Courseiva

Juniper Networks Enterprise Routing and Switching, Specialist (JNCIS-ENT, JN0-352) (JNCIS-ENT) (JNCIS-ENT) — Questions 376450

506 questions total · 7pages · All types, answers revealed

Page 5

Page 6 of 7

Page 7
376
MCQmedium

A network engineer wants to verify IS-IS link-state database entries, specifically checking for TLVs that carry extended IP reachability information with wide metrics. Which Junos operational command should be used?

A.show isis adjacency extensive
B.show isis database detail
C.show ospf database
D.show route protocols isis
AnswerB

The 'show isis database detail' command provides granular output regarding LSPs, including extended IP reachability TLVs and wide metric values.

Why this answer

To view the IS-IS link-state database with detailed TLV and metric information on Junos devices, the command 'show isis database detail' is used.

377
MCQeasy

Which statement is true regarding the behavior of storm control when the traffic rate exceeds the configured threshold?

A.Excess traffic exceeding the threshold is dropped by the switch hardware.
B.Traffic is rate-shaped and buffered in the output queue until congestion clears.
C.The interface is immediately shut down and placed in an error-disabled state.
D.The switch sends SNMP traps and forwards the traffic with a low-priority CoS marking.
AnswerA

Storm control drops traffic that exceeds the defined rate limit until levels subside.

Why this answer

When storm control thresholds are exceeded, Junos drops the excess traffic matching the storm control criteria until the rate drops below the threshold.

378
MCQhard

An administrator implements OSPF on a Junos router with virtual links to span a disconnected non-backbone area across a non-backbone transit area to reach Area 0. What is a key design best practice regarding OSPF virtual links in enterprise networks?

A.They must be configured with a metric of 1 to ensure primary path selection.
B.They should be avoided in permanent designs due to troubleshooting complexity and lack of stability.
C.They automatically convert the transit area into an extension of the backbone.
D.They require the transit area to be configured as a totally stubby area.
AnswerB

Correct. Virtual links are considered a design workaround and are best avoided in stable, well-architected networks.

Why this answer

Virtual links should be used strictly as temporary or fallback solutions because troubleshooting them is complex, and they introduce fragility into the OSPF backbone topology.

379
MCQeasy

What is the default IS-IS metric for an interface in Junos?

A.1
B.10
C.0
D.100
AnswerB

10 is the default value.

Why this answer

The default IS-IS metric in Junos is 10.

380
MCQmedium

You are troubleshooting a connectivity issue between an EX4300 switch access port and an end-host. The port is configured as an access port for VLAN 100, but the host cannot communicate. You run 'show ethernet-switching interface ge-0/0/1' and notice the port status is down/down. Which underlying reason most likely explains this state?

A.The native VLAN ID does not match the upstream trunk switch.
B.BPDU protection has disabled the port due to a loop.
C.The VLAN 100 has not been created under the [edit vlans] hierarchy.
D.The physical cable is disconnected or the transceiver is faulty.
AnswerD

A physical layer issue results in a down/down interface state on Junos switches.

Why this answer

A down/down physical port state is typically a Layer 1 or physical cabling/transceiver issue, rather than a Layer 2 VLAN configuration mismatch.

381
Multi-Selectmedium

Which TWO actions occur when a Junos BGP routing policy includes the 'next policy' action? (Choose two)

Select 2 answers
A.Evaluation of the current policy terminates immediately.
B.Evaluation proceeds to the next independent policy defined in the chain.
C.The route is immediately accepted and installed in the routing table.
D.The route is rejected and dropped.
E.Evaluation jumps to the next term within the same policy block.
AnswersA, B

'next policy' stops checking further terms in the current policy.

Why this answer

'next policy' evaluates the remaining policies in the policy chain, bypassing subsequent terms within the current policy.

382
Multi-Selecthard

An administrator configures BGP multipath on a Junos router. Which THREE conditions must be met for BGP paths to be considered equal and installed as multipaths? (Choose three)

Select 3 answers
A.The paths must have the same Local Preference value.
B.The MED values must match (unless remove-private-as is set).
C.The paths must originate from different Autonomous Systems entirely.
D.The paths must have identical AS path lengths (unless AS path relaxation is enabled).
E.The router IDs of the advertising routers must be identical.
AnswersA, B, D

Local Preference must match for multipath consideration.

Why this answer

For BGP multipath, paths must typically have matching AS path lengths (unless relaxation is on), matching local preference, matching MED, and matching origin, and the next-hop router must resolve via the same IGP metric cost.

383
Multi-Selectmedium

An engineer is troubleshooting IS-IS adjacency formation failures on a Junos device. Which THREE parameters must match or be compatible between neighboring routers to successfully establish an IS-IS adjacency? (Choose three)

Select 3 answers
A.Link-level MTU size, as oversized IIH packets may be dropped if they exceed the interface MTU.
B.Area addresses (at least one shared area address for Level 1 adjacencies)
C.Identical system IDs configured on both neighboring nodes
D.Authentication type and password (if authentication is enabled)
E.Identical DIS priority values on multi-access networks
AnswersA, B, D

If the MTU is mismatched and padding causes IIH packets to exceed the smaller MTU, adjacency formation will fail.

Why this answer

IS-IS adjacencies require matching area addresses (for Level 1), compatible link/network types, and correct authentication settings if configured. System IDs must be unique, and maximum transmission unit (MTU) mismatches can prevent IIH packet processing.

384
Multi-Selectmedium

Which TWO criteria are used by Junos OS to select the OSPF router ID if no explicit router ID is configured under [edit routing-options]? (Choose two)

Select 2 answers
A.The highest IPv4 address configured on any active physical interface
B.The highest IPv4 address configured on any active loopback interface (lo0)
C.The lowest IPv4 address configured on a transit interface
D.The lowest MAC address assigned to the management interface (fxp0)
E.The router's configured BGP Autonomous System number
AnswersA, B

Correct. If no loopback has an IPv4 address, the highest physical interface IP is chosen.

Why this answer

When no explicit router ID is configured, Junos picks the highest IPv4 address configured on any loopback interface (lo0), and failing that, the highest IPv4 address on any active physical interface.

385
MCQmedium

You configure port security on a switch interface and set the violation action to 'restrict'. What happens when a port security violation occurs under this setting?

A.Packets from violating MAC addresses are dropped, and a syslog message/counter is generated while valid traffic continues.
B.The interface immediately shuts down and generates an SNMP trap.
C.The violating MAC address is automatically added to a static ARP inspection deny list.
D.The switch drops all traffic on the interface until the violation timer expires.
AnswerA

The 'restrict' action drops violating traffic and logs/counts the event without disabling the port.

Why this answer

The 'restrict' action causes the switch to drop packets from unauthorized source MAC addresses and increment violation counters, but the port remains up and forwarding for valid MACs.

386
MCQmedium

A network engineer configures an eBGP session on a Junos device and notices that routes learned from the external peer are not being installed in the routing table or advertised to other peers. What is the default behavior regarding eBGP route propagation and next-hop resolution on Junos OS?

A.Junos automatically drops all eBGP routes unless an explicit import policy is applied allowing them.
B.eBGP routes require the 'as-override' statement to be active in the forwarding table.
C.The local router does not set the next-hop to itself for eBGP peers, but for iBGP peers the next-hop must be resolvable via an IGP.
D.eBGP automatically changes the next-hop to the local router interface for all advertised routes.
AnswerC

Correct. When advertising to an eBGP peer, the next-hop is the interface of the advertising router. For iBGP, the next-hop is preserved, requiring IGP resolution.

Why this answer

By default, eBGP does not change the next-hop address when advertising routes to external peers, but when advertising to iBGP peers, it preserves the next-hop unless 'next-hop-self' is configured. However, for routes to be active, the next-hop must be resolvable in the routing table.

387
MCQmedium

An administrator is setting up VRRP tracking on an EX4300 switch interface. If the uplink interface monitoring the core network fails, what should happen to the VRRP priority on the gateway interface?

A.The VRRP priority is increased to maximum to force immediate forwarding.
B.The interface shuts down all LACP bundles connected to the switch.
C.The switch initiates an immediate In-Service Software Upgrade.
D.The VRRP priority is decremented by a configured value so that the backup router can assume the master role.
AnswerD

Priority decrementing ensures that a router experiencing an upstream uplink failure relinquishes its VRRP mastership.

Why this answer

VRRP interface tracking automatically decrements the local router's priority when a monitored tracking interface goes down, allowing a backup router with higher priority to take over as master.

388
Multi-Selecteasy

Which TWO options represent valid benefits of configuring Link Aggregation Groups (LAG)? (Choose two)

Select 2 answers
A.Increased aggregate bandwidth between connected networking devices.
B.Synchronization of BGP routing daemon state between separate routers.
C.Automatic upgrade of Junos OS across peer devices.
D.Redundancy and automatic failover if a physical member link fails.
E.Elimination of the need for Spanning Tree Protocol across all VLANs.
AnswersA, D

Combining multiple physical links pools their bandwidth into a single logical pipe.

Why this answer

LAGs provide increased aggregate bandwidth and link redundancy/failover.

389
MCQeasy

Which interface naming convention is used for an IP-IP tunnel interface in Junos?

A.st-0/0/0
B.ip-0/0/0
C.gr-0/0/0
D.lt-0/0/0
AnswerB

The 'ip-' prefix designates an IP-IP tunnel interface.

Why this answer

IP-IP tunnels use the 'ip-' prefix for their interface names in Junos.

390
MCQeasy

Which command verifies the interface bindings associated with a specific routing instance named 'engineering'?

A.show route instance engineering
B.show interfaces instance engineering
C.show configuration routing-instances engineering
D.show forwarding-table instance engineering
AnswerA

This command displays operational details including associated interfaces and routing tables for the specified instance.

Why this answer

The show route instance detail or show routing-instance command displays configuration details and interface bindings for specific instances.

391
MCQhard

An EX Series switch running RSTP receives BPDUs with superior path cost information from an unauthorized access switch. Which feature should you enable on access-facing ports to prevent these unauthorized BPDUs from altering the spanning tree topology?

A.set protocols rstp interface ge-0/0/5.0 bpdu-guard
B.set protocols rstp interface ge-0/0/5.0 no-root-port
C.set protocols rstp interface ge-0/0/5.0 root-protection
D.set protocols rstp interface ge-0/0/5.0 loop-protection
AnswerA

BPDU guard ensures that ports configured as edge ports will error-disable if they receive a BPDU.

Why this answer

BPDU protection (bpdu-guard) disables a designated edge port if it receives a BPDU, protecting the network from unauthorized switches attempting to inject themselves into the topology.

392
MCQmedium

You need to verify the regional configuration name and revision number currently active on an EX Series switch running MSTP. Which operational command should you use?

A.show protocols mstp status
B.show mstp region detail
C.show spanning-tree bridge
D.show spanning-tree mstp configuration
AnswerD

This command shows active MST region parameters, revision, and mappings.

Why this answer

The command 'show spanning-tree mstp configuration' displays the MST region name, revision number, and VLAN-to-instance mapping table.

393
MCQeasy

Which Junos command displays the status of all configured tunnel interfaces on the device?

A.show tunnel summary
B.show routing-options tunnels
C.show interfaces gr*
D.show chassis tunnels
AnswerC

Using wildcards with the show interfaces command displays all GRE interfaces.

Why this answer

The concise or standard interface display command filters or shows tunnel interfaces when specified, such as 'show interfaces gr*'.

394
MCQhard

An engineer is deploying Selective QinQ where customer inner VLAN tags must be preserved while the outer tag is swapped or added based on ingress port rules. Which Junos statement enables tag preservation?

A.set interfaces ge-0/0/0 unit 0 family ethernet-switching input-vlan-map pop
B.set interfaces ge-0/0/0 unit 0 family ethernet-switching input-vlan-map push
C.set interfaces ge-0/0/0 unit 0 family ethernet-switching encapsulation qinq-transparent
D.set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan-translation preserve-inner
AnswerB

Correct. The push mapping action adds an outer tag while preserving the inner customer VLAN tag.

Why this answer

When configuring QinQ or VLAN translation, the 'pop' or 'swap' actions with tag preservation are managed via vlan-map configurations using stacking.

395
Multi-Selecthard

An administrator is configuring route leaking between a virtual-router routing instance and the default inet.0 table. Which THREE methods or configuration constructs can be used to achieve route leaking in Junos? (Choose three)

Select 3 answers
A.Configuring an aggregate route with a discard next-hop in inet.0.
B.Using logical tunnel (lt) or physical patch cables between instance interfaces.
C.Enabling BGP auto-discovery across all virtual routers without policies.
D.Configuring rib-groups under routing-options to import routes across tables.
E.Using import and export policies between routing instances.
AnswersB, D, E

Physical or logical patch connectivity bridges routing instances at Layer 3.

Why this answer

Route leaking between routing instances can be achieved using rib-groups, import/export policies, or logical tunnel interfaces.

396
MCQeasy

An administrator needs to delete a MAC address entry from the ethernet-switching table on an EX Series switch due to a stuck entry. Which operational command is used?

A.reset mac-table
B.delete ethernet-switching table mac-address
C.clear ethernet-switching table
D.clear bridge-domain mac-address
AnswerC

Correct. This command clears dynamic MAC address table entries.

Why this answer

The clear ethernet-switching table command is used to flush learned MAC addresses on Junos switches.

397
Multi-Selectmedium

Which THREE statements are true regarding IP-IP encapsulation in Junos OS? (Choose three.)

Select 3 answers
A.IP-IP tunnels encapsulate an IP packet directly inside another IP packet without adding a GRE header.
B.IP-IP encapsulation introduces less header overhead compared to GRE encapsulation.
C.IP-IP tunnels natively support multi-protocol payloads such as AppleTalk and IPX.
D.IP-IP tunnels require a specialized physical line card with built-in hardware cryptographic engines.
E.IP-IP tunnels utilize interface names starting with the ip- prefix.
AnswersA, B, E

IP-IP is a simpler encapsulation mechanism that wraps an IP packet inside an outer IP header without extra protocol headers like GRE.

Why this answer

IP-IP tunnels encapsulate IP packets within IP packets, use ip- interfaces, and have lower overhead than GRE because they lack extra transport headers.

398
MCQhard

When using authentication in IS-IS, where can you apply the password?

A.At both the interface and global levels.
B.Only on the loopback interface.
C.Only at the global level.
D.Only at the interface level.
AnswerA

Junos allows authentication at either level.

Why this answer

IS-IS authentication can be applied to the interface level or the global level (area/domain).

399
MCQeasy

What is the primary function of a Junos tunnel interface when used in conjunction with routing protocols?

A.To provide a virtual point-to-point layer 3 link for routing protocol adjacencies across an untrusted or disjointed transport network.
B.To act as a physical layer 2 bridge for VLAN extension without IP addresses.
C.To encrypt all transit traffic by default using hardware-based AES-256.
D.To replace physical interfaces for standard local area network connections.
AnswerA

Tunnel interfaces abstract transport networks, creating direct logical links for routing protocols.

Why this answer

Tunnel interfaces provide a virtual point-to-point link over which routing protocols can establish adjacencies and exchange routing information across an intermediate network.

400
MCQeasy

Which Junos configuration command enables Dynamic ARP Inspection (DAI) for a specific VLAN named 'VLAN10'?

A.set protocols arp-inspection vlan VLAN10
B.set ethernet-switching-options secure-access-port vlan VLAN10 arp-inspection
C.set vlans VLAN10 dynamic-arp-inspection
D.set interfaces vlan unit 10 family inet arp-inspection
AnswerB

This command correctly enables DAI on the specified VLAN under secure-access-port.

Why this answer

DAI is enabled under ethernet-switching-options secure-access-port vlan for the specific VLAN name.

401
MCQeasy

Which OSPF packet type is responsible for discovering neighbors and maintaining adjacencies on a Junos device?

A.Link-State Update (Type 4)
B.Hello (Type 1)
C.Link-State Request (Type 3)
D.Database Description (Type 2)
AnswerB

Correct. Hello packets discover neighbors and maintain adjacencies.

Why this answer

OSPF Hello packets (Packet Type 1) are sent periodically to discover neighbors, establish bidirectional communication, and maintain adjacencies.

402
Multi-Selecthard

Which of the following are true about pseudonode LSPs? (Choose THREE)

Select 3 answers
A.They are used in point-to-point links.
B.They represent the broadcast segment in the LSDB.
C.They are generated by the DIS.
D.They reduce the number of adjacencies tracked.
E.They are flooded by all routers.
AnswersB, C, D

This is their purpose.

Why this answer

Pseudonode LSPs are generated by the DIS, represent the broadcast segment, and effectively reduce the number of LSPs in the LSDB.

403
MCQeasy

Which operational command displays the status of MACsec connections and associated security association parameters on an EX Series switch?

A.show ethernet-switching macsec
B.show protocols mka status
C.show security macsec associations
D.show macsec connections
AnswerD

This command shows MACsec connections, status, and SA parameters.

Why this answer

The command 'show macsec connection' shows active connections and parameters.

404
MCQhard

An operator troubleshooting BGP path selection notices two routes have identical Local Preference, AS path length, origin, MED, and both are eBGP routes. Which attribute does the BGP path selection algorithm evaluate next?

A.Lowest Router ID
B.Oldest route
C.Lowest peer IP address
D.Lowest IGP cost to the BGP next hop
AnswerD

IGP cost to next hop is evaluated to prefer the closest exit point when comparing eBGP routes or prior ties.

Why this answer

According to the BGP best path selection algorithm, after comparing local pref, AS path, origin, MED, and iBGP vs eBGP, the router prefers the path with the lowest IGP metric to the BGP next hop.

405
MCQeasy

An administrator has deployed a new EX Series switch running RSTP and notices that access ports connected to end-user workstations take up to 30 seconds to transition to the forwarding state. Which configuration command should be applied to immediately resolve this delay for access ports?

A.set protocols rstp interface ge-0/0/1.0 edge
B.set protocols rstp force-version stp
C.set protocols rstp interface ge-0/0/1.0 mode point-to-point
D.set protocols rstp bridge-priority 0
AnswerA

Designating the interface as an edge port skips the listening and learning states, immediately placing it into the forwarding state.

Why this answer

In RSTP, edge ports transition directly to the forwarding state, bypassing the discarding and learning states. Configuring 'no-root-port' or designating the port as an edge port using 'set protocols rstp interface <interface> edge' allows workstations to connect without experiencing STP convergence delay.

406
MCQhard

You need to redistribute OSPF routes into IS-IS. Where do you configure this?

A.Under the 'protocols isis export' hierarchy.
B.Under the OSPF configuration only.
C.It is not possible to redistribute OSPF into IS-IS.
D.Under the interface level.
AnswerA

This is where the export policy is applied.

Why this answer

Redistribution is configured under the 'policy-options' and applied under 'protocols isis export'.

407
MCQeasy

Which Junos configuration hierarchy is used to configure secure access port features such as DHCP snooping and Dynamic ARP Inspection?

A.set ethernet-switching-options secure-access-port
B.set protocols l2-security
C.set system security layer2
D.set switch-options port-security
AnswerA

This is the correct configuration hierarchy for secure access port features in Junos.

Why this answer

Secure access port features are configured under the 'ethernet-switching-options secure-access-port' hierarchy.

408
Multi-Selecthard

Which TWO statements are correct regarding the operation of MSTP instance 0 (CIST)? (Choose two.)

Select 2 answers
A.It handles any VLANs that are not explicitly mapped to another user-defined MST instance.
B.It operates independently without any interaction with external RSTP switches.
C.It is limited strictly to a maximum hop count of 1.
D.It acts as the Common and Internal Spanning Tree (CIST).
E.It prohibits the use of root protection on instance 0 ports.
AnswersA, D

Unmapped VLANs automatically default to Instance 0.

Why this answer

Instance 0 in MSTP is known as the Common and Internal Spanning Tree (CIST), and it manages unmapped VLANs while maintaining backward compatibility with legacy STP/RSTP regions.

409
MCQeasy

Which CLI command verifies that OSPF Graceful Restart helper mode is enabled by default on a Juniper routing platform?

A.show chassis ospf-status
B.show lacp ospf-helper
C.show ospf overview
D.show vrrp ospf-restart
AnswerC

show ospf overview shows global OSPF parameters, including whether graceful restart helper is enabled.

Why this answer

Running 'show ospf neighbor detail' or 'show ospf overview' displays protocol-level graceful restart helper status.

410
MCQhard

While reviewing BGP updates, you notice an attribute type code of 3 with a value representing an IP address. Which well-known mandatory path attribute is this?

A.AS_PATH
B.ORIGIN
C.NEXT_HOP
D.LOCAL_PREF
AnswerC

NEXT_HOP has type code 3.

Why this answer

Attribute type code 3 corresponds to NEXT_HOP, which is a well-known mandatory attribute indicating the IP address of the router used to reach the destination.

411
MCQhard

You are configuring Multi-Chassis Link Aggregation (MC-LAG) across two Juniper switches acting as separate control plane devices. Which protocol is used between the peer switches to synchronize state and ensure MAC address table consistency across the MC-LAG domain?

A.Open Shortest Path First (OSPF)
B.Graceful Routing Engine Switchover (GRES)
C.Inter-Chassis Control Protocol (ICCP)
D.Virtual Router Redundancy Protocol (VRRP)
AnswerC

ICCP runs over an inter-chassis link (ICL) between MC-LAG peers to exchange control and status messages.

Why this answer

MC-LAG uses Inter-Chassis Control Protocol (ICCP) to coordinate state, consistency, and status between the two peer switches.

412
Multi-Selectmedium

Which TWO statements accurately describe the behavior of the BGP AS_PATH attribute? (Choose two)

Select 2 answers
A.It is automatically stripped when crossing a confederation boundary.
B.It is a well-known mandatory attribute.
C.It is prepended with the local AS number when sent to an eBGP peer.
D.It is modified when an update is sent to an iBGP peer.
E.It is an optional non-transitive attribute used for internal metrics.
AnswersB, C

AS_PATH is classified as well-known mandatory.

Why this answer

AS_PATH is well-known mandatory and gets prepended with the local AS number every time an update leaves an Autonomous System via eBGP.

413
Multi-Selectmedium

Which THREE parameters are part of a standard Junos GRE tunnel interface configuration block? (Choose three)

Select 3 answers
A.gre-key <number>
B.encapsulation-type ipsec
C.family inet address <ip-address>
D.tunnel destination <ip-address>
E.tunnel source <ip-address>
AnswersC, D, E

Defines the IP address used for routing payload traffic over the tunnel.

Why this answer

Source IP, destination IP, and family inet address are part of the gr- unit configuration.

414
Multi-Selecteasy

Which TWO Junos configuration hierarchies are involved when setting up a functional GRE tunnel with an IP address? (Choose two)

Select 2 answers
A.edit chassis
B.edit system services tftp
C.edit interfaces gr-0/0/0 unit 0
D.edit firewall
E.edit protocols bgp
AnswersA, C

Chassis configuration is required to enable tunnel services on supported FPCs/PICs.

Why this answer

Interfaces hierarchy configures both the gr- tunnel unit parameters and the physical/transport routing.

415
MCQmedium

You are troubleshooting a load-balancing configuration across multiple equal-cost paths (ECMP) on a Juniper MX Series router. Traffic is hashing persistently onto only one link. Which action should you take to enable per-packet or per-flow load balancing across the ECMP paths?

A.Increase the router's MTU across all core interfaces.
B.Enable BGP multipath under protocols bgp.
C.Configure a routing policy with 'then load-balance' action and apply it to forwarding-options.
D.Configure a static discard route for the loopback interface.
AnswerC

The 'load-balance' action in a routing policy applied via 'export' or 'routing-options forwarding-table' tells Junos to populate the forwarding table with multiple next-hops.

Why this answer

By default, Junos performs destination-based forwarding. To enable load balancing across multiple paths, you must explicitly configure a load-balance policy action with per-packet or per-flow load-balancing options.

416
Multi-Selectmedium

An engineer is configuring a trunk port on an EX Series switch and needs to ensure that untagged and priority-tagged frames are handled correctly. Which TWO configuration actions are required? (Choose two.)

Select 2 answers
A.Set the interface mode to trunk under the ethernet-switching family hierarchy.
B.Enable Layer 3 routing directly on the physical trunk interface unit 0.
C.Configure the interface encapsulation as CCC or VPLS.
D.Disable MAC learning on the trunk interface to prevent native VLAN loops.
E.Configure the native-vlan-id statement to specify which VLAN receives untagged frames.
AnswersA, E

Correct. Trunk mode enables 802.1Q tagging on the interface.

Why this answer

Handling untagged frames on a trunk port requires setting a native VLAN ID, and ensuring family ethernet-switching is properly configured in trunk mode.

417
MCQhard

During an audit of a Juniper EX4300 Virtual Chassis, you notice that member 1 and member 2 are connected via mixed 1G and 10G uplink ports. How does Junos handle mixed-speed Virtual Chassis port configurations?

A.Mixed speed links automatically drop to 1G to maintain backward compatibility without administrative intervention.
B.Junos automatically load-balances stacking traffic across 1G and 10G links using weighted round-robin.
C.Only the 10G ports will carry control plane traffic while 1G ports are restricted to data transit.
D.Virtual Chassis ports (VCPs) must be explicitly configured to match supported transceiver speeds, and mixing unsupported interface types will result in port initialization failure.
AnswerD

Junos enforces strict hardware compliance for VCP connections; mismatched or unsupported transceiver types will fail to form a valid VC ring/chain.

Why this answer

Junos EX series virtual chassis ports can be configured for specific speeds, but mismatched or unsupported port combinations will cause initialization failures or link errors depending on the platform.

418
Multi-Selecthard

When troubleshooting a non-functional IP-IP or GRE tunnel on a Junos routing device, which TWO diagnostic steps or commands are commonly utilized? (Choose two.)

Select 2 answers
A.Execute request system reboot immediately to restart tunnel daemon processing.
B.Use clear ip-ip statistics to reset tunnel counters.
C.Use show interfaces gr-0/0/0 to verify that the physical and logical link states are up and packet counters are incrementing.
D.Run show chassis routing-engine to check control plane memory utilization of tunnel encapsulation modules.
E.Use ping with the do-not-fragment bit set and appropriate sizing to test path MTU issues across the tunnel.
AnswersC, E

Checking interface status and counters confirms if encapsulation and decapsulation are occurring.

Why this answer

Troubleshooting tunnel interfaces involves checking interface status with show interfaces and verifying packet forwarding using traceroute or ping with appropriate packet sizes and do-not-fragment flags.

419
MCQmedium

What is the function of the DIS in an IS-IS broadcast network?

A.To authenticate all neighbors.
B.To generate pseudonode LSPs.
C.To perform path calculation for all routers.
D.To act as the routing controller for the area.
AnswerB

This reduces the number of LSPs needed in the database.

Why this answer

The DIS (Designated Intermediate System) is responsible for generating pseudonode LSPs to represent the broadcast network.

420
MCQhard

An administrator configures IP Source Guard on an access switch port. When a client connects, its traffic is dropped even though it acquired an IP via DHCP. Reviewing logs shows no DHCP snooping binding. What is the root cause?

A.IP Source Guard requires static ARP inspection to be enabled simultaneously.
B.The client's MAC address is in the port security violation log.
C.DHCP snooping was not enabled on the corresponding VLAN, preventing binding table creation.
D.IP Source Guard only supports static IP bindings, not DHCP-derived bindings.
AnswerC

Without DHCP snooping active on the VLAN, the binding table remains empty, and IP Source Guard drops all traffic from non-static source IPs.

Why this answer

IP Source Guard relies entirely on the DHCP snooping binding database. If the DHCP snooping feature is not enabled on that specific VLAN, no database entries are created, causing IP Source Guard to drop traffic.

421
MCQeasy

Which command allows an administrator to view real-time BGP routing updates being sent and received on a Junos device?

A.monitor traffic protocol bgp
B.traceroute bgp
C.show log bgp-log
D.show bgp updates
AnswerA

Monitor traffic protocol bgp captures and displays live BGP packets on the wire.

Why this answer

Tracing options and packet/update monitoring can be performed using 'monitor traffic' or BGP tracing, but for dynamic operational logging of updates, tracing is enabled. For quick viewing of summary updates, monitor traffic protocol bgp is used.

422
MCQhard

During OSPF database synchronization, two Junos routers exchange Database Description (DBD) packets. One router repeatedly sends DBD packets with the master/slave bit set incorrectly or encounters sequence number mismatches, causing the adjacency to loop in the Exchange state. Which OSPF packet type is immediately sent by a router to request missing link-state information once the ExStart/Exchange transition completes?

A.Link-State Request (Type 3)
B.Hello (Type 1)
C.Database Description (Type 2)
D.Link-State Update (Type 4)
AnswerA

Correct. LSR packets are used to request specific LSAs identified during the DBD exchange phase.

Why this answer

Once DBD exchange completes and master/slave negotiation finishes, routers transition to the Loading state and use Link-State Request (LSR) packets (Type 3) to request more detailed or missing LSAs from their neighbor.

423
MCQmedium

An engineer needs to configure a Junos device to operate in an IS-IS routing domain where the router should connect both Level 1 and Level 2 areas, forming a boundary between them. Which configuration command under the [edit protocols isis interface] hierarchy correctly enables dual-level operations on the interface?

A.set level 1-2 wide-metrics-only
B.set border-router level 1-2
C.set area-type l1-l2
D.set routing-level both
AnswerA

The command 'set level 1-2 wide-metrics-only' correctly enables both Level 1 and Level 2 operations on the interface and enforces the use of wide metrics.

Why this answer

To enable a Junos router interface to participate in both Level 1 and Level 2 IS-IS routing, you configure the level statement under the interface with 'level 1/2 wide-metrics-only' or specify the levels. By default, interfaces are configured for level 1 and level 2.

424
MCQeasy

You need to establish a point-to-point GRE tunnel between two Juniper MX Series routers. Which tunnel services type must be defined under the chassis configuration when using aggregated interface inline services?

A.set routing-options interface-routes
B.set system services gre
C.set interfaces gr-0/0/0 unit 0 family inet
D.set chassis fpc 0 pic 0 tunnel-services
AnswerD

This command enables tunnel services on the specified FPC and PIC.

Why this answer

To configure GRE tunnels on MX Series routers using inline services, you must configure the tunnel-services under the chassis FPC settings to enable the physical or virtual services pic capabilities.

425
MCQmedium

You need to configure authentication for a BGP peering session on a Junos device to prevent spoofing attacks. Where is the MD5 authentication key configured?

A.firewall family inet filter bgp-auth
B.system authentication-algorithm md5
C.protocols bgp group name authentication-key
D.routing-options md5-key
AnswerC

Authentication keys are configured directly under the BGP group or neighbor hierarchy.

Why this answer

BGP MD5 authentication keys are configured under the specific neighbor or group definition using the authentication-key statement.

426
MCQeasy

An administrator needs to verify the exact BGP timers negotiated with an eBGP peer on a Junos device. Which operational command should be used?

A.show ospf neighbor
B.show bgp summary
C.show route advertising-protocol bgp
D.show bgp neighbor
AnswerD

Correct. 'show bgp neighbor' displays session state, negotiated timers, and capability information.

Why this answer

The 'show bgp neighbor' command provides detailed information about a BGP neighbor session, including negotiated hold time, keepalive interval, state, and message statistics.

427
MCQmedium

You need to configure a static route that acts as a discard route, ensuring that any traffic destined for a specific unassigned subnet is silently dropped. Which configuration syntax should you use?

A.set routing-options static route 192.168.50.0/24 drop
B.set routing-options static route 192.168.50.0/24 reject
C.set routing-options static route 192.168.50.0/24 null0
D.set routing-options static route 192.168.50.0/24 discard
AnswerD

The 'discard' action configures a black hole route that drops packets without sending ICMP responses.

Why this answer

Discard static routes are configured by appending the 'discard' keyword to the static route definition.

428
MCQmedium

An engineer configures a BGP policy to set the MED attribute on routes advertised to an eBGP peer. What is the primary purpose of the MED (Multi-Exit Discriminator) attribute?

A.To dictate the preferred path for traffic leaving the local AS.
B.To prevent routing loops across multiple autonomous systems.
C.To indicate to an external AS which entry point is preferred for traffic entering the local AS.
D.To assign a priority score for internal route selection within the same AS.
AnswerC

MED acts as a hint to neighboring ASes regarding ingress path preference.

Why this answer

MED is an optional non-transitive attribute used to inform external peers about the preferred entry point into an AS.

429
Multi-Selectmedium

An engineer is configuring static routes in Junos OS and wants to ensure high availability. Which TWO features can be implemented with static routes to achieve path redundancy? (Choose two)

Select 2 answers
A.Qualified next-hop with varying preference values
B.IGMP snooping on static interfaces
C.OSPF area stubbing
D.Recursive next-hop tracking via RPM or routing table lookups
E.BGP AS-path prepending on static routes
AnswersA, D

Qualified next-hops allow specifying a backup next-hop with a higher preference.

Why this answer

Qualified next-hops and recursive next-hop tracking (or BFD/RPM integration) provide static route redundancy in Junos.

430
MCQeasy

Which operational command displays the configured member IDs, priorities, and roles in an EX Series Virtual Chassis?

A.show lacp aggregated-devices
B.show virtual-chassis
C.show chassis alarms
D.show vrrp mastership
AnswerB

show virtual-chassis provides the complete status table for all switches in the Virtual Chassis.

Why this answer

The 'show virtual-chassis' command displays member IDs, roles, priorities, and serial numbers.

431
MCQeasy

What information is contained within an OSPF Type 1 (Router LSA)?

A.Summary prefixes imported from external autonomous systems
B.The router's active interfaces, interface types, costs, and neighbor states within an area
C.Inter-area summary routes generated by ABRs
D.Networks attached to a designated router on a broadcast segment
AnswerB

Correct. Type 1 LSAs describe local links and states for a router inside its area.

Why this answer

Type 1 LSAs describe the state of the router's links (interfaces) that connect to a given area, including their costs and neighbor relationships.

432
MCQeasy

Which command allows you to inspect the active forwarding table entries and verify next-hops on a Junos router?

A.show route forwarding-table
B.show interfaces extensive
C.show pfe traffic
D.show routing-engine status
AnswerA

This command shows the exact paths installed in the forwarding table.

Why this answer

The show route forwarding-table command displays the contents of the Packet Forwarding Engine (PFE) routing tables.

433
Multi-Selecteasy

Which TWO traffic conditions will trigger storm control drops on a configured switch interface? (Choose two)

Select 2 answers
A.Multicast traffic rate exceeding the configured threshold
B.Unicast traffic destined for known active MAC addresses exceeding average utilization
C.CPU control plane queue utilization exceeding 90%
D.Broadcast traffic rate exceeding the configured threshold
E.BPDU control frames exceeding Spanning Tree hello timers
AnswersA, D

Exceeding the multicast rate limit triggers drops.

Why this answer

Storm control triggers drops when broadcast or multicast traffic rates exceed configured thresholds.

434
MCQmedium

You are troubleshooting a route leak between two eBGP peers. You notice that an incoming route contains your own ASN in the AS_PATH attribute, yet the route was installed. Which Junos feature allowed this behavior, and where is it configured?

A.as-override
B.allow-as-in
C.as-path-prepend
D.loop-detect disable
AnswerB

allow-as-in permits the acceptance of routes with the local ASN in the AS_PATH up to a specified count.

Why this answer

The 'allow-as-in' command under BGP configuration allows a router to accept BGP updates that contain its own ASN in the AS_PATH, typically used in VPN or hub-and-spoke scenarios.

435
MCQeasy

In an RSTP-enabled network, which port role immediately transitions to the forwarding state upon failure of the designated port on the segment, bypassing the traditional listening and learning states?

A.Root port
B.Disabled port
C.Designated port
D.Alternate port
AnswerD

An alternate port maintains a backup path to the root and can transition immediately without delay.

Why this answer

The Alternate port in RSTP serves as a backup to the root port and transitions directly to forwarding if the root port fails.

436
MCQhard

While troubleshooting an RSTP topology on EX Series switches, you notice that a designated port has stopped receiving BPDUs from its upstream neighbor due to a unidirectional link failure. Which feature should you enable to prevent this port from transitioning to a Designated Forwarding state and causing a loop?

A.set protocols rstp interface ge-0/0/5.0 bpdu-protection
B.set protocols rstp interface ge-0/0/5.0 loop-protection
C.set protocols rstp interface ge-0/0/5.0 no-negotiation
D.set protocols rstp interface ge-0/0/5.0 error-disable
AnswerB

Loop protection guards against unidirectional link failures by placing the port in a discarding state if BPDUs stop arriving.

Why this answer

Loop protection checks for the continued receipt of BPDUs on root and alternate ports. If BPDUs are lost, the port transitions to a loop-inconsistent blocking state.

437
MCQmedium

You are configuring OSPF on a Junos device and notice that Type 3 LSAs are not being generated or propagated into a specific area. When examining the configuration under protocols ospf, you see that the area is defined with the no-summaries parameter. Which area type has been configured?

A.Not-So-Stubby Area (NSSA)
B.Transit Area
C.Standard OSPF Area
D.Totally Stubby Area
AnswerD

The 'no-summaries' option configures a totally stubby area, blocking Type 3, 4, and 5 LSAs.

Why this answer

In Junos OS, the 'no-summaries' parameter under 'set protocols ospf area' defines a Stub area as a totally stubby area, which suppresses Type 3 summary LSAs from being injected into the area by the ABR.

438
Multi-Selecteasy

Which TWO commands can an administrator use on a Junos device to verify OSPF interface configurations and operational status? (Choose two)

Select 2 answers
A.show ospf bgp-neighbors
B.show interfaces terse
C.show route protocol bgp
D.show ospf interface
E.show ospf interface detail
AnswersD, E

Correct. Displays OSPF interface summary status.

Why this answer

Commands like 'show ospf interface' and 'show ospf interface detail' provide detailed operational statistics and configurations for OSPF-enabled interfaces.

439
MCQeasy

An administrator needs to create a VLAN named 'voice' with a VLAN ID of 50 on a Junos EX Series switch. Which configuration path achieves this?

A.set vlans voice vlan-id 50
B.set ethernet-switching-options vlans voice id 50
C.set bridge-domains voice vlan-id 50
D.set interfaces vlan unit 50 name voice
AnswerA

Correct. This creates the VLAN and assigns its ID.

Why this answer

VLANs are created at the global [edit vlans] hierarchy in Junos OS.

440
Multi-Selecteasy

Which TWO statements are true regarding loop protection in RSTP? (Choose two.)

Select 2 answers
A.It increases the bridge priority of the local switch to maintain root status.
B.It requires MSTP instances to be fully mapped before activation.
C.It protects against loops caused by unidirectional link failures.
D.It places a port into a discarding state if BPDUs stop arriving unexpectedly.
E.It shuts down access ports immediately upon receiving any BPDU.
AnswersC, D

Unidirectional links cause BPDUs to stop arriving in one direction, which loop protection catches.

Why this answer

Loop protection guards against unidirectional link failures and missing BPDUs, placing the affected port into a discarding state.

441
Multi-Selectmedium

Which TWO parameters can be configured when setting up storm control on an EX Series switch interface? (Choose two)

Select 2 answers
A.Absolute bandwidth rate in kilobits or megabits per second
B.Explicit packet drop probability curve using WRED profiles
C.Maximum TCP window scaling factor
D.Bandwidth percentage of total port capacity
E.Maximum frame byte size limit for MTU enforcement
AnswersA, D

Absolute bit rates can be configured using the bandwidth parameter.

Why this answer

Storm control can be configured using bandwidth percentage or absolute bandwidth rates.

442
MCQhard

An administrator configures MACsec on a point-to-point link between two EX switches. Encrypted frames are received by the remote switch, but decryption fails, and packets are dropped. What is the most likely reason for this decryption failure?

A.The cipher suite defaults to GCM-AES-128 on one end and AES-CBC-128 on the other.
B.The MTU on the physical interface is set too small to accommodate MACsec ICV overhead.
C.A mismatch in pre-shared keys (CAK/CKN) or security association parameters between the peers.
D.DHCP snooping is blocking the MACsec control frames on the transit link.
AnswerC

If pre-shared keys or key names do not match, the MKA peers cannot derive identical encryption session keys, leading to decryption failures.

Why this answer

Decryption failure in MACsec typically stems from a mismatch in connectivity association keys (CAK) or connectivity key names (CKN) configured on the peers.

443
MCQmedium

You are configuring OSPF redistribution on a Junos router and want to ensure that external routes imported from a static routing table retain an escalating external metric. Which external route metric type (E1 or E2) should you choose if you want the internal cost to be added to the external cost during path selection?

A.Type 7 (NSSA)
B.Type 1 (E1)
C.Type 3 (E3)
D.Type 2 (E2)
AnswerB

Correct. E1 metrics incorporate both the external cost and the internal OSPF cost to the ASBR.

Why this answer

External Type 1 (E1) routes add the internal OSPF cost to the external redistribution cost, whereas External Type 2 (E2) routes use only the external cost, ignoring internal path costs.

444
MCQmedium

You are troubleshooting an RSTP topology where a port remains in the discarding state. You suspect a proposal-agreement handshake is failing. Which mechanism is responsible for accelerating this handshake in RSTP?

A.The dynamic MAC address flushing timer
B.The proposal-agreement handshake mechanism
C.The portfast edge negotiation protocol
D.The root bridge hello timer synchronization protocol
AnswerB

Proposal and agreement flags in BPDU headers allow rapid, synchronized link transitions.

Why this answer

RSTP uses a proposal-agreement handshake mechanism between designated and root ports to achieve rapid transition to forwarding without waiting for timers.

445
MCQeasy

What is the role of the Root Port in an RSTP topology?

A.It forwards traffic between two different MST regions.
B.It connects the root bridge to all downstream non-root switches.
C.It provides the lowest-cost path from a non-root switch to the root bridge.
D.It serves as the backup forwarding path when the designated port fails.
AnswerC

Every non-root switch has exactly one root port pointing toward the root bridge.

Why this answer

The root port is the port on a non-root switch that provides the lowest cost path to the root bridge.

446
MCQeasy

When configuring a routing instance of type 'virtual-router', what is required to allow communication between the virtual router instance and the default routing instance?

A.Connect a physical cable between two ports on the router (cable-patch).
B.Configure static routes with identical preferences in both instances.
C.Disable firewall filters on all loopback interfaces.
D.Configure leaking routes between instances using rib-groups or routing policies.
AnswerD

Rib-groups or import/export policies are required to share routes across isolated routing instances.

Why this answer

Routing instances are isolated. To share routes between a virtual-router and the default instance, you must explicitly configure route leakage using export and import policies under routing-instances.

447
MCQhard

An engineer needs to configure a Layer 2 protocol tunneling (L2PT) feature on an EX Series switch trunk port to tunnel BPDU frames from a customer switch across a service provider network. Where is L2PT enabled in Junos?

A.set protocols layer2-control tunneling interface ge-0/0/1 stp
B.set protocols l2pt interface ge-0/0/1 peer-protocol stp
C.set ethernet-switching-options bpdu-tunneling interface ge-0/0/1
D.set interfaces ge-0/0/1 unit 0 family ethernet-switching l2pt-profiles
AnswerA

Correct. Layer 2 control protocol tunneling is configured under the protocols layer2-control hierarchy in Junos.

Why this answer

Layer 2 protocol tunneling (L2PT) is configured under the interface ethernet-switching options or protocols hierarchy depending on platform, specifically using 'l2pt' or protocol tunneling statements.

448
MCQmedium

You are troubleshooting an OSPF adjacency issue between two Juniper EX Series switches. One switch logs an error stating 'OSPF packet received with mismatched area ID'. Where in the Junos CLI should you check and correct this parameter?

A.[edit protocols ospf area <area-id> interface <interface-name>]
B.[edit system services ospf]
C.[edit protocols ospf area <area-id> stub]
D.[edit routing-options router-id <ip-address>]
AnswerA

Correct. Area assignments are applied directly to interfaces or under the area hierarchy block.

Why this answer

OSPF area IDs are configured under the [edit protocols ospf area <area-id>] hierarchy level in Junos. Mismatched area IDs between connected interfaces prevent the Hello protocol from establishing neighbors.

449
Multi-Selecthard

Which THREE attributes are optional transitive BGP path attributes? (Choose three)

Select 3 answers
A.AS4_PATH
B.AGGREGATOR
C.MED
D.COMMUNITY
E.LOCAL_PREF
AnswersA, B, D

AS4_PATH is an optional transitive attribute.

Why this answer

Optional transitive attributes include COMMUNITY, AGGREGATOR, and AS4_PATH. MED is optional non-transitive. Local Pref and AS_PATH are well-known.

450
Multi-Selecteasy

An administrator wants to remove an interface from an access VLAN and clear its configuration. Which TWO configuration commands are required to clean up the interface? (Choose two.)

Select 2 answers
A.delete vlans finance interface ge-0/0/5
B.delete interfaces ge-0/0/5 unit 0 family ethernet-switching
C.set interfaces ge-0/0/5 unit 0 family ethernet-switching interface-mode access vlan members none
D.delete interfaces ge-0/0/5 unit 0 family ethernet-switching interface-mode access
E.clear interfaces ge-0/0/5
AnswersB, D

Correct. Deleting the ethernet-switching family removes all Layer 2 configuration from the interface.

Why this answer

Removing an interface configuration in Junos involves using the delete command for the ethernet-switching family or specific interface mode statements.

Page 5

Page 6 of 7

Page 7

All pages