Courseiva

Juniper Networks Enterprise Routing and Switching, Specialist (JNCIS-ENT, JN0-352) (JNCIS-ENT) (JNCIS-ENT) — Questions 226300

506 questions total · 7pages · All types, answers revealed

Page 3

Page 4 of 7

Page 5
226
MCQmedium

You notice that an access switch running RSTP is continually dropping user traffic because a connected end-user device is sending inferior BPDUs that trigger topology changes. Which Juniper feature should you configure on the access ports to protect against this behavior?

A.set protocols rstp interface ge-0/0/1.0 loop-protection
B.set protocols rstp interface ge-0/0/1.0 bpdu-protection
C.set protocols rstp interface ge-0/0/1.0 root-protection
D.set protocols rstp interface ge-0/0/1.0 no-root-port
AnswerB

Enabling bpdu-protection on edge ports shuts down the port if a BPDU is received, protecting against rogue devices.

Why this answer

BPDU protection (bpdu-protection) on Junos edge ports puts the port in an error-disabled state if any BPDU is received, preventing unauthorized switches or loops.

227
MCQmedium

A network administrator needs to modify the Local Preference path attribute for all routes received from a specific external BGP peer using a routing policy on Junos. Under which configuration hierarchy should the routing policy be applied?

A.policy-options policy-statement term then export
B.protocols bgp group neighbor import
C.routing-options rib inet.0 static
D.protocols ospf area
AnswerB

Correct. An import policy applied to a BGP neighbor or group modifies incoming path attributes like Local Preference.

Why this answer

To affect routes received from a specific BGP peer, an import policy must be applied directly to that neighbor or group under 'protocols bgp group <group-name> neighbor <ip> import <policy-name>' or at the group level.

228
Multi-Selecteasy

Which TWO commands can be used to view spanning tree information on a Juniper EX Series switch? (Choose two.)

Select 2 answers
A.show bridge spanning-tree status
B.show spanning-tree interface
C.show spanning-tree bridge
D.show rstp summary
E.show protocols spanning-tree summary
AnswersB, C

Displays per-interface spanning tree states, roles, and port types.

Why this answer

The commands 'show spanning-tree interface' and 'show spanning-tree bridge' are standard operational commands used to inspect spanning tree status and bridge parameters on Junos devices.

229
MCQeasy

Which operational command allows you to view the real-time status of LACP packet exchanges and partner system IDs for an aggregated interface on a Junos switch?

A.show interfaces ae0 statistics
B.show chassis lacp-status
C.show vrrp lacp-summary
D.show lacp interface
AnswerD

show lacp interface lists each member link, its partner system ID, partner port ID, and active aggregation status.

Why this answer

The 'show lacp interface' command displays detailed LACP partner information, partner port numbers, and state flags.

230
MCQhard

An administrator notices that MAC address flapping is occurring between two ports on an EX Series switch due to an unauthorized bridge loop. Which Junos feature can be enabled to automatically detect and action on MAC address movement anomalies?

A.set interfaces ge-0/0/0 family ethernet-switching loop-protect
B.set ethernet-switching-options mac-move-limit action errdisable
C.set protocols rstp bpdu-protection-recovery
D.set ethernet-switching-options secure-access-port interface ge-0/0/0 mac-move-limit action shutdown
AnswerD

Correct. Secure access port options include mac-move-limit settings to take action against MAC address flapping.

Why this answer

MAC move detection and port restriction (mac-move-limit) can detect rapid MAC address flapping and disable the offending interface.

231
MCQmedium

What is the primary function of the BGP OPEN message?

A.To advertise reachability and path attributes for network prefixes.
B.To maintain the connection state and verify liveliness at regular intervals.
C.To signal fatal errors and immediately terminate the BGP session.
D.To establish a peering session and negotiate capabilities such as ASNs and timers.
AnswerD

The OPEN message negotiates session parameters between peers.

Why this answer

The OPEN message is the first message sent after a TCP connection is established, used to negotiate BGP parameters such as ASN, hold time, and router ID.

232
MCQeasy

Which level is enabled by default in Junos when configuring IS-IS on an interface?

A.None
B.Level 2 only
C.Level 1 only
D.Level 1 and Level 2
AnswerD

Both levels are enabled by default.

Why this answer

By default, interfaces in Junos IS-IS are enabled for both Level 1 and Level 2.

233
MCQhard

A network engineer configures BGP confederations to scale an enterprise network. Which BGP path attribute is stripped or modified when an update leaves a sub-AS within the confederation and enters another sub-AS?

A.AS_PATH
B.CONFED_SEQUENCE
C.LOCAL_PREF
D.MED
AnswerB

CONFED_path segments are removed or converted when crossing the boundary out of the confederation.

Why this answer

CONFED_SEQUENCE and CONFED_SET attributes are used within a confederation and are stripped when the update leaves the confederation boundary to a normal eBGP peer.

234
MCQmedium

What is the default behavior when an IS-IS router receives an LSP it already has?

A.It always floods it to all neighbors.
B.It restarts the SPF calculation immediately.
C.It requests the LSP from the source again.
D.It discards the LSP if the sequence number is lower.
AnswerD

The protocol ensures only the most recent information is kept.

Why this answer

If the sequence number is the same, the router discards it. If newer, it updates; if older, it sends a copy of the newer one back to the sender.

235
Multi-Selectmedium

Which THREE statements describe the function of the Designated Port in RSTP? (Choose three.)

Select 3 answers
A.It provides the lowest cost path from the segment back toward the root bridge.
B.It remains permanently in the discarding state to prevent loops.
C.It forwards BPDUs onto the attached LAN segment.
D.There is exactly one designated port for every active LAN segment.
E.It acts as the primary root port for the local bridge.
AnswersA, C, D

The designated bridge for a segment is responsible for forwarding traffic toward the root.

Why this answer

A designated port forwards BPDUs onto a segment, provides the lowest cost path to reach the root bridge for that segment, and exists on every segment connected to the bridge where it acts as the forwarding interface.

236
MCQhard

An EX Series switch running MSTP receives a BPDU from an upstream switch in a different MST region. How does the receiving switch identify the boundary between the two regions?

A.When the incoming BPDU contains an instance count greater than the local switch capacity.
B.When the CIST external path cost exceeds the maximum hop count.
C.By comparing the received MST configuration digest and region parameters with its own.
D.By detecting a mismatch in the system MAC address of the root bridge.
AnswerC

Mismatch in configuration digests or region names identifies an MST boundary port.

Why this answer

Boundary ports are identified when a switch receives a CIST BPDU where the regional configuration (digest, name, revision) or regional root differs from its own, or when it receives a legacy STP BPDU.

237
MCQhard

An enterprise network has redundant ABRs connecting Area 1 to Area 0. To prevent suboptimal routing and unnecessary Type 3 LSA flooding, an administrator decides to filter inter-area summary routes on the ABR using a Junos policy. Which configuration component is required to apply an export policy to OSPF summary routes on an ABR?

A.set protocols ospf import <policy-name>
B.set routing-options export <policy-name>
C.set protocols ospf area 0.0.0.1 prefix-export <policy-name>
D.set protocols ospf export <policy-name>
AnswerC

Correct. Prefix-export policies control which summarized prefixes are advertised out of or into an area.

Why this answer

Inter-area summarization and export filtering on Junos ABRs are configured using the 'area <name> prefix-export' or range policies under the OSPF hierarchy.

238
MCQeasy

Which RSTP port role replaces the legacy STP blocking and listening port states to provide rapid convergence?

A.Alternate and Backup roles
B.Disabled and Discarding roles
C.Master and Slave roles
D.Root and Designated roles
AnswerA

Alternate and Backup roles provide immediate standby paths without waiting for listening/learning timers.

Why this answer

In RSTP, the Alternate and Backup roles replace the blocking state, while the discarding state replaces blocking, listening, and disabled states.

239
MCQmedium

An EX4300 Virtual Chassis experiences a split-brain condition due to a failure of all stacking cables between members 0/1 and members 2/3. How does Junos handle this scenario by default?

A.Each partition elects its own primary routing engine if dual primary detection is not enabled, leading to potential duplicate IP scenarios.
B.All member switches across both partitions automatically shut down all data interfaces to prevent loops.
C.The backup routing engine instantly shuts down its control plane daemon permanently.
D.The entire Virtual Chassis reboots simultaneously until stacking cables are re-seated.
AnswerA

Without explicit split-brain mitigation or adequate mastership conflict handling, separated partitions may both attempt to operate as primary.

Why this answer

Without auxiliary diagnostic mechanisms like Dual-Routing Engine Advanced Support (DREAS) or specifically configured split-brain detection, a split Virtual Chassis can result in duplicate primary assignments unless properly managed with master conflict resolution behaviors.

240
MCQmedium

In a multi-access network, which PDU is responsible for the DIS election?

A.CSNP
B.LSP
C.IIH PDU
D.PSNP
AnswerC

IIH PDUs carry the priority information for DIS election.

Why this answer

The IIH (IS-IS Hello) PDU contains the priority field used for DIS election on broadcast segments.

241
MCQeasy

An administrator is configuring OSPF on a Junos device and notices that two routers on a broadcast segment are stuck in the 2-Way state. What is the most likely cause of this behavior on a broadcast network?

A.There is a mismatch in the OSPF hello interval configuration.
B.The routers are neither the DR nor the BDR on a multi-access network.
C.Authentication keys differ between the neighboring interfaces.
D.The area type is incorrectly configured as a totally stubby area.
AnswerB

Correct. DROther routers only form full adjacencies with the DR and BDR, remaining in 2-Way with other DROther routers.

Why this answer

On broadcast networks, OSPF establishes full adjacencies only with the Designated Router (DR) and Backup Designated Router (BDR). Routers that are neither DR nor BDR remain in the 2-Way state with each other to reduce traffic and LSA flooding.

242
Multi-Selectmedium

Which TWO parameters are included when a Junos switch calculates the MST configuration digest? (Choose two.)

Select 2 answers
A.Bridge priority of Instance 0
B.Revision number
C.System MAC address
D.Configuration name
E.Hello timer interval
AnswersB, D

The integer revision number is included in the digest computation.

Why this answer

The MST digest is computed using the configuration name, revision number, and the VLAN-to-instance allocation table.

243
MCQhard

You are troubleshooting a Dynamic ARP Inspection (DAI) deployment on an EX4300 switch. Clients on VLAN 20 are experiencing intermittent loss of connectivity. You run 'show arp inspection statistics' and notice dropped packets due to 'invalid-ip'. What is the most likely cause of these drops?

A.The uplink port connecting to the default gateway is missing the 'set protocols arp-inspection trust' statement.
B.Clients are using statically assigned IP addresses that do not exist in the DHCP snooping binding database.
C.MAC limiting has tripped on the access port, causing ARP packets to be discarded.
D.The ARP inspection rate-limit has been exceeded on the access ports.
AnswerB

Static IP addresses bypass DHCP, meaning no entry is created in the DHCP snooping database, causing DAI to drop their ARP packets as invalid.

Why this answer

DAI relies on the DHCP snooping database to validate ARP bindings. If a client uses a static IP address or if the DHCP binding has expired/not been learned, DAI drops the ARP reply/request because it cannot match the IP-to-MAC binding in the DHCP snooping database.

244
MCQmedium

An administrator needs to modify the OSPF cost on a specific Junos interface to influence traffic engineering without changing the reference bandwidth globally. Which command accomplishes this?

A.set protocols ospf area 0.0.0.0 interface ge-0/0/2.0 cost 50
B.set protocols ospf reference-bandwidth 10g
C.set protocols ospf area 0.0.0.0 interface ge-0/0/2.0 metric 50
D.set interfaces ge-0/0/2.0 ospf-cost 50
AnswerC

Correct. The metric statement overrides the calculated cost for that specific interface.

Why this answer

OSPF interface cost can be explicitly overridden on a per-interface basis using the 'metric' parameter under the interface configuration hierarchy.

245
MCQeasy

When a Junos router establishes an eBGP session, what is the default value of the Local Preference attribute assigned to incoming routes if not modified by a policy?

A.100
B.Not set / Null
C.0
D.200
AnswerA

Default local preference is 100.

Why this answer

The default Local Preference in Junos and standard BGP implementations is 100.

246
Multi-Selecthard

Which THREE statements accurately describe the behavior and configuration of VRRP tracking on Junos devices? (Choose three)

Select 3 answers
A.If the decremented priority falls below the backup router's priority, mastership transitions to the backup router.
B.Tracking forces the tracked interface to shut down permanently when a failure occurs.
C.Multiple interfaces or reachability paths can be monitored simultaneously within a single VRRP tracking configuration.
D.Tracking automatically disables GRES on the routing engine.
E.Tracking allows a router to automatically decrement its VRRP priority when a monitored interface goes down.
AnswersA, C, E

Priority changes drive the master election when tracking triggers a penalty.

Why this answer

VRRP tracking lowers priority when interfaces fail, can monitor multiple interfaces, and allows backup routers to take over.

247
MCQeasy

When configuring VRRP on a Juniper router, what IP address must be assigned as the virtual IP address for the group?

A.An IP address belonging to the same subnet as the physical interface connected to the broadcast domain.
B.A loopback IP address configured on the master Routing Engine.
C.A public IP address provided by your upstream Internet Service Provider.
D.A reserved multicast address in the 224.0.0.18 range.
AnswerA

Clients in the broadcast domain use this virtual IP address as their default gateway, requiring it to be in their local subnet.

Why this answer

The virtual IP address must belong to the same subnet as the physical interface IP address configured on the participating routers.

248
Multi-Selectmedium

Which THREE parameters can be tuned under the VRRP hierarchy in Junos to customize failover timing and behavior? (Choose three)

Select 3 answers
A.LACP fast timeout timer to manage aggregated link heartbeats.
B.Track interface priority decrement values to lower priority when upstream links fail.
C.Advertisement interval to control how frequently VRRP heartbeat packets are transmitted.
D.Priority value to determine which router becomes the master.
E.Routing engine mastership priority for Virtual Chassis roles.
AnswersB, C, D

Tracking drops priority dynamically upon link failure.

Why this answer

VRRP parameters include priority, advertisement interval, and tracking penalties/decrement values.

249
MCQeasy

When implementing Layer 2 firewall filters on an EX Series switch, which packet characteristic can be matched in a filter term?

A.Source MAC address
B.Destination IP address
C.ICMP type code
D.TCP port number
AnswerA

Bridge family filters evaluate Layer 2 fields like source and destination MAC addresses.

Why this answer

Layer 2 firewall filters in Junos can match fields such as source MAC address, destination MAC address, VLAN ID, and EtherType.

250
Multi-Selecthard

When troubleshooting a non-functional GRE tunnel on a Junos device, which TWO operational commands or verification steps are most effective for diagnosing the root cause? (Choose two)

Select 2 answers
A.Verify that the routing table has an active path to the remote tunnel destination IP address.
B.Execute 'clear gre statistics' to restart the tunnel encapsulation engine.
C.Check that the RSVP bandwidth reservation is set to 100% on the tunnel interface.
D.Run 'show interfaces gr-0/0/0 extensive' to check for error counters, input/output drops, and correct source/destination parameters.
E.Verify that the BGP AS path matches the tunnel ID.
AnswersA, D

Without reachability to the destination endpoint, the tunnel cannot pass encapsulated traffic.

Why this answer

Checking interface extensive statistics and verifying route reachability to the tunnel destination are primary troubleshooting steps.

251
MCQmedium

You need to modify the bridge priority of an EX Series switch running RSTP to ensure it becomes the root bridge. Which configuration command correctly sets the bridge priority to 4096?

A.set spanning-tree priority 4096
B.set protocols rstp priority 4096
C.set bridge-priority 4096
D.set protocols rstp bridge-priority 4096
AnswerD

This command sets the bridge priority to 4096, which is lower than the default of 32768.

Why this answer

To set the RSTP bridge priority on a Junos device, you use the 'set protocols rstp bridge-priority <value>' command.

252
MCQmedium

While reviewing the MAC address table on an EX Series switch using 'show ethernet-switching table', you notice a specific MAC address has a 'Flags' field showing 'L'. What does the 'L' flag indicate?

A.The MAC address belongs to a local routed interface (VLAN interface IRB).
B.The MAC address was learned locally/dynamically on the interface.
C.The MAC address has looped and triggered a storm control event.
D.The MAC address is locked and cannot move to another port.
AnswerB

Correct. 'L' stands for learned (dynamic learning).

Why this answer

In Junos OS, the 'L' flag in the ethernet-switching table indicates that the MAC address was learned dynamically on that interface.

253
MCQhard

You are troubleshooting a DIS election issue on a broadcast segment. What is the tie-breaker if the DIS priorities are equal?

A.The lowest System ID.
B.The lowest MAC address.
C.The highest MAC address.
D.The highest System ID.
AnswerC

The highest SNPA (MAC address) is the secondary tie-breaker.

Why this answer

If DIS priorities are equal, the router with the highest Subnetwork Point of Attachment (SNPA) address (usually the MAC address) wins.

254
MCQmedium

You want to ensure that a static route is only installed in the routing table when a specific tracked object or ping test succeeds. Which Junos feature should you pair with the static route?

A.OSPF sham-links
B.Keepalive timers on static routes
C.RPM (Real-time Performance Monitoring) with static route tracking
D.BFD synchronized static routes
AnswerC

RPM probes can track reachability and dynamically pull static routes when connectivity fails.

Why this answer

RPM (Real-time Performance Monitoring) can be integrated with static routes to provide recursive tracking and dynamic route removal if ping probes fail (often called IP SLA equivalent in Junos).

255
MCQhard

When calculating OSPF path costs in a network containing high-speed links (such as 10Gbps and 40Gbps interfaces), what default reference bandwidth does Junos use, and what configuration adjustment is typically required to differentiate costs accurately?

A.100 Mbps default; reference bandwidth must be increased to accurately cost high-speed links.
B.100 Gbps default; reference bandwidth must be decreased for legacy interfaces.
C.10 Gbps default; no adjustment is needed for modern networks.
D.1 Gbps default; interfaces above 1 Gbps are automatically assigned fractional costs.
AnswerA

Correct. The default reference bandwidth is 100 Mbps, which causes high-speed links to share a minimum cost of 1 unless adjusted.

Why this answer

Junos uses a default OSPF reference bandwidth of 100 Mbps (10^8). Because 100 Mbps results in a cost of 1 for any link 100 Mbps or faster, administrators must increase the reference bandwidth (e.g., to 100 Gbps) so that 10G, 40G, and 100G interfaces have distinct, meaningful integer costs.

256
MCQhard

An administrator wants to configure MAC-based VLAN assignment on an EX Series switch so that specific client devices are automatically placed into VLAN 20 based on their source MAC address regardless of which port they plug into. Where is MAC-based VLAN assignment configured in Junos?

A.set protocols vlan-assignment mac <mac> vlan-id 20
B.set vlans vlan-id 20 mac-address-match <mac>
C.set ethernet-switching-options mac-based-vlan interface ge-0/0/1 vlan 20
D.set interfaces ge-0/0/1 unit 0 family ethernet-switching dynamic-vlan 20
AnswerC

Correct. Mac-based VLAN configuration maps MAC addresses or OUI prefixes to specific VLANs on interfaces.

Why this answer

MAC-based VLAN classification is configured under the [edit ethernet-switching-options mac-based-vlan] hierarchy.

257
Multi-Selecthard

Which THREE actions occur when a BGP speaker receives a Notification message from a peer? (Choose three.)

Select 3 answers
A.A Keepalive message is immediately sent in response to acknowledge the error.
B.The peer router automatically re-establishes the connection without applying the connect retry timer.
C.The TCP connection associated with the BGP session is closed.
D.The BGP session transitions to the Idle state.
E.All routes learned from that specific peer are removed from the BGP routing table.
AnswersC, D, E

Correct. The underlying TCP session is torn down upon receiving a Notification message.

Why this answer

When a BGP Notification message is received, it indicates an error condition. The receiving router moves the session to Idle, closes the TCP connection, and clears all routes learned from that peer.

258
MCQhard

An administrator configures a Layer 2 firewall filter to match on EtherType 0x88cc (LLDP) and discard those frames on an access port. However, LLDP packets are still reaching adjacent connected devices. Why?

A.LLDP uses a multicast destination MAC address that bypasses MAC-filtering rules.
B.Layer 2 firewall filters cannot match on EtherType fields in Junos.
C.LLDP frames are processed by the control plane or hardware before ingress port firewall evaluation.
D.The filter was applied to the output instead of the input direction.
AnswerC

Control traffic like LLDP is often intercepted or processed by hardware/CPU daemons prior to standard user-defined Layer 2 ingress filtering on certain platforms.

Why this answer

Bridge Protocol Data Units (BPDUs), LLDP, and LACP are typically processed by control plane daemons or hardware exceptions before ingress Layer 2 firewall filters can evaluate them on standard access ports.

259
MCQhard

You are running BGP between two routers. One router has a 4-byte ASN (e.g., ASN 65536). The remote router only supports 2-byte ASNs. How does BGP handle this compatibility issue?

A.The session fails to open because 4-byte ASNs are strictly incompatible with 2-byte peers.
B.The router uses the reserved AS 23456 (AS_TRANS) in place of the 4-byte ASN for legacy peers.
C.The session establishes as iBGP instead of eBGP.
D.The 4-byte ASN is truncated to 2 bytes by dropping the most significant bits.
AnswerB

AS 23456 is used as a transition AS for legacy 2-byte AS routers.

Why this answer

BGP uses the TRANSIT_AS or AS4_PATH / AS4_AGGREGATOR capabilities negotiated during the OPEN message phase to support 4-byte ASNs across 2-byte peers using a reserved ASN (AS 23456).

260
MCQmedium

You are configuring voice and data VLANs on an EX Series access port. You want the IP phone to process tagged voice traffic for VLAN 50 and pass untagged data traffic from a connected PC into access VLAN 10. Which configuration achieves this?

A.set interfaces ge-0/0/3 unit 0 family ethernet-switching interface-mode dual-access vlan 10 50
B.set interfaces ge-0/0/3 unit 0 family ethernet-switching ip-phone vlan-data 10 vlan-voice 50
C.set interfaces ge-0/0/3 unit 0 family ethernet-switching interface-mode trunk native-vlan-id 10 vlan members 50
D.set interfaces ge-0/0/3 unit 0 family ethernet-switching interface-mode access vlan members 10 voice-vlan 50
AnswerD

Correct. The access mode combined with a voice-vlan statement supports this IP phone scenario.

Why this answer

Configuring a voice VLAN alongside an access VLAN on an interface allows handling both tagged voice and untagged data traffic.

261
MCQhard

On an EX Series switch, you have configured private VLANs (PVLANs) where community VLAN ports need to communicate with a designated promiscuous port, but not with ports in other community VLANs. Which hierarchical configuration is mandatory to bind the primary VLAN and secondary VLANs together?

A.set interfaces vlan unit 0 family ethernet-switching pvlan-mapping primary 10 secondary 20
B.set protocols private-vlan primary-vlan 10 secondary-vlan [ 20 30 ]
C.set vlans primary vlan-id 10 private-vlan community [ 20 30 ]
D.set vlans primary-vlan vlan-id 10 isolation-community [ 20 30 ]
AnswerC

Correct. The secondary VLANs are associated with the primary VLAN as community or isolated under the [edit vlans <vlan-name>] configuration.

Why this answer

Private VLANs require defining the primary VLAN and associating the secondary VLANs using the 'private-vlan' configuration statement under the [edit vlans] hierarchy.

262
MCQeasy

An operator executes the command 'show bridge mac-table' on an EX Series switch running Junos OS. Which information is displayed in the output of this command?

A.Learned MAC addresses, associated VLAN names/IDs, and corresponding interface names.
B.Physical transceiver optical power levels and interface error counters.
C.Spanning tree root bridge priorities and designated port roles.
D.The IP addresses corresponding to each dynamic MAC address via ARP resolution.
AnswerA

This command provides the MAC-to-interface and VLAN mapping for the bridge domain.

Why this answer

The 'show bridge mac-table' command displays the Layer 2 forwarding table, showing MAC addresses learned, associated VLANs, and outgoing interfaces.

263
MCQhard

In an OSPF NSSA configuration on a Junos device, which router is specifically responsible for translating Type 7 LSAs into Type 5 LSAs when propagating routes out of the NSSA into the backbone?

A.The OSPF Designated Router (DR) on the NSSA segment
B.The NSSA ABR with the highest router ID
C.The ASBR that originated the external route
D.Any internal NSSA router running Junos OS
AnswerB

Correct. The NSSA ABR performs the translation of Type 7 to Type 5 LSAs.

Why this answer

The NSSA Area Border Router (ABR) that has the highest router ID acts as the NSSA translator, converting Type 7 LSAs to Type 5 LSAs for the backbone area.

264
MCQmedium

You are troubleshooting an OSPF network and notice that a router's OSPF state is stuck in 'ExStart'. What is the most common reason for this adjacency state issue?

A.Duplicate OSPF router IDs in the network
B.Different authentication passwords on the links
C.An MTU mismatch between the neighboring OSPF interfaces
D.A mismatch in the OSPF area ID configuration
AnswerC

Correct. MTU mismatches prevent DBD packet exchange, leaving routers stuck in ExStart.

Why this answer

Being stuck in the ExStart/Exchange state is typically caused by an MTU mismatch between the neighboring interfaces, or a mismatch in the master/slave negotiation parameters.

265
Multi-Selectmedium

When configuring a static route in Junos, which THREE next-hop options are valid and supported? (Choose three)

Select 3 answers
A.discard
B.reject
C.next-hop <IP-address>
D.metric-out
E.forwarding-class
AnswersA, B, C

The discard option silently drops packets matching the static route.

Why this answer

Junos static routes support specific IP addresses (next-hop), discard/reject options for traffic sinking, and interface-based next-hops for point-to-point or broadcast media.

266
MCQhard

An enterprise network runs OSPF across multiple areas. A Junos routing device receives an LSA with an aging timer approaching MaxAge (3600 seconds). Under what condition does a router purge or flush an LSA from its link-state database?

A.When the SPF algorithm recalculates the routing table
B.When a hello packet is missed three times consecutively
C.When the LSA reaches 3600 seconds (MaxAge) and is flooded across the area to flush it
D.When the OSPF dead timer expires on the local interface
AnswerC

Correct. LSA MaxAge is 3600 seconds, at which point it is flushed from the database.

Why this answer

When an LSA reaches its MaxAge of 3600 seconds without being refreshed by its originator, or when an explicit max-age update is received indicating the route has gone down, routers flood the MaxAge LSA to flush it from the LSDB.

267
MCQeasy

Which command allows you to verify whether a specific interface on an EX Series switch is operating as an edge port?

A.show protocols rstp edge
B.show spanning-tree edge-ports
C.show spanning-tree interface
D.show interfaces edge
AnswerC

This command displays port status, role, state, and edge port operational status.

Why this answer

The 'show spanning-tree interface' command provides detailed parameters for each port, including whether it is operating as an edge port.

268
MCQmedium

You are troubleshooting a GRE tunnel on a Junos device and notice that traffic passing through the tunnel is being dropped due to packet size exceeding the path MTU. Which command can you use directly on the tunnel interface to prevent fragmentation issues by adjusting the MSS?

A.set interfaces gr-0/0/0 unit 0 tunnel destination 192.168.1.2
B.set protocols gre path-discovery enable
C.set routing-options ip-options drop
D.set interfaces gr-0/0/0 unit 0 family inet mtu 1400
AnswerD

Lowering the MTU on the GRE interface ensures that encapsulated packets do not exceed the path MTU of the underlying physical network.

Why this answer

The mtu and tcp-mss settings on the gr- interface or applying path-mtu-discovery helps manage packet sizes, but setting tcp-mss under the logical interface or routing options is typical. Alternatively, setting tunnel MTU properly is managed on the gr- interface.

269
MCQmedium

You are troubleshooting IP Source Guard on an EX Series switch. You want to see which interfaces have IP Source Guard enabled and their operational state. Which operational command should you use?

A.show bridge ip-source-guard
B.show ethernet-switching secure-access-port ip-source-guard interface
C.show ip-source-guard interfaces
D.show interfaces ip-source-guard brief
AnswerB

This command correctly displays IP Source Guard configuration and operational state per interface.

Why this answer

The command 'show ethernet-switching secure-access-port ip-source-guard' displays IP Source Guard interface statuses.

270
MCQhard

When planning an In-Service Software Upgrade (ISSU) on a Juniper routing platform, what is the behavior of the Routing Engines during the execution of the upgrade command?

A.Both Routing Engines are rebooted simultaneously, relying entirely on OSPF Graceful Restart helper mode.
B.The forwarding plane is restarted first, followed by a simultaneous upgrade of the dual REs.
C.The primary Routing Engine is wiped and reloaded while data traffic is redirected through the console port.
D.The backup Routing Engine is upgraded, a graceful switchover takes place, and then the newly elected backup Routing Engine is upgraded.
AnswerD

ISSU upgrades the backup RE, performs a GRES switchover, and then upgrades the second RE, all while data forwarding continues.

Why this answer

During ISSU, the backup RE is upgraded first, then a switchover occurs, and then the former primary RE is upgraded, maintaining control plane availability.

271
MCQeasy

An administrator is configuring a new Juniper EX Series switch and needs to configure an access port for a VoIP phone and a connected PC. Which Juniper feature should be used to support both the voice and data VLAN on the same physical port?

A.Voice VLAN
B.Q-in-Q tunneling
C.Private VLAN
D.Native VLAN
AnswerA

Voice VLAN automatically assigns VoIP devices to the voice VLAN while data passes on the native access VLAN.

Why this answer

Voice VLAN allows an EX Series switch to place voice traffic on a separate VLAN from data traffic on an access port using LLDP-MED or CDP.

272
MCQhard

An access port on an EX Series switch is configured with port security to allow a maximum of 2 MAC addresses. When a 3rd device is connected, the port immediately shuts down. Which action statement under 'ethernet-switching-options secure-access-port' achieves this behavior?

A.set ethernet-switching-options secure-access-port interface ge-0/0/2.0 violation-action shutdown
B.set switch-options interface ge-0/0/2.0 mac-limit action block-and-shutdown
C.set protocols port-security interface ge-0/0/2.0 action disable-port
D.set interfaces ge-0/0/2.0 unit 0 family ethernet-switching port-security limit-action error-disable
AnswerA

The 'violation-action shutdown' command disables the port when the MAC limit is exceeded.

Why this answer

In Junos port security configuration, violation actions include drop, shutdown, and restrict. Setting the violation action to 'shutdown' disables the interface upon a limit breach.

273
MCQmedium

You are troubleshooting a GRE tunnel where traceroute shows packets looping between the tunnel endpoints. Which mechanism prevents routing loops in GRE tunnels on Junos?

A.The GRE header hop-count field dropping packets exceeding 32 hops.
B.Junos automatically shuts down interfaces when a routing loop is detected.
C.An automatic split-horizon check built into the GRE driver.
D.Proper IP routing protocol metric design and TTL decrementing through the encapsulated IP headers.
AnswerD

Routing loops are prevented by proper routing protocol design and IP TTL expiration.

Why this answer

GRE does not have an inherent TTL field in the GRE header itself, but Junos copies or handles the inner IP header TTL, and enabling keepalives or proper routing protocol design prevents loops. However, MTU and TTL settings are critical. Wait, what about tunnel loop prevention features? Tunnel interfaces rely on proper routing configuration, but let's look at options.

274
MCQmedium

You are tasked with tuning OSPF convergence times on a Juniper EX Series switch. Which configuration command hierarchy allows you to modify the OSPF Hello and Dead intervals on a specific interface?

A.set routing-options ospf interface <name> interval <seconds>
B.set protocols ospf area <name> interface <name> hello-interval <seconds>
C.set interfaces <name> unit 0 family inet ospf hello-timer <seconds>
D.set system ospf interface <name> timer hello <seconds>
AnswerB

The hello-interval and dead-interval commands are nested under the OSPF interface hierarchy.

Why this answer

In Junos OS, OSPF interface-specific parameters such as hello-interval and dead-interval are configured under the [edit protocols ospf area <area-id> interface <interface-name>] hierarchy.

275
Multi-Selecthard

Which THREE LSA types are blocked from entering a standard OSPF Stub Area? (Choose three)

Select 3 answers
A.Type 4 (ASBR summary LSAs)
B.Type 1 (Router LSAs)
C.Type 5 (AS-external LSAs)
D.Type 2 (Network LSAs)
E.Type 7 (NSSA external LSAs)
AnswersA, C, E

Correct. Stub areas block Type 4 LSAs since external ASBRs reside outside the stub.

Why this answer

A standard Stub Area blocks Type 5 AS-external LSAs, Type 4 ASBR summary LSAs, and depending on implementation nuances, summarizes inter-area traffic via default routes while blocking external information. Specifically, standard stub areas block Type 4 and Type 5 LSAs, and replace external routes with a default route (often via Type 3 summarization behavior). Wait, let's look closely at standard stub areas: they block Type 4 and Type 5 LSAs.

Totally stubby areas also block Type 3 inter-area LSAs. Let's frame the options correctly for a standard stub area blocking Type 4, Type 5, and external routing features.

276
Multi-Selectmedium

Which of the following are true regarding IS-IS Level 1/Level 2 routers? (Choose TWO)

Select 2 answers
A.They maintain both a Level 1 and a Level 2 database.
B.They set the ATT bit in their Level 1 LSPs.
C.They are always the DIS for the segment.
D.They only form Level 1 adjacencies.
E.They do not perform SPF calculations.
AnswersA, B

Required for inter-area routing.

Why this answer

L1/L2 routers act as bridges between areas and must maintain both databases.

277
MCQhard

An engineer configures multiple static routes to the same destination with different preference values. When all paths are up, how does Junos select which route is active in the routing table?

A.The route configured last in the candidate configuration file becomes active.
B.The route with the lowest preference value is installed as active.
C.The route with the highest metric value is preferred.
D.All routes are installed into the forwarding table for equal-cost multi-path load balancing.
AnswerB

Lower preference values take precedence in Junos path selection.

Why this answer

Junos selects routes based primarily on preference (administrative distance). The route with the lowest preference value is installed as active. If preferences are equal, ECMP may occur depending on configuration.

278
MCQhard

You are analyzing a core Juniper MX router after an ISSU upgrade procedure completed. You notice that BGP sessions dropped immediately after the final routing engine rebooted. What post-upgrade verification step should have been performed to prevent unexpected protocol drops during ISSU?

A.Confirm that LACP minimum-links is set to zero.
B.Check that the Virtual Chassis cable is connected between the MX Routing Engines.
C.Verify that all external BGP peers negotiated Graceful Restart capability and that helper mode was active on both ends prior to initiating the upgrade.
D.Ensure VRRP preemption is turned off on all core interfaces.
AnswerC

If peers do not support or have graceful restart enabled as helpers, they will drop the BGP session when the control plane restarts during ISSU.

Why this answer

Verifying that BGP graceful restart and helper modes were fully operational and peer routers had acknowledged the capability before starting ISSU.

279
MCQeasy

Which command is used to display comprehensive spanning tree status, including port roles, states, and priorities across all interfaces on an EX Series switch?

A.show spanning-tree interface
B.show protocols rstp status
C.show spanning-tree summary
D.show bridge spanning-tree
AnswerA

This command displays detailed per-interface spanning tree status and role assignments.

Why this answer

The 'show spanning-tree interface' command provides detailed status, roles, and states for all interfaces participating in spanning tree.

280
Multi-Selecteasy

Which TWO actions occur when you configure an interface as an edge port in RSTP? (Choose two.)

Select 2 answers
A.The port does not generate topology change notifications when its link goes up or down.
B.The port automatically becomes a backup port.
C.The port transitions immediately to the forwarding state.
D.The port's bridge priority is automatically set to 0.
E.The port stops transmitting BPDUs entirely under all circumstances.
AnswersA, C

Edge port state changes do not trigger TCNs.

Why this answer

Edge ports transition immediately to the forwarding state and do not trigger topology changes when their link status changes.

281
MCQmedium

A network engineer has configured a trunk port between an EX4300 switch and a third-party switch. The native VLAN traffic is dropping between the switches. Upon troubleshooting, the engineer discovers that the Juniper switch is tagging native VLAN egress traffic, while the peer device expects untagged traffic. Which configuration statement corrects this behavior while preserving trunking?

A.set vlans vlan-trust untagged-native-vlan
B.set interfaces ge-0/0/1 unit 0 family ethernet-switching native-vlan-tagging
C.set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode trunk native-vlan-id 10 no-native-vlan-tagging
D.set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode access vlan members 10
AnswerC

The 'no-native-vlan-tagging' command forces the switch to drop the tag on egress for the native VLAN.

Why this answer

By default, Junos tags native VLAN traffic on trunk ports. Using the 'no-native-vlan-tagging' statement ensures that native VLAN traffic egresses untagged.

282
Multi-Selecthard

An engineer is deploying Private VLANs on an EX Series switch and needs to verify proper operational status and traffic isolation. Which THREE tasks or verification checks should be performed? (Choose three.)

Select 3 answers
A.Verify that isolated ports can successfully send traffic to other isolated ports within the same secondary VLAN.
B.Run 'show vlans extensive' to inspect PVLAN port mappings and roles.
C.Verify that the primary VLAN is correctly associated with secondary isolated and community VLANs in the configuration.
D.Test connectivity to ensure isolated ports can only reach the designated promiscuous port.
E.Configure routing instances on all isolated ports to enable inter-isolated communication at Layer 2.
AnswersB, C, D

Correct. Extensive VLAN output displays PVLAN mappings.

Why this answer

Private VLAN verification involves checking primary and secondary associations, reviewing extensive VLAN output, and testing traffic between isolated and promiscuous ports.

283
Multi-Selectmedium

Which TWO parameters can be modified within a static route configuration to control path selection and backup behavior? (Choose two)

Select 2 answers
A.MED (Multi-Exit Discriminator)
B.Qualified next-hop with custom preference
C.AS-path length
D.Local preference attribute
E.Preference (administrative distance)
AnswersB, E

Qualified next-hop allows specifying backup next-hops with tailored preference values.

Why this answer

Preference and qualified next-hop are static route parameters used to manage path selection and backup preferences.

284
MCQhard

An engineer configures an aggregate route for 172.16.0.0/16 on a Junos device. However, the aggregate route is not active in the routing table. What is the primary requirement for an aggregate route to become active?

A.An explicit static route matching the aggregate prefix must be configured.
B.At least one more-specific contributing route must exist in the routing table.
C.A discard policy must be explicitly defined under the aggregate route definition.
D.The aggregate route must be redistributed using BGP or OSPF.
AnswerB

An aggregate route remains inactive unless there is at least one active, more-specific component route matching the aggregate range.

Why this answer

An aggregate route in Junos requires at least one contributing more-specific route present in the routing table to become active.

285
Multi-Selectmedium

Which TWO statements describe characteristics of BGP path attributes? (Choose two.)

Select 2 answers
A.Local Preference is a well-known discretionary attribute that is exchanged across eBGP peers.
B.MED is a well-known mandatory attribute used for inter-AS route selection.
C.Well-known mandatory attributes must be recognized by all BGP implementations and included in every Update message containing path information.
D.Optional transitive attributes are ignored by BGP speakers that do not recognize them and are never passed along to other peers.
E.AS_PATH is a well-known mandatory attribute.
AnswersC, E

Correct. Well-known mandatory attributes (such as AS_PATH, NEXT_HOP, ORIGIN) must be present in every update message with path data.

Why this answer

BGP path attributes are categorized into well-known (mandatory or discretionary) and optional (transitive or non-transitive). Well-known mandatory attributes must be recognized by all BGP implementations.

286
Multi-Selecteasy

Which TWO operational commands are used to check the health and status of Routing Engines and GRES on an MX series router? (Choose two)

Select 2 answers
A.show chassis routing-engine
B.show vrrp summary
C.show lacp statistics
D.show chassis alarms
E.show virtual-chassis
AnswersA, D

Displays RE status, master/backup roles, CPU/memory usage, and GRES synchronization.

Why this answer

Administrators use 'show chassis routing-engine' and 'show system alarms' or similar chassis commands.

287
Multi-Selecteasy

Which TWO tools or commands can be used on Junos to verify the operational packet flow through a tunnel interface? (Choose two)

Select 2 answers
A.show chassis alarms
B.show interfaces gr-0/0/0 extensive
C.monitor traffic interface gr-0/0/0
D.request system snapshot
E.show route summary
AnswersB, C

Shows detailed packet statistics and drop counters.

Why this answer

show interfaces extensive and monitor traffic interface are standard troubleshooting tools.

288
MCQeasy

An administrator needs to remove VLAN 20 from a trunk port that currently allows all VLANs. Which configuration command correctly prunes VLAN 20?

A.set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode trunk vlan members all except 20
B.set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode trunk vlan prune 20
C.set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode trunk vlan members remove 20
D.delete interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode trunk vlan members 20
AnswerA

Correct. This modifies the allowed member list to exclude VLAN 20.

Why this answer

To exclude a specific VLAN from a trunk port that allows all VLANs, you configure member-all except.

289
MCQmedium

You are troubleshooting intermittent packet drops on an enterprise switch trunk link. You notice that the MTU configured on the core switch trunk port is 1500, but QinQ double-tagged frames are traversing the link. What is the impact of this MTU configuration?

A.Frames exceeding 1500 bytes are dropped due to MTU mismatch/exceeding standard size.
B.The switch strips the outer tag automatically to fit the 1500 MTU limit.
C.The switch automatically fragments the Layer 2 Ethernet frames into smaller segments.
D.The interface automatically negotiates a higher MTU using LLDP.
AnswerA

Correct. Q-in-Q frames require a larger MTU (jumbo frames) to accommodate the additional VLAN tag.

Why this answer

QinQ double-tagged frames add an extra 4 bytes per tag, increasing the frame size beyond the standard 1500-byte Ethernet MTU, causing drops unless jumbo frames are enabled.

290
MCQmedium

You notice that an iBGP peer is not advertising routes it learned from an eBGP peer to other iBGP peers. What architectural rule explains this behavior?

A.eBGP TTL security check
B.MED restriction across AS boundaries
C.AS_PATH loop detection
D.iBGP split-horizon rule
AnswerD

iBGP split horizon prevents iBGP-learned routes from being propagated to other iBGP peers.

Why this answer

The iBGP split-horizon rule states that routes learned via iBGP cannot be advertised to other iBGP peers to prevent routing loops.

291
MCQmedium

You are troubleshooting an OSPF network where an ASBR is injecting external routes. Routers in other areas need to reach this ASBR. Which LSA type provides the reachability information to the ASBR itself?

A.Type 2 (Network LSA)
B.Type 7 (NSSA External LSA)
C.Type 4 (ASBR Summary LSA)
D.Type 5 (AS-external LSA)
AnswerC

Correct. Type 4 LSAs advertise the location of the ASBR to other areas.

Why this answer

Type 4 LSAs (ASBR Summary LSAs) are generated by an ABR to advertise the router ID of an ASBR to areas other than the one where the ASBR resides.

292
MCQeasy

An administrator needs to delete an entire VLAN configuration named 'guest' along with its VLAN ID and associated properties. Which configuration command should be executed?

A.clear vlans guest
B.delete vlans guest
C.destroy vlans guest
D.remove vlans guest
AnswerB

Correct. The delete command removes the specified configuration hierarchy.

Why this answer

Removing a configuration block in Junos configuration mode is done using the 'delete' command followed by the hierarchy path.

293
MCQhard

An administrator implements MSTP and wants to configure a maximum hop count of 20 for instance 1. Which configuration command is used in Junos OS?

A.set protocols mstp instance 1 hop-limit 20
B.set protocols mstp configuration-name RegionA max-hops 20
C.set protocols rstp max-hops 20
D.set protocols mstp max-age 20
AnswerB

The max-hops command sets the regional maximum hop limit in MSTP.

Why this answer

In Junos OS, the maximum hop count for MSTP is configured under the 'protocols mstp' hierarchy using the 'max-hops' statement.

294
MCQhard

You are troubleshooting a VRRP deployment where two EX4600 switches are acting as redundant gateways for several VLANs. Clients on VLAN 10 report intermittent gateway unreachability. You notice that VRRP mastership frequently flips between Switch A and Switch B. What is the most effective way to stabilize VRRP mastership?

A.Configure all member ports in the LAG to use static mode.
B.Review interface error counters, ensure physical link stability, and increase the VRRP advertisement interval if transient congestion is dropping packets.
C.Disable Virtual Chassis on both switches.
D.Remove GRES from the routing engine configuration.
AnswerB

Stabilizing physical links and tuning advertisement intervals prevents backup routers from assuming the master role due to missed heartbeat advertisements.

Why this answer

Frequent mastership flipping (flapping) is typically caused by missing advertisements due to interface drops, high CPU, or mismatched timers. Increasing advertisement intervals or tuning timers resolves this.

295
Multi-Selectmedium

Which of the following scenarios would prevent an IS-IS adjacency from forming? (Choose TWO)

Select 2 answers
A.Mismatched authentication passwords
B.Incompatible area address (for L1)
C.Different MTU settings
D.Mismatched interface description
E.Mismatched hostname
AnswersA, B

This causes authentication failure.

Why this answer

Adjacencies fail if authentication keys don't match or if the area address is incompatible (for Level 1).

296
Multi-Selecteasy

Which TWO items are required when configuring VRRP on a Juniper router interface? (Choose two)

Select 2 answers
A.At least one virtual IP address configured to act as the default gateway for clients.
B.A Virtual Router Identifier (VRID) integer.
C.A static BGP peering session to an upstream provider.
D.A pre-configured GRES license on the Routing Engine.
E.An active LACP aggregated Ethernet bundle.
AnswersA, B

Clients use the virtual IP as their gateway address.

Why this answer

VRRP configuration requires a Virtual Router ID (VRID) and at least one virtual IP address.

297
MCQhard

You configure an aggregate route and want to control which specific attributes or policies are applied when the aggregate is advertised by BGP. Which routing option is used to assign a specific contributing route tag or policy to an aggregate route?

A.set routing-options aggregate route 10.10.0.0/16 metric 100
B.set routing-instances aggregate-property
C.set protocols bgp aggregate-attribute 10.10.0.0/16
D.set routing-options aggregate route 10.10.0.0/16 policy
AnswerA

Metrics and other parameters can be directly assigned to aggregate routes under routing-options.

Why this answer

Aggregate routes can have specific attributes like preference, metric, and tags assigned using the routing-options aggregate hierarchy.

298
MCQmedium

You need to verify the router ID elected by OSPF on a Junos routing device. Which operational command provides this information quickly?

A.show system router-id
B.show route summary
C.show ospf interface detail
D.show ospf overview
AnswerD

Correct. This command displays the OSPF router ID and general protocol statistics.

Why this answer

The 'show ospf overview' command displays general OSPF parameters including the router ID, area count, and process statistics on a Junos device.

299
MCQeasy

An administrator wants to verify the configured access VLAN and port mode on interface ge-0/0/2. Which operational command should be used?

A.show vlans interface ge-0/0/2
B.show bridge-domain interface
C.show interfaces ge-0/0/2 extensive
D.show ethernet-switching interface ge-0/0/2 detail
AnswerD

Correct. This command shows detailed Layer 2 switching configuration and operational state per interface.

Why this answer

To view detailed properties of an Ethernet switching interface, including its mode and member VLANs, you run 'show ethernet-switching interface detail'.

300
MCQmedium

You need to ensure that BGP sessions fail over within sub-second intervals if a link degrades or goes down. Which protocol should you integrate with BGP on your Junos router?

A.BFD (Bidirectional Forwarding Detection)
B.STP (Spanning Tree Protocol)
C.LDP (Label Distribution Protocol)
D.OSPF
AnswerA

BFD integrates with BGP to provide rapid failure detection and fast convergence.

Why this answer

BFD (Bidirectional Forwarding Detection) provides fast failure detection that can trigger BGP session teardown within milliseconds.

Page 3

Page 4 of 7

Page 5

All pages