Juniper Juniper Certification JN0-649 Questions & Answers

• Question 31:

  You want to provide Layer 2 connectivity between campus sites using Ethernet switches through a metro Ethernet service provider who isusing Q-in-Q tagging on their network.

  Referring to the exhibit, what are two design considerations in this environment? (Choose two.)

  

  A. VXLAN could be implemented on your network across this service provider network.

  B. Each campus switch shown must have a C-Tag 300 configured.

  C. L2PT is required on the SP network to support the spanning tree protocol.

  D. Each campus switch shown must have S-Tag 300 configured.

  Correct Answer: CD

  https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/ref/statement/layer2-protocol-tunneling-edit-vlans-l2pt-ex-series.html

• Question 32:

  You are asked to enforce user authentication using a captive portal before users access the corporate network. Which statement is correct in this scenario?

  A. HTTPS is the default protocol for a captive portal.

  B. A captive portal can be bypassed using anallowlist command containing a device's IP address.

  C. When enabled, a captive portal must be applied to each individual interface.

  D. All Web browser requests are redirected to the captive portal until authentication is successful.

  Correct Answer: D

  You can set up captive portal authentication on your switch to redirect all Web browser requests to a login page that requires users to input a username and password before they are allowed access. Upon successful authentication, users are allowed access to the network and redirected to the original page requested. Junos OS provides a customizable template for the captive portal window that allows you to easily design and modify the look of the captive portal login page. You can modify the design elements of the template to change the look of your captive portal login page and to add instructions or information to the page. You can also modify any of the design elements of a captive portal login page. The first screen displayed before the captive login page requires the user to read the terms and conditions of use. By clicking the Agree button, the user can access the captive portal login page.https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/user-authentication-captive-portal.html

• Question 33:

  You are implementing the route summarization feature of OSPF. Which two results do you achieve in this scenario? (Choose two.)

  A. It helps in migrating to future multi-area OSPF network designs.

  B. It reduced the routing table size, enabling devices to store and process lessinformation.

  C. It reduces the impact of topology changes on a device.

  D. It provides optimal routing in the network.

  Correct Answer: BC

  OSPF inter-area route summarization reduces the routing information exchanged between areas and the size of routing tables, and improves routing performance. OSPF inter-area route summarization enables an ABR to summarize contiguous networks into a single network and advertise the network to other areas.

• Question 34:

  Which three statements are correct about EVPN route types? (Choose three.)

  A. Type 3 routes carry replication information.

  B. Type 2 routes carry endpoint MAC address information.

  C. Type 2 routes carry endpoint IP address information.

  D. Type 5 routes carry replication information.

  E. Type 1 routes carry endpoint MAC address information.

  Correct Answer: ABC

  Cisco explains it better: The EVPN control plane advertises the following types of information:

  Route type 1 ?This is an Ethernet Auto-Discovery (EAD) route type used to advertise Ethernet segment identifier, Ethernet Tag ID, and EVPN instance information. EAD route advertisements may be sent for each EVPN instance or for each

  Ethernet segment.

  Route type 2 ?This advertises endpoint reachability information, including MAC and IP addresses of the endpoints or VTEPs.

  Route type 3 ?This performs multicast router advertisement, announcing the capability and intention to use ingress replication for specific VNIs.

  Route type 4 ?This is an Ethernet Segment route used to advertise the Ethernet segment identifier, IP address length, and the originating router's IP address.

  Route type 5 ?This is an IP prefix route used to advertise internal IP subnet and externally learned routes to a VXLAN network.

• Question 35:

  Referring to the exhibit, which two statements are correct? (Choose two.)

  

  A. The DS-2 switch will beroot bridge for MSTI 2.

  B. The DS-1 switch will be root bridge for MSTI 1.

  C. The DS-1 switch will be root bridge for MSTI 2.

  D. The DS-2 switch will be root bridge for MSTI 1.

  Correct Answer: CD

  Bridge priority is to determine which bridge becomes the designated bridge.

• Question 36:

  Referring to the exhibit, which two statements are correct? (Choose two.)

  

  A. The host that the route is associated with is multihomed to two leaf nodes.

  B. The route is a Type 1 EVPN route.

  C. The route is a Type 2 EVPN route.

  D. The hostthat the route is associated with is single-homed to one leaf node.

  Correct Answer: CD

• Question 37:

  Referring to the exhibit,traffic ingresses on interface ge-0/0/3 and egresses on interface ge- 0/0/4. Which queue does traffic with the IP precedence value of 100 use?

  

  

  

  A. network-control

  B. assured-forwarding

  C. best-effort

  D. expedited-forwarding

  Correct Answer: D

• Question 38:

  You aredeploying IP phones in your enterprise networks. When plugged in, the IP phones must automatically negotiate the power requirements for the new connection with the EX Series switches. In this scenario, which protocol should be used to enable this behavior?

  A. CDP

  B. MP-BGP

  C. LLDP-MED

  D. LLDP

  Correct Answer: C

• Question 39:

  Referring to the exhibit, which two statements are correct? (Choosetwo.)

  

  A. The BGP neighbor can advertise L3 VPN related routes.

  B. The BGP neighbor cannot advertise EVPN related routes.

  C. The BGP neighbor can advertise EVPN related routes.

  D. The BGP neighbor cannot advertise L3 VPN related routes.

  Correct Answer: AC

• Question 40:

  You are asked to configure an802.1X solution that supports dynamic VLAN assignment.

  In this scenario, which two modes support using vendor-specific attributes (VSAs)? (Choose two.)

  A. static MAC bypass mode

  B. single-secure supplicant mode

  C. multiple supplicant mode

  D. singlesupplicant mode

  Correct Answer: BD

  https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/concept/dynamic-vlan-assignment-colorless-ports.html