Which command displays the chassis serial number of a Junos device?
-
A
-
B
-
C
show chassis routing-engine
-
D
Reveal answer details
Close answer details
Correct answerD
Explanationshow chassis hardware lists the installed chassis components and hardware identifiers, including the chassis serial number. Operational and software-version commands do not provide the same hardware inventory view.
Referring to the exhibit,  using the show route 192.168.100.100 command output, over which interface will the traffic be forwarded?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationThe active route is marked with an asterisk, and its forwarding line points to next hop 192.168.0.2 through xe-0/0/0.0. Other protocol entries are not the active forwarding choice.
Question 3
Multiple choice
Which two statements are correct about Junos OS? (Choose two.)
-
A
Junos OS provides the ability to run unsigned third-party binaries.
-
B
Junos OS provides modularization of software processes.
-
C
Junos OS combines security and routing policies.
-
D
Junos OS separates the control plane and the forwarding plane.
Reveal answer details
Close answer details
Correct answersB, D
ExplanationJunos OS is built from modular processes, so individual functions can run separately, and the architecture separates the control plane from the forwarding plane. It is not defined by running unsigned binaries or merging unrelated policy types.
Question 4
Multiple choice
A firewall filter term matches ICMP packets from 172.25.11.0/24 and includes count count-icmp and discard. Which two actions occur when a packet matches? (Choose two.)
-
A
An ICMP destination unreachable message is returned.
-
B
-
C
-
D
A counter is incremented.
Reveal answer details
Close answer details
Correct answersC, D
ExplanationThe count count-icmp action increments the named counter for matching packets. The discard action then silently drops the packet, so it is not forwarded and no ICMP rejection is sent.
Question 5
Multiple choice
Which two characteristics describe Junos OS software? (Choose two.)
-
A
Junos OS is a monolithic code base.
-
B
Junos OS supports automation features.
-
C
Junos OS runs only on routers.
-
D
Junos OS uses a modular architecture with independent processes.
Reveal answer details
Close answer details
Correct answersB, D
ExplanationJunos OS supports automation capabilities and uses a modular process architecture. It is not limited to routers, and independent processes are the opposite of a single monolithic code base.
Question 6
Multiple choice
Which two statements describe routing policy and firewall filter behavior in Junos? (Choose two.)
-
A
A routing policy changes interface error counters before traffic is forwarded.
-
B
An import policy can control which received routes are accepted into routing information.
-
C
A firewall filter is used to install Junos OS software packages.
-
D
A firewall filter term can match traffic and then apply an action such as accepting or discarding it.
-
E
Unicast reverse-path forwarding validates destination names against DNS records.
Reveal answer details
Close answer details
Correct answersB, D
ExplanationA Junos import policy controls whether received routes are accepted into routing information. A firewall filter term matches packet fields and then applies actions such as accept or discard; it is not used for software installation.
Question 7
Multiple choice
Which two tasks should be performed when creating a new user account on a Junos device? (Choose two.)
-
A
Assign the user to a login class.
-
B
Enable SSH for the user explicitly.
-
C
Configure a password for the user.
-
D
Configure the user to bypass authentication.
Reveal answer details
Close answer details
Correct answersA, C
ExplanationA Junos user account needs authentication credentials and a login class that defines permissions. SSH is enabled as a system service, not per user, and bypassing authentication would defeat account security.
Which Junos feature limits the amount of exception traffic sent from the Packet Forwarding Engine to the Routing Engine?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerA
ExplanationA policer limits traffic to a configured rate, including exception traffic sent from the Packet Forwarding Engine to the Routing Engine. CoS markings classify traffic, routing policy controls routes, and schedulers manage output queues.
Question 9
Multiple choice
When considering routing tables and forwarding tables, which two statements are correct? (Choose two.)
-
A
The routing table is used by the Routing Engine to select the best route.
-
B
The forwarding table stores all routes and prefixes from all protocols.
-
C
The forwarding table is used by the Routing Engine to select the best route.
-
D
The routing table stores routes and prefixes from routing protocols and other sources.
Reveal answer details
Close answer details
Correct answersA, D
ExplanationThe routing table is the Routing Engine data structure used to select the best route. It contains routes and prefixes learned from protocols, static configuration, and connected interfaces. The forwarding table is derived from active routing-table choices.
Question 10
Single choice
A small branch router needs one manually defined path to reach all unknown remote destinations through an upstream router. Which routing approach fits this requirement?
-
A
Dynamic routing protocol only
-
B
-
C
-
D
Broadcast forwarding entry
Reveal answer details
Close answer details
Correct answerB
ExplanationA static default route points all otherwise unknown destinations to a chosen upstream next hop. That fits a small branch that needs one manually defined path instead of a dynamic protocol.
Question 11
Multiple choice
Which two statements are true about the firewall filter configuration shown in the exhibit? (Choose two.) 
-
A
It applies the filter to a physical interface.
-
B
It counts the number of SSH packets that egress from the source SSH interface.
-
C
It evaluates SSH packets egressing from the management interface.
-
D
It sends filtered data to a syslog file.
Reveal answer details
Close answer details
Correct answersA, C
ExplanationThe filter is applied under the me0 interface as an output filter, so it is attached to a physical management interface and evaluates traffic leaving that interface. The term matches SSH by destination port and counts it; no syslog action is configured.
Question 12
Single choice
How are the Routing Engine and the Packet Forwarding Engine components connected?
-
A
They use shared memory access.
-
B
They use external breakout cables.
-
C
They use an MPLS connection.
-
D
They use an internal Ethernet link.
Reveal answer details
Close answer details
Correct answerD
ExplanationThe Routing Engine and Packet Forwarding Engine communicate over an internal Ethernet link inside the device. That link carries control and forwarding information without requiring external cabling or MPLS.
Question 13
Multiple choice
Which two statements about route preference in Junos are correct? (Choose two.)
-
A
Both direct and static routes have the same preference.
-
B
Both direct and local routes have the same preference.
-
C
Both OSPF internal and OSPF AS external routes have the same preference.
-
D
Both EBGP and IBGP routes have the same preference.
Reveal answer details
Close answer details
Correct answersB, D
ExplanationJunos gives direct and local routes the same default preference, and EBGP and IBGP routes also share the BGP preference. Static and direct routes differ, as do OSPF internal and external routes.
Question 14
Single choice
An Ethernet switch receives a frame with a destination MAC address that is not in its MAC address table. How does the switch handle the frame?
-
A
It forwards the frame only to the default gateway.
-
B
It floods the frame out all ports in the same VLAN except the receiving port.
-
C
It drops the frame until the destination sends an ARP reply.
-
D
It forwards the frame to every VLAN on the switch.
Reveal answer details
Close answer details
Correct answerB
ExplanationAn unknown unicast destination is flooded within the same VLAN so the destination can receive it if present. The switch does not send it only to a gateway, drop it for ARP, or leak it into every VLAN.
Question 15
Multiple choice
What are two characteristics of transit traffic in Junos OS? (Choose two.)
-
A
It includes routing protocol packets.
-
B
It is traffic destined for the Routing Engine.
-
C
It does not require control plane processing.
-
D
It is forwarded by the Packet Forwarding Engine.
Reveal answer details
Close answer details
Correct answersC, D
ExplanationTransit traffic passes through the device rather than terminating on the Routing Engine. Junos forwards that traffic in the Packet Forwarding Engine without normal control-plane processing.
Question 16
Multiple choice
An administrator wants to set up a remote user authentication service for the many users that access a Juniper security device. In this scenario, what are two supported authentication protocols? (Choose two.)
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answersA, B
ExplanationRADIUS and TACACS+ are supported remote authentication protocols for network device login services. SHA is a hashing algorithm, and IPsec provides secure tunnels rather than user authentication service lookup.
Question 17
Single choice
Which prompt indicates that you are using Junos configuration mode?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationJunos configuration mode uses the # prompt, often with an [edit] context line. The greater-than prompt indicates operational mode, while shell prompts use different characters.
Question 18
Multiple choice
Which three statements describe Transmission Control Protocol? (Choose three.)
-
A
TCP is a transport layer protocol.
-
B
TCP is always faster than UDP.
-
C
TCP provides delivery notification and error-checking mechanisms.
-
D
TCP uses only a best-effort delivery approach.
-
E
TCP application examples include HTTP and SMTP.
Reveal answer details
Close answer details
Correct answersA, C, E
ExplanationTCP is a transport-layer protocol that provides connection-oriented delivery features, including acknowledgments and error checking. Common applications such as HTTP and SMTP use TCP. It is not simply best effort and is not always faster than UDP.
Question 19
Single choice
You are reviewing a long command output and need to display only lines that contain a specific keyword. Which CLI feature should you use?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerA
ExplanationJunos output filtering lets you pipe command output through match-style filters to show only lines containing a keyword. Rollback, candidate configuration, and rescue configuration are configuration-management features.
Question 20
Multiple choice
Which two external authentication methods does Junos support for administrative access? (Choose two.)
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answersA, B
ExplanationJunos supports RADIUS and TACACS+ as external authentication methods for administrative access. These servers can be placed in the authentication order before falling back to local password authentication.
Question 21
Single choice
Which command displays all IPv6 routes in the default routing instance?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerA
ExplanationThe default IPv6 unicast routing table in Junos is inet6.0. Therefore show route table inet6.0 displays IPv6 routes in the default routing instance; inet.0 is for IPv4 unicast.
Question 22
Multiple choice
Which two statements about firewall filters are correct? (Choose two.)
-
A
Firewall filters are stateful.
-
B
Firewall filters can match Layer 4 parameters.
-
C
Firewall filters can match Layer 7 parameters.
-
D
Firewall filters are stateless.
Reveal answer details
Close answer details
Correct answersB, D
ExplanationJunos firewall filters are stateless packet filters. They can match fields such as protocol and TCP or UDP port numbers at Layer 4, but they do not track sessions or inspect Layer 7 application content.
Question 23
Multiple choice
An administrator configures a router interface with an IPv4 address and subnet mask, and the interface is up. Which two route types are created on the local router? (Choose two.)
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answersB, D
ExplanationWhen an interface address is active, Junos creates a direct route for the connected subnet and a local route for the interface's own address. Static or dynamic routes require separate configuration or protocol learning.
Question 24
Single choice
A security policy requires that a user account be created for auditing purposes. This user should only view configuration and operational data without making any changes. Which predefined login class would satisfy this requirement?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationThe predefined read-only login class permits viewing operational and configuration information without allowing changes. Operator and super-user provide broader privileges, while unauthorized is not a useful audit account role.
Question 25
Single choice
You issue the monitor traffic interface ge-0/0/0 command. What does this command accomplish?
-
A
It displays a packet capture on interface ge-0/0/0.
-
B
It displays the MTU and MAC address for ge-0/0/0.
-
C
It displays real-time interface statistics for ge-0/0/0.
-
D
It displays an operational summary of ge-0/0/0.
Reveal answer details
Close answer details
Correct answerA
Explanationmonitor traffic interface ge-0/0/0 performs packet capture output for the specified interface. Interface summaries, MTU details, and live utilization statistics come from other show or monitor interface commands.
Question 26
Multiple choice
Which two types of transit traffic traverse the forwarding plane of a Layer 3 router? (Choose two.)
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answersC, D
ExplanationTransit traffic is handled in the forwarding plane when packets are being switched through the device. Normal unicast and multicast forwarding fit that model. Exception traffic is punted to the control plane, and broadcast is not a routed transit class.
Question 27
Multiple choice
Which two operational tools are used to test IP reachability and path selection from a Junos device? (Choose two.)
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answersC, D
Explanationping tests IP reachability to a destination, and traceroute shows the hop path used to reach it. Rollback and commit check operate on configuration, not live path testing.
Question 28
Single choice
Your team alerts you that users connected to ge-0/0/5 are experiencing intermittent slowness. You log in to the switch and want to see live, real-time traffic updates for that interface to determine whether the link is being over-utilized. Which monitoring command should you use in this scenario?
-
A
-
B
monitor interface ge-0/0/5
-
C
-
D
show interfaces ge-0/0/5 extensive
Reveal answer details
Close answer details
Correct answerB
Explanationmonitor interface ge-0/0/5 provides live interface counters and traffic-rate updates for the specified port. The show commands return snapshots or hardware details, not continuous utilization updates.
Question 29
Single choice
Which statement accurately describes the Junos candidate configuration?
-
A
It is a backup configuration stored in the rollback archive.
-
B
It is the active configuration currently running on the device.
-
C
It is a temporary configuration that becomes active only after a reboot.
-
D
It is a configuration that stores proposed changes before they are committed.
Reveal answer details
Close answer details
Correct answerD
ExplanationIn Junos, edits are made in the candidate configuration first. Those proposed changes do not affect the active running configuration until a successful commit promotes the candidate version.
Question 30
Single choice
You power on a new MX Series router for the first time and connect to the console. You notice that no transit interfaces are passing traffic. In this scenario, which statement is correct?
-
A
All interfaces are enabled with DHCP client enabled.
-
B
All interfaces are enabled and have an IP address of 10.0.0.1.
-
C
The interfaces are configured as Layer 2 trunk ports.
-
D
The interfaces are not configured.
Reveal answer details
Close answer details
Correct answerD
ExplanationA new MX Series router does not have transit interfaces preconfigured to forward traffic. Interface families, addresses, and protocol settings must be configured before those ports can carry routed traffic.
Question 31
Single choice
By default, how does the Packet Forwarding Engine handle unicast traffic destined for an existing forwarding table entry?
-
A
It sends the traffic through multiple ports toward its destination.
-
B
It sends the traffic through one port toward its destination.
-
C
It sends the traffic through the fxp1 interface to the Routing Engine.
-
D
It sends all traffic to the control plane for further processing.
Reveal answer details
Close answer details
Correct answerB
ExplanationFor ordinary unicast forwarding, the Packet Forwarding Engine looks up the destination in the forwarding table and sends the packet out the single egress interface or next hop selected by that entry.
Question 32
Single choice
You want to redeploy a Junos device by clearing the existing configuration and resetting it to factory defaults. In this scenario, which command would help to accomplish this task?
-
A
-
B
request system storage cleanup dry-run
-
C
-
D
request system storage cleanup
Reveal answer details
Close answer details
Correct answerC
Explanationrequest system zeroize clears the configuration and returns the device to a factory-default state for redeployment. Storage cleanup commands remove unused files but do not reset the device configuration.
Question 33
Single choice
A network administrator must set up the initial configuration of the out-of-band management interface on a new Juniper router to ensure management traffic is isolated from the default routing table (inet.0). In this scenario, which configuration step is required to accomplish this task in Junos OS?
-
A
Configure an IP address on interface ge-0/0/0.0 and enable ethernet-switching family.
-
B
Configure the lo0.0 loopback interface with a management IP and apply it to the [edit system services] hierarchy.
-
C
Assign an IP address to the me0.0 interface and set the routing-options to instance-type virtual-router.
-
D
Assign an IP address to interface fxp0.0 or em0.0 and use the command set system management-instance to enable the management routing instance.
Reveal answer details
Close answer details
Correct answerD
ExplanationOut-of-band management uses a dedicated management interface such as fxp0.0 or em0.0. Enabling system management-instance places management traffic in a separate routing instance instead of inet.0.
Question 34
Multiple choice
When configuring a firewall filter on a Junos device, which two actions are valid terminating actions? (Choose two.)
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answersB, C
Explanationaccept and discard are terminating firewall filter actions because they stop evaluation for the matching packet. count is nonterminating, and next term explicitly continues evaluation.
|