Juniper JN0-643 Online Practice Questions and Exam Preparation

Juniper JN0-643 Online Questions & Answers

• Question 261:

  Referring to the exhibit, OSPF is being used as the IGP and Area 1 is a standard OSPF area. USER 1 is sending traffic to server 1, which path will the traffic take?

  

  A. R1>R2>R4>R6>R3
  B. R1>R2>R4>R6>R5>R3
  C. R1>R3
  D. R1>R4>R6>R3
  B. R1>R2>R4>R6>R5>R3

• Question 262:

  You are asked to implement a filter-based VLAN assignment. You have created the firewall filter and must apply this filter to the incoming interface.

  Where must this filter be applied?

  A. to the access interface configuration
  B. to the interface under the primary VLAN assignment
  C. to the interface under the secondary VLAN assignment
  D. to the trunk interface configuration
  A. to the access interface configuration

• Question 263:

  You have a requirement for a device to provide 20 W of power over Ethernet. What meets this requirement?

  A. Bond two standard PoE ports together to achieve 30.8 W of power.
  B. Install an external redundant power supply in the switch to increase the total power load.
  C. Select a switch that has PoE+ support.
  D. Enable LLDP-MED to transfer power from other switches.
  C. Select a switch that has PoE+ support.

• Question 264:

  On SRX Series devices, in which order does CoS process ingress packets?

  A. multifield classifier, policer, forwarding policy, behavior aggregate classifier
  B. multifield classifier, forwarding policy, policer, behavior aggregate classifier
  C. behavior aggregate classifier, policer, multifield classifier, forwarding policy
  D. behavior aggregate classifier, multifield classifier, policer, forwarding policy
  D. behavior aggregate classifier, multifield classifier, policer, forwarding policy

• Question 265:

  -- Exhibit

  

  -- Exhibit -Click the Exhibit button. In the exhibit, Switch A is an EX4200. VLAN10 is receiving tagged as well as untagged traffic from different ports. The administrator wants to mirror all tagged and untagged traffic entering VLAN10 to analyzer port ge-0/0/10. All VLAN tags

  must be preserved for traffic that is mirrored to the analyzer port. Which configuration will achieve this?

  A. set ethernet-switching-options analyzer vlan10_analyzer input vlan VLAN10 interface xe- 1/0/0.0 set ethernet-switching-options analyzer vlan10_analyzer input vlan VLAN10 interface ge-0/0/2 set ethernet-switching-options analyzer vlan10_analyzer output interface ge-0/0/10.0
  B. set ethernet-switching-options analyzer vlan10_analyzer input interface xe-1/0/0.0 set ethernet- switching-options analyzer vlan10_analyzer input interface ge-0/0/2 set ethernet-switching-options analyzer vlan10_analyzer output interface ge-0/0/10.0
  C. set ethernet-switching-options analyzer vlan10_analyzer input ingress vlan VLAN10 set ethernet- switching-options analyzer vlan10_analyzer output interface ge-0/0/10.0 set vlans default interface ge- 0/0/10.0
  D. set ethernet-switching-options analyzer vlan10_analyzer input ingress vlan VLAN10 set ethernet- switching-options analyzer vlan10_analyzer output interface ge-0/0/10.0 set vlans VLAN10 interface ge-0/0/10.0
  C. set ethernet-switching-options analyzer vlan10_analyzer input ingress vlan VLAN10 set ethernet- switching-options analyzer vlan10_analyzer output interface ge-0/0/10.0 set vlans default interface ge- 0/0/10.0

• Question 266:

  -- Exhibit -[edit protocols ospf]

  user@area-1-abr# show

  area 0.0.0.1 {

  nssa {

  default-lsa {

  default-metric 10;

  metric-type 2;

  type-7;

  }

  no-summaries;

  }

  interface so-0/1/1.0;

  }

  -- Exhibit -

  Click the Exhibit button.

  Referring to the exhibit, which statement is true?

  A. The ABR will generate a Type 3 summary default route into the NSSA.
  B. The ASBR will generate a Type 7 default route into the NSSA.
  C. The type-7 parameter allows interoperability with newer versions of the Junos OS.
  D. The only LSA types allowed into the area are Type 1, Type 2, Type 3, and Type 7.
  B. The ASBR will generate a Type 7 default route into the NSSA.

• Question 267:

  -- Exhibit -- Exhibit -

  

  Click the Exhibit button.

  In the exhibit, an EBGP session is currently established between R1 and R2. R2 changes its import policy to accept 10 of the routes it previously denied from R1.

  Which BGP capability must be negotiated on the BGP session for R2 to install the routes accepted by the new policy?

  A. route refresh
  B. AddPath
  C. outbound route filtering (ORF)
  D. multiprotocol BGP (MBGP)
  A. route refresh

• Question 268:

  You have implemented 802.1X authentication in your Layer 2 network and you have only a single RADIUS server. You are asked to ensure that if the RADIUS server becomes unreachable or fails, users connected to the ge-0/0/0 port are still

  able to reach the Internet using a predefined guest VLAN.

  Which command allows this access?

  A. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 radius-fail vlan guest
  B. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 server-fail vlan-name guest
  C. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 auth-fail assign-vlan guest
  D. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 radius-fail assign guest
  B. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 server-fail vlan-name guest

• Question 269:

  An emergency Class 3 IP phone is connected to an EX Series switch. You want to ensure that the IP phone does not have any problems if PoE power demands on the switch are greater than the PoE power budget. What should you do to accomplish this task?

  A. You must connect the IP phone into one of the ports from ge-0/0/0 to ge-0/0/7.
  B. Set the power class on the PoE interface to 3.
  C. Set the PoE priority to high.
  D. Enable the guard-band parameter.
  C. Set the PoE priority to high.

• Question 270:

  Port authentication falls back to Captive Portal.

  In which two scenarios would the port authentication move back to 802.1X? (Choose two.)

  A. if any MAC RADIUS request packet is received on the interface and if there are no sessions in authenticated/authenticating state
  B. if Captive Portal is deactivated on the interface
  C. if the user gets logged out
  D. if the EAP packet is received on the interface and if there are no sessions in authenticated/ authenticating state
  B. if Captive Portal is deactivated on the interface
  D. if the EAP packet is received on the interface and if there are no sessions in authenticated/ authenticating state