Get Juniper JN0-351 Dumps Questions [2023] To Gain Brilliant Result [Q18-Q42]

NO.18 After receiving a BGP route, which two conditions are verified by the receiving router to ensure that the received route is valid? (Choose two)

The AS-path length is greater than 0.

The loops do not exist.

The next hop is reachable.

The local preference is greater than 0.

NO.19 Which statement is correct about controlling the routes installed by a RIB group?

An import policy is applied to the RIB group.

Only routes in the last table are installed.

A firewall filter must be configured to install routes in the RIB groups.

An export policy is applied to the RIB group.

NO.20 You have DHCP snooping enabled but no entries are automatically created in the snooping database for an interface on your EX Series switch. What are two reasons for the problem? (Choose two.)

The device that is connected to the interface has performed a DHCPRELEASE.

MAC limiting is enabled on the interface.

The device that is connected to the interface has a static IP address.

Dynamic ARP inspection is enabled on the interface.

NO.21 You are configuring an IS-IS IGP network and do not see the IS-IS adjacencies established. In this scenario, what are two reasons for this problem? (Choose two.)

MTU is not at least 1492 bytes.

IP subnets are not a /30 address.

The Level 2 routers have mismatched areas.

The lo0 interface is not included as an IS-IS interface.

NO.22 What are two characteristics of RSTP alternate ports? (Choose two.)

RSTP alternate ports provide an alternate higher cost path to the root bridge.

RSTP alternate ports provide an alternate lower cost path to the root bridge.

RSTP alternate ports block traffic while receiving superior BPDUs from a neighboring switch.

RSTP alternate ports are active ports used to forward frames toward the root bridge.

NO.23 Which two types of tunnels are able to be created on all Junos devices? (Choose two.)

STP

GRE

IP-IP

IPsec

NO.24 You are asked to connect an IP phone and a user computer using the same interface on an EX Series switch.
The traffic from the computer does not use a VLAN tag, whereas the traffic from the IP phone uses a VLAN tag.
Which feature enables the interface to receive both types of traffic?

native VLAN

DHCP snooping

MAC limiting

voice VLAN

NO.25 You have two OSPF routers forming an adjacency. R1 has a priority of 32 and a router ID of 192.168.1.2. R2 has a priority of 64 and a router ID of 192.168.1.1. The routers were started at the same time and all other OSPF settings are the default settings.
Which statement is correct in this scenario?

At least three routers are required for a DR/BDR election

Router IDs must match for an adjacency to form.

R2 will be the BDR.

R1 will be the BDR.

NO.26 Exhibit.

Which router will become the OSPF BDR if all routers are powered on at the same time?

R4

R1

R3

R2

NO.27 You are concerned about spoofed MAC addresses on your LAN.
Which two Layer 2 security features should you enable to minimize this concern? (Choose two.)

dynamic ARP inspection

IP source guard

DHCP snooping

static ARP

NO.28 Which statement about aggregate routes is correct?

Aggregate routes can only be used for static routing but not for dynamic routing protocols.

Aggregate routes are automatically generated for all of the subnets in a routing table.

Aggregate routes are always preferred over more specific routes, even when the specific routes have a better path.

Aggregate routes are used for advertising summarized network prefixes.

NO.29 Exhibit

You are a network operator troubleshooting BGP connectivity.
Which two statements are correct about the output shown in the exhibit? (Choose two.)

Peer 10.32.1.2 is configured for AS 63645.

The BGP session is not established.

The R1 is configured for AS 65400.

The routers are exchanging IPv4 routes.

NO.30 Which three protocols support BFD? (Choose three.)

RSTP

BGP

OSPF

LACP

FTP

Explanation
BFD is a protocol that can be used to quickly detect failures in the forwarding path between two adjacent routers or switches. BFD can be integrated with various routing protocols and link aggregation protocols to provide faster convergence and fault recovery.
According to the Juniper Networks documentation, the following protocols support BFD on Junos OS devices1:
BGP: BFD can be used to monitor the connectivity between BGP peers and trigger a session reset if a failure is detected. BFD can be configured for both internal and external BGP sessions, as well as for IPv4 and IPv6 address families2.
OSPF: BFD can be used to monitor the connectivity between OSPF neighbors and trigger a state change if a failure is detected. BFD can be configured for both OSPFv2 and OSPFv3 protocols, as well as for point-to-point and broadcast network types3.
LACP: BFD can be used to monitor the connectivity between LACP members and trigger a link state change if a failure is detected. BFD can be configured for both active and passive LACP modes, as well as for static and dynamic LAGs4.
Other protocols that support BFD on Junos OS devices are:
IS-IS: BFD can be used to monitor the connectivity between IS-IS neighbors and trigger a state change if a failure is detected. BFD can be configured for both level 1 and level 2 IS-IS adjacencies, as well as for point-to-point and broadcast network types.
RIP: BFD can be used to monitor the connectivity between RIP neighbors and trigger a route update if a failure is detected. BFD can be configured for both RIP version 1 and version 2 protocols, as well as for IPv4 and IPv6 address families.
VRRP: BFD can be used to monitor the connectivity between VRRP routers and trigger a priority change if a failure is detected. BFD can be configured for both VRRP version 2 and version 3 protocols, as well as for IPv4 and IPv6 address families.
The protocols that do not support BFD on Junos OS devices are:
RSTP: RSTP is a spanning tree protocol that provides loop prevention and rapid convergence in layer 2 networks. RSTP does not use BFD to detect link failures, but relies on its own hello mechanism that sends BPDU packets every 2 seconds by default.
FTP: FTP is an application layer protocol that is used to transfer files between hosts over a TCP connection. FTP does not use BFD to detect connection failures, but relies on TCP’s own retransmission and timeout mechanisms.
References:
1: [Configuring Bidirectional Forwarding Detection] 2: [Configuring Bidirectional Forwarding Detection for BGP] 3: [Configuring Bidirectional Forwarding Detection for OSPF] 4: [Configuring Bidirectional Forwarding Detection for Link Aggregation Control Protocol] : [Configuring Bidirectional Forwarding Detection for IS-IS] : [Configuring Bidirectional Forwarding Detection for RIP] : [Configuring Bidirectional Forwarding Detection for VRRP] : [Understanding Rapid Spanning Tree Protocol] : [Understanding FTP]

NO.31 Which statement is correct about the storm control feature?

The storm control feature is enabled in the factory-default configuration on EX Series switches.

The storm control feature requires a special license on EX Series switches.

The storm control feature is not supported on aggregate Ethernet interfaces.

The storm control configuration only applies to traffic being sent between the forwarding and control plane.

NO.32 You are a network operator who wants to add a second ISP connection and remove the default route to the existing ISP You decide to deploy the BGP protocol in the network.
What two statements are correct in this scenario? (Choose two.)

IBGP updates the next-hop attribute to ensure reachability within an AS.

IBGP peers advertise routes received from EBGP peers to other IBGP peers.

IBGP peers advertise routes received from IBGP peers to other IBGP peers.

EBGP peers advertise routes received from IBGP peers to other EBGP peers.

NO.33 Exhibit.

The ispi _ inet. 0 route table has currently no routes in it.
What will happen when you commit the configuration shown on the exhibit?

The inet. 0 route table will be completely overwritten by the ispi . inet. 0 route table.

The inet. 0 route table will be imported into the ispi . inet. 0 route table.

The ISPI . inet. 0 route table will be completely overwritten by the inet. o route table.

The ISPI . inet. 0 route table will be imported into the inet. 0 route table.

NO.34 You are attempting to configure the initial two aggregated Ethernet interfaces on a router but there are no aggregated Ethernet interfaces available.
In this scenario, which configuration will enable these interfaces on this router?

NO.35 Exhibit.

Why is this OSPF adjacency remaining in this state?

A subnet mask mismatch exists between the OSPF neighbors.

An MTU mismatch exists between the OSPF neighbors.

A hello interval mismatch exists between the OSPF neighbors.

An area ID mismatch exists between the OSPF neighbors

NO.36 Exhibit

Which command displays the output shown in the exhibit?

show route forwarding-table

show ethernet-switching table

show ethernet-switching table extensive

show route forwarding-table family ethernet-switching

NO.37 Two routers share the same highest priority and start time.

In this situation, what is evaluated next when determining the designated router? The router with the lowest router ID become the DR.

The router with the highest router ID becomes the DR

The routers perform another DR election.

The router with the highest MAC address become the DR

NO.38 You need to configure a LAG between your switches. In this scenario, which two statements are correct?
(Choose two.)

Duplex and speed settings are not required to match on both participating devices.

Duplex and speed settings are required to match on both participating devices.

Member links are not required to be contiguous ports.

Member links are required to be contiguous ports.

NO.39 Exhibit.

You want to verify prefix information being sent from 10.36.1.4.
Which two statements are correct about the output shown in the exhibit? (Choose two.)

The routes displayed have traversed one or more autonomous systems.

The output shows routes that were received prior to the application of any BGP import policies.

The output shows routes that are active and rejected by an import policy.

The routes displayed are being learned from an I BGP peer.

NO.40 You are receiving multiple BGP routes from an upstream neighbor and only want to advertise a single summarized prefix to your internal OSPF neighbors. This route should only be advertised when you are receiving these BGP routes from this neighbor.
In this scenario, which type of route should you create?

aggregate route

static route using the resolve feature

generate route

static route using qualified next hops

NO.41 Exhibit

You are troubleshooting an issue where traffic to 192.168.10.0/24 is being sent to R1 instead of your desired path through R2.
Referring to the exhibit, what is the reason for the problem?

R2’s route is not the best path due to loop prevention.

R2’s route is not the best path due to a lower origin code.

R1’s route is the best path due to a higher local preference

R1’s route is the best path due to the shorter AS path.

NO.42 You are asked to create a new firewall filter to evaluate Layer 3 traffic that is being sent between VLANs. In this scenario, which two statements are correct? (Choose two.)

You should create a family Ethernet-switching firewall filter with the appropriate match criteria and actions.

You should apply the firewall filter to the appropriate VLAN.

You should create a family inet firewall filter with the appropriate match criteria and actions.

You should apply the firewall filter to the appropriate IRB interface.

Explanation
A firewall filter is a configuration that defines the rules that determine whether to forward or discard packets at specific processing points in the packet flow. A firewall filter can also modify the attributes of the packets, such as priority, marking, or logging. A firewall filter can be applied to various interfaces, protocols, or routing instances on a Juniper device1.
A firewall filter has a family attribute, which specifies the type of traffic that the filter can evaluate. The family attribute can be one of the following: inet, inet6, mpls, vpls, iso, or ethernet-switching2. The family inet firewall filter is used to evaluate IPv4 traffic, which is the most common type of Layer 3 traffic on a network.
To create a family inet firewall filter, you need to specify the appropriate match criteria and actions for each term in the filter. The match criteria can include various fields in the IPv4 header, such as source address, destination address, protocol, port number, or DSCP value. The actions can include accept, discard, reject, count, log, policer, or next term3.
To apply a firewall filter to Layer 3 traffic that is being sent between VLANs, you need to apply the filter to the appropriate IRB interface. An IRB interface is an integrated routing and bridging interface that provides Layer 3 functionality for a VLAN on a Juniper device. An IRB interface has an IP address that acts as the default gateway for the hosts in the VLAN. An IRB interface can also participate in routing protocols and forward packets to other VLANs or networks4.
Therefore, option C is correct, because you should create a family inet firewall filter with the appropriate match criteria and actions. Option D is correct, because you should apply the firewall filter to the appropriate IRB interface.
Option A is incorrect, because you should not create a family ethernet-switching firewall filter with the appropriate match criteria and actions. A family ethernet-switching firewall filter is used to evaluate Layer 2 traffic on a Juniper device. A family ethernet-switching firewall filter can only match on MAC addresses or VLAN IDs, not on IP addresses or protocols5.
Option B is incorrect, because you should not apply the firewall filter to the appropriate VLAN. A VLAN is a logical grouping of hosts that share the same broadcast domain on a Layer 2 network. A VLAN does not have an IP address or routing capability. A firewall filter cannot be applied directly to a VLAN; it must be applied to an interface that belongs to or connects to the VLAN6.
References:
1: Firewall Filters Overview 2: Configuring Firewall Filters 3: Configuring Firewall Filter Match Conditions and Actions 4: Understanding Integrated Routing and Bridging Interfaces 5: Configuring Ethernet-Switching Firewall Filters 6: Understanding VLANs

Free Cram & Latest Exams Dumps

Get Juniper JN0-351 Dumps Questions [2023] To Gain Brilliant Result [Q18-Q42]

leave a comment Cancel reply

Related Certifications

Recent Posts

Archives

Categories