Juniper JN0-649 Online Practice Questions and Exam Preparation

Juniper JN0-649 Online Questions & Answers

• Question 51:

  You are deploying IP phones in your enterprise network that must receive their power through their Ethernet connection. You are using your EX Series switch's PoE ports that support IEEE 802.3af.

  In this scenario, what is the maximum amount of power allocated to each interface?

  A. 10.2 W
  B. 15.4 W
  C. 30 W
  D. 50 W
  B. 15.4 W

  ---

  Explanation/Reference:

• Question 52:

  A modified deficit round-robin scheduler is defined by which three variables? (Choose three.)

  A. priority
  B. WRED
  C. transmit rate
  D. Layer 3 fields
  E. buffer size
  A. priority
  B. WRED
  C. transmit rate

• Question 53:

  Which two multicast listenerregistration protocols are supported in the Junos operating system? (Choose two.)

  A. MLD
  B. DVMRP
  C. IGMP
  D. PIM
  A. MLD
  C. IGMP

  ---

  Explanation/Reference:

  internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) are the Multicast Group Membership Discovery (MGMD) protocols

• Question 54:

  There are two BGP routes to 10.200.200.0/24 received from twoexternal peers. Route 1 comes from a neighbor with a router ID of 10.10.100.1 and a peer IP address of 10.10.30.1, and route 2 comes from a neighbor with a router ID of

  10.10.200.1 and a peer IP address of 10.10.50.1. Both routes have the same MED value, origin value, AS path length, and local preference number.

  In this scenario, which statement is correct about the active route?

  A. Route 1 will be active because of the peer IP address.
  B. Route 2 will be active because of the peer IP address.
  C. Route 1 will be active because of the router ID.
  D. Route 2 will be active because of the router ID.
  C. Route 1 will be active because of the router ID.

  ---

  Explanation/Reference:

  The router determines the router ID for each peer that advertised a path to the route destination. A lower router ID value is preferred over a higher router ID value. 10. The router determines the peer ID for each peer that advertised a path to the router destination. A lower peer ID value is preferred over a higher peer ID value. The peer ID is the IP address of the established BGP peering session.

• Question 55:

  Your enterprise network is running BGP VPNs to support multitenancy. Some of the devices with which you peer BGP do not support the VPN NLRI. You must ensure that you do not send BGP VPN routes to the remote peer.

  Which two configuration steps will satisfy this requirement? (Choose two.)

  A. Configure an import policy on the remote peer to reject the routes when they are received.
  B. Configure an export policy on the local BGP peer to reject the VPN routes being sent to the remote peer.
  C. Configure a route reflector for the VPN NLRI.
  D. Configure the apply-vpn-export feature on the local BGP peer.
  B. Configure an export policy on the local BGP peer to reject the VPN routes being sent to the remote peer.
  D. Configure the apply-vpn-export feature on the local BGP peer.

  ---

  Explanation/Reference:

  Apply both the VRF export and BGP group or neighbor export policies (VRF first, then BGP) before routes from the vrf or l2vpn routing tables are advertised to other PE routers. https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/ref/statement/vpn-apply-export-edit-protocols-bgp-vp.html

• Question 56:

  Which two statements are correct about the deployment of EVPN-VXLAN on QFX Series devices? (Choose two.)

  A. Type 1 routeadvertisements always have the single-active flag set to 1.
  B. Junos OS supports underlay replication for BUM traffic forwarding.
  C. Junos OS supports ingress replication for BUM traffic forwarding.
  D. Type 1 route advertisements always have thesingle-active flag set to 0.
  C. Junos OS supports ingress replication for BUM traffic forwarding.
  D. Type 1 route advertisements always have thesingle-active flag set to 0.

  ---

  Explanation/Reference:

  BUM Traffic Forwarding

  Junos devices that use MPLS encapsulation for EVPNs can only use ingress replication at this time.

  Ingress replication means, to flood traffic to remote PE routers, the traffic has to be replicated, once for each remote PE router.

  The EVPN label for this BUM traffic is learned per PE router from the route type 3, inclusive multicast Ethernet tag route.

  This table shows the format of the inclusive multicast Ethernet tag route.

  All-Active Redundancy (4)

  This diagram shows the format of the type 1 route, A-D route per ES. The split horizon label is advertised as part of an extended community attached to the type 1 route. The split horizon label is also called the ESI label. The extended

  community also indicates what type of redundancy mode is used for this given ESI: single-active represented by binary 1 or active-active represented by binary 0.

• Question 57:

  You are asked to establish interface level authentication for users connecting to your network. You must ensure that only corporate devices, identified by MAC addresses, are allowed to connect and authenticate. Authentication must be handled by a centralized server to increase scalability.

  Which authentication method would satisfy this requirement?

  A. MAC RADIUS
  B. captive portal
  C. 802.1X with single-secure supplicant mode
  D. 802.1X with multiple supplicant mode
  A. MAC RADIUS

  ---

  Explanation/Reference:

  https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/mac-radius-authentication-switching-devices.html

  You can configure MAC RADIUS authentication on an interface that also allows 802.1X authentication, or you can configure either authentication method alone.

  If both MAC RADIUS and 802.1X authentication are enabled on the interface, the switch first sends the host three EAPoL requests to the host. If there is no response from the host, the switch sends the host's MAC address to the RADIUS server to check whether it is a permitted MAC address. If the MAC address is configured as permitted on the RADIUS server, the RADIUS server sends a message to the switch that the MAC address is a permitted address, and the switch opens LAN access to the nonresponsive host on the interface to which it is connected.

• Question 58:

  Referring to the exhibit, how will router E quickly learn that the remote MAC addresses are no longer reachable through the router attached to the failed link?

  

  A. Router E receives Type 2 withdrawal messages from router D.
  B. Router E receives Type 1 withdrawal messages from router D.
  C. Router E receives Type 1 withdrawal messages from router C.
  D. Router E receives Type 2 withdrawal messages from router C.
  B. Router E receives Type 1 withdrawal messages from router D.

• Question 59:

  Referring to the exhibit, which two statements are correct? (Choose two.)

  

  A. The DS-2 switch will beroot bridge for MSTI 2.
  B. The DS-1 switch will be root bridge for MSTI 1.
  C. The DS-1 switch will be root bridge for MSTI 2.
  D. The DS-2 switch will be root bridge for MSTI 1.
  C. The DS-1 switch will be root bridge for MSTI 2.
  D. The DS-2 switch will be root bridge for MSTI 1.

  ---

  Explanation/Reference:

  Bridge priority is to determine which bridge becomes the designated bridge.

• Question 60:

  Referring to the exhibit, which statement is correct when a failure exists on the link between host2 and switch5 on this EVPN-VXLAN fabric?

  

  A. The switch5 device will send a Type 2route to all peers.
  B. The switch5 device will send a Type 4 route to all peers.
  C. The switch5 device will send a Type 1 route to all peers.
  D. The switch5 device will send a Type 3 route to all peers.
  D. The switch5 device will send a Type 3 route to all peers.