Exam Details

  • Exam Code
    :JPR-961
  • Exam Name
    :Juniper Networks Certified Internet Expert (JNCIE-SP)
  • Certification
    :JNCIE-SP
  • Vendor
    :Juniper
  • Total Questions
    :65 Q&As
  • Last Updated
    :May 15, 2024

Juniper JNCIE-SP JPR-961 Questions & Answers

  • Question 21:

    Jennifer, the network administrator at a chain of bakery stores called The Cheesecake Factory, recently upgraded the corporate office of a single segmented network to one that supports four separate virtual networks, or Virtual Local Area Network segments (VLANS). Jennifer is very conscious of production change and thus contacted the systems group in order to make sure all the technical aspects of the project were met. Jennifer wanted to make sure that when all the client workstations were on the new network segments, they were still able to gain IP connectivity to the rest of the network as they had before. The Cheesecake Factory has been running a Windows Server Active Directory domain at the Windows 2000 mixed functional level for over two months. Jennifer created four network segments and labeled them VLAN1, VLAN2, VLAN3, and VLAN4.VLAN1 was the original network and hosts the original DHCP server, called SERVER1. Its network address did not change. The systems team decided to put DHCP Relay Agents on VLAN2 and VLAN3, configured to relay DHCP messages to the original DHCP server on VLAN1. Due to a reluctance to permit more DHCP broadcast traffic than the router could handle, Jennifer suggested to her systems team that VLAN4 should host its own DHCP server. The systems group installed another DHCP server on VLAN4, set up the appropriate DHCP scopes on that server and set up the additional DHCP scopes for VLAN2 and VLAN3 on SERVER1.After the work was completed, all clients on all VLANs seemed to be working fine for about two weeks, until Jennifer got a call from the Help Desk stating that the users in the warehouse cannot boot up from their diskless workstations, where they run monthly accounting statistics, but can connect from all other workstations. Jennifer looks at her network diagram and determines that the warehouse is located on VLAN4. She also checks with users in the accounting department on VLAN1 to see if they can connect using their diskless workstations. They tell Jennifer that they can and have had no problems. What did the systems team most likely forget to do?

    A. Install a DHCP Relay Agent on VLAN4.

    B. Configure a BOOTP table on the new DHCP server on VLAN4.

    C. Replace the router with an RFC 2131 compliant router.

    D. Cold boot all the diskless workstations.

  • Question 22:

    Ceste has been working for the client services department at a local bank in Richmond, Virginia for over a year. He is responsible for client connectivity to the corporate network backbone. Ceste is a member of the DHCP Users group and uses his privileges as a member of this group to gauge the status of DHCP leases and available IP addresses. Jamie is a systems engineer for the same bank, and is responsible for the back-end configuration of all DHCP servers and scope configuration. He is a member of both the Domain Users and DHCP Administrators groups. On Monday morning, SERVER2, the DHCP server servicing the first and second floor of the bank, crashes. SERVER2 sits on the same network segment as the first floor users

  • Question 23:

    You work in the shipping and receiving warehouse for a small OEM computer supply company called The T-Group. It is your job as a desktop engineer to make sure that all clients are able to log on and authenticate to the corporate office from their NT 4.0 workstations. Currently, your client base of five workstations point to a WINS server at the corporate office to resolve logon and to authenticate to the correct domain controller. You get word that the systems engineering team is converting the functional level of the current Windows Server interim mode Active Directory domain over the weekend. They are raising the domain level to Windows Server native mode. You call the manager of this group and inquire about any changes you may need to make, so that your warehouse clients can still authenticate on Monday. Robert said that nothing would affect logon authentication, and in fact logon should be a lot quicker because he was removing some legacy protocols and services. Nervous about what he meant by this, as he is notorious for abrupt change without the correct research, you sit back and wait. Contrary to what was told to you, on Monday morning none of your NT 4.0 clients could log on. Knowing a little about network resolution, and more about Robert, you have a hunch and try to log on to using your Windows 2000 laptop machine that you built for emergencies. As you suspected, you are able to log on without a problem. You call Robert and ask him if he uninstalled the WINS server because he had heard that Windows Server no longer required NetBIOS. Robert replied, Yes. What can you do to quickly get your workstations logging onto the network again?

    A. Distribute an LMHOSTS file using the #PRE and #DOM tags with the name and IP address of the new PDC Emulator and have everybody reboot.

    B. Edit the default LMHOSTS file on everybody's workstation and use the #PRE and #DOM tags with the name and IP address of the new PDC Emulator.

    C. Install WINS on one of the NT 4.0 workstations and have all your clients point to it.

    D. Install a WINS proxy agent on one of your NT 4.0 workstations and have everybody point to it.

  • Question 24:

    As the network administrator, Kristy decides to implement the ability for clients to dial-in to the network to allow them the option to work from home if they want to, by installing and configuring an RRAS server. Kristy's internal network consists

    of a Windows 2000 domain, a single DNS and WINS server, multiple segmented broadcast domains, and a single DHCP server, configured to distribute the following information via four different IP address scopes:

    DNS Server (local option)

    Router (local option)

    WINS Server (local option)

    Node Type (global option)

    Domain Name (global option)

    ARP Timeout (local)

    Kristy installs her RRAS server and configures the DHCP Relay Agent to point to the only internal DHCP server. She then configures a fifth DHCP scope to accommodate the DMZ network into which she has installed her RRAS server. Kristy

    hopes to be able to offer both internal Web mail and resource access to her NT 4.0 file server in the same way she is able to successfully offer it now to only internal users. Kristy composes an e-mail with detailed instructions on how to set up

    her Windows ME laptop users with the correct VPN settings to dial-in the company RRAS server. With the e-mail, Kristy asks for feedback as to ease of installation, setup, connectivity, speed, resource access, and so on. A few days later,

    Kristy receives e-mails from most of the users she sent the e-mail to. All of them said that they were able to access e-mail just fine and that the speeds were great. They also said they were able to browse the Internet without a problem, but

    none of them could access any of the file server resources that they needed to do their work. What is the easiest thing Kristy can do to facilitate this need?

    A. Change the DNS server to a global option in DHCP

    B. Change the WINS server to a global option in DHCP

    C. Change the node type to a local option for each scope in DHCP

    D. Add another WINS server to facilitate the dial-in users

  • Question 25:

    Your network is running three DNS servers, NS1, NS2, and NS3. NS1 is running Windows Server, whereas NS2 and NS3 are still running Windows NT 4.0. In reviewing the error log on NS1, you notice an error that lists NOTIMPL(4) being returned by NS3.What does this error indicate?

    A. NS3 does not support extended DNS (EDNS0).

    B. NS1 does not support extended DNS (EDNS0).

    C. The OPT record received from NS3 contained an illegal Time-To-Live.

    D. The OPT record needs to be added to all three name servers.

  • Question 26:

    You’ve just created a new zone in DNS on a Windows Server -based computer. You check the zone and notice that the only records in it are the SOA and NS RRs. You check the configuration and see that the zone is configured to accept dynamic updates. What should you do next?

    A. Manually add all RR for the zone including A, CNAME, PTR, and SRV records.

    B. Manually add A RR for all hosts that cannot use dynamic updating.

    C. Manually add A RR and PTR RR for all hosts that will be using dynamic updating.

    D. Manually initiate a zone transfer to replicate all the needed RR to the new zone.

  • Question 27:

    The ABC.com network consists of a single Active Directory domain named ABC.com. All client computers on the ABC.com network run Windows XP Professional.

    You use your client computer named ABC-WS294. You want to use Microsoft Baseline Security Analyzer (MBSA) on ABC-WS294 to analyze network servers for security vulnerabilities.

    Which of the following services are the minimum required to be running on the network servers for you to scan them with MBSA? (Choose all that apply.)

    A. Remote Registry.

    B. Workstation service.

    C. Server service.

    D. Print Spooler service.

  • Question 28:

    You are using WINS Forward Lookup integration in your mixed UNIX/Windows environment to allow your DNS-only UNIX clients to use only their configured Windows Server DNS server to query and resolve resolution requests for downlevel Windows NT 4.0 machines

  • Question 29:

    The president of your company has asked you if VPN technology could benefit the company. What is the greatest benefit provided by VPN?

    A. VPN solutions provide secure connectivity at a significant price savings compared to long distance analog or dedicated circuit connections.

    B. VPN solutions utilize fewer resources than dedicated circuits or analog connections.

    C. VPN solutions provide better remote control capabilities than other third-party alternatives.

    D. VPN solutions provide higher speed connections than dedicated circuits or analog connections.

  • Question 30:

    Your company's corporate security policy is very strict. No username or password information may be passed over the Internet without using the strongest encryption available. Your company does not yet have a certificate infrastructure in place. Which of these methods would be the best choice for VPN authentication to ensure that you are within your company's corporate security policy requirements?

    A. MS-CHAP v2

    B. PAP

    C. CHAP

    D. SPAP

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Juniper exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JPR-961 exam preparations and Juniper certification application, do not hesitate to visit our Vcedump.com to find your solutions here.