Juniper Juniper Certifications JN0-343 Questions & Answers

• Question 171:

  -- Exhibit ?

  

  -- Exhibit -You have just connected and powered on four EX Series switches as shown in the exhibit. All of the switches have booted at the same time and have the default STP configuration.

  Which two statements describe the STP roles of the switches?

  A. The port connecting Switch A to Switch B is Switch A's root port.

  B. The port connecting Switch A to Switch C is Switch A's root port.

  C. The port connecting Switch A to Switch C is Switch C's root port.

  D. The port connecting Switch C to Switch B is Switch C's designated port.

  Correct Answer: BD

• Question 172:

  What are three common characteristics of OSPF and IS-IS? (Choose three.)

  A. Both routing protocols maintain a link-state database calculated using the Dijkstra shortest path first algorithm.

  B. Both routing protocols elect a designated router and backup designated router for a shared LAN segment.

  C. Both routing protocols use hello packets to form and maintain adjacencies.

  D. Both routing protocols use a SHA-1 hash for authentication purposes.

  E. Both routing protocols allow for address summarization between areas.

  Correct Answer: ACE

• Question 173:

  You are analyzing a packet capture from your network running OSPF. You see a Type 2 LSA. Which type of router originated the packet?

  A. ABR

  B. DR

  C. ASBR

  D. BDR

  Correct Answer: B

• Question 174:

  A network administrator would like to prevent certain network addresses from being part of the routing table.

  Which Junos feature would be used to accomplish this task?

  A. prefix lists

  B. Martian addresses

  C. route maps

  D. static routes

  Correct Answer: B

• Question 175:

  What is the purpose of the storm control feature on EX Series switches?

  A. to filter traffic based on fields in the IP header

  B. to protect against a flood of OSPF routing updates

  C. to prevent network outages caused by broadcast storms on the LAN

  D. to facilitate Routing Engine (RE) failover in cases where the primary RE is overloaded

  Correct Answer: C

  Reference:JNCIS-ENT Switching Study Guide, Chapter 5? ?Device Security and Firewall Filters

• Question 176:

  The area border router (ABR) between the OSPF backbone area and a not-so-stubby area (NSSA) will suppress which two LSA types for route updates into the NSSA? (Choose two.)

  A. Type 3

  B. Type 4

  C. Type 5

  D. Type 7

  Correct Answer: BC

• Question 177:

  You need to prevent people outside the 192.168.1.0/24 network from accessing your Junos device using FTP.

  Which configuration, when applied to interface lo0.0, will provide the desired result?

  A. firewall { family inet { filter protect-host { term limit-ftp { from { source-address { 192.168.1.0/24 except; 0.0.0.0/0; } port ftp; } then discard;

  }

  }

  }

  }

  B. firewall { family inet { filter protect-host { term limit-ftp { from { source-address { 192.168.1.0/24 except; 0.0.0.0/0; } protocol tcp; port ftp; } then discard; } term all-else { then accept; } } } }

  C. firewall { family inet { filter protect-host { term limit-ftp { from { source-address { 192.168.1.0/24; } port ftp; } then discard; } } } }

  D. firewall { family inet { filter protect-host { term limit-ftp { from { source-address { 192.168.1.0/24; } protocol tcp; port ftp; } then discard; } term all-else { then accept; } } } }

  Correct Answer: B

• Question 178:

  A GRE tunnel is configured between Router1 and Router2 across the Internet. Performance on the GRE tunnel is slow and Router1 is receiving ICMP messages from Router2.

  What is the cause of this problem?

  A. The do-not-fragment (DF) bit has not been set on Router2.

  B. The do-not-fragment (DF) bit has not been set on Router1.

  C. There is a duplex setting mismatch on the GRE tunnel.

  D. The maximum segment size (MSS) setting has not been configured correctly for the GRE tunnel.

  Correct Answer: D

• Question 179:

  -- Exhibit -ethernet-switching-options {

  secure-access-port {

  interface ge-0/0/0.0 {

  mac-limit 2 action shutdown;

  no-dhcp-trusted;

  }

  }

  storm-control {

  interface all;

  }

  }

  -- Exhibit -You have configured a MAC limit on your switch.

  Referring to the exhibit, when the MAC limit is exceeded, when will the port recover?

  A. After 30 seconds

  B. After the administrator enters the set ethernet-switching port-error clear command

  C. After 300 seconds

  D. After the administrator enters the clear ethernet-switching port-error command

  Correct Answer: D

• Question 180:

  

  Referring to the exhibit, a packet sent from User A to User B will be forwarded out interface 0/0/23 using which source MAC address?

  A. Source MAC of user A

  B. Source MAC of user B

  C. Source MAC associated with IP address 10.10.10.1

  D. Source MAC associated with IP address 10.10.20.1

  Correct Answer: D