Courseiva

Juniper Networks Enterprise Routing and Switching, Professional (JNCIP-ENT, JN0-650) (JNCIP-ENT) (JNCIP-ENT) — Questions 301332

332 questions total · 5pages · All types, answers revealed

Page 4

Page 5 of 5

301
MCQmedium

An engineer configures an EVPN instance with multiple bridge domains. Each bridge domain requires a unique VNI. Where are the VNI values mapped to their respective bridge domains in Junos OS?

A.Under protocols bgp neighbor configuration
B.Under interfaces loopback unit 0 vni
C.Under policy-options community definition
D.Under routing-instances <name> bridge-domains <domain-name> vni <id>
AnswerD

VNI mapping is defined directly within the specific bridge-domain configuration.

Why this answer

In Junos OS, VNI values are mapped under the 'bridge-domains' hierarchy using the 'vni <id>' statement.

302
Multi-Selectmedium

Which TWO of the following statements correctly describe the operation and benefits of EVPN MAC mobility? (Choose two)

Select 2 answers
A.It forces BGP session resets whenever a MAC address moves between subnets.
B.It uses sequence numbers attached to Type-2 routes to track host movement between different PEs.
C.It is exclusively used for Route Type 4 Designated Forwarder election.
D.It prevents traffic blackholing when a virtual machine or host moves from one multi-homed attachment circuit to another.
E.It requires Spanning Tree Protocol to be enabled to detect host migration.
AnswersB, D

Sequence numbers increment upon each move to ensure the network recognizes the most recent location of the MAC.

Why this answer

EVPN MAC mobility uses sequence numbers in the MAC Mobility Extended Community to detect when a host moves between PEs, preventing blackholing and updating forwarding tables correctly.

303
MCQeasy

When configuring VXLAN data plane encapsulation inside an EVPN routing instance on Junos OS, which logical interface type must be bound to the bridge domain to provide VXLAN VNI mapping?

A.lo0.0
B.gre0
C.VLAN interface (vlan statement with vni)
D.fxp0
AnswerC

Bridge domains configured with a specific vni identifier handle the mapping between VLANs and VXLAN VNIs.

Why this answer

In Junos OS, VXLAN encapsulation is configured using logical tunnel interfaces or integrated routing and bridging (IRB) interfaces mapped via a vni statement under the bridge-domains hierarchy.

304
MCQeasy

Which IPv4 address is assigned as the all-systems multicast group address, used by routers to query all hosts on a local subnet?

A.224.0.0.1
B.224.0.0.22
C.224.0.0.13
D.224.0.0.2
AnswerA

224.0.0.1 is the standard multicast address representing all systems on the subnet.

Why this answer

224.0.0.1 is the all-hosts (all-systems) multicast group address.

305
MCQhard

An enterprise deploys 802.1X with dynamic VLAN assignment. When a user authenticates, the RADIUS server returns the correct VLAN name, but the switch places the port into a different VLAN. Upon checking the switch, you find that the VLAN name returned by RADIUS does not match any VLAN configured in the local 'vlans' configuration hierarchy. How does Junos OS handle this discrepancy?

A.The switch ignores the RADIUS attribute and keeps the port in its previous static configuration.
B.The switch dynamically creates the VLAN on the fly using default IEEE 802.1Q parameters.
C.The switch queries the VTP/GVRP server to dynamically learn the VLAN definition.
D.The switch drops the port into the default native VLAN or rejects the connection if strict VLAN enforcement is enabled.
AnswerD

Correct. Missing local VLAN definitions cause fallback behavior or rejection.

Why this answer

If a RADIUS server returns a VLAN name that does not exist locally on the EX Series switch, the switch drops the port into the default configured fallback or access VLAN (or rejects the connection depending on strict-vlan enforcement).

306
MCQeasy

An enterprise network engineer needs to configure a trunk port on a Juniper EX Series switch running Junos OS to allow multiple VLANs while explicitly blocking VLAN 99. Which configuration statement under 'interfaces ge-0/0/1 unit 0 family ethernet-switching' correctly achieves this?

A.exclude-vlan-members 99;
B.block-vlan 99;
C.vlan-members except 99;
D.vlan-members [ vlan-members except 99 ];
AnswerC

Using 'vlan-members except' allows all other VLANs except the one specified.

Why this answer

The 'vlan-members none' or explicitly listing allowed VLANs excludes unspecified ones, but to explicitly prune a VLAN while allowing others, the 'vlan-members except' option is used.

307
Multi-Selectmedium

Which THREE conditions must be met for a Junos routing device to consider two BGP paths as valid candidates for multipath load balancing when standard multipath is configured? (Choose three)

Select 3 answers
A.The next hops must be resolvable via active routing table entries.
B.The paths must have identical local preference values.
C.The router IDs of the advertising peers must be identical.
D.The AS path lengths must be identical.
E.The route advertisement intervals must be synchronized across all peers.
AnswersA, B, D

Next-hop reachability and resolution via IGP or direct connection are mandatory.

Why this answer

Standard BGP multipath in Junos requires matching AS path lengths, local preferences, and valid IGP next-hop resolution, among other consistent attributes.

308
MCQhard

You are configuring OSPF database overflow protection to prevent a router from running out of memory due to an excessive number of external LSAs in the LSDB. Which configuration enables this feature globally?

A.set protocols ospf database-overflow limit 5000 external-timer 300
B.set protocols ospf max-external-lsas 5000
C.set protocols ospf area 0.0.0.0 overflow-limit 5000
D.set routing-options ospf overflow-protection limit 5000
AnswerA

This command configures OSPF database overflow protection with a maximum external LSA limit and recovery timer.

Why this answer

Database overflow protection in Junos OSPF is configured using the 'database-overflow' statement under protocols ospf, specifying the limit and external timer.

309
MCQhard

You are troubleshooting an IP phone that is failing to learn its assigned voice VLAN via LLDP-MED from an EX4600 switch. You run show lldp interface ge-0/0/5 and verify LLDP is active. However, the phone's voice VLAN ID TLV is missing from the neighbor information. Which configuration command under the interface must be verified to ensure voice VLAN advertisements are properly transmitted?

A.set switch-options voice-vlan-advertising enable
B.set protocols lldp interface ge-0/0/5 vlan-name voice
C.set protocols lldp interface ge-0/0/5 transport-address
D.set protocols lldp-med interface ge-0/0/5 network-policy voice
AnswerD

You must explicitly bind the LLDP-MED network policy for voice to the interface.

Why this answer

Voice VLAN configurations on access ports must be properly mapped using layer 2 options or voice-vlan specific commands so that LLDP-MED can populate the network policy TLV.

310
MCQhard

An OSPF area in your network contains multiple ABRs. You need to suppress the generation of Type-4 summary LSAs into a totally stubby area. How does Junos handle this natively?

A.You must apply an export policy on the ABR blocking Type-4 LSAs.
B.You must use set protocols ospf suppress-fa to remove Type-4 LSAs.
C.Totally stubby areas automatically block Type-4 LSAs by design without additional configuration.
D.You must configure set protocols ospf area <area> stub no-summary-asbr.
AnswerC

Type-4 LSAs (ASBR summaries) are blocked along with Type-3 and Type-5 LSAs in totally stubby areas.

Why this answer

Totally stubby areas automatically block Type-3, Type-4, and Type-5 LSAs. No separate command is needed to suppress Type-4 LSAs once an area is defined as a totally stubby area.

311
MCQhard

You are configuring an OSPF NSSA and want to suppress the translation of Type-7 LSAs into Type-5 LSAs on one of the ABRs because another ABR is already performing the translation. Which statement is used?

A.set protocols ospf area 0.0.0.2 nssa suppress-translation
B.set protocols ospf area 0.0.0.2 nssa no-translate
C.set protocols ospf area 0.0.0.2 nssa no-type-5-conversion
D.set protocols ospf area 0.0.0.2 nssa translator-role never
AnswerB

The 'no-translate' option disables Type-7 to Type-5 LSA translation on the NSSA ABR.

Why this answer

To prevent an NSSA ABR from translating Type-7 LSAs into Type-5 LSAs, you configure the 'no-translate' option under the nssa statement.

312
MCQmedium

An engineer configures protocol independent multicast (PIM) sparse-mode on a Junos device and notices that join messages are not reaching the Rendezvous Point (RP). Which CLI command should the engineer use to verify the operational state of the PIM neighbor adjacencies and confirm that the hello messages are successfully exchanged?

A.show pim neighbor
B.show mpls lsp
C.show rpc statistics
D.show igmp group
AnswerA

This command displays all active PIM neighbors, interfaces, and uptime, which confirms hello message exchange.

Why this answer

The 'show pim neighbor' command is the standard operational command in Junos to verify active PIM neighbor adjacencies, IP addresses, interfaces, and hold timers.

313
MCQmedium

A network administrator wants to advertise an aggregate BGP route while suppressing the more specific component routes from being sent to external peers. Which Junos routing-options configuration achieves this?

A.Configure the aggregate route with the 'summary-only' parameter under routing-options bgp.
B.Enable BGP dampening on the aggregate route and disable it on the component routes.
C.Apply a routing policy that sets the NO_EXPORT community on all component routes.
D.Configure an aggregate route with the 'discard' policy and apply an export policy that drops component routes.
AnswerA

The 'summary-only' parameter suppresses specific component routes when advertising the aggregate prefix.

Why this answer

Using the 'aggregate' statement with the 'summary-only' option generates the aggregate prefix and suppresses all component specific routes.

314
MCQhard

You need to configure OSPFv2 graceful restart as a helper on a Junos router to assist neighboring routers during their routing engine switchover. Which command enables helper mode?

A.set protocols ospf graceful-restart helper
B.set routing-options graceful-restart ospf helper
C.set protocols ospf graceful-restart router-role helper
D.set protocols ospf helper-mode enable
AnswerA

This command explicitly configures OSPF graceful restart helper behavior.

Why this answer

By default, OSPF graceful restart helper mode is enabled on Junos routers. To explicitly configure or modify it, you use the 'graceful-restart helper' command under protocols ospf.

315
MCQeasy

Which protocol version introduces explicit source inclusion and exclusion lists (TO_EX, TO_IN, IS_IN, IS_EX) in membership reports?

A.IGMPv2
B.IGMPv4
C.IGMPv3
D.IGMPv1
AnswerC

IGMPv3 added support for source filtering, allowing receivers to specify sources they want to receive or block.

Why this answer

IGMPv2 supports basic group membership, whereas IGMPv3 introduces source-filtering capabilities allowing hosts to specify include or exclude source lists.

316
MCQmedium

You are configuring selective Q-in-Q stacking on an MX Series router. Unlike standard Q-in-Q where all customer VLANs are encapsulated into a single provider VLAN, selective Q-in-Q allows you to map specific customer VLAN ranges to different provider VLANs. Which configuration element enables this granularity?

A.vlan-map match statement with specific input VLAN ID filters
B.protocols l2-learning selective-stacking
C.global bridge-domain vlan-translation enable
D.routing-instance forwarding-options selective-qinq
AnswerA

Matching specific inner VLAN IDs enables selective Q-in-Q mapping.

Why this answer

Flexible VLAN tagging combined with 'vlan-map' statements defining match criteria allows selective Q-in-Q.

317
Multi-Selecthard

An engineer is troubleshooting multicast forwarding and RPF failures on a Junos routing instance. Which THREE conditions will cause a multicast RPF check failure? (Choose three)

Select 3 answers
A.IGMPv2 leave messages are received on an interface without active listeners.
B.The route to the source points towards a null or reject route.
C.There is no matching route in the unicast routing table or MBGP table for the source IP address.
D.The incoming interface of the multicast packet does not match the outgoing interface of the RPF route towards the source.
E.PIM hello messages are exchanged with an incorrect hold time.
AnswersB, C, D

If the RPF lookup resolves to a reject or discard route, the RPF check fails.

Why this answer

RPF failures occur when the incoming interface for a multicast packet does not match the reverse path towards the source in the routing table, when no route exists, or when the routing table source differs.

318
MCQhard

You are troubleshooting an OSPF network where virtual links are deployed to connect a non-backbone area to Area 0 across a transit area. Which statement is true regarding virtual link configuration in Junos?

A.set protocols ospf area 0.0.0.2 transit-link neighbor 192.168.10.1
B.set protocols ospf virtual-link neighbor 192.168.10.1 area 0.0.0.1
C.set protocols ospf virtual-router 192.168.10.1 transit-area 0.0.0.2
D.set protocols ospf area 0.0.0.1 virtual-link transit-area 0.0.0.2 neighbor-id 192.168.10.1
AnswerD

This command correctly establishes an OSPF virtual link through a transit area using the neighbor router ID.

Why this answer

Virtual links require you to specify the area ID of the transit area and the router ID of the remote endpoint (the other ABR) under protocols ospf.

319
MCQmedium

An administrator notices that broadcast, unknown unicast, and multicast (BUM) traffic sent from a local host is looping back to the originating multi-homed PE when using an all-active Ethernet segment. Which mechanism prevents this loop in EVPN?

A.BGP Best Path Selection algorithm
B.EVPN Split Horizon filtering using ESI labels
C.Designated Forwarder (DF) election
D.Spanning Tree Protocol (STP) root guard
AnswerB

Split horizon filtering ensures that a PE does not echo BUM traffic back to an Ethernet segment it shares with another PE.

Why this answer

EVPN uses Split Horizon filtering via the ESI Label Extended Community or local split-horizon checks to ensure that BUM traffic received from a remote PE on a shared Ethernet segment is not sent back out to the same segment.

320
MCQmedium

You are configuring an EX Series switch to use MAC RADIUS authentication. You notice that when devices connect, the switch sends authentication requests, but the accounting start packets are not being sent. What configuration is missing?

A.You must enable accounting globally using [edit system accounting radius].
B.You failed to enable accounting under the [edit protocols dot1x accounting] hierarchy.
C.You did not configure the accounting server and enable accounting under the access-profile hierarchy.
D.MAC RADIUS does not support accounting; accounting is exclusive to 802.1X.
AnswerC

Correct. Access profile accounting configuration is required for accounting packets.

Why this answer

To enable accounting along with MAC RADIUS, you must explicitly enable accounting under the access profile associated with the interface.

321
MCQmedium

You are configuring a captive portal on an EX Series switch. You want to ensure that specific management traffic and critical server subnets are accessible to clients *before* they authenticate through the captive portal. Which configuration feature accomplishes this?

A.RADIUS dynamic authorization profiles with pre-auth attributes.
B.Captive portal firewall exemption filters or walled garden (bypass) configuration.
C.Global access profile authentication-bypass statements.
D.Static MAC bypass configuration under the protocols dot1x hierarchy.
AnswerB

Correct. Walled garden or bypass settings permit pre-auth traffic to specific IP ranges.

Why this answer

Pre-authentication access lists or firewall filters / bypass lists allow traffic to specific destinations before captive portal authentication occurs.

322
Multi-Selectmedium

Which THREE parameters are part of the standard Junos BGP route selection algorithm prior to evaluating the router ID? (Choose three)

Select 3 answers
A.Cluster List length
B.Weight (local to the router)
C.Local Preference
D.MED (Multi-Exit Discriminator)
E.Originator ID value
AnswersB, C, D

Weight is evaluated first in Junos BGP path selection.

Why this answer

Before router ID, Junos evaluates Weight, Local Preference, AS path length, Origin, MED, and IBGP vs EBGP preference.

323
MCQeasy

Which command is used to view LLDP-MED specific neighbor details, including device type, capabilities, and network policies on an EX Series switch?

A.show protocols lldp-med status
B.show system lldp-med neighbors
C.show lldp med neighbors detail
D.show lldp neighbor interface detail
AnswerC

show lldp med neighbors detail provides complete LLDP-MED endpoint information.

Why this answer

show lldp med neighbors detail displays comprehensive LLDP-MED TLV data for connected devices.

324
MCQmedium

You want to apply a rewrite rule on an outgoing interface to remark the DSCP bits of packets leaving your Juniper router. Where must this rewrite rule be applied within the CoS hierarchy?

A.[edit firewall]
B.[edit class-of-service interfaces]
C.[edit routing-options]
D.[edit class-of-service classifiers]
AnswerB

Rewrite rules are applied on egress interfaces.

Why this answer

Rewrite rules in Junos are applied on egress interfaces under the interfaces statement within the class-of-service configuration hierarchy.

325
MCQhard

An administrator configures a scheduler map with a transmit-rate of percent 20 for a queue, but the total sum of transmit-rates in the map equals 110%. How does Junos handle this configuration?

A.The commit fails because the sum of percentage transmit-rates exceeds 100%
B.Traffic exceeding 100% is dropped by the Routing Engine
C.Junos normalizes the percentages proportionally during commit time
D.The excess 10% is automatically assigned to the best-effort queue
AnswerA

Percentage transmit rates must total 100% or less.

Why this answer

Junos requires the sum of transmit-rates defined as percentages in a scheduler map to not exceed 100%. If it exceeds 100%, the configuration commit will fail.

326
MCQmedium

You are troubleshooting an issue where an 802.1X supplicant on a Windows client fails to connect to an EX Series switch port. The switch logs show 'EAPOL-TIMEOUT' errors. What does this error indicate?

A.The switch did not receive an EAPOL response from the client after sending an EAPOL request.
B.The RADIUS server took too long to validate the client credentials and dropped the session.
C.The switch port's operational mode reverted from access to trunk, dropping EAPOL frames.
D.The client sent an invalid EAP message that failed integrity checks.
AnswerA

Correct. EAPOL timeout signifies a lack of response from the supplicant to the switch's EAPOL messages.

Why this answer

An EAPOL-TIMEOUT error indicates that the switch sent an EAPOL packet (such as EAPOL-Request/Identity) but did not receive a response from the client within the timeout window.

327
Multi-Selecthard

An administrator notices that LLDP neighbors are failing to populate on an EX Series switch interface. Which THREE troubleshooting steps should be performed? (Choose three.)

Select 3 answers
A.Verify that RSTP bridge priority is set to root.
B.Verify that LLDP is enabled globally under the protocols hierarchy.
C.Verify that LLDP is not explicitly disabled on the specific interface configuration.
D.Check operational counters using show lldp interface to ensure frames are being transmitted and received.
E.Check BGP peer state for the LLDP neighbor.
AnswersB, C, D

If LLDP is not enabled globally, the protocol will not run.

Why this answer

Troubleshooting LLDP neighbor discovery involves checking global and interface LLDP status, physical link status, and packet captures/counters.

328
MCQmedium

A network designer needs to implement BGP route reflection where multiple route reflectors are deployed in the same cluster to provide redundancy. What parameter must be identical across all route reflectors in that same cluster to prevent routing loops?

A.AS Path Prepend count
B.Local Preference value
C.Cluster ID
D.Router ID
AnswerC

Route reflectors in the same cluster must be configured with the identical Cluster ID.

Why this answer

Route reflectors within the same cluster must share the same Cluster ID so they can recognize and ignore routes reflected by their peer route reflector.

329
Multi-Selectmedium

Which TWO options are valid authentication methods that can be specified in the 'authentication-order' statement on an EX Series switch interface? (Choose two)

Select 2 answers
A.mac-radius
B.kerberos
C.tacacs-plus
D.dot1x
E.ldap-direct
AnswersA, D

Correct. Mac-radius is a valid authentication order method.

Why this answer

The authentication-order statement supports methods such as dot1x, mac-radius, and captive-portal.

330
MCQhard

You need to design a scalable Layer 2 architecture across multiple data center buildings using Juniper switches, avoiding single points of failure while preventing bridging loops. Which scaling mechanism allows Active-Active multihoming without running Spanning Tree Protocol across the core?

A.Layer 2 Tunneling Protocol (L2TPv3) bridging
B.Multi-Chassis Link Aggregation (MC-LAG) with ICCP
C.Rapid PVST+ with root guard on all access ports
D.Virtual Chassis with spanning-tree disabled
AnswerB

MC-LAG uses ICCP to coordinate forwarding between two peer switches, enabling active-active uplinks without STP loops.

Why this answer

MC-LAG (Multi-Chassis Link Aggregation Group) or EVPN-VXLAN provides active-active multihoming and eliminates spanning tree loops. Among traditional Layer 2 tools, MC-LAG is the direct multi-chassis active-active solution.

331
MCQmedium

An administrator configures BGP dampening on a Junos router to mitigate the impact of flapping routes. When a route exceeds the reuse threshold after being suppressed, what happens to its penalty value?

A.The penalty value is locked at the reuse threshold value indefinitely.
B.The penalty value is doubled to discourage further flapping.
C.The penalty value is instantly reset to zero.
D.The penalty value continues to decay exponentially until it drops to zero.
AnswerD

Penalties decay gradually over time based on the configured half-life.

Why this answer

When a dampened route's penalty decays below the reuse threshold, the route becomes eligible again, and its penalty continues to decay exponentially toward zero.

332
MCQeasy

What is the default behavior of an EX Series switch when an LLDP-MED capable IP phone connects and requests a network policy for voice VLAN?

A.The switch drops the LLDP packet unless explicit authorization is configured.
B.The switch responds with the configured LLDP-MED network policy containing the voice VLAN ID and Layer 2/3 priority markings.
C.The switch converts the port into a full trunk interface automatically.
D.The switch reboots the port to force DHCP discovery.
AnswerB

The switch replies with the network policy TLV matching the configured parameters.

Why this answer

LLDP-MED automatically provisions network policies to capable endpoints when properly configured on the switch.

Page 4

Page 5 of 5

All pages