Juniper JN0-650 Cert Guide PDF 100% Cover Real Exam Questions [Q21-Q38]

Notez cet article

Juniper JN0-650 Cert Guide PDF 100% Cover Real Exam Questions

Pass JN0-650 Exam – Real Questions and Answers

Juniper JN0-650 Exam Syllabus Topics:

Sujet	Détails
Thème 1	IP Telephony Features: This section focuses on features supporting VoIP deployments including Power over Ethernet, LLDP LLDP-MED protocols, and voice VLAN implementation.
Thème 2	Interior Gateway Protocols (IGPs): This domain covers internal routing protocols operating within a single autonomous system, including OSPFv2, OSPFv3, and routing policy implementation, along with configuration, troubleshooting, and monitoring skills.
Thème 3	Class of Service (CoS): This domain covers QoS mechanisms in Junos including CoS processing, header fields, forwarding classes, classification, policers, schedulers, drop profiles, shaping, and rewrite rules.
Thème 4	Layer 2 Authentication and Access Control: This domain examines network access control mechanisms including 802.1x, MAC RADIUS, captive portal, server fail fallback, guest VLANs, and multi-method authentication considerations.
Thème 5	BGP: This section focuses on Border Gateway Protocol operations including route selection, next hop resolution, BGP attributes, communities, load balancing, IPv4 IPv6 address families, advanced options, and routing policy implementation.

NO.21 You want to view the VLANs that have been created dynamically using MVRP.
Which operational mode command will display this information?

show mvrp dynamic-vlan memberships

show mvrp interface

show mvrp registration-state

show mvrp applicant-state

NO.22 When configuring IS-IS on a Junos device, which statement is used to specify the level of an IS-IS router?

set protocols isis level 1

set protocols isis interface level 1

set protocols isis level-capability level-1-2

set protocols isis lsp-gen-interval level 1

NO.23 When configuring 802.1X authentication, what are three server fail fallback settings? (Choose three.)

log

sustain

permit

count

move

NO.24 For multicast traffic, what does the term ‘scoping’ refer to?

Limiting the reach of the multicast stream within the network

Expanding the multicast group membership to include all hosts

Translating the multicast address to a unicast address

Prioritizing multicast traffic over unicast

NO.25 Cliquez sur le bouton Exposer.

You are asked to configure BGP authentication on your network using TCP-AO, similar to what is shown in the exhibit.
In this scenario, which two statements are true? (Choose two.)

Neighbor 172.18.1.1 will use recv-id 2 to verify the hash.

BGP is using AES for authentication.

Neighbor 172.18.1.1 will use send-id 9 to verify the hash.

BGP is using MD5 for authentication.

The BGP session is configured to use TCP-AO authentication with the AES-128-CMAC-96 cryptographic algorithm, so AES is being used for authentication.
The configured receive ID is used to verify incoming TCP-AO hashes from the neighbor.

NO.26 You are asked to configure an 802.1X solution that supports dynamic VLAN assignment.
In this scenario, which two modes support using vendor-specific attributes (VSAs)? (Choose two.)

static MAC bypass mode

single-secure supplicant mode

multiple supplicant mode

single supplicant mode

NO.27 Your network is multihomed to two ISPs. The BGP sessions are established; however, the ISP peers are not receiving any routes.
Which two statements are correct about troubleshooting your configuration? (Choose two.)

Verify the import policies on your router.

Verify that the BGP routes are active in your routing table.

Verify the export policies on your router.

Verity that the multihop settings are configured on your router.

NO.28 Exposer.

Referring to the exhibit, what is required for the BGP peering to establish?

Configure neighbor 172.16.1.1 multipath under the ext-peers hierarchy.

Configure neighbor 10.10.20. l multihop under the ext-peers hierarchy

Configure neighbor lo.io.io.i multihop under the ext-peers hierarchy

Configure neighbor 172.16.1.1 multihop under the ext-peers hierarchy

In this scenario, router1 (AS 65001) is attempting to establish anExternal BGP (EBGP)peering with router2 (AS 65002) using theirloopback (lo0) interface addresses(192.168.1.1 and 172.16.1.1).
According to the Junos OS 24.4 documentation on BGP peering sessions:
* EBGP TTL Default:By default, EBGP packets are sent with aTime-to-Live (TTL) value of 1. This assumes the peer is directly connected on a shared physical subnet.
* Loopback Peering Challenge:When peering between loopback addresses, the destination IP is not on the same subnet as the physical ingress interface. Even if the routers are directly connected physically, the router treats the loopback interface as an additional “hop”. With a TTL of 1, the BGP packet expires before it can be processed by the peer’s routing engine.
* The Multihop Solution (Option D):To allow this session to form, you must configure the multihop statement under the BGP neighbor hierarchy. This tells Junos to increase the TTL (the default becomes
64 when multihop is enabled) and allows the session to establish even though the peer’s address is not directly connected.
* Target Neighbor:The neighbor address specified in the configuration on router1 must be the remote loopback address of router2 (172.16.1.1).
* Option A (Multipath)is incorrect because it is used for load balancing across multiple active BGP paths, not for initial session establishment.
* Options B and Care incorrect because they reference physical interface addresses (10.10.20.1 or
10.10.10.1) which are not the addresses being used for the loopback-based BGP session.

NO.29 Your Layer 2 network uses 802.1X to authenticate user devices connecting to the network. You are asked to include a new Layer 2 interface connection from the conference room in your network. You must ensure that only a single device is allowed to authenticate on this port at one time to avoid users from being able to plug in a rogue switch to this port.
In this scenario, which 802.1X method would you use for the new interface?

single supplicant mode

single-secure supplicant mode

MAC-RADIUS

multiple supplicant mode

NO.30 Which Junos command displays the routes that are being received from a specific BGP neighbor?

show route receive-protocol bgp NEIGHBOR_IP

show bgp neighbor NEIGHBOR_IP routes

show route advertising-protocol bgp NEIGHBOR_IP

show bgp summary NEIGHBOR_IP

NO.31 Exhibit

Referring to the exhibit, what will enable active routes from both peers?

Configure neighbor 172.16.1.1 multipath under the ext-peers hierarchy.

Configure multipath under the ext-peers hierarchy

Configure neighbor 172.16.1.1 under the ext-peers hierarchy.

Configure neighbor 10.10.20.2 multipath under the ext-peers hierarchy.

The exhibit shows router1 (AS 65001) connected to router2 (AS 65002) via two parallel physical links. The show bgp summary output indicates that sessions are established with two neighbors: 10.10.10.1 and
10.10.20.1. Currently, for the second neighbor (10.10.20.1), there are 0 active routes despite having 4 accepted routes, which indicates that BGP has selected only one “best path” via the first neighbor for forwarding.
* BGP Best Path Selection: By default, BGP only selects a single best path for any given destination prefix and installs that one path into the forwarding table. In a topology with parallel links to the same AS, this leads to underutilization of available bandwidth.
* Multipath Solution (Option B): To enable active routes from both peers and allow for load-balancing (ECMP) across both links, you must enable the multipath feature.
* When the multipath statement is configured under the protocols bgp group ext-peers hierarchy, it tells Junos OS to install multiple equal-cost BGP paths into the routing table and subsequent forwarding table.
* Since both neighbors belong to the same peer group (ext-peers) and the same AS (65002), configuring multipath at the group level will apply to both sessions, allowing paths from both neighbors to be marked as “active”.
* Incorrect Options:
* Option A: 172.16.1.1 is the loopback address of router2. The exhibit shows peering is currently done using physical interface addresses (10.10.10.1 and 10.10.20.1), so this address is irrelevant to the current active sessions.
* Option C: Configuring the neighbor address alone without the multipath parameter will not change the best-path selection behavior.
* Option D: 10.10.20.2 is the local interface IP of router1, not the neighbor’s IP. BGP multipath must be configured to point to remote peer paths.
Configuration Example for Junos OS 24.4: To implement this, apply the following command: set protocols bgp group ext-peers multipath

NO.32 What does the mac-radius restrict configuration command do?

It prevents an end host from using MAC RADIUS for authentication.

It prevents a port from using MAC RADIUS for authentication.

It drops 802.1X (EAPOL) frames so that only MAC RADIUS authentication is used on the port.

It forces a port to use 802.1x authentication on a port.

NO.33 Exhibit

You configured MVRP in your Layer 2 network using the configuration shown in the exhibit. You verified that the appropnate VLANs are configured and applied on the two access switches. You are using RSTP as your loop prevention mechanism. Unfortunately, the users are not able to communicate with their corresponding server attached to the Access-2 switch.
In this scenario, what should you do to solve this problem?

Configure VSTP instead of RSTP as your loop-prevention mechanism.

Configure the access interfaces on the Access-2 switch under MVRP.

Configure the ge-070716.0 interface on the Core-1 switch under MVRP.

Configure the access interfaces on the Access-1 switch under MVRP.

The exhibit shows a network topology where Multiple VLAN Registration Protocol (MVRP) is used to dynamically manage VLANs across switches Core-1, Access-1, and Access-2.
* Identifying the Missing Configuration: According to the diagram, the trunk link between Core-1 and Access-2 uses interface ge-0/0/16.0 on the Core-1 side.
* Output Analysis: However, the show protocols mvrp output for Core-1 only lists interfaces ge-0/0/14.
0 and ge-0/0/15.0.
* MVRP Requirements: For MVRP to successfully propagate VLAN information between Access-2 and the rest of the network, the protocol must be enabled on every trunk interface in the path.
* Solution: Because ge-0/0/16.0 is missing from the Core-1 MVRP configuration, VLAN registration messages from Access-2 are not being processed by Core-1. Configuring this interface under MVRP on Core-1 will solve the communication problem.

NO.34 Exhibit
Referring to the exhibit, what will enable active routes from both peers?

Configure neighbor 172.16.1.1 multipath under the ext-peers hierarchy.

Configure multipath under the ext-peers hierarchy

Configure neighbor 172.16.1.1 under the ext-peers hierarchy.

Configure neighbor 10.10.20.2 multipath under the ext-peers hierarchy.

The exhibit shows router1 (AS 65001) connected to router2 (AS 65002) via two parallel physical links. The show bgp summary output indicates that sessions are established with two neighbors: 10.10.10.1 and
10.10.20.1. Currently, for the second neighbor (10.10.20.1), there are0 active routesdespite having4 accepted routes, which indicates that BGP has selected only one “best path” via the first neighbor for forwarding.
* BGP Best Path Selection:By default, BGP only selects a single best path for any given destination prefix and installs that one path into the forwarding table. In a topology with parallel links to the same AS, this leads to underutilization of available bandwidth.
* Multipath Solution (Option B):To enableactive routesfrom both peers and allow for load-balancing (ECMP) across both links, you must enable themultipathfeature.
* When the multipath statement is configured under the protocols bgp group ext-peers hierarchy, it tells Junos OS to install multiple equal-cost BGP paths into the routing table and subsequent forwarding table.
* Since both neighbors belong to the same peer group (ext-peers) and the same AS (65002), configuring multipath at the group level will apply to both sessions, allowing paths from both neighbors to be marked as “active”.
* Incorrect Options:
* Option A:172.16.1.1 is the loopback address of router2. The exhibit shows peering is currently done using physical interface addresses (10.10.10.1 and 10.10.20.1), so this address is irrelevant to the current active sessions.
* Option C:Configuring the neighbor address alone without the multipath parameter will not change the best-path selection behavior.
* Option D:10.10.20.2 is the local interface IP of router1, not the neighbor’s IP. BGP multipath must be configured to point to remote peer paths.
Configuration Example for Junos OS 24.4:To implement this, apply the following command: set protocols bgp group ext-peers multipath

NO.35 For what purpose is the ‘override-metric’ used in an OSPF configuration on a Junos device?

To set a fixed metric for all OSPF routes.

To change the metric of OSPF routes during redistribution.

To modify the default metric for a specific OSPF interface.

To influence the OSPF route selection process.

NO.36 When redistributing IGP routes into BGP, what information is used by default on Junos platforms to determine the BGP route’s MED attribute value?

routing information base

the IGP route preference

the IGP Metric

route protocol source

NO.37 Which address range is used for source-specific multicast?

239.0.0.0/8

233.0.0.0/8

232.0.0.0/8

224.2.0.0/16

NO.38 Cliquez sur le bouton Exposer.

Referring to the exhibit, what is the cause of a device’s inability to communicate across switches?

The route-distinguisher on each device must be identical.

The vrf-target must match between devices.

The vrf-target auto setting must be removed.

The VXLAN VNIs for each vlan must be different.

For EVPN/VXLAN communication between switches, the vrf-target values must match so that EVPN routes are properly imported and exported between VTEPs. In the configuration shown, the vrf-target values differ between the two leaf switches, preventing route exchange for the associated VNIs and VLANs.

Chargement …