Juniper Juniper Certifications JN0-694 Questions & Answers

• Question 21:

  -- Exhibit -{master:0}[edit ethernet-switching-options secure-access-port] user@switch# show

  interface ge-0/0/1.0 {

  static-ip 172.27.0.2 vlan v11 mac 00:0c:29:b5:89:7c;

  no-dhcp-trusted;

  }

  vlan v11 {

  arp-inspection;

  }

  interface ge-0/0/2.0 {

  dhcp-trusted;

  }

  user@switch> show log messages | match arp

  Feb 8 14:31:45 switch eswd[1280]: ESWD_DAI_FAILED. 3 ARP_REQUEST received, interface ge0/0/1.0[index 73], vlan v11[index 5], sender ip/mac 172.27.0.2/00:0c:29:b5:89:7d, receiver ip/mac

  172.27.0.1/00:00:00:00:00:00

  Feb 8 14:34:05 switch eswd[1280]: ESWD_DAI_FAILED. 3 ARP_REQUEST received, interface ge0/0/1.0[index 73], vlan v11[index 5], sender ip/mac 172.27.0.2/00:0c:29:b5:89:7d, receiver ip/mac

  172.27.0.1/00:00:00:00:00:00 Feb 8 14:36:05 switch eswd[1280]: ESWD_DAI_FAILED. 3 ARP_REQUEST received, interface ge0/0/1.0[index 73], vlan v11[index 5], sender ip/mac 172.27.0.2/00:0c:29:b5:89:7d, receiver ip/mac 172.27.0.1/00:00:00:00:00:00 -- Exhibit -

  Click the Exhibit button.

  You have been asked to troubleshoot a problem where a user is not able to send traffic through your switch. While troubleshooting, you see the log messages shown in the exhibit.

  What is causing the problem?

  A. The eswd process has been corrupted.

  B. The receiver MAC in the packets is undefined.

  C. The defined MAC address is misconfigured.

  D. The static IP address is misconfigured.

  Correct Answer: C

• Question 22:

  -- Exhibit -(MSTI 2 regional root: 16386.2c:6b:f5:3e:f8:01)

  {master:0}

  user@switch> show spanning-tree interface

  Spanning tree interface parameters for instance 0

  Interface Port ID Designated Designated Port State Role port ID bridge ID Cost

  ge-0/0/6.0 128:519 128:519 16384.80711fbc 20000 BLK ALT ge-0/0/9.0 128:522 128:522

  53248.2c6bf591a441 20000 FWD DESG ge-0/0/10.0 128:523 128:523 8192.80711fbe8110 20000 FWD

  ROOT ge-0/0/12.0 128:525 128:525 49152.2c6bf53ef801 20000 BLK ALT

  [...]

  -- Exhibit -

  Click the Exhibit button.

  While troubleshooting an MSTP operation in your network, you see the output shown in the exhibit on one

  of your switches. You know that the MSTI 2 regional root bridge ID is 16386.2c:6b:f5:3e:f8:01.

  Which port is attached to the root bridge of MSTI 2?

  A. ge-0/0/6

  B. ge-0/0/9

  C. ge-0/0/10

  D. ge-0/0/12

  Correct Answer: D

• Question 23:

  -- Exhibit

  

  -- Exhibit -Click the Exhibit button.

  The exhibit shows a small switched network, some details about the MSTP configuration in the network,

  and the VLANs that are trunked over each link. When Switch2 reboots, users in VLAN 400 on Switch3

  report that they lose connectivity to resources in VLAN 400 on Switch4.

  What is the cause of this problem?

  A. There are mismatched bridge priorities.

  B. There is a mismatched MSTP configuration name.

  C. VLAN 400 is not trunked between Switch1 and Switch3.

  D. VLAN 400 is trunked between Switch3 and Switch4.

  Correct Answer: C

• Question 24:

  -- Exhibit -user@switch>show dot1x interface ge-0/0/1 detail ge-0/0/1.0 Role: Authenticator Administrative state: Auto Supplicant mode: Multiple Number of retries: 3 Quiet perioD. 60 seconds Transmit perioD. 30 seconds Mac Radius: Enabled Mac Radius Restrict: Enabled Reauthentication: Disabled Configured Reauthentication interval: 3600 seconds Supplicant timeout: 30 seconds Server timeout: 30 seconds Maximum EAPOL requests: 2 Guest VLAN member: Number of connected supplicants: 0 -- Exhibit -

  Click the Exhibit button.

  You are asked to troubleshoot an access control issue on your EX Series switch. The user connecting through port ge-0/0/1 indicates that their 802.1X supplicant is failing authentication and they are not able to connect to the network.

  Referring to the exhibit, what is causing the 802.1X supplicant to fail?

  A. The supplicant mode is defined as multiple.

  B. The MAC restrict option is configured.

  C. The supplicant timeout value is set too low.

  D. The reauthentication interval is set too high.

  Correct Answer: B

• Question 25:

  -- Exhibit -policy-statement test_route_filter {

  term 1 {

  from {

  route-filter 192.168.0.0/16 longer;

  route-filter 192.168.1.0/24 longer {

  metric 5;

  accept;

  }

  route-filter 192.168.0.0/8 orlonger accept;

  }

  then {

  metric 10;

  accept;

  }

  }

  term 2 {

  then {

  metric 20;

  accept;

  }

  }

  }

  -- Exhibit -

  Click the Exhibit button.

  Given test route 192.168.1.0/24 and the configuration shown in the exhibit, what is the expected result?

  A. accepted with metric of 5

  B. accepted with metric of 10

  C. accepted with metric of 20

  D. rejected

  Correct Answer: C

• Question 26:

  -- Exhibit

  

  -- Exhibit -Click the Exhibit button. Your network has two connections to your ISP. You have been asked to load-balance traffic across both

  links that connect to your ISP. You have enabled multipath for this peer, but you are still not getting the

  expected load balancing.

  Given the information shown in the exhibit, what else must you do?

  A. Configure and apply a load-balancing policy.

  B. Change the multipath parameter to multihop.

  C. Create a policy to manually change the next hops.

  D. Enable the keep all parameter.

  Correct Answer: A

• Question 27:

  -- Exhibit -[edit routing-instances]

  user@router# show vr1 routing-options

  instance-import [ vr1 vr2 ];

  [edit routing-instances]

  user@router# show vr2 routing-options

  instance-import [ vr1 vr2 ];

  [edit routing-instances]

  user@router# top show policy-options policy-statement vr1 term 1 {

  from instance vr1;

  then accept;

  }

  term 2 {

  then reject;

  }

  [edit routing-instances]

  user@router# top show policy-options policy-statement vr2 term 1 {

  from instance vr2;

  then accept;

  }

  term 2 {

  then reject;

  }

  -- Exhibit -

  Click the Exhibit button.

  A network engineer wants to leak routes between routing instances vr1 and vr2. No routes from vr2 are

  showing up in vr1.

  Which change should the engineer make to accomplish this task?

  A. [edit routing-instances]user@router# delete vr1 routing-options instance-import[edit routing- instances] user@router# set vr1 routing-options instance-import (vr1 || vr2)

  B. [edit routing-instances]user@router# delete vr1 routing-options instance-import[edit routing- instances] user@router# set vr1 routing-options instance-import (vr1 andand vr2)

  C. [edit routing-instances]user@router# set vr1 routing-options auto-export

  D. [edit routing-instances]user@router# set vr1 routing-options interface-routes rib-group vr2

  Correct Answer: A

• Question 28:

  -- Exhibit -protocols {

  bgp {

  group isps {

  type external;

  peer-as 13090194;

  multipath multiple-as;

  neighbor ;

  neighbor ;

  }

  }

  }

  -- Exhibit -

  Click the Exhibit button.

  The exhibit shows the complete BGP configuration for a router. The network operator reports that both

  peering sessions are up, but the router is not conducting per-flow load balancing over the connections to

  these two peers.

  What are two causes for this behavior? (Choose two.)

  A. The forwarding-table export policy is not configured to cause per-flow load balancing.

  B. The multiple-as parameter causes BGP to only choose multiple paths to different ASs, rather than multiple paths to the same AS.

  C. The router has different IGP metrics to these BGP peers.

  D. The BGP peers are not sending identical advertisements over the two sessions.

  Correct Answer: AD

• Question 29:

  -- Exhibit -policy-options {

  policy-statement accept-static {

  from protocol static;

  then accept;

  }

  }

  -- Exhibit -

  Click the Exhibit button.

  The policy shown in the exhibit is deployed on a router and used as the only BGP export policy. The router

  is sending only one BGP route to its peers. However, when you run the CLI command test policy accept-

  static 0.0.0.0/0, the policy matches thousands of routes.

  Which statement explains this discrepancy?

  A. All policies have an implicit then accept final term.

  B. The default policy for BGP is to reject all routes.

  C. The default policy for the test policy command is to accept all routes.

  D. The test policy command always shows all routes, regardless of whether they match the policy, when you use the 0.0.0.0/0 argument.

  Correct Answer: C

• Question 30:

  -- Exhibit -- Exhibit -

  

  Click the Exhibit button.

  On R1, the interface fe-0/0/1 is assigned to the default routing instance and fe-0/0/2 is assigned to a virtual

  router instance named VR-1.

  Referring to the exhibit, the static route 200.200.200.200/32 is missing from the routing table of the default

  routing instance.

  What should you do on R1 to resolve this problem?

  A. Configure a static ARP entry for address 70.1.1.1.

  B. Change the instance type on VR-1 to forwarding.

  C. Create a RIB group to import the direct route 70.1.1.0/24 to both the default instance and the VR-1 instance.

  D. Configure an import policy to import the route 200.200.200.200/32 to the VR-1 instance.

  Correct Answer: C