1. Home
  2. Juniper
  3. JN0-643

Juniper JN0-643 Online Practice Questions and Exam Preparation

JN0-643 Exam Details

  • Exam Code
    :JN0-643
  • Exam Name
    :Enterprise Routing and Switching, Professional (JNCIP-ENT)
  • Certification
    :Juniper Certifications
  • Vendor
    :Juniper
  • Total Questions
    :287 Q&As
  • Last Updated
    :Jul 11, 2026

Juniper JN0-643 Online Questions & Answers

  • Question 141:

    -- Exhibit

    -- Exhibit -

    Click the Exhibit button.

    In the exhibit, customers connected to Area 3 must have access to external prefixes received from the data center connected to the router in Area 1. These configurations are currently applied to the routers in Area

    1:

    {master:0}[edit]

    user@Area-1-ABR# show protocols ospf

    no-nssa-abr;

    area 0.0.0.1 {

    nssa;

    interface ge-1/1/1.100;

    }

    {master:0}[edit]

    user@Area-1-External# show protocols ospf

    area 0.0.0.1 {

    stub no-summaries;

    interface ge-1/1/1.100;

    }

    What must you change for these configurations to work?

    A. Configure the ABR router in Area 1 to support a virtual link.
    B. Delete no-summary-lsa from the ABR router in Area 1.
    C. Configure the external router in Area 1 for NSSA.
    D. Configure the ABR in Area 1 for a default LSA with a default-metric of 10 and no- summaries.

  • Question 142:

    -- Exhibit

    -- Exhibit -

    Click the Exhibit button.

    Referring to the exhibit, you want to configure Switch-1 to allow a user on interface ge-0/0/10 to accommodate both voice and data traffic. Your phones and your switches are LLDP-MED capable.

    What is the minimal configuration that allows LLDP-MED to autoconfigure your phone's voice VLAN?

    A. set interfaces ge-0/0/10 unit 0 family ethernet-switching port-mode trunk set interfaces ge-0/0/10 unit 0 family ethernet-switching vlan members voice_vlan set interfaces ge-0/0/10 unit 0 family ethernet- switching native-vlan-id data_vlan set ethernet-switching-options voip interface ge-0/0/10.0 vlan voice_vlan set protocols lldp-med interface ge-0/0/10.0
    B. set interfaces ge-0/0/10 unit 0 family ethernet-switching port-mode trunk set interfaces ge-0/0/10 unit 0 family ethernet-switching vlan members voice_vlan set interfaces ge-0/0/10 unit 0 family ethernet- switching native-vlan-id data_vlan set ethernet-switching-options voip interface ge-0/0/10.0 vlan voice_vlan set protocols lldp interface ge-0/0/10.0
    C. set interfaces ge-0/0/10 unit 0 family ethernet-switching port-mode access set interfaces ge-0/0/10 unit 0 family ethernet-switching vlan members data_vlan set ethernet-switching-options voip interface ge- 0/0/10.0 forwarding-class assured-forwarding set protocols lldp-med interface ge-0/0/10.0
    D. set interfaces ge-0/0/10 unit 0 family ethernet-switching port-mode access set interfaces ge-0/0/10 unit 0 family ethernet-switching vlan members data_vlan set ethernet-switching-options voip interface ge- 0/0/10.0 vlan voice_vlan set protocols lldp-med interface ge-0/0/10.0

  • Question 143:

    You are asked to implement MSTP on all devices in your Layer 2 network.

    Which three parameters must match on all devices within the same region? (Choose three.)

    A. region name
    B. hello timer
    C. maximum age
    D. revision level
    E. VLAN mapping table

  • Question 144:

    Which two statements is true regarding the next hop attribute? (Choose two)

    A. it is not changed when sent across EBGP sessions
    B. it is changed to self for IBGP routes learned from EBGP
    C. it is not changed for IGBP routes learned from EBGP
    D. it is Changed by default when sent across EBGP sessions

  • Question 145:

    Which statement is true about using an OSPF import policy?

    A. Import policies are not allowed in OSPF, applying the policy will do nothing.
    B. Applying an import policy to OSPF may block normal LSA flooding.
    C. Import policies are allowed only for external route types.
    D. Applying this policy will cause a commit failure.

  • Question 146:

    Your company recently implemented Layer 2 authentication and access control to secure users accessing the corporate network. You implemented 802.1X, MAC RADIUS, and a captive portal to support a variety of hosts on the network. Senior management is concerned that valid users might be authenticated incorrectly on the network and they ask you questions about how these different access technologies are used simultaneously.

    Which three statements are correct? (Choose three.)

    A. MAC addresses that are part of a MAC address whitelist or a static MAC list are authenticated before any other authentication protocol is invoked.
    B. Captive portal is a supported fallback option for 802.1X.
    C. If the authentication server fails to respond to access requests and both a server-fail and guest VLAN are configured correctly, the server-fail VLAN takes precedence over the guest VLAN.
    D. Captive portal can only be configured on Layer 3 interfaces.
    E. If a port is configured with 802.1X and the host does not respond to EAP requests, no other authentication protocol can authenticate the host.

  • Question 147:

    You want to deploy MSTP with multiple regions. Each region should have a unique root bridge to accommodate a set of VLANs. Which three configuration elements must watch on switches participating in this deployment scenario? (Choose three)

    A. MSTI toVLAN mapping
    B. revision level
    C. CST BPDU parameters
    D. configuration name
    E. bridge priority

  • Question 148:

    Your company uses 802.1X to authenticate your users. You want to provide access to the Internet when users cannot authenticate on the RADIUS server or when the RADIUS server becomes unreachable.

    Which two methods accomplish this goal? (Choose two.)

    A. using a captive portal
    B. using a server fail fallback
    C. using MAC RADIUS
    D. using a guest VLAN

  • Question 149:

    -- Exhibit -user@router> show configuration routing-options autonomous-system 65550;

    user@router> show configuration protocols bgp

    group ibgp {

    type internal;

    neighbor 10.0.3.5;

    }

    group ibgpv6 {

    type internal;

    local-address 2001:ffff::3:4;

    neighbor 2001:ffff::3:5;

    }

    group as65010 {

    family inet {

    unicast;

    }

    family inet6 {

    unicast;

    }

    export as65010-out;

    peer-as 65010;

    neighbor 172.16.0.6;

    }

    user@router> show configuration policy-options

    policy-statement as65010-out {

    term locally-originated {

    from as-path local-only;

    then {

    metric 7000;

    }

    }

    term from-as65222 {

    from as-path as65222-orig;

    then as-path-prepend "65550 65550 65550 65550";

    }

    term transit-as701 {

    from as-path transit-as701;

    then {

    metric 6;

    }

    }

    then accept;

    }

    as-path local-only "(.*)";

    as-path as65222-orig ".* 65222";

    as-path transit-as701 ".* 701 .*";

    user@router> show route advertising-protocol bgp 172.16.0.6

    inet.0: 43 destinations, 47 routes (43 active, 0 holddown, 0 hidden) Prefix Nexthop MED Lclpref AS path

    *

    10.0.2.0/30 Self 7000 I

    *

    10.0.2.4/30 Self 7000 I

    *

    10.0.2.8/30 Self 7000 I

    *

    10.0.2.16/30 Self 7000 I

    *

    10.0.3.3/32 Self 7000 I

    *

    10.0.3.4/32 Self 7000 I

    *

    10.0.3.5/32 Self 7000 I

    *

    10.0.4.8/30 Self 7000 I

    *

    10.0.8.8/30 Self 7000 I

    *

    10.0.9.9/32 Self 7000 I

    *

    10.255.255.1/32 Self 7000 I

    *

    64.142.88.0/24 Self 7000 I

    *

    130.130.0.0/16 Self 6 65222 46375 701 14203 I

    *

    131.131.131.0/24 Self 6 65222 46375 701 14203 I

    *

    132.132.0.0/25 Self 6 65222 46375 701 32934 I

    *

    133.133.0.0/25 Self 6 65222 46375 701 32934 I

    *

    134.134.0.0/25 Self 65222 46375 14203 I

    *

    135.135.0.0/25 Self 65222 46375 14203 14203 I

    *

    172.16.0.4/30 Self 7000 I

    *

    172.16.0.12/30 Self 7000 I

    *

    172.16.200.0/30 172.16.0.6 7000 I

    *

    192.0.2.0/24 172.16.0.6 7000 I

    *

    192.168.50.0/24 Self 7000 I

    *

    192.168.253.0/24 Self 7000 I

    *

    200.200.0.0/16 172.16.0.6 7000 I

    *

    200.200.0.1/32 172.16.0.6 7000 I

    *

    200.200.1.1/32 172.16.0.6 7000 I

    *

    200.200.200.200/32 172.16.0.6 7000 I inet6.0: 23 destinations, 28 routes (23 active, 0 holddown, 0 hidden) Prefix Nexthop MED Lclpref AS path

    *

    ::172.16.0.4/126 Self 7000 I

    *

    2001:1:1::/64 Self 7000 I

    *

    2001:1:2::/64 Self 7000 I

    *

    2001:ffff::3:3/128 Self 7000 I

    *

    2001:ffff::3:4/128 Self 7000 I

    *

    2001:ffff::3:5/128 Self 7000 I

    *

    2001:ffff::9:7/128 Self 7000 I

    user@router> -- Exhibit -

    Click the Exhibit button.

    You are configuring an EBGP peer in a transit environment. You must advertise routes learned from other EBGP peers in your AS. Any routes originated from within your AS should have a MED of 7000 set. Any routes that originate in AS65222 should be prepended four times. Any routes that transit AS701 should have a MED set to 6. This scenario results in the unintended advertisement of internal 10.0.0.0/8 networks to your peer.

    What caused the accidental advertisement of internal networks to your EBGP peer?

    A. Your AS number of 65550 is a private AS number.
    B. The BGP group as65010 is configured for both family inet unicast and family inet6 unicast protocol families.
    C. The export policy as65010-out is misconfigured.
    D. The as-path local-only includes a misconfigured regular expression.

  • Question 150:

    Which two statements are correct about L2PT? (Choose two.)

    A. L2PT requires 802.1Q tunneling enablement to effectively tunnel L2 protocols.
    B. 802.1Q tunnels all L2 protocols by default.
    C. L2PT encapsulates L2 PDUs by enabling the ingress switch to rewrite the PDUs' source MAC addresses before forwarding them onto the service provider network.
    D. You cannot enable L2PT and VLAN translation on the same VLAN.

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Juniper exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JN0-643 exam preparations and Juniper certification application, do not hesitate to visit our Vcedump.com to find your solutions here.