Juniper Juniper Certification JN0-649 Questions & Answers

• Question 21:

  The connection between DC1 and DC2 is routed as shown in the exhibit. In this scenario, which statement is correct?

  

  A. The border devices must be able to perform Layer 3 routing and provide IRB functionality.

  B. L3VPN must be enabled to advertise reachability.

  C. An IP prefix route provides encoding for intra-subnet forwarding.

  D. Type 2 and Type 5 routes will be exchanged between DC1 and DC2.

  Correct Answer: A

  https://www.juniper.net/documentation/us/en/software/junos/evpn-vxlan/topics/concept/evpn-route-type5-understanding.html

• Question 22:

  You are asked to establish interface level authentication for users connecting to your network. You must ensure that only corporate devices, identified by MAC addresses, are allowed to connect and authenticate. Authentication must be handled by a centralized server to increase scalability.

  Which authentication method would satisfy this requirement?

  A. MAC RADIUS

  B. captive portal

  C. 802.1X with single-secure supplicant mode

  D. 802.1X with multiple supplicant mode

  Correct Answer: A

  https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/mac-radius-authentication-switching-devices.html

  You can configure MAC RADIUS authentication on an interface that also allows 802.1X authentication, or you can configure either authentication method alone.

  If both MAC RADIUS and 802.1X authentication are enabled on the interface, the switch first sends the host three EAPoL requests to the host. If there is no response from the host, the switch sends the host's MAC address to the RADIUS server to check whether it is a permitted MAC address. If the MAC address is configured as permitted on the RADIUS server, the RADIUS server sends a message to the switch that the MAC address is a permitted address, and the switch opens LAN access to the nonresponsive host on the interface to which it is connected.

• Question 23:

  When using wide metrics, which two statements about route advertisement between IS-IS levels are correct? (Choose two.)

  A. Level 1 and Level 2 routers do not advertise Level 2 routes into the Level 1 area by default.

  B. Level 1 routes are advertised to Level 2 routers by default.

  C. If wide-metrics-only is configured, Level 1 routes are not advertised to Level 2 routers by default.

  D. Level 1 routes advertised as external routes into Level 1 are not advertised to any Level 2 routers by default.

  Correct Answer: AC

• Question 24:

  Which two statements are correct about the deployment of EVPN-VXLAN on QFX Series devices? (Choose two.)

  A. Type 1 routeadvertisements always have the single-active flag set to 1.

  B. Junos OS supports underlay replication for BUM traffic forwarding.

  C. Junos OS supports ingress replication for BUM traffic forwarding.

  D. Type 1 route advertisements always have thesingle-active flag set to 0.

  Correct Answer: CD

  BUM Traffic Forwarding

  Junos devices that use MPLS encapsulation for EVPNs can only use ingress replication at this time.

  Ingress replication means, to flood traffic to remote PE routers, the traffic has to be replicated, once for each remote PE router.

  The EVPN label for this BUM traffic is learned per PE router from the route type 3, inclusive multicast Ethernet tag route.

  This table shows the format of the inclusive multicast Ethernet tag route.

  All-Active Redundancy (4)

  This diagram shows the format of the type 1 route, A-D route per ES. The split horizon label is advertised as part of an extended community attached to the type 1 route. The split horizon label is also called the ESI label. The extended

  community also indicates what type of redundancy mode is used for this given ESI: single-active represented by binary 1 or active-active represented by binary 0.

• Question 25:

  A Layer 2 connection does not expend across data centers. The IP subnet in a Layer 2 domain is confined within a single data center. Which EVPN route type is used to communicate prefixes between the data centers?

  A. Type 1

  B. Type 2

  C. Type 4

  D. Type 5

  Correct Answer: D

  https://www.juniper.net/documentation/us/en/software/junos/evpn-vxlan/topics/concept/evpn-route-type5-understanding.html#:~:text=In%20the%20control%20plane%2C%20EVPN,subnet%20connectivity%20across%20data%20centers.

• Question 26:

  You have scheduled maintenance operationsfor one of the devices in your OSPF network. Referring to the exhibit, which three statements are correct? (Choose three.)

  

  A. R1 does not participate in OSPF routing.

  B. Any traffic destined for networks that terminate on R1 will still beforwarded to R1.

  C. The metrics for all transit interfaces on R1 is set to the maximum value of 65,535.

  D. R1 participates in OSPF routing but does not send or receive transit traffic.

  E. R1 does not send or receive transit traffic during the maintenance window even if no alternative paths exist to the given destination.

  Correct Answer: BCD

• Question 27:

  You are asked to implement fault tolerant RPs in your multicast network. Which two solutions would accomplish this behavior? (Choose two.)

  A. Use BFD with statically defined RPs.

  B. Use MSDP withstatically defined RPs.

  C. Use anycast PIM with statically defined RPs.

  D. Use IGMPv3 with statically defined RPs.

  Correct Answer: BC

• Question 28:

  A user is attempting to watch a high-definition video being streamed from the mediaserver over the network. However, the user complains that the experienced video quality is poor. While logged on to router B, a Juniper Networks device, you notice that video packets are being dropped.

  In this scenario, what would solve this problem?

  

  A. Adjust the scheduler for the expedited-forwarding forwarding class to support a higher transmit rate.

  B. Adjust the expedited-forwarding BA classifier to router B's ge-0/0/0 interface to support a higher transmit rate.

  C. Adjust thescheduler-map to support a higher transmit rate.

  D. Adjust the expedited-forwarding BA classifier on router B's ge-0/0/1 interface to support a higher transmit rate.

  Correct Answer: A

  transmit rate is set on the scheduler, BA and classifier do not have transmit rate. scheduler-map=maps schedulers to fwd classes

• Question 29:

  You must provide network connectivity to hosts that fail authentication.

  In this scenario, what would be used in a network secured with 802.1X to satisfy this requirement?

  A. Configure the native-vlan-id parameter on the port.

  B. Use the server-reject-vlan command to specify a guest VLAN.

  C. Configure a secondary IP address on the port for unauthenticated hosts.

  D. Configure the port as a spanning tree edge port.

  Correct Answer: B

  For a device configured for 802.1X authentication, specify that when the device receives an Extensible Authentication Protocol Over LAN (EAPoL) Access-Reject message during the authentication process between the device and the RADIUS authentication server, supplicants attempting to access the LAN are granted access and moved to a specific bridge domain or VLAN. Any bridge domain, VLAN name or VLAN ID sent by a RADIUS server as part of the EAPoL Access-Reject message is ignored.

• Question 30:

  In OSPF, how does a router ensure that LSAs advertised to a neighboring router are received?

  A. LSA flooding guarantees that all routers will receive them successfully.

  B. LSAs are sent over a TCP connection.

  C. LSAs are acknowledged by the neighboring router.

  D. LSAs are advertised with an acknowledgement bit.

  Correct Answer: C