redirection URL in the Junos OS CLI?

A.Under [edit access captive-portal profile profile-name redirection url].
B.Under [edit protocols dot1x captive-portal url].
C.Under [edit system services web-management captive-portal interface ge-0/0/1 redirect-url].
D.Under [edit forwarding-options captive-portal gateway].
AnswerA

Correct. The access captive-portal profile defines redirection parameters.

Why this answer

Captive portal redirect URLs are configured within the captive-portal profile hierarchy.

Full explanation →
140
MCQhard

An administrator implements MSTP (Multiple Spanning Tree Protocol) in a large data center using Juniper switches. Region boundaries must be maintained strictly. Which three parameters must match identically across all switches for them to be considered part of the same MST region?

A.MAC address, revision number, and region name
B.Region name, revision number, and VLAN-to-instance mapping
C.Bridge priority, hello time, and max age
D.Extended system ID, region name, and forward delay
AnswerB

These three parameters form the MST configuration digest and must be identical.

Why this answer

MST region configuration requires identical configuration name, revision number, and VLAN-to-instance mapping table.

Full explanation →
141
MCQmedium

You want to configure LLDP-MED to advertise a specific voice VLAN (VLAN ID 200) with a DSCP value of 46 to all connected IP phones across all switch ports. Which configuration hierarchy is used to define this global network policy in Junos OS?

A.set poe lldp-policy voice 200
B.set ethernet-switching-options voice-vlan id 200
C.set system lldp-med voice-vlan 200
D.set protocols lldp-med device-policy voice vlan 200 dscp 46
AnswerD

The correct hierarchy for defining LLDP-MED policies in Junos is protocols lldp-med device-policy.

Why this answer

LLDP-MED policies are configured under the protocols lldp-med hierarchy.

Full explanation →
142
MCQeasy

You want to tag specific BGP routes with a community value using a Junos policy framework. Which configuration snippet correctly defines a community named 'CUSTOM-COMM' with value 65000:100?

A.set routing-options community-list CUSTOM-COMM value 65000:100
B.set protocols bgp group external community CUSTOM-COMM 65000:100
C.set policy-options community CUSTOM-COMM members 65000:100
D.set policy-options policy-statement CUSTOM-COMM community 65000:100
AnswerC

This is the correct syntax to define a BGP community member in Junos policy options.

Why this answer

In Junos, BGP communities are defined under 'policy-options community' with a name and the community value specified in format AS:number or target:AS:number.

Full explanation →
143
MCQeasy

Which specific EVPN route type is responsible for carrying IP prefix routes, often used for inter-subnet forwarding in an IP-VRF-to-EVPN integration scenario?

A.Route Type 5
B.Route Type 3
C.Route Type 2
D.Route Type 1
AnswerA

Route Type 5 carries IP prefixes for IP-VRF routing in EVPN.

Why this answer

EVPN Route Type 5 is the IP Prefix Route, which allows the advertisement of IP prefixes (host or subnet routes) independently of MAC addresses, facilitating integrated routing and bridging (IRB) and inter-subnet forwarding.

Full explanation →
144
Multi-Selectmedium

Which TWO conditions must be satisfied for an EX Series switch to successfully process a RADIUS Change of Authorization (CoA) request? (Choose two)

Select 2 answers
A.The client must be actively running a captive portal browser session.
B.The RADIUS server must be configured as a dynamic client or CoA must be enabled on the switch access profile.
C.RADIUS accounting must be disabled globally across the entire switch.
D.The switch port must be configured in access trunk mode with static VLAN pinning.
E.The pre-shared secret configured on the RADIUS server for CoA must match the shared secret configured on the switch.
AnswersB, E

Correct. CoA requires explicit configuration to accept dynamic requests.

Why this answer

RADIUS CoA requires the switch to have dynamic-clients or CoA enabled in the access profile/RADIUS server configuration, and the switch must share the correct pre-shared secret with the RADIUS server.

Full explanation →
145
Multi-Selecthard

Which TWO statements are correct regarding hierarchical scheduling (H-QoS) on Juniper MX Series routers? (Choose two)

Select 2 answers
A.H-QoS eliminates the need for physical interface drop profiles
B.H-QoS is configured exclusively under the system routing-options hierarchy
C.Subscriber management frameworks often utilize hierarchical scheduler maps
D.H-QoS allows shaping and scheduling at multiple levels such as aggregate and queue levels
E.H-QoS requires disabling all hardware-based forwarding ASICs
AnswersC, D

Subscriber access relies heavily on H-QoS.

Why this answer

Hierarchical schedulers allow multi-level bandwidth allocation and tenant sub-rate shaping.

Full explanation →
146
MCQmedium

You are implementing MAC RADIUS authentication on an EX4600 switch. You notice that when a device connects, the switch sends the MAC address in the Username attribute (RADIUS attribute 1) with hyphen separators (e.g., aa-bb-cc-dd-ee-ff). Your RADIUS server expects colons (aa:bb:cc:dd:ee:ff). Where must you configure this format change on Junos OS?

A.Under [edit protocols access-profile profile-name mac-radius] using the format option.
B.Under [edit system radius-server server-name] using the attribute-format option.
C.Under [edit interfaces ge-0/0/1 unit 0 family ethernet-switching] using the mac-radius format command.
D.Under [edit access profile profile-name firewall] using the translation map.
AnswerA

Correct. Access profile configurations define the MAC address format for RADIUS requests.

Why this answer

Junos OS allows modifying the MAC address format sent to the RADIUS server using the 'mac-radius' configuration hierarchy under access profile or interface settings, specifically via the 'mac-питан' or format options.

Full explanation →
147
MCQmedium

You need to configure an LLDP-MED network policy for voice traffic on an EX switch, ensuring that the DSCP value is set to 46 and the VLAN ID is set to 150. Which configuration achieves this?

A.set protocols lldp-med network-policy voice vlan 150 dscp 46
B.set system services lldp-med policy voice id 150 dscp 46
C.set protocols lldp network-policy voice-vlan 150 priority 46
D.set interfaces all lldp-med voice-vlan 150 dscp 46
AnswerA

This command correctly specifies the voice network policy attributes for VLAN and DSCP.

Why this answer

LLDP-MED network policies are defined under protocols lldp-med network-policy voice and reference application type voice, VLAN ID, and DSCP settings.

Full explanation →
148
MCQeasy

Which Junos configuration hierarchy is used to disable the generation of OSPF Type-7 to Type-5 LSA translation on an NSSA Area Border Router (ABR)?

A.set protocols ospf area <name> stub no-translate
B.set protocols ospf area <name> nssa translator-role never
C.set protocols ospf translate-type7 off
D.set protocols ospf area <name> nssa no-translation
AnswerB

The 'translator-role never' command disables the NSSA ABR from performing Type-7 to Type-5 translation.

Why this answer

To prevent an NSSA ABR from translating Type-7 LSAs into Type-5 LSAs, you use the 'no-summaries' or 'nssa translator never' commands. Specifically, disabling translation is done via 'set protocols ospf area <name> nssa translator-role never'.

Full explanation →
149
Multi-Selecthard

Which THREE requirements must be met for an IP phone to successfully discover and use a voice VLAN configured via LLDP-MED on an EX Series switch? (Choose three)

Select 3 answers
A.An LLDP-MED network policy defining the voice VLAN must be configured and applied to the interface.
B.802.1X authentication must be enabled with dynamic VLAN assignment configured on a RADIUS server.
C.The switch must be configured in Layer 3 routing mode with an IRB interface for the voice VLAN.
D.The connected IP phone must support LLDP-MED and be capable of processing network policies.
E.LLDP must be enabled globally and on the specific switch interface.
AnswersA, D, E

The switch must have a valid LLDP-MED network policy assigned to advertise the voice VLAN.

Why this answer

Successful LLDP-MED voice VLAN deployment requires LLDP to be globally active, LLDP-MED network policies to be defined and mapped, and the connected IP phone to be LLDP-MED capable.

Full explanation →
150
MCQeasy

What is the primary function of the RADIUS server attribute 'Tunnel-Medium-Type' (Attribute 65) when received during an 802.1X authentication exchange on an EX Series switch?

A.It defines the VLAN ID or VLAN name to which the authenticated client port should be dynamically assigned.
B.It determines the encryption cipher used between the switch and the RADIUS server.
C.It specifies the physical transport media type for the tunnel, such as 802 (Ethernet) for VLAN assignment.
D.It indicates the authentication protocol (PAP, CHAP, EAP) being used in the tunnel.
AnswerC

Correct. Attribute 65 defines the medium type (typically 802 for IEEE 802 networks).

Why this answer

Tunnel-Medium-Type specifies the media type of the tunnel, which for VLAN assignments in Junos is typically set to 802 (Ethernet).

Full explanation →
Page 1

Page 2 of 5

Page 3

All pages

12345

Practice JNCIP-ENT by domain

Target a specific domain to shore up weak areas.

Ethernet Switching And Spanning TreeBGP AdvancedClass OF ServiceEVPNIP Telephony FeaturesInterior Gateway ProtocolsIP MulticastLayer 2 Authentication And Access Control
See all domains with question counts →