1. Home
  2. Juniper
  3. JN0-643

Juniper JN0-643 Online Practice Questions and Exam Preparation

JN0-643 Exam Details

  • Exam Code
    :JN0-643
  • Exam Name
    :Enterprise Routing and Switching, Professional (JNCIP-ENT)
  • Certification
    :Juniper Certifications
  • Vendor
    :Juniper
  • Total Questions
    :287 Q&As
  • Last Updated
    :Jul 11, 2026

Juniper JN0-643 Online Questions & Answers

  • Question 31:

    -- Exhibit -

    [edit protocols bgp]

    user@router# show

    group ext-peer2 {

    type external;

    peer-as 1;

    neighbor 192.168.2.1;

    }

    [edit protocols bgp]

    user@router# run show route 192.168.2.1

    inet.0: 9 destinations, 10 routes (7 active, 0 holddown, 2 hidden) + = Active Route, - = Last Active, * = Both

    192.168.2.1/32 *[Static/5] 00:01:56

    > to 172.14.10.1 via ge-0/0/1.0

    [edit protocols bgp]

    user@router# run show bgp summary

    Groups: 1 Peers: 1 Down peers: 1

    Table Tot Paths Act Paths Suppressed History Damp State Pending inet.0 0 0 0 0 0 0 inet6.0 0 0 0 0 0 0

    Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|

    #Active/Received/Accepted/Damped...

    192.168.2.1 1 0 0 0 0 14 Idle -- Exhibit -

    Click the Exhibit button.

    Looking at the output in the exhibit, why is the BGP neighbor not in Established state?

    A. BGP Refresh is not supported.
    B. Multihop is not configured.
    C. The peer address is not reachable.
    D. Authentication is configured.

  • Question 32:

    Which statement is correct about private VLANs?

    A. multiple private VLAN instances can be configured on a single switch
    B. you can configure only one private VLAN instances per switch
    C. private VLANs can only be implemented to span more than one switch
    D. a private VLAN instance must be implemented on a single switch

  • Question 33:

    -- Exhibit -[edit policy-options] user@router# show policy-statement LB { term 1 { then { load-balance per-packet; } } } -- Exhibit -

    Click the Exhibit button.

    Two routers are joined by redundant BGP connections. You want to load-balance traffic across these links, and have configured the policy shown in the exhibit on each device.

    Which configuration, applied on each device, correctly applies the policy to accomplish this task?

    A. [edit protocols bgp group LB] uesr@router# show type external; import LB; peer-as ; neighbor ;
    B. [edit protocols bgp group LB] uesr@router# show type external; export LB; peer-as ; neighbor ;
    C. [edit] user@router# show routing-options aggregate { route 0.0.0.0/0 policy LB; }
    D. [edit] user@router# show routing-options forwarding-table { export LB; }

  • Question 34:

    -- Exhibit -

    user@router> show bgp summary

    Groups: 1 Peers: 3 Down peers: 0

    Table Tot Paths Act Paths Suppressed History Damp State Pending inet.0 0 0 0 0 0 0 inet6.0 1 0 0 0 0 0

    Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|

    #Active/Received/Accepted/Damped...

    2001:ffff::3:3 65550 43 43 0 0 18:20 Establ

    inet6.0: 0/1/1/0

    2001:ffff::3:4 65550 42 43 0 0 18:16 Establ

    inet6.0: 0/0/0/0

    2001:ffff::9:7 65550 42 43 0 0 18:00 Establ

    inet6.0: 0/0/0/0

    user@router> show route receive-protocol bgp 2001:ffff::3:3

    inet.0: 32 destinations, 33 routes (32 active, 0 holddown, 0 hidden)

    __juniper_private1__.inet.0: 4 destinations, 4 routes (2 active, 0 holddown, 2 hidden)

    iso.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)

    mpls.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)

    inet6.0: 10 destinations, 14 routes (10 active, 0 holddown, 0 hidden) Prefix Nexthop MED Lclpref AS path 2001:1:2::/64 2001:ffff::3:3 100 I

    user@router> show route 2001:1:2::

    inet6.0: 10 destinations, 14 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both

    2001:1:2::/64 *[OSPF3/10] 01:54:11, metric 201

    > to fe80::217:cb03:2448:bd00 via fe-0/0/1.804

    [BGP/170] 00:18:43, localpref 100, from 2001:ffff::3:3 AS path: I > to fe80::217:cb03:2448:bd00 via fe-0/0/1.804

    user@router> show route advertising-protocol bgp 2001:ffff::9:7

    user@router> show configuration protocols bgp

    group ibgpv6 {

    type internal;

    local-address 2001:ffff::3:5;

    cluster 10.0.3.4;

    neighbor 2001:ffff::3:3;

    neighbor 2001:ffff::3:4;

    neighbor 2001:ffff::9:7;

    }

    user@router>

    -- Exhibit -

    Click the Exhibit button.

    You are using an IBGP route reflector within your network. Your route reflector has received the 2001:1:2::/64 prefix, but it is not advertising the prefix to its cluster members. After examining the route reflector, you notice the output shown in

    the exhibit.

    Which configuration statement causes the route reflector to transmit the route to its IBGP peers?

    A. set protocols bgp group ibgpv6 advertise-inactive
    B. set protocols bgp group ibgpv6 accept-remote-nexthop
    C. set protocols bgp group ibgpv6 multipath
    D. set protocols bgp group ibgpv6 include-mp-next-hop

  • Question 35:

    You need to enable authentication for your multiarea OSPF network. In this scenario, which three statements are correct? (Choose three)

    A. MDS and simple authentication types are mutually exclusive
    B. IPsec is only supported on OSPFv3
    C. OSPF authentication is performed at the area level, and all devices in the same area must use same type of authentication and same password
    D. IPsec transport mode is supported
    E. IPsec tunnel mode is supported

  • Question 36:

    -- Exhibit -user@router> show log ospf Sep 19 00:22:13.420315 OSPF packet ignoreD. MTU mismatch from 11.0.0.2 on intf ge-0/0/2.0 area 0.0.0.0 Sep 19 00:22:14.475671 OSPF periodic xmit from 14.0.0.1 to 224.0.0.5 (IFL 75 area 0.0.0.0) Sep 19 00:22:14.855490 OSPF periodic xmit from 12.0.0.1 to 224.0.0.5 (IFL 84 area 0.0.0.0) Sep 19 00:22:14.857304 OSPF packet ignoreD. no matching interface from 12.0.0.1, IFL 85 Sep 19 00:22:17.386726 OSPF packet ignoreD. MTU mismatch from 11.0.0.2 on intf ge-0/0/2.0 area 0.0.0.0 Sep 19 00:22:20.855690 OSPF packet ignoreD. subnet mismatch from 10.0.0.2 on intf ge-0/0/1.0 area 0.0.0.0 Sep 19 00:22:20.856108 OSPF rcvd Hello 10.0.0.2 -> 224.0.0.5 (ge-0/0/1.0 IFL 75 area 0.0.0.0) Sep 19 00:22:20.856177 Version 2, length 44, ID 10.0.0.2, area 0.0.0.0 Sep 19 00:22:20.856229 checksum 0x0, authtype 0 Sep 19 00:22:20.856299 mask 255.255.255.252, hello_ivl 10, opts 0x12, prio 128 Sep 19 00:22:20.856352 dead_ivl 40, DR 0.0.0.0, BDR 0.0.0.0 Sep 19 00:22:21.752438 OSPF packet ignoreD. MTU mismatch from 11.0.0.2 on intf ge-0/0/2.0 area 0.0.0.0 Sep 19 00:22:22.013285 OSPF packet ignoreD. area mismatch (0.0.0.1) from 12.0.0.2 on intf ge- 0/0/4.0 area 0.0.0.0 Sep 19 00:22:22.013749 OSPF rcvd Hello 12.0.0.2 -> 224.0.0.5 (ge-0/0/4.0 IFL 84 area 0.0.0.0) Sep 19 00:22:22.013804 Version 2, length 44, ID 10.0.0.2, area 0.0.0.1 Sep 19 00:22:22.013890 checksum 0xd51e, authtype 0 Sep 19 00:22:22.013944 mask 255.255.255.252, hello_ivl 10, opts 0x12, prio 128 Sep 19 00:22:22.014012 dead_ivl 40, DR 12.0.0.2, BDR 0.0.0.0 Sep 19 00:22:22.016909 OSPF packet ignoreD. no matching interface from 12.0.0.2, IFL 85 Sep 19 00:22:22.434956 OSPF hello from 11.0.0.2 (IFL 83, area 0.0.0.0) absorbed Sep 19 00:22:23.045916 OSPF periodic xmit from 12.0.0.1 to 224.0.0.5 (IFL 84 area 0.0.0.0) Sep 19 00:22:23.047959 OSPF packet ignoreD. no matching interface from 12.0.0.1, IFL 85 Sep 19 00:22:23.309957 OSPF periodic xmit from 11.0.0.1 to 224.0.0.5 (IFL 83 area 0.0.0.0) Sep 19 00:22:23.528614 OSPF periodic xmit from 14.0.0.1 to 224.0.0.5 (IFL 75 area 0.0.0.0) Sep 19 00:22:25.772835 OSPF packet ignoreD. MTU mismatch from 11.0.0.2 on intf ge-0/0/2.0 area 0.0.0.0 Sep 19 00:22:29.950015 OSPF hello from 11.0.0.2 (IFL 83, area 0.0.0.0) absorbed Sep 19 00:22:30.622112 OSPF packet ignoreD. MTU mismatch from 11.0.0.2 on intf ge-0/0/2.0 area 0.0.0.0 Sep 19 00:22:30.713279 OSPF packet ignoreD. subnet mismatch from 10.0.0.2 on intf ge-0/0/1.0 area 0.0.0.0 Sep 19 00:22:30.713432 OSPF rcvd Hello 10.0.0.2 -> 224.0.0.5 (ge-0/0/1.0 IFL 75 area 0.0.0.0) Sep 19 00:22:30.713503 Version 2, length 44, ID 10.0.0.2, area 0.0.0.0 Sep 19 00:22:30.713553 checksum 0x0, authtype 0 Sep 19 00:22:30.713622 mask 255.255.255.252, hello_ivl 10, opts 0x12, prio 128 Sep 19 00:22:30.713677 dead_ivl 40, DR 0.0.0.0, BDR 0.0.0.0 -- Exhibit -Click the Exhibit button.

    Referring to the exhibit, what is preventing the OSPF adjacency on interface ge-0/0/4 from forming?

    A. area mismatch
    B. subnet mismatch
    C. MTU mismatch
    D. authentication mismatch

  • Question 37:

    You are asked to create a BGP routing policy that will delete all communities and reject routes with the community 64321:1234.

    Which policy will accomplish this task?

    A. user@router# show policy-options policy-statement filter-on-community { term remove-AS65001 { from community AS65001-community; then { community delete AS65001-community; } } term nothing-with-1234 { from community AS64321-community; then reject; } } community AS64321-community members 64321:1234; community AS65001-community members 65001:1001;
    B. user@router# show policy-options policy-statement filter-on-community { term remove-all-communities { then { community delete all-communities; } } term nothing-with-1234 { from community AS64321-community; then reject; } } community AS64321-community members 64321:1234; community all-communities members *:*;
    C. user@router#show policy-options policy-statement filter-on-community { term nothing-with-1234 { from community AS64321-community; then reject; } term remove-all-communities { then { community delete all-communities; } } } community all-communities members *:*; community AS64321-community members 64321:1234;
    D. user@router#show policy-options policy-statement filter-on-community { term nothing-with-1234 { from community AS64321-community; then reject; } term remove-AS65001 { from community AS65001-community; then { community delete AS65001-community; } } } community AS64321-community members 64321:1234; community AS65001-community members 65001:1001;

  • Question 38:

    -- Exhibit -user@router> show route protocol bgp detail

    inet6.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden) 4444:4444::/32 (1 entry, 1 announced) *BGP PreferencE. 170/-101 Next hop typE. Router, Next hop index: Address: 0x934c688 Next-hop reference count: 2 SourcE. 172.27.0.5 Next hop: ::172.27.0.5 via ge-0/0/1.0, selected StatE. Local AS: 3 Peer AS: 701 AgE. 3:22 Task: BGP_701.172.27.0.5+52965 Announcement bits (1): 0-KRT AS path: 701 4 I Aggregator: 4 10.255.1.34 Accepted LocalpreF. 100 Router ID. 10.255.1.31

    -- Exhibit -

    Click the Exhibit button.

    Referring to the exhibit, which two statements are true? (Choose two.)

    A. The IPv6 route was learned from an IPv6 BGP neighbor.
    B. The IPv6 route was learned from an IPv4 BGP neighbor.
    C. The IPv6 destination will use IPv4 as the next hop.
    D. The IPv6 destination will use IPv6 as the next hop.

  • Question 39:

    -- Exhibit

    -- Exhibit -

    Click the Exhibit button.

    In the exhibit, the provider bridges are using Q-in-Q tunneling to tunnel VLAN 100 traffic over VLAN 200. What is the correct VLAN configuration for Q-in-Q tunneling on Provider Bridge A?

    A. interfaces { ge-0/0/0 { unit 0 { family ethernet-switching { port-mode access; } } } ge-0/0/10 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members test; } } } } } vlans { test { vlan-id 200; interface { ge-0/0/0.0; } dot1q-tunneling { customer-vlans 100; } } }
    B. interfaces { ge-0/0/0 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members test; } } } } ge-0/0/10 { unit 0 { family ethernet-switching { port-mode access; } } } } vlans { test { vlan-id 200; interface { ge-0/0/0.0; } dot1q-tunneling { customer-vlans 100; } } }
    C. interfaces { ge-0/0/0 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members test; } } } } ge-0/0/10 { unit 0 { family ethernet-switching { port-mode access; } } } } vlans { test { vlan-id 200; interface { ge-0/0/10.0; } dot1q-tunneling { customer-vlans 100; } } }
    D. interfaces { ge-0/0/0 { unit 0 { family ethernet-switching { port-mode access; } } } ge-0/0/10 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members test; } } } } } vlans { test { vlan-id 100; interface { ge-0/0/0.0; } dot1q-tunneling { customer-vlans 200; } } }

  • Question 40:

    -- Exhibit

    -- Exhibit -

    Click the Exhibit button.

    Referring to the exhibit, which LSA type will Router R2 inject into Area 1?

    A. Type 3 LSA
    B. Type 4 LSA
    C. Type 5 LSA
    D. Type 7 LSA

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Juniper exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JN0-643 exam preparations and Juniper certification application, do not hesitate to visit our Vcedump.com to find your solutions here.