1. Home
  2. Juniper
  3. JN0-643

Juniper JN0-643 Online Practice Questions and Exam Preparation

JN0-643 Exam Details

  • Exam Code
    :JN0-643
  • Exam Name
    :Enterprise Routing and Switching, Professional (JNCIP-ENT)
  • Certification
    :Juniper Certifications
  • Vendor
    :Juniper
  • Total Questions
    :287 Q&As
  • Last Updated
    :Jul 11, 2026

Juniper JN0-643 Online Questions & Answers

  • Question 131:

    -- Exhibit -Controller Maximum Power Guard Management Status Lldp index power consumption band Priority 0 792.00W 603.50W 0W Class AT_MODE Disabled -- Exhibit -Click the Exhibit button.

    Referring to the exhibit, which statement is true?

    A. The switch supports PoE+.
    B. The switch is protected against spikes in power demand.
    C. The switch supports a maximum power draw per PoE port of 15.4 watts.
    D. The switch can manually assign priorities per interface.

  • Question 132:

    -- Exhibit -user@SwitchA# show protocols mstp

    configuration-name region1;

    bridge-priority 16k;

    msti 1 {

    bridge-priority 16k;

    vlan [10 20];

    }

    msti 2 {

    bridge-priority 8k;

    vlan [30 40];

    }

    user@SwitchB# show protocols mstp

    configuration-name region1;

    bridge-priority 8k;

    msti 1 {

    bridge-priority 16k;

    vlan [10 20];

    }

    msti 2 {

    bridge-priority 8k;

    vlan [30 40 50];

    }

    -- Exhibit -

    Click the Exhibit button.

    Referring to the exhibit, a customer observes that the MSTP instance between SwitchA and SwitchB is not converging correctly.

    What is causing the problem?

    A. The bridge priority values of MSTI 2 are the same.
    B. There is a VLAN mismatch between the two switches for MSTI 2.
    C. There is a bridge priority mismatch.
    D. MSTI 1 and MSTI 2 are part of the same the MSTP region.

  • Question 133:

    What is the significance of the multicast address range 224.0.0.1 through 224.0.0.254?

    A. They have link-local scope.
    B. They have administrative region scope.
    C. They are reserved for future use.
    D. They have a scope of two or more hops from a router.

  • Question 134:

    You have certainly implemented the configuration shown in the exhibit. After committing these changes, the community devices connected to AS1 are not able to communicate with the appropriate community devices connected to AS2. What must be done to allow these community devices to communicate?

    A. You must configure an isolation VLAN ID under the pvlan 200 on the AS 2 switch
    B. You must configure the ge 0/0/10 interface as AS1 as the pvlan trunk
    C. You must configure an isolation VLAN ID under the pvlan 200 on both the switches
    D. You must configure the ge 0/012 interface on both switches as pvlan trunks

  • Question 135:

    -- Exhibit -- Exhibit -

    Click the Exhibit button.

    R1 is connected to both R2 and R3 and you want to load-balance outbound traffic. You have provided the configuration shown in the exhibit; however, after checking the links you notice that the traffic is not load- balancing.

    Which configuration must be added?

    A. set protocols bgp group external multihop
    B. set protocols bgp group external multipath
    C. set protocols bgp group external advertise-external
    D. set policy-options policy-statement loadbal then accept

  • Question 136:

    Company A, recently acquired company B. Both network are running multi-area OSPF. You added a new physical question between the locations. You are able to reach both Area 0 networks from Area 10, but you are having connectivity

    problems between router A1 and router B1.

    Referring to the exhibit, what must you use to facilitate the communication?

    A. A multi area link
    B. A multi area adjacency
    C. A virtual link
    D. A virtual private network

  • Question 137:

    -- Exhibit -[edit]

    user@switch# commit

    error: Trunk interface can not be member of both dot1q-tunneling enabled vlan , and a non dot1q-tunneled vlan when dot1q-tunneling ethernet-type is not <0x8100> error: configuration check-out failed

    -- Exhibit -

    Click the Exhibit button.

    When you try to commit your 802.1Q tunneling configuration, you receive the error shown in the exhibit.

    Which configuration statement will allow the configuration to commit?

    A. set vlans cust-1 interface ge-0/0/10 egress
    B. set interfaces ge-0/0/10 ether-options mdi-mode auto
    C. set vlans v11 dot1q-tunneling customer-vlans native
    D. set ethernet-switching-options dot1q-tunneling ether-type 0x8100

  • Question 138:

    A coffee shop offering free Internet service to customers wants to implement the following security policies:

    1.

    Every customer must agree to a set of terms and conditions before accessing the Internet.

    2.

    Log out customers that are logged in for more than one hour.

    3.

    Log out customers that are idle for more than 5 minutes.

    4.

    Authenticate employee desktop computers with known hardware addresses in the office of the coffee shop to access the Internet without the above restrictions.

    The following configuration has been applied to the switch:

    set access radius-server 172.16.14.26 port 1812

    set access radius-server 172.16.14.26 secret Am@zingC00f33 set access profile dot1x authentication- order radius set access profile dot1x radius authentication-server 172.27.14.226

    What would you add to implement these policies?

    A. set protocols dot1x authenticator interface ge-0/0/12.0 supplicant multiple set protocols dot1x authenticator interface ge-0/0/12.0 mac-radius set protocols dot1x authenticator authentication-profile- name dot1x set services captive-portal authentication-profile-name dot1x set services captive-portal interface ge-0/0/12.0 set services captive-portal secure-authentication https set services captive-portal custom-options header-message "Welcome to Our Coffee Shop" set services captive-portal custom-options banner- message "Terms and Conditions of Use"
    B. set protocols dot1x authenticator interface ge-0/0/12.0 supplicant multiple set protocols dot1x authenticator authentication-profile-name dot1x set services captive-portal authentication-profile-name dot1x set services captive-portal interface ge-0/0/12.0 set services captive-portal secure-authentication https set services captive-portal custom-options header-message "Welcome to Our Coffee Shop" set services captive-portal custom-options banner- message "Terms and Conditions of Use"
    C. set protocols dot1x authenticator interface ge-0/0/12.0 supplicant multiple set protocols dot1x authenticator interface ge-0/0/12.0 mac-radius set protocols dot1x authenticator authentication-profile- name dot1x set services captive-portal authentication-profile-name dot1x set services captive-portal interface ge-0/0/12.0 set services captive-portal interface ge-0/0/12.0 idle-timeout 300 set services captive-portal interface ge-0/0/12.0 user-timeout 3600 set services captive-portal secure-authentication https set services captive-portal custom-options header-message "Welcome to Our Coffee Shop" set services captive- portal custom-options banner-message "Terms and Conditions of Use"
    D. set protocols dot1x authenticator interface ge-0/0/12.0 supplicant multiple set protocols dot1x authenticator interface ge-0/0/12.0 mac-radius set protocols dot1x authenticator interface ge-0/0/12.0 idle-timeout 300 set protocols dot1x authenticator interface ge-0/0/12.0 user-timeout 3600 set protocols dot1x authenticator authentication-profile-name dot1x set services captive-portal authentication-profile- name dot1x set services captive-portal interface ge-0/0/12.0 set services captive-portal secure-authentication https set services captive-portal custom-options header-message "Welcome to Our Coffee Shop" set services captive-portal custom-options banner- message "Terms and Conditions of Use"

  • Question 139:

    A Layer 2 transparent firewall separates two OSPFv3 routers. For the two OSPFv3 routers to form an adjacency, which protocol must be permitted on the firewall?

    A. IPv4 protocol 89
    B. IPv6 protocol 89
    C. TCP port 89
    D. UDP port 89

  • Question 140:

    Which two statements are true about the configuration shown below? (Choose two.)

    [edit routing-options multicast] user@router# show ssm-groups 227.0.0.0/24; asm-override-ssm;

    A. It allows SSM operations in only the 227.0.0.0/24 range.
    B. It allows SSM operations in the 227.0.0.0/24 range and the dedicated range.
    C. It allows only ASM operations in the dedicated SSM range.
    D. It allows both ASM and SSM operations in the dedicated SSM range.

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Juniper exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JN0-643 exam preparations and Juniper certification application, do not hesitate to visit our Vcedump.com to find your solutions here.