Juniper JNCIE-SP JPR-961 Questions & Answers

• Question 11:

  Mark works as a Network Administrator for ABC.com. The company has a Windows domainbased network. The domain contains four Windows servers and 500 Windows Professional client computers.

  The company's Marketing department uses a member server named Fserv that stores confidential files. The files are stored in a folder named DATA. The Marketing department users are members of a group named Market. The NTFS

  permissions on the DATA folder and files in that folder allow access only to the Administrators group and the Market group.

  The NTFS permissions are configured to allow full control on the DATA folder. The share permissions are the default permissions. Mark wants to track users who attempt to gain access to files in the DATA folder on Fserv. For this purpose,

  he configures auditing on the DATA folder and files in that folder. He configures auditing on the Failed attempts for each access type on the Everyone group. When he checks the auditing configuration by attempting to access the files with a

  domain user account that does not have access permissions to the files, he receives an "Access Denied" message. However, this Failed attempt does not appear in the security log on Fserv. What will Mark do to resolve the issue?

  A. Grant the Generate security audits privilege to the Fserv computer account.

  B. Enable the Audit object access policy for Failed and Successful attempts in a new Group Policy object (GPO) that applies only to Fserv.

  C. Configure the auditing entries to apply to the Administrators group and the Market group, instead of the Everyone group.

  D. Enable the Audit object access policy for Failed attempts in a new Group Policy object (GPO) that applies only to Fserv.

  Correct Answer: D

• Question 12:

  Mark works as a Network Administrator for ABC.com. The company has a Windows domainbased network. The network has six Windows member servers and 120 Windows XP Professional client computers. All the member servers are using static IP configuration. Five of the member servers work as Intranet Web servers, and one of them named ISERV works as a Routing and Remote Access server. The NAT/Basic routing protocol is enabled to route traffic between the local network and the Internet. ISERV's internal IP address is 192.168.1.1. The Web servers' static IP configuration is shown in the image below:

  

  The Web servers require Internet access to display Web pages from the Internet. The Web servers are configured with the Internet Explorer LAN settings as shown in the image below:

  

  The users on the intranet report that only the local Web pages stored on the Web servers are displayed. Mark attempts to view the Web pages on the Internet from one of the Web servers, but he is unable to do so. Mark wants all the Web servers to be able to access the Web pages on the Internet. What will he do to accomplish this?

  A. On the TCP/IP Properties page on the Web servers, configure the default gateway as 192.168.1.1.

  B. Configure the Web servers to receive IP addresses from the DHCP server.

  C. In the LAN settings dialog box on all the Web servers, configure port 80.

  D. On the TCP/IP Properties page on the Web servers, configure the default gateway as 255.255.255.0.

  Correct Answer: A

• Question 13:

  You work as a Network Administrator for ABC.com. The company has a Windows domainbased network. In order to automate the TCP/IP configuration for the client computers in the network, you install the DHCP Server service on a Windows member server. You want to ensure that all the network printers always use the same IP address. In order to accomplish this, you create IP address reservations for the network printers while creating the DHCP scope. You also define an exclusion range for the printers. Now, none of the printers are receiving the IP addresses. However, the client computers are not experiencing this problem. What will you do to resolve the issue?

  A. Remove the exclusion range for the addresses that are being used by the printers.

  B. Assign the IP addresses to the printers manually.

  C. Run the IPCONFIG /release command-line utility on the printers.

  D. Remove the client reservations for the addresses that are being used by the printers.

  Correct Answer: A

• Question 14:

  Mark works as a Network Administrator for ABC.com. The company has a Windows Active Directorybased single domain single forest network. The network contains five member servers and 110 Windows XP Professional client computers.

  The client computers in the network receive IP addresses from the DHCP server.

  One of the member servers named DBSERV works as a database server. Mark configures the DHCP server to lease the reserved IP address 192.168.1.10 to DBSERV. He also creates an A record for DBSERV on the DNS server that uses

  the IP address 192.168.1.10.

  Users complain that they are unable to access DBSERV. Mark runs the IPCONFIG /all command from the command prompt on DBSERV. He finds the following results:

  

  Now, Mark wants to ensure that DBSERV receives the IP address 192.168.1.10. What will he do to accomplish this?

  A. Write the MAC address of the DBSERV network adapter with dashes in the client reservation.

  B. Change the MAC address in the client reservation setting.

  C. Authorize the DHCP server.

  D. Remove the A record for DBSERV from the DNS server.

  Correct Answer: B

• Question 15:

  Mark works as a Network Administrator for ABC.com. The company has its headquarters at New York and a branch office at Miami. The headquarters has a Windows domain-based network named Nettech.com. The network has three

  Windows member servers and 120 Windows XP Professional client computers. One of the member servers named DNSServ is working as a DNS server.

  The branch office in Miami also has a Windows domain-based network named Nettech1.com.

  One Windows member server named DNSServ1 is working as a primary DNS server in Nettech1.com. DNSServ is a secondary zone server for Nettech1.com. Mark wants to monitor the notification traffic between these two domains and

  keep a record of when the primary DNS server for Nettech1.com informs DNSServ if there are available changes in the Nettech1.com zone. What will he do to accomplish this?

  A. Enable debug logging on DNSServ by selecting the Log packets for debugging check box and select the Notification check box.

  B. Configure auditing on DNSServ.

  C. Enable debug logging on DNSServ by selecting the Log packets for debugging check box.

  D. Execute the REPLMON command on DNSServ.

  Correct Answer: A

• Question 16:

  Mark works as a Network Administrator for ABC.com. The company has a Windows domainbased network. The network contains two domain controllers, four Windows member servers, and 300 Windows XP Professional client computers. One of the member servers named RRASSRV works as a Routing and Remote Access Server. RRAS is configured as a VPN server. A company employee named Rick works from a remote location. Rick daily connects to RRASSRV by using a VPN connection and uploads daily reports on RRASSRV. He is the only person who connects to RRASSRV by using the VPN connection. Mark notices that Rick is able to access the other computers on the network while he is connected to RRASSRV. Mark wants to prevent Rick from accessing the other computers on the network. What will he do to accomplish this?

  A. In the Routing and Remote Access management console on RRASSRV, click the IP tab page in the server properties dialog box and deselect the Enable IP routing check box.

  B. In the Routing and Remote Access management console on RRASSRV, click the General tab page in the server properties dialog box and deselect the Remote access server check box.

  C. In the Routing and Remote Access management console on RRASSRV, click the PPP tab page in the server properties dialog box and deselect the Multilink connections check box.

  D. In the Routing and Remote Access management console on RRASSRV, click the IP tab page in the server properties dialog box and disable the IP routing radio button.

  Correct Answer: A

• Question 17:

  A beta version of an application you’re testing to send and receive data on your network does not seem to be sending compressed data before sending packets across the network. You’re looking at the architecture of the application to see if you can determine where the problem likely originates. Using the OSI model, from where is the problem probably originating?

  A. Transport layer

  B. Application layer

  C. Presentation layer

  D. Physical layer

  Correct Answer: C

• Question 18:

  Your firm is designing a new software driver that will employ a proprietary method of flow control for data being sent across a network medium. On which layer of the OSI model would be this flow control likely be implemented?

  A. Application

  B. Data Link

  C. Transport

  D. Media Access Control

  Correct Answer: B

• Question 19:

  Your corporate network uses variable length subnetting to make more efficient use of IP addresses. One of the IP addresses for a host is 131.39.161.17 with a subnet mask of 255.255.248.0. What is the proper notation for the network to which this host is connected?

  A. 131.39.160.0/21

  B. 131.36.161.0/20

  C. 131.39.161.17/21

  D. 131.36.160.0/20

  Correct Answer: A

• Question 20:

  You need to create several subnets for your corporate network. Each subnet should have no more than two host addresses available per subnet. You have a subnet with the address of 136.42.255.0/24.What are the first two subnet addresses that would be created in this configuration?

  A. 136.42.255.0/31, 136.42.255.4/31

  B. 136.42.255.2/30, 136.42.255.4/30

  C. 136.42.255.4/29, 136.42.255.8/29

  D. 136.42.255.0/30, 136.42.255.4/30

  Correct Answer: D