Juniper JN0-649 JNCIP-ENT Exam Practice Test Instant Access

Question 1

You are asked to establish interface level authentication for users connecting to your network. You must ensure that only corporate devices, identified by MAC addresses, are allowed to connect and authenticate. Authentication must be handled by a centralized server to increase scalability.

Which authentication method would satisfy this requirement?

AMAC RADIUS

Bcaptive portal

C802.1X with single-secure supplicant mode

D802.1X with multiple supplicant mode

Answer : A

https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/mac-radius-authentication-switching-devices.html

You can configure MAC RADIUS authentication on an interface that also allows 802.1X authentication, or you can configure either authentication method alone.

If both MAC RADIUS and 802.1X authentication are enabled on the interface, the switch first sends the host three EAPoL requests to the host. If there is no response from the host, the switch sends the host's MAC address to the RADIUS server to check whether it is a permitted MAC address. If the MAC address is configured as permitted on the RADIUS server, the RADIUS server sends a message to the switch that the MAC address is a permitted address, and the switch opens LAN access to the nonresponsive host on the interface to which it is connected.

Question 2

You want to create an OSPF area that only contains intra-area route information in the form of Type 1 and Type 2 LSAs.

In this scenario, which area is needed to accomplish this task?

Atotally non-to-stubby area

Btotally stubby area

Cstub area

Dnon-to-stubby area

Answer : B

A totally stubby area (TSA) is a stub area in which summary link-state advertisement (type 3 LSAs) are not sent. A default summary LSA, with a prefix of 0.0. 0.0/0 is originated into the stub area by an ABR, so that devices in the area can forward all traffic for which a specific route is not known, via ABR.

Question 3

Referring to the outputs shown in the exhibit, which two statements are correct about the IS-IS adjacency? (Choose two.)

AR1 is configured to participate in both Level 1 and Level 2.

BR2 is configured to participate in both Level 1 and Level 2.

CR1 is configured to participate in Level 2 only.

DR2 is configured to participate in Level 2 only.

Answer : A, D

Question 4

Which three configuration parameters must match on all switches within the same MSTP region? (Choose three.)

AVLAN to instance mapping

Brevision level

Cconfiguration name

Dbridge priority

Eregion name

Answer : A, B, E

When enabling MSTP, you define one or more MSTP regions. An MSTP region defines a logical domain where multiple spanning-tree instances (MSTIs) can be administered independently of MSTIs in other regions, setting the boundary for bridge protocol data units (BPDUs) sent by one MSTI. An MSTP region is a group of switches that is defined by three parameters:

Region name---User-defined alphanumeric name for the region.

Revision level---User-defined value that identifies the region.

Mapping table---Numerical digest of VLAN-to-instance mappings.

https://www.juniper.net/documentation/us/en/software/junos/stp-l2/topics/topic-map/spanning-tree-configuring-mstp.html

Question 5

Remote branches connect to the corporate WAN through access switches. The access switches connect to access ports on the WAN distribution switch, as shown in the exhibit. L2PT has previously been configured on the tunnel Layer 2 traffic across the WAN. You decide to move the L2PT tunnel endpoints to the access switches. When you apply the L2PT configuration to the access switches, the ports that connect the access switches to the distribution switch shut down.

Which action would solve this problem?

AConfigure the links between the access switches and the distribution switch as a trunk port.

BDisable the BPDU block function on the access switches.

CDisable the BPDU block function on the distribution switch.

DConfigure a GRE tunnel to encapsulate the L2PT traffic across the WAN.

Answer : A

Access interfaces in an L2PT-enabled VLAN should not receive L2PT-tunneled PDUs. If an access interface does receive L2PT-tunneled PDUs, there might be a loop in the network, and the device will shut down the interface. https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/layer-2-protocol-tunneling.html

Question 6

Referring to the exhibit, which LSA type is used to advertise 192.168.1.0/24 to R5?

AType 5

BType 4

CType 3

DType 7

Answer : A

Area-1 has no external connections. However, Area-1 has static route (172.16.31.0/24) that are not internal OSPF route. You can limit the external route advertisements to the area and advertise the static routes by designating the area an NSSA. In an NSSA, the ASBR (vMX1) generates NSSA external (Type 7) LSAs and floods them into the NSSA, where they are contained.

Type-7 LSAs allow an NSSA to support the presence of ASBR and their corresponding external routing information. The ABR (vMX2) converts Type-7 LSAs into Type-5 External LSAs and leaks them to the other areas, but external routes from other areas are not advertised within the NSSA.

An admin should check this and change it

https://www.packetswitch.co.uk/configuring-junos-ospf-stub-and-nssa-areas/

https://www.juniper.net/documentation/us/en/software/junos/ospf/topics/ref/statement/nssa-edit-protocols-ospf.html

Question 7

Which address range is used for source-specific multicast?

A239.0.0.0/8

B233.0.0.0/8

C232.0.0.0/8

D224.2.0.0/16

Answer : C

PIM SSM introduces new terms for many of the concepts in PIM sparse mode. PIM SSM can technically be used in the entire 224/4 multicast address range, although PIM SSM operation is guaranteed only in the 232/8 range (232.0.0/24 is reserved). The new SSM terms are appropriate for Internet video applications and are summarized in Table 1. https://www.juniper.net/documentation/us/en/software/junos/multicast/topics/concept/multicast-pim-ssm.html

Juniper Enterprise Routing and Switching, Professional JN0-649 JNCIP-ENT Exam Practice Test