Juniper Juniper Certifications JN0-343 Questions & Answers

• Question 41:

  What is the default keepalive time for BGP?

  A. 30 seconds

  B. 10 seconds

  C. 90 seconds

  D. 60 seconds

  Correct Answer: A

• Question 42:

  -- Exhibit ?

  

  -- Exhibit -You are required to configure a static route to 10.0.100.1 on R1. The traffic must flow through R3.

  Referring to the exhibit, which static route configuration parameter meets this requirement?

  A. install

  B. retain

  C. qualified-next-hop

  D. resolve

  Correct Answer: D

• Question 43:

  Your network consists of four EX Series switches, configured with the following STP parameters: S1: Bridge address - F F:33:44:77 ; Bridge priority - 16k S2: Bridge address - F F:33:44:66 ; Bridge priority - 12k

  S3: Bridge address - F F:33:44:99 ; Bridge priority - 8k S4: Bridge address - F F:33:44:88 ; Bridge priority - 4k Given this information, which device will become the root bridge?

  A. S1

  B. S2

  C. S3

  D. S4

  Correct Answer: D

• Question 44:

  Host-1 was recently added in the network and is attached to ge-0/0/10 on Switch A. Host-1 is powered on and has its interface configured with default Layer 2 settings and an IP address on the

  172.17.12.0/24 IP subnet. Host-1's MAC address is not shown in Switch-A's bridging table.

  What are three explanations for this state? (Choose three.)

  A. The ge-0/0/10 interface is not operationally or administratively up.

  B. The ge-0/0/10 interface has not received any traffic from Host-1.

  C. The ge-0/0/10 interface is configured as an access port.

  D. The ge-0/0/10 interface is configured as a trunk port.

  E. The ge-0/0/10 interface does not have an associated RVI.

  Correct Answer: ABD

• Question 45:

  Interface ge-0/0/3 has been disabled because a storm control limit has been exceeded. Which two commands are valid to recover the interface? (Choose two.)

  A. user@switch> clear ethernet-switching storm-control-error interface ge-0/0/3

  B. user@switch# set ethernet-switching-options secure-access-port disable-timeout 30

  C. user@switch> clear ethernet-switching port-error interface ge-0/0/3

  D. user@switch# set ethernet-switching-options port-error-disable disable-timeout 30

  Correct Answer: CD

• Question 46:

  -- Exhibit -user@router> show route 0/0 exact detail inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) 0.0.0.0/0 (1 entry, 1 announced) *Aggregate PreferencE. 130 Next hop typE. Router, Next hop index: 546 Next-hop reference count: 4 Next hop: 10.210.18.1 via ge-0/0/4.200, selected StatE. Local AS: 65400 AgE. 4:09:46

  Task: Aggregate -- Exhibit -Referring to the exhibit, which type of route is displayed?

  A. OSPF

  B. aggregate

  C. static

  D. generate

  Correct Answer: D

• Question 47:

  -- Exhibit -user@router> show ospf neighbor Address Interface State ID Pri Dead

  66.129.12.2 ge-0/0/2.0 ExStart 66.129.12.2 128 37 -- Exhibit -What is the reason for the adjacency state shown in the exhibit?

  A. There is an authentication mismatch.

  B. There is a hello interval mismatch.

  C. There is an IP network mismatch.

  D. There is an interface MTU mismatch.

  Correct Answer: D

• Question 48:

  Your router is configured to peer with your ISP's router using BGP. You can only control your BGP configuration. user@router> show bgp neighbor 192.168.200.2

  Peer: 192.168.200.2+179 AS 11685 Local: 192.168.200.1+49469 AS 7029 Type: ExternalState: EstablishedFlags: Last State: OpenConfirm Last Event: RecvKeepAlive Last Error: None Options: Addres families configured: inet-unicast inetvpn-unicast 12-vpn-signaling Holdtime: 90 Preference: 170 Local AS: 7029 Local System AS: 0 Number of flaps: 0 Peer ID: 10.8.241.31Local ID: 10.8.241.30 Active Holdtime: 90

  Keepalive Interval: 30Group Index: 0 Peer Index: 0 BFD: disabled, down Local Interface: xe-0/2/3.0 NLRI for restart configured on peer: inetunicast inet-vpn-unicast 12-vpn NLRI advertised by peer: inet-unicast NLRI for this session: inet-unicast Peer supports Refresh capability (2) State routes from peer are kept for: 300 Peer does not support Restarter functionality NLRI that restart is negotiated for: inetunicast NLRI of received end-of-rib markers: inetunicast NLRI of all end-of-rib markers sent: inetunicast Peer supports 4 byte AS extension (peer-as 11685)

  Peer does not support Addpath Table inet.0 Bit: 10000 RIB State: BGP restart is complete Send state: in sync Active prefixes:0 Received prefixes:0 Accepted prefixes:0 Suppressed due to damping:0 Advertised prefixes:0 Last traffic (seconds): Received 17Sent 17 Checked 17 Input messages: Total 2Updates 1 Refreshes 0Octets 42 Output messages: Total 3Updates 0 Refreshes 0Octets 136 Output queue[0]: 0 Which address families are negotiated between the two BGP peers shown in the exhibit?

  A. inet-unicast inet-vpn-unicast 12vpn-signaling

  B. inet-unicast

  C. inet-unicast inet-vpn-unicast 12vpn

  D. inet-vpn-unicast

  Correct Answer: B

• Question 49:

  You are advertising your network's assigned prefixes to two upstream ISPs using BGP. You want incoming traffic to prefer ISP-A over ISP-B.

  Which action would you take to accomplish this task?

  A. Set a higher local preference on the prefixes you announce to ISP-A.

  B. Using a routing policy, prepend your ASN information to the AS path attribute on prefixes you announce to ISP-B.

  C. Using a routing policy, prepend your ASN information to the AS path attribute on prefixes you announce to ISP-A.

  D. Set the MED value lower on prefixes you announce to ISP-A.

  Correct Answer: B

• Question 50:

  Your security department has identified an increase in IP spoofing attacks.

  Which feature should you enable with DHCP snooping to prevent these attacks?

  A. ARP spoofing

  B. DHCP option 82

  C. MAC limiting

  D. IP source guard

  Correct Answer: D