First Attempt Guaranteed Success in JN0-649 Exam 2023
Real JN0-649 Exam Questions are the Best Preparation Material
NEW QUESTION # 29
Click the Exhibit.
The ping command shows that connectivity of the 200.0.1/24 network to the 200.0.200.0/24 network exists. You notice that all the ping test results from various devices on 200.0.1.0/24 follow the same path even through equal cost paths exist to the 200.0.200.0/24 network.
Referring to the exhibit, what is happening?
- A. The rip-exp policy needs to be modified to advertise RIP routes
- B. Load balancing needs to be enabled for equal cost pathing to work.
- C. The RIP group must include the preference statement.
- D. RIPv2 does not support load balancing static routes.
Answer: B
NEW QUESTION # 30
You enable the Multiple VLAN Registration Protocol (MVRP) to automate the creation and management of virtual LANs.
Which statement is correct in this scenario?
- A. MVRP works with RSTP and VSTP.
- B. Timers dictate when link state changes are propagated.
- C. When enabled, MVRP affects all interfaces.
- D. The forbidden mode does not register or declare VLANs.
Answer: D
Explanation:
The forbidden mode does not register or declare VLANs. You can change the registration mode of a specific interface to forbidden. An interface in forbidden registration mode does not participate in MVRP even if MVRP is enabled on the switch.
https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/mvrp.html MVRP is disabled by default on the switches and, when enabled, affects only trunk interfaces. Once you enable MVRP, all VLAN interfaces on the switch belong to MVRP (the default normal registration mode) and those interfaces accept PDU messages and send their own PDU messages. forbidden-The interface does not register or declare VLANS (except statically configured VLANs).
NEW QUESTION # 31
You recently implemented the configurations shown in the exhibit. After committing these changes, the community devices connected to AS-1 are not able to communication with the appropriate community devices connected to AS-2.
What must be to allow these community devices to communicate?
- A. You must configure an isolation VLAN ID under the vlan-pri VLAN on both switches.
- B. You must configure an isolation VLAN ID under the vlan-pri vlan on the AS-2 switch.
- C. You must configure the ge-0/0/10 interface on AS-1 as the inter-switch link.
- D. You must configure to allow the ge-0/0/1 interface on AS-1 as the inter-switch.
- E. You must configure the ge-0/0/1 interface on both switches the inter-switch links.
Answer: E
NEW QUESTION # 32
Your campus EX9200 core devices are highly oversubscribed on bandwidth ans reporting massive dropped packets.
To immediately address the issue, you decide to implement shaping on all interfaces.
Which action will accomplish?
- A. Apply the shape-rate 5G parameter to all interfaces under the [edit class-of service] hierarchy.
- B. Apply the input-shape-rate 5G parameter to all interfaces under the [edit class-of service] hierarchy.
- C. Define a CoS input traffic control profile with the shape-rate 5G parameter and apply it to all interfaces.
- D. Define a CoS output traffic control profile with the shape-rate 5G parameter and apply it to all interfaces.
Answer: D
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/cos-shaping-rate- on-physical-interfaces-configuring.html
NEW QUESTION # 33
You are asked to configure 802.1X on your access ports to allow only a single device to authenticate. In this scenario, which configuration would you use?
- A. single supplicant mode
- B. multiple supplicant mode
- C. MAC authentication mode
- D. single-secure supplicant mode
Answer: A
NEW QUESTION # 34
You will to route Layer 3 PVLAN traffic within the secondary VLAN.
What is required to accomplish this task?
- A. a community VIAN
- B. an IRB
- C. an FBF policy
- D. an isolated VLAN
Answer: B
NEW QUESTION # 35
Referring to the outputs shown in the exhibit, which two statements are correct about the IS-IS adjacency? (Choose two.)
- A. R1 is configured to participate in both Level 1 and Level 2.
- B. R1 is configured to participate in Level 2 only.
- C. R2 is configured to participate in Level 2 only.
- D. R2 is configured to participate in both Level 1 and Level 2.
Answer: A,C
NEW QUESTION # 36
You must provide network connectivity to hosts that fail authentication.
In this scenario, what would be used in a network secured with 802.1X to satisfy this requirement?
- A. Configure a secondary IP address on the port for unauthenticated hosts.
- B. Configure the port as a spanning tree edge port.
- C. Use the server-reject-vlan command to specify a guest VLAN.
- D. Configure the native-vlan-id parameter on the port.
Answer: C
Explanation:
For a device configured for 802.1X authentication, specify that when the device receives an Extensible Authentication Protocol Over LAN (EAPoL) Access-Reject message during the authentication process between the device and the RADIUS authentication server, supplicants attempting to access the LAN are granted access and moved to a specific bridge domain or VLAN. Any bridge domain, VLAN name or VLAN ID sent by a RADIUS server as part of the EAPoL Access-Reject message is ignored.
NEW QUESTION # 37
You have configured MSTP in your Layer 2 network.
You are having problems with it establishing correctly.
Referring to the exhibit, what is causing the problem?
- A. The region name is not correct
- B. You must assign a context ID number other than zero
- C. The revision number is the same on both devices
- D. The MSTI-to-VLAN mapping does not match
Answer: D
NEW QUESTION # 38
Referring to the exhibit, traffic ingresses on interface ge-0/0/3 and egresses on interface ge-0/0/4.
Which queue does traffic with the IP precedence value of 100 use?
- A. best-effort
- B. expedited-forwarding
- C. assured-forwarding
- D. network-control
Answer: B
NEW QUESTION # 39
You are troubleshooting an EVPN-VXLAN IP fabric and observe the loop shown in the exhibit.
Which two steps would you take to further troubleshoot this problem? (Choose two.)
- A. Verify that the same ESI is configured on the link from the host and that it matches the source.
- B. Verify that the same ESI is configured on the two links from the source.
- C. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 3 routes are present.
- D. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 4 routes are present.
Answer: C,D
Explanation:
Type 2 route, MAC with IP advertisement route-Type 2 routes are per-VLAN routes, so only PEs that are part of a VNI need these routes. EVPN allows an end host's IP and MAC addresses to be advertised within the EVPN Network Layer reachability information (NLRI). This allows for control plane learning of ESI MAC addresses. Because there are many Type 2 routes, a separate route-target auto-derived per VNI helps to confine their propagation. This route type is supported by all EVPN switches and routers. Type 5 route, IP prefix Route-An IP prefix route provides encoding for inter-subnet forwarding. In the control plane, EVPN Type 5 routes are used to advertise IP prefixes for inter-subnet connectivity across data centers. To reach a tenant using connectivity provided by the EVPN Type 5 IP prefix route, data packets are sent as Layer 2 Ethernet frames encapsulated in the VXLAN header over the IP network across the data centers.
NEW QUESTION # 40
You ate configuring BGP policies for a site with a dual-homed connection as shown in the exhibit.
You must ensure that inbound traffic from Internet hosts flow through the ISP A connection.
Which statement is correct in this scenario?
- A. Apply a BGP export policy on R1 to assign a higher local preference value to routes advertised to ISP A.
- B. Apply a BGP export policy to R2 to prepend [65001 65001 65001 65001 65001] to the AS path of routes advertised to ISP B.
- C. Apply a BGP export policy onR2to assign a lower origin value to routes advertised to ISP B.
- D. Apply a BGP export policy on R1 to assign a lower MED value to routes advertised to ISP A.
Answer: B
NEW QUESTION # 41
You are adding VNI 101 to your EVPN-VXLAN network, but traffic is not being sent to received.
Referring to the exhibit, which configuration statement will solve the problem?
- A. set routing-instances EVPN1 bridge-domains BD-101 vxlan vni 101
- B. set routing-instances EVPN1 vxlan encapsulate-inner-vlan
- C. set routing-instances EVPN1 instance-type evpn
- D. set routing-instances EVPN1 vrf-table-label
Answer: C
NEW QUESTION # 42
You are asked to enforce user authentication using a captive portal before users access the corporate network.
Which statement is correct in this scenario?
- A. All Web browser requests are redirected to the captive portal until authentication is successful.
- B. A captive portal can be bypassed using an allowlist command containing a device's IP address.
- C. HTTPS is the default protocol for a captive portal.
- D. When enabled, a captive portal must be applied to each individual interface.
Answer: A
Explanation:
You can set up captive portal authentication on your switch to redirect all Web browser requests to a login page that requires users to input a username and password before they are allowed access. Upon successful authentication, users are allowed access to the network and redirected to the original page requested. Junos OS provides a customizable template for the captive portal window that allows you to easily design and modify the look of the captive portal login page. You can modify the design elements of the template to change the look of your captive portal login page and to add instructions or information to the page. You can also modify any of the design elements of a captive portal login page. The first screen displayed before the captive login page requires the user to read the terms and conditions of use. By clicking the Agree button, the user can access the captive portal login page. https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/user-authentication-captive-portal.html
NEW QUESTION # 43
You are implementing CoS for a custom application that is labeling its packets with DSCP code- point 101111. You have applied the configuration shown in the exhibit, but not that while some custom application traffic ingressin on ge-0/0/1 transits the SRX Series device successfully, packets ingressing all other ge-* interfaces are being dropped.
Which action should you take to solve this problem?
- A. Modify the BA classifier to assign code point 101111 to loss priority low.
- B. Configure a scheduler and scheduler map for expedited-forwarding and apply to all interfaces.
- C. Apply the rate-limit-ef policer to all ge-interfaces.
- D. Remove the BA classifier from all ge-interfaces.
Answer: C
NEW QUESTION # 44
You ate deploying P|M source-specific multicast (SSM) for a new multicast messaging service You have configured the multicast source to use 236.44.123.100 as the multicast address. You are not able to join the PIM SSM multicast teed Which two solutions would resolve this problem? (Choose two )
- A. Reconfigure the multicast source to use an address in the range of 232 0.0 0 through
232.255.255.255 - B. Add the multicast address to the [edit routing-options multicast ssm-groups] stanza.
- C. Add the multicast address to the (edit routing-options multicast ssm-map) stanza.
- D. Reconfigure the multicast source to use an address in the range of 224.0.0 0 through
224.255.255.255.
Answer: A,C
NEW QUESTION # 45
Which three MSTP parameters must match on all switches in the same MST region? (Choose three.)
- A. configuration name
- B. bridge priority
- C. revision number
- D. forwarding delay
- E. MSTI-to-VLAN mapping
Answer: A,C,E
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/stp-l2/topics/topic-map/spanning-tree-configuring-mstp.html
NEW QUESTION # 46
Referring to the exhibit, which two statements are true? (Choose two)
- A. The DR election process is not finished for the ge-0/0/0 interface
- B. There can be more than one OSPF neighbor on the ge-0/0/0 interface
- C. There is no need for a DR for the ge-0/0/0 interface.
- D. There can be more than one OSPF neighbor on the ge-0/0/1 interface.
Answer: C
NEW QUESTION # 47
What is a supplicant in 802.1x authentication?
- A. the authenticating device
- B. the device that prevents the end user device's access until it is authenticated
- C. the RADIUS server
- D. the device being authenticated
Answer: D
NEW QUESTION # 48
......
Practice LATEST JN0-649 Exam Updated 65 Questions: https://www.examsreviews.com/JN0-649-pass4sure-exam-review.html
Download Latest JN0-649 Dumps with Authentic Real Exam QA's: https://drive.google.com/open?id=1Boju-c7-dg-l7YJqefAaREJU7Kbyj98y