[2025年04月16日] 有効なJN0-649テスト解答JN0-649試験PDF問題を試そう
有効なJNCIP-ENT JN0-649問題集はあなたの合格を必ず保証します
JuniperのJN0-649認定試験は、Enterprise Routing and Switching、Professional（JNCIP-ENT）試験としても知られており、エンタープライズルーティングおよびスイッチングの分野でネットワークの専門家のスキルと知識を検証する包括的なテストです。この認定は、すでにJNCIA-Junos認定を取得し、知識と専門知識を次のレベルに引き上げたい個人に最適です。
Juniper JN0-649: Enterprise Routing and Switching, Professional (JNCIP-ENT) 試験は、エンタープライズルーティングおよびスイッチング技術に関する候補者の知識とスキルをテストするように設計されています。この試験は、エンタープライズレベルのネットワークの設計、実装、構成、およびトラブルシューティングの専門レベルの認定であり、候補者の専門知識を検証します。
質問 # 83
You are using 802.1X in your access network consisting of EX Series switches. You recently had a failure with your RADIUS server which resulted in authenticating client devices being denied access to the network. You want to change this behavior so that authenticating clients are directed to a remediation VLAN. Which RADIUS server failback setting satisfies this requirement?
- A. deny
- B. permit
- C. move
- D. sustain
正解：C
解説：
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/radius-server-configuration- ex-series-cli.html#id-configuring-radius-server-fail-fallback-cli-procedure Permit authentication, allowing traffic to flow from the end device through the interface as if the end device were successfully authenticated by the RADIUS server.
Deny authentication, preventing traffic from flowing from the end device through the interface.
This is the default.
Move the end device to a specified VLAN if the switch receives a RADIUS access-reject message. The configured VLAN name overrides any attributes sent by the server. (The VLAN must already exist on the switch.) Sustain authenticated end devices that already have LAN access and deny unauthenticated end devices. If the RADIUS servers time out during reauthentication, previously authenticated end devices are reauthenticated and new users are denied LAN access.
質問 # 84
You are configuring BGP policies for a site with a dual-homed connection as shown In the exhibit.
You need all outbound traffic to egress the network through the link to ISP B by default. The ISPs should not be able to override this behavior through BGP attributes.
Which BGP attribute would you modify on the ISP-received routes to accomplish this objective?
- A. local preference
- B. next-hop
- C. origin
- D. MED
正解：A
質問 # 85
You are deploying IP phones in your enterprise networks. When plugged in, the IP phones must be automatically provided with the correct VLAN ID needed for sending voice traffic to the EX Series switches.
In this scenario, which two solutions are required to accomplish this task? (Choose two.)
- A. Enable the voice VLAN feature with the appropriate access interfaces and VLAN ID for voice traffic.
- B. Enable LLDP-MED on appropriate access interfaces.
- C. Create two VLANs and assign them as VLAN members to the appropriate access interfaces.
- D. Use LLDP on appropriate interfaces.
正解：A、B
質問 # 86
Referring to the exhibit, anycast RP is implemented to ensure multicast service availability. The source is currently sending multicast traffic using group 239.1.1.1 and R3 is receiving PIM register messages, but R2 does not have active source information. In this scenario, what are two methods to receive the active source information on R2? (Choose two.)
- A. Configure an MSDP protocol between R1 and R2.
- B. Configure an RP set in PIM on R1, allowing R1 to forward PIM register messages to R2 and R3 in the set.
- C. Configure an RP set in PIM on R2 and R3, allowing the RPs to forward PIM register messages to the other RPs in the set.
- D. Configure an MSDP protocol between R2 and R3.
正解：C、D
解説：
MSDP or anycast-PIM with rp-set should be configured on all anycast RP routers.
https://www.juniper.net/documentation/us/en/software/junos/multicast/topics/topic-map/mcast- pim-anycast-rp.html
質問 # 87
Which two multicast listener registration protocols are supported in the Junos operating system? (Choose two.)
- A. DVMRP
- B. PIM
- C. IGMP
- D. MLD
正解：C、D
解説：
* Understanding Multicast Listener Registration Protocols:
* Multicast listener registration protocols are used to manage multicast group memberships on a network.
* They allow devices to join or leave multicast groups dynamically.
* Protocols Supported by Junos:
* MLD (Multicast Listener Discovery):
* Used for IPv6 multicast group management. It is the IPv6 equivalent of IGMP.
* MLD allows routers to discover multicast listeners on a network.
* IGMP (Internet Group Management Protocol):
* Used for IPv4 multicast group management.
* IGMP enables hosts to join and leave multicast groups and allows routers to manage multicast group memberships.
* Verification and Configuration in Junos:
* MLD and IGMP are supported on Juniper devices running the Junos operating system.
* Configuration examples:
* IGMP:
shell
Copy code
set protocols igmp interface ge-0/0/1.0
* MLD:
shell
Copy code
set protocols mld interface ge-0/0/1.0
References:
* Juniper IGMP Configuration Guide
* Juniper MLD Configuration Guide
質問 # 88
Referring to the exhibit, which statement is correct?
- A. This router originated the LSA.
- B. This router is an ASBR.
- C. This router is connected to 27 different areas.
- D. This router is an ABR.
正解：A
質問 # 89
You are asked to configure 802.1X on your access ports to allow only a single device to authenticate. In this scenario, which configuration would you use?
- A. multiple supplicant mode
- B. single supplicant mode
- C. single-secure supplicant mode
- D. MAC authentication mode
正解：C
解説：
Single supplicant mode authenticates only the first end device that connects to an authenticator port. All other end devices connecting to the authenticator port after the first has connected successfully, whether they are 802.1X-enabled or not, are permitted access to the port without further authentication. If the first authenticated end device logs out, all other end devices are locked out until an end device authenticates.
Single-secure supplicant mode authenticates only one end device to connect to an authenticator port. No other end device can connect to the authenticator port until the first logs out
質問 # 90
You are troubleshooting an EVPN-VXLAN IP fabric and observe the loop shown in the exhibit.
Which two steps would you take to further troubleshoot this problem? (Choose two.)
- A. Verify that the same ESI is configured on the link from the host and that it matches the source.
- B. Verify that the same ESI is configured on the two links from the source.
- C. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 3 routes are present.
- D. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 4 routes are present.
正解：C、D
質問 # 91
You are asked to establish full connectivity between all devices in the BGP network. Referring to the exhibit, which two configuration changes will allow BGP route advertisements? (Choose two.)
- A. On R1 and R3, include the loops 2 statement at the [edit protocols bgp family inet unicast] hierarchy.
- B. On R1 and R3, include the advertise-peer-as statement at the [edit protocols bgp group external] hierarchy.
- C. On R2, include the advertise-peer-as statement at the [edit protocols bgp group external] hierarchy.
- D. On R2, include the loops 2 statement at the [edit protocols bgp family inet unicast] hierarchy.
正解：A、C
解説：
https://www.juniper.net/documentation/us/en/software/junos/routing-
policy/bgp/topics/example/bgp-advertise-peer-as.html
質問 # 92
Referring to the exhibit, which two statements are correct? (Choose two.)
- A. BPDUs from the root bridge for VLAN 20 have been received on the ge-0/0/7.0 interface.
- B. Default VSTP bridge priority values are configured.
- C. BPDUs from the root bridge for VLAN 10 have been received on the ge-0/0/7.0 interface.
- D. DS-1 is the root bridge for VLAN 10.
正解：A、C
質問 # 93
Click the Exhibit button.
You have configured and applied the policer shown in the exhibit to your Junos device.
Which statement is true in this scenario?
- A. Traffic exceeding the committed-burst size will be marked with a loss priority of high.
- B. Traffic exceeding the committed-information-rate will be rate limited.
- C. Traffic exceeding the excess-burst size will be discarded.
- D. Traffic exceeding the committed-burst size will be discarded.
正解：C
解説：
Red--Traffic that exceeds the burst size for peak traffic (EBS), single-rate marks packets with an implicit loss priority of high and, optionally, discards the packets.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/policer-single-rate-three- color.html
https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/topic- map/policer-single-rate-three-color.html
質問 # 94
Which EVPN route type is used for fast convergence and for advertising the split horizon label?
- A. Type 5
- B. Type 4
- C. Type 1
- D. Type 2
正解：C
質問 # 95
Referring to the exhibit, traffic ingresses on interface ge-0/0/3 and egresses on interface ge-0/0/4.
Which queue does traffic with the IP precedence value of 100 use?
- A. expedited-forwarding
- B. network-control
- C. assured-forwarding
- D. best-effort
正解：A
質問 # 96
Which address range is used for source-specific multicast?
- A. 233.0.0.0/8
- B. 224.2.0.0/16
- C. 239.0.0.0/8
- D. 232.0.0.0/8
正解：D
解説：
PIM SSM introduces new terms for many of the concepts in PIM sparse mode. PIM SSM can technically be used in the entire 224/4 multicast address range, although PIM SSM operation is guaranteed only in the 232/8 range (232.0.0/24 is reserved). The new SSM terms are appropriate for Internet video applications and are summarized in Table 1. https://www.juniper.net/documentation/us/en/software/junos/multicast/topics/concept/multicast-pim-ssm.html
質問 # 97
Referring to the outputs shown in the exhibit, which two statements are correct about the IS-IS adjacency? (Choose two.)
- A. R1 is configured to participate in both Level 1 and Level 2.
- B. R2 is configured to participate in both Level 1 and Level 2.
- C. R1 is configured to participate in Level 2 only.
- D. R2 is configured to participate in Level 2 only.
正解：A、D
解説：
R2 has circuit type 2 which means that R2 is configured to participate in Level 2 only, answer D is correct.
R1 has circuit type 3 which means that R1 is configured to participate in both Level 1 and Level 2, answer A is correct.
質問 # 98
What allows non-Web enabled devices to access the network on a port configured for captive portal?
- A. Authentication credentials for specific devices can be preconfigured on the switch for automatic authentication.
- B. LLDP can be used to query the type of device that is attempting to access the network, and predefined device types can be allowed to bypass the captive portal process.
- C. Captive portal can be configured to only prompt for credentials when HTTP or HTTPS traffic is requested on a port to allow on-HTTP enabled devices access to the network.
- D. A MAC address white list can be configured on the switch to allow specific MAC addresses to bypass the captive portal process.
正解：D
質問 # 99
In OSPF, how does a router ensure that LSAs advertised to a neighboring router are received?
- A. LSAs are advertised with an acknowledgement bit.
- B. LSAs are sent over a TCP connection.
- C. LSAs are acknowledged by the neighboring router.
- D. LSA flooding guarantees that all routers will receive them successfully.
正解：C
解説：
Link-state acknowledgment (LSAck)messages provide reliability to the link-state exchange process, by explicitly acknowledging receipt of a Link State Update message. The LSA acknowledgment, explicitly acknowledged, that it have received a LSA, by mirroring it back.
質問 # 100
You configured static mode power management on an EX4300 to provide PoE power to telephone and access point equipment.
Which statement is correct regarding the PoE power budget?
- A. The power budgeted will be based on the device class connected to each port.
- B. Power is budgeted to a port even if no device is connected to the port.
- C. Power is budgeted to devices on a first come, first served basis as devices are connected.
- D. The power budgeted to ports will adjust to how much power a device actually uses.
正解：B
質問 # 101
......
JN0-649問題集でリアル試験問題でテストエンジン問題集でトレーニング：https://www.goshiken.com/Juniper/JN0-649-mondaishu.html
JN0-649テスト問題集とオンライン試験エンジン：https://drive.google.com/open?id=1aTitiPEpdoIjJLzF8sgKRweEvs-uNwlt