Juniper JN0-649 Online Practice Questions and Exam Preparation

Juniper JN0-649 Online Questions & Answers

• Question 41:

  You are asked to enforce user authentication using a captive portal before users access the corporate network. Which statement is correct in this scenario?

  A. HTTPS is the default protocol for a captive portal.
  B. A captive portal can be bypassed using anallowlist command containing a device's IP address.
  C. When enabled, a captive portal must be applied to each individual interface.
  D. All Web browser requests are redirected to the captive portal until authentication is successful.
  D. All Web browser requests are redirected to the captive portal until authentication is successful.

  ---

  Explanation/Reference:

  You can set up captive portal authentication on your switch to redirect all Web browser requests to a login page that requires users to input a username and password before they are allowed access. Upon successful authentication, users are allowed access to the network and redirected to the original page requested. Junos OS provides a customizable template for the captive portal window that allows you to easily design and modify the look of the captive portal login page. You can modify the design elements of the template to change the look of your captive portal login page and to add instructions or information to the page. You can also modify any of the design elements of a captive portal login page. The first screen displayed before the captive login page requires the user to read the terms and conditions of use. By clicking the Agree button, the user can access the captive portal login page.https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/user-authentication-captive-portal.html

• Question 42:

  The connection between DC1 and DC2 is routed as shown in the exhibit. In this scenario, which statement is correct?

  

  A. The border devices must be able to perform Layer 3 routing and provide IRB functionality.
  B. L3VPN must be enabled to advertise reachability.
  C. An IP prefix route provides encoding for intra-subnet forwarding.
  D. Type 2 and Type 5 routes will be exchanged between DC1 and DC2.
  A. The border devices must be able to perform Layer 3 routing and provide IRB functionality.

  ---

  Explanation/Reference:

  https://www.juniper.net/documentation/us/en/software/junos/evpn-vxlan/topics/concept/evpn-route-type5-understanding.html

• Question 43:

  Referring to the exhibit, which statement is correct?

  

  A. The route is learned from a multihop BGP session.
  B. The route is learned from only one neighbor.
  C. The route is learned from a multipath BGP session.
  D. The route is learned from three different neighbors.
  B. The route is learned from only one neighbor.

• Question 44:

  Which two statements are correct regarding the behavior shown in the exhibit? (Choosetwo.)

  

  A. The ge-1/1/0 interface is configured as secondary for Area 0.
  B. The router is an ABR.
  C. The router is not an ABR.
  D. The ge-1/1/0 interface is configured as secondary for Area 100.
  B. The router is an ABR.
  D. The ge-1/1/0 interface is configured as secondary for Area 100.

• Question 45:

  Remote branches connect to the corporate WAN through access switches. The access switches connect to access ports on the WAN distribution switch, as shown in the exhibit. L2PT has previously been configuredon the tunnel Layer 2 traffic across the WAN. You decide to move the L2PT tunnel endpoints to the access switches. When you apply the L2PT configuration to the access switches, the ports that connect the access switches to the distribution switch shut down.

  Which action would solve this problem?

  

  A. Configure the links between the access switches and the distribution switch as a trunk port.
  B. Disable the BPDU block function on the access switches.
  C. Disable the BPDU block function on thedistribution switch.
  D. Configure a GRE tunnel to encapsulate the L2PT traffic across the WAN.
  A. Configure the links between the access switches and the distribution switch as a trunk port.

  ---

  Explanation/Reference:

  Access interfaces in an L2PT-enabled VLAN should not receive L2PT-tunneled PDUs. If an access interface does receive L2PT-tunneled PDUs, there might be a loop in the network, and the device will shut down the interface. https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/layer-2-protocol-tunneling.html

• Question 46:

  You are deploying new Juniper EX Series switches in a network that currently is usingCisco's Per-VLAN spanning tree plus (PVST+) and you must provide compatibility with this environment. Which spanning tree protocol do you deploy in this scenario?

  A. STP
  B. MSTP
  C. VSTP
  D. RSTP
  B. MSTP

• Question 47:

  Your network has an unmanaged switch between the hosts and your EX Series switch. After the traffic enters theEX Series switch, each host must be on a separate VLAN.

  How would you accomplish this task?

  

  A. Configure an input firewall filter on interface ge-0/0/3 to match the source MAC or IP address of the hosts to assign the VLANs.
  B. Configure an output firewall filter on interface ge-0/0/1 to match the destination MAC or IP address of the hosts to assign the VLANs.
  C. Configure interface ge-0/0/3 to a mode trunk to assign the VLANs.
  D. Configure VSTP on interface ge-0/0/1 to assign the VLANs.
  C. Configure interface ge-0/0/3 to a mode trunk to assign the VLANs.

• Question 48:

  You want to create an OSPF area that only contains intra-area route information in the form of Type 1 and Type 2 LSAs.

  In this scenario, which area is needed to accomplish this task?

  A. totally non-to-stubby area
  B. totally stubby area
  C. stub area
  D. non-to-stubby area
  B. totally stubby area

  ---

  Explanation/Reference:

  A totally stubby area (TSA) is a stub area in which summary link-state advertisement (type 3 LSAs) are not sent. A default summary LSA, with a prefix of 0.0. 0.0/0 is originated into the stub area by an ABR, so that devices in the area can forward all traffic for which a specific route is not known, via ABR.

• Question 49:

  Referring to the exhibit, a PIM-SM network is set up to enable communication between multicast devices.

  Which two statements are true? (Choose two.)

  

  A. Before the formation of the rendezvous-point tree, a join message is sent from R1 to R3.
  B. Before theformation of the rendezvous-point tree, an IGMP is sent from the Receiver to R1.
  C. Before the formation of the rendezvous-point tree, an IGMP is sent from the Source to R5.
  D. Before the formation of the rendezvous-point tree, a join message is sent from R1 to R5.
  B. Before theformation of the rendezvous-point tree, an IGMP is sent from the Receiver to R1.
  C. Before the formation of the rendezvous-point tree, an IGMP is sent from the Source to R5.

• Question 50:

  Referring to the exhibit, ServerA sends a single IP packet destined to 10.0.0.127.

  Which two statements correctly describe the behavior of the resulting outbound VXLAN packets that contain the original packet destined to 10.0.0.127? (Choosetwo.)

  

  A. Router E will replicate and send a copy of the received VXLAN packet to router D.
  B. Router C will send a VXLAN packet destined only to router D and router E.
  C. Router D will not replicate and send a copy of the received VXLAN packet to routerE.
  D. Router C will send a single VXLAN packet to one remote VTEP.
  A. Router E will replicate and send a copy of the received VXLAN packet to router D.
  D. Router C will send a single VXLAN packet to one remote VTEP.