Juniper Juniper Certification JN0-649 Questions & Answers

• Question 11:

  You are troubleshooting connectivity between an EVPN spine switch configured as a route reflector and a leaf node with an IP address of 10.30.100.6. Referring to the exhibit, what is the problem?

  

  A. The neighbor 10.30.100.3 statement is missing from leaf1's configuration.

  B. The spinenode is not configured for the family inet NLRI.

  C. The neighbor 10.30.100.6 statement is missing from spine1's configuration.

  D. The leaf node is not configured for the family evpn NLRI.

  Correct Answer: B

• Question 12:

  Referring to the exhibit, which two statements are correct? (Choose two.)

  

  A. The maximumwattage that this switch can allocate to attached Ethernet devices is 100 watts.

  B. If the total power consumption exceeds 90 watts, the ge-0/0/11 interface will continue to receive power.

  C. PoE is not enabled on the ge-0/0/0 interface.

  D. The ge-0/0/10 interface supports PoE+.

  Correct Answer: AD

  POE is enabled in the interface ge-0/0/0 but nothing is connected to it. switch is in AT mode (poe+) and interface ge-0/0/11 supports poe+ judging by maximun wattage

• Question 13:

  Referring to the exhibit, you haveplaced the cos multifield classifier on all edge interfaces and configured the relevant CoS parameters. In this scenario, which two statements are correct? (Choose two.)

  A. SSH traffic using the default port will be placed in the af forwarding classand accepted.

  B. SSH traffic using the default port will be placed in the best-effort forwarding class and accepted.

  C. UDP traffic using the 16000 port will be placed in the voice forwarding class and accepted.

  D. UDP traffic using the 16000 port will beplaced in the best-effort forwarding class and accepted.

  Correct Answer: AC

• Question 14:

  Your organization has recently acquired another company. You must carry all of the company's existing VLANsacross the corporate backbone to the existing branch locations without changing addressing and with minimal configuration. Which technology will accomplish this task?

  A. Q-in-Q all-in-one bundling

  B. PVLAN isolated VLAN

  C. MVRP registration normal

  D. EVPN-VXLAN anycast gateway

  Correct Answer: A

• Question 15:

  You are using 802.1X authentication in your network to secure all ports. You have a printer that does not support 802.1X and you must ensure that traffic is allowed to and from this printer without authentication. In this scenario, what will satisfy the requirement?

  A. MAC filtering

  B. MACsec

  C. static MAC bypass

  D. MAC RADIUS

  Correct Answer: C

  https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/static-mac-bypass-mac-radius-authentication.html

• Question 16:

  You enable the Multiple VLAN Registration Protocol (MVRP) to automate the creation and management of virtual LANs.

  Which statement is correct in thisscenario?

  A. The forbidden mode does not register or declare VLANs.

  B. When enabled, MVRP affects all interfaces.

  C. Timers dictate when link state changes are propagated.

  D. MVRP works with RSTP and VSTP.

  Correct Answer: A

  The forbidden mode does not register or declare VLANs. You can change the registration mode of a specific interface to forbidden. An interface in forbidden registration mode does not participate in MVRP even if MVRP is enabled on the switch. https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/mvrp.html MVRP is disabled by default on the switches and, when enabled, affects only trunk interfaces. Once you enable MVRP, all VLAN interfaces on the switch belong to MVRP (the default normal registration mode) and those interfaces accept PDU messages and send their own PDU messages. forbidden--The interface does not register or declare VLANS (except statically configured VLANs).

• Question 17:

  You are asked to configure 802.1X on your access ports to allow only a single device to authenticate. In this scenario, which configuration would you use?

  A. single supplicant mode

  B. multiple supplicant mode

  C. single-secure supplicant mode

  D. MAC authentication mode

  Correct Answer: C

  Single supplicant mode authenticates only the first end device that connects to an authenticator port. All other end devices connecting to the authenticator port after the first has connected successfully, whether they are 802.1X-enabled or not, are permitted access to the port without further authentication. If the first authenticated end device logs out, all other end devices are locked out until an end device authenticates. Single-secure supplicant mode authenticates only one end device to connect to an authenticator port. No other end device can connect to the authenticator port until the first logs out.

• Question 18:

  What are two similarities between OSPFv2 and OSPFv3? (Choose two.)

  A. virtual links

  B. support for multiple instances per link

  C. 32-bit router ID

  D. protocol processing per link, not persubnet

  Correct Answer: AC

• Question 19:

  You are deploying new Juniper EX Series switches in a network that currently is usingCisco's Per-VLAN spanning tree plus (PVST+) and you must provide compatibility with this environment. Which spanning tree protocol do you deploy in this scenario?

  A. STP

  B. MSTP

  C. VSTP

  D. RSTP

  Correct Answer: B

• Question 20:

  Referring to the outputs shown in the exhibit, which two statements are correct about the IS-IS adjacency? (Choose two.)

  

  A. R1 is configured to participate in bothLevel 1 and Level 2.

  B. R2 is configured to participate in both Level 1 and Level 2.

  C. R1 is configured to participate in Level 2 only.

  D. R2 is configured to participate in Level 2 only.

  Correct Answer: AD