[2025年12月] を試そう!リアルJN0-664問題集で100%無料JN0-664試験問題集 [Q57-Q78]

Share

[2025年12月] を試そう!リアルJN0-664問題集で100%無料JN0-664試験問題集

JN0-664のPDF問題集試験問題 有効なJN0-664問題集


Juniper JN0-664(サービスプロバイダ、プロフェッショナル(JNCIP-SP))試験は、サービスプロバイダ業界で働くプロフェッショナルの知識とスキルをテストするために設計されています。試験では、Juniper Networksのサービスプロバイダ技術およびソリューションに関連するさまざまなトピックがカバーされます。ルーティング、スイッチング、セキュリティ、およびトラブルシューティングなどが含まれます。


ジュニパーのJN0-664試験は、65問の多肢選択問題で構成された筆記試験です。受験者は120分間で試験を完了する必要があります。試験は英語で利用可能であり、ピアソンVUEによって世界中で運営されます。試験の合格点は65%です。

 

質問 # 57
Exhibit

Referring to the exhibit, which three statements are correct about route 10 0 0.0/16 when using the default BGP advertisement rules'? (Choose three.)

  • A. R4 will advertise 10 0.0 0/16 to R6 with 172.16 1 1 as the next hop
  • B. R1 will prepend AS 65531 when advertising 10 0.0 0/16 to R2.
  • C. R2 will advertise 10.0.0.0/16 to R3 with 192.168.1 1 as the next hop
  • D. R1 will advertise 10.0.0.0/16 to R2 with 192 168 1 1 as the next hop.
  • E. R2 will advertise 10.0.0.0/16 to R4 with 172.16.1.1 as the next hop

正解:B、C、E


質問 # 58
Exhibit

You are examining an L3VPN route that includes the information shown in the exhibit Which statement is correct in this scenario?

  • A. The information shows a Type 0 route distinguisher
  • B. The information shows a Type 1 route distinguisher.
  • C. The information shows a route target
  • D. The information shows a Type 2 route distinguisher.

正解:B

解説:
Type 1: When Type value is 1, the Administrator field is 4-bytes and Assigned Number field is 2-bytes. The Administrator field should be set to the IP address (public IP addresses should be used). The Assigned Number field contains a number from a numbering space that is administered by the enterprise to which the IP address has been assigned by the appropriate authority.


質問 # 59
In which two ways does OSPF prevent routing loops in multi-area networks? (Choose two.)

  • A. All areas are required to connect as a full mesh.
  • B. The SPF algorithm prunes looped paths within an area.
  • C. The LFA algorithm prunes all looped paths within an area.
  • D. All areas are required to connect to area 0.

正解:B、D

解説:
OSPF is an interior gateway protocol that uses link-state routing to exchange routing information among routers within a single autonomous system. OSPF prevents routing loops in multi-area networks by using two methods: area hierarchy and SPF algorithm. Area hierarchy is the concept of dividing a large OSPF network into smaller areas that are connected to a backbone area (area 0). This reduces the amount of routing information that each router has to store and process, and also limits the scope of link-state updates within each area. All areas are required to connect to area 0 either directly or through virtual links2. SPF algorithm is the method that OSPF uses to calculate the shortest path to each destination in the network based on link-state information. The SPF algorithm runs on each router and builds a shortest-path tree that represents the topology of the network from the router's perspective. The SPF algorithm prunes looped paths within an area by choosing only one best path for each destination3.


質問 # 60
Exhibit

You are running a service provider network and must transport a customer's IPv6 traffic across your IPv4- based MPLS network using BGP You have already configured mpis ipv6-tunneling on your PE routers.
Which two statements are correct about the BGP configuration in this scenario? (Choose two.)

  • A. You must configure family inet6 add-path between PE and CE routers.
  • B. You must configure family inet6 unicast between PE routers.
  • C. You must configure family inet6 labeled-unicast between PE routers.
  • D. You must configure family inet6 unicast between PE and CE routers.

正解:C、D

解説:
To transport IPv6 traffic over an IPv4-based MPLS network using BGP, you need to configure two address families: family inet6 labeled-unicast and family inet6 unicast. The former is used to exchange IPv6 routes with MPLS labels between PE routers, and the latter is used to exchange IPv6 routes without labels between PE and CE routers. The mpis ipv6-tunneling command enables the PE routers to encapsulate the IPv6 packets with an MPLS label stack and an IPv4 header before sending them over the MPLS network.


質問 # 61
Exhibit

You are asked to exchange routes between R1 and R4 as shown in the exhibit. These two routers use the same AS number Which two steps will accomplish this task? (Choose two.)

  • A. Configure the BGP group with the as-override parameter on R2 and R3
  • B. Configure the BGP group with the advertise-peer-as parameter on R1 and R4.
  • C. Configure the BGP group with the as-override parameter on R1 and R4
  • D. Configure the BGP group with the advertise-peer-as parameter on R2 and R3.

正解:A、D


質問 # 62
Which two statements are correct about the customer interface in an LDP-signaled pseudowire? (Choose two)

  • A. When the encapsulation is vLan-ccc or extended-vlan-ccc, the configured VLAN tag is included in the control plane LDP advertisement
  • B. When the encapsulation is vlan-ccc or extended-vlan-ccc, the configured VLAN tag is not included in the control plane LDP advertisement
  • C. When the encapsulation is ethemet-ccc, tagged and untagged frames are both accepted in the data plane.
  • D. When the encapsulation is ethernet-ccc, only frames without a VLAN tag are accepted in the data plane

正解:A、C

解説:
The customer interface in an LDP-signaled pseudowire is the interface on the PE router that connects to the CE device. An LDP-signaled pseudowire is a type of Layer 2 circuit that uses LDP to establish a point-to-point connection between two PE routers over an MPLS network. The customer interface can have different encapsulation types depending on the type of traffic that is carried over the pseudowire. The encapsulation types are ethernet-ccc, vlan-ccc, extended-vlan-ccc, atm-ccc, frame-relay-ccc, ppp-ccc, cisco-hdlc-ccc, and tcc-ccc. Depending on the encapsulation type, the customer interface can accept or reject tagged or untagged frames in the data plane, and include or exclude VLAN tags in the control plane LDP advertisement. The following table summarizes the behavior of different encapsulation types:


質問 # 63
Exhibit.

Referring to the exhibit, which path would traffic passing through R1 take to get to R4?

  • A. R1 -> R2 -> R4
  • B. R1 -> R2 -> R3 -> R4
  • C. R1 -> R4
  • D. R1 -> R3 -> R4

正解:A

解説:
The OSPF cost is carried in the LSAs that are exchanged within an OSPF area. When a router calculates the cost to a destination it uses the cost of the exit interface of each router in the path to the destination.


質問 # 64
You are asked to protect your company's customers from amplification attacks. In this scenario, what is Juniper's recommended protection method?

  • A. ASN prepending
  • B. destination-based Remote Triggered Black Hole
  • C. BGP FlowSpec
  • D. unicast Reverse Path Forwarding

正解:C


質問 # 65
Exhibit

You want to use both links between R1 and R2 Because of the bandwidth difference between the two links, you must ensure that the links are used as much as possible.
Which action will accomplish this goal?

  • A. Disable multipath.
  • B. Ensure that the metric-out parameter on the Gigabit Ethernet interface is higher than the 10 Gigibit Ethernet interface.
  • C. Enable per-prefix load balancing.
  • D. Define a policy to tag routes with the appropriate bandwidth community.

正解:D

解説:
https://www.juniper.net/documentation/us/en/software/junos/sampling-forwarding-monitoring/bgp/topics/concep


質問 # 66
You have an L2VPN connecting two CEs across a provider network that runs OSPF. You have OSPF configured on both CEs.
Which two statements are correct in this scenario? (Choose two.)

  • A. OSPF neighborship is formed between the CEs and PEs.
  • B. OSPF neighborship is formed between the two CEs.
  • C. The CE and PE OSPF areas can be different.
  • D. The CE and PE OSPF areas must match.

正解:B、C

解説:
In an L2VPN scenario, the provider network connects two customer edge (CE) devices across a Layer 2 virtual private network. Let's analyze how OSPF operates in this setup.
1. **OSPF Neighborship in L2VPN**:
- An L2VPN provides a Layer 2 connection between two sites, making it transparent to Layer 3 protocols like OSPF. This means the CEs can form OSPF adjacencies directly with each other as if they were on the same local network.
2. **OSPF Configuration on CEs and PEs**:
- **Statement A: OSPF neighborship is formed between the CEs and PEs**:
- Incorrect. In an L2VPN, the provider's network is transparent to the OSPF running on the CEs. OSPF neighborship forms directly between the CEs, not between the CEs and PEs.
- **Statement B: The CE and PE OSPF areas can be different**:
- Correct. Since OSPF adjacencies form directly between the CEs and not between CEs and PEs, the OSPF areas on the CEs and PEs can be different. The provider network acts as a transparent bridge, and OSPF doesn't see the PEs.
- **Statement C: The CE and PE OSPF areas must match**:
- Incorrect. As noted above, because the OSPF neighborship forms directly between the CEs, the OSPF areas on the CEs and PEs do not need to match.
- **Statement D: OSPF neighborship is formed between the two CEs**:
- Correct. The L2VPN makes the connection between the two CEs appear as a direct Layer 2 link, allowing them to form an OSPF adjacency directly.
**Conclusion**:
Given the above analysis, the correct statements are:
**B. The CE and PE OSPF areas can be different.**
**D. OSPF neighborship is formed between the two CEs.**
**Reference**:
- Juniper Networks Documentation on L2VPNs: [Configuring Layer 2 VPNs](https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/layer-2-vpns-configuring.html)
- OSPF Configuration Guide: [Junos OS OSPF Configuration](https://www.juniper.net/documentation/en_US/junos/topics/concept/ospf-routing-overview.html)


質問 # 67
Exhibit

CE-1 and CE-2 are part of a VPLS called Customer1 No connectivity exists between CE-1 and CE-2. In the process of troubleshooting, you notice PE-1 is not learning any routes for this VPLS from PE-2, and PE-2 is not learning any routes for this VPLS from PE-1.

  • A. The instance type should be changed to I2vpn.
  • B. The route distinguisher must match on PE-1 and PE-2.
  • C. The no-tunnel-services statement should be deleted on both PEs.
  • D. The route target must match on PE-1 and PE-2.

正解:D

解説:
VPLS is a technology that provides Layer 2 VPN services over an MPLS network. VPLS uses BGP as its control protocol to exchange VPN membership information between PE routers. The route target is a BGP extended community attribute that identifies which VPN a route belongs to. The route target must match on PE routers that participate in the same VPLS instance, otherwise they will not accept or advertise routes for that VPLS.


質問 # 68

Click the Exhibit button.
After adding Customer C to your Layer 3 VPN, you must ensure that PE2 is receiving VPN routes for all customers attached to PE1, as shown in the exhibit.
Which operational command displays this information?

  • A. show route table bgp. 13vpn.0
  • B. show route table inet.0
  • C. show route table customer-c.inet.0
  • D. show route summary

正解:C

解説:
In the context of Layer 3 VPNs (L3VPN) using MPLS, the routing information for different customers (VPNs) is typically stored in separate routing tables (VRFs). When you want to verify that PE2 is receiving the VPN routes for Customer C from PE1, you need to check the appropriate VRF routing table on PE2.
1. **Option A: show route table customer-c.inet.0**
- This command displays the routing table specific to Customer C's VRF.
- Since we want to verify that PE2 has received the VPN routes for Customer C, this is the most appropriate command to use.
- It allows us to see all routes learned for Customer C's VPN.
2. **Option B: show route table bgp.l3vpn.0**
- This command displays the BGP routing table for all L3VPN routes.
- While this includes routes for Customer C, it also includes routes for all other VPNs, making it harder to isolate the specific information for Customer C.
- This command is more useful for an overall view of BGP L3VPN routes rather than for a specific customer's VRF.
3. **Option C: show route summary**
- This command provides a summary of the routes in all routing tables.
- It doesn't give detailed information about the specific routes for Customer C's VRF.
- It's useful for a high-level overview but not for verifying specific customer routes.
4. **Option D: show route table inet.0**
- This command shows the global routing table, not the VRF-specific tables.
- The global routing table doesn't contain the VPN-specific routes that are stored in the VRF tables.
- Therefore, it won't help in verifying the routes for Customer C.
**Conclusion**:
To verify that PE2 is receiving VPN routes for Customer C from PE1, the most appropriate command is to check the specific VRF routing table for Customer C. Hence, the correct answer is:
**A. show route table customer-c.inet.0**
**References**:
- Junos OS documentation on MPLS VPNs: [Junos MPLS VPNs
Guide](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/mpls-vpns.html)
- Command Reference for Routing Tables: [Junos OS Routing Tables Command Reference](https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-rout


質問 # 69
Exhibit

Referring to the exhibit, you are receiving the 192.168 0 0/16 route on both R3 and R4 from your EBGP neighbor You must ensure that R1 and R2 receive both BGP routes from the route reflector In this scenario, which BGP feature should you configure to accomplish this behavior?

  • A. route-target
  • B. add-path
  • C. multihop
  • D. multipath

正解:B

解説:
BGP add-path is a feature that allows the advertisement of multiple paths through the same peering session for the same prefix without the new paths implicitly replacing any previous paths. This behavior promotes path diversity and reduces multi-exit discriminator (MED) oscillations. BGP add-path is implemented by adding a path identifier to each path in the NLRI. The path identifier can be considered as something similar to a route distinguisher in VPNs, except that a path ID can apply to any address family. Path IDs are unique to a peering session and are generated for each network3. In this question, we have a route reflector (RR) that receives two routes for the same prefix (192.168.0.0/16) from an EBGP neighbor. By default, the RR will only advertise its best path to its clients (R1 and R2). However, we want R1 and R2 to receive both routes from the RR. To achieve this, we need to configure BGP add-path on the RR and enable it to send multiple paths for the same prefix to its clients.


質問 # 70
Which two statements describe PIM-SM? (Choose two)

  • A. Routers with receivers send join messages to their upstream neighbors.
  • B. Traffic is only forwarded to routers that request to join the distribution tree.
  • C. Routers without receivers must periodically prune themselves from the SPT.
  • D. Traffic is initially flooded to all routers and an S,G is maintained for each group

正解:A、B

解説:
PIM sparse mode (PIM-SM) is a multicast routing protocol that uses a pull model to deliver multicast traffic.
In PIM-SM, routers with receivers send join messages to their upstream neighbors toward a rendezvous point (RP) or a source-specific tree (SPT). The RP or SPT acts as the root of a shared distribution tree for a multicast group. Traffic is only forwarded to routers that request to join the distribution tree by sending join messages. PIM-SM does not flood traffic to all routers or prune routers without receivers, as PIM dense mode does.


質問 # 71
Which two statements are correct about IS-IS interfaces? (Choose two.)

  • A. If a broadcast interface is in both L1 and L2, separate hello messages are sent for each level.
  • B. If a point-to-point interface is in both 11 and L2, one combined hello message is sent for both levels.
  • C. If a broadcast interface is in both L1 and L2, one combined hello message is sent for both levels.
  • D. If a point-to-point interface is in both L1 and L2, separate hello messages are sent for each level.

正解:A、D


質問 # 72
Exhibit

You want Site 1 to access three VLANs that are located in Site 2 and Site 3 The customer-facing interface on the PE-1 router is configured for Ethernet-VLAN encapsulation.
What is the minimum number of L2VPN routing instances to be configured to accomplish this task?

  • A. 0
  • B. 1
  • C. 2
  • D. 3

正解:A

解説:
To allow Site 1 to access three VLANs that are located in Site 2 and Site 3, you need to configure three L2VPN routing instances on PE-1, one for each VLAN. Each L2VPN routing instance will have a different VLAN ID and a different VNI for VXLAN encapsulation. Each L2VPN routing instance will also have a different vrf-target export value to identify which VPN routes belong to which VLAN. This way, PE-1 can forward traffic from Site 1 to Site 2 and Site 3 based on the VLAN tags and VNIs.


質問 # 73
Refer to the exhibit.

Click the Exhibit button.
Referring to the exhibit, you must provide VRF Internet access over a single connection for VPN-A Site 1, which connects to PE-1.
Which two statements are correct in this scenario? (Choose two.)

  • A. You do not need to use the RIB group default route, which is learned through BGP, from the inet. o table to the VPN-A. inet. 0 table.
  • B. You must use the RIB group to move a default route, which is learned through BGP, from the inet. o table to the VPN-A. inet. 0 table.
  • C. You must use the RIB group to move interface routes from the inet . 0 table to the VPN-A. inet. 0 table.
  • D. You do not need to use the RIB group to move interface routes from the inet. o table to the VPN-A. inet. 0 table.

正解:B、D

解説:
In the provided exhibit, the configuration involves using a RIB (Routing Information Base) group to facilitate internet access for VPN-A Site 1 through PE-1. The goal is to provide VRF Internet access over a single connection.
1. **Understanding RIB Groups**:
- RIB groups allow for the import and export of routes between different routing tables.
- In this scenario, we have two RIBs: `inet.0` (the main routing table) and `VPN-A.inet.0` (the VRF-specific routing table).
2. **Statement Analysis**:
- **A. You must use the RIB group to move a default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**
- Correct. To provide Internet access to VPN-A, the default route (0.0.0.0/0) learned via BGP in the `inet.0` table must be made available in the `VPN-A.inet.0` table. This is done using the RIB group to import the default route.
- **B. You do not need to use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**
- Correct. Interface routes (connected routes) are typically directly added to both the global and the VRF routing tables without needing a RIB group. These routes are known to the VRF because the interfaces are part of the VRF configuration.
- **C. You do not need to use the RIB group default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**
- Incorrect. As discussed, the default route needs to be imported into the VRF's routing table using a RIB group to enable Internet access for the VRF.
- **D. You must use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**
- Incorrect. Interface routes are directly associated with the VRF interfaces and are automatically known to the VRF routing table. There is no need to use a RIB group for these routes.
**Conclusion**:
The correct answers are:
**A. You must use the RIB group to move a default route, which is learned through BGP, from the inet.0 table to the VPN-A.inet.0 table.**
**B. You do not need to use the RIB group to move interface routes from the inet.0 table to the VPN-A.inet.0 table.**
**Reference**:
- Juniper Networks Documentation on RIB Groups: [RIB Groups Overview](https://www.juniper.net/documentation/en_US/junos/topics/concept/rib-groups-overview.html)
- Junos OS VPNs Configuration Guide: [Junos VPNs Configuration](https://www.juniper.net/documentation/en_US/junos/topics/concept/vpns-overview.html)


質問 # 74
Exhibit

Which two statements about the configuration shown in the exhibit are correct? (Choose two.)

  • A. This VPN connects customer sites that use the same AS number
  • B. A Layer 2 VPN is configured.
  • C. This VPN connects customer sites that use different AS numbers.
  • D. A Layer 3 VPN is configured.

正解:C、D

解説:
The configuration shown in the exhibit is for a Layer 3 VPN that connects customer sites that use different AS numbers. A Layer 3 VPN is a type of VPN that uses MPLS labels to forward packets across a provider network and BGP to exchange routing information between PE routers and CE routers. A Layer 3 VPN allows customers to use different routing protocols and AS numbers at their sites, as long as they can peer with BGP at the PE-CE interface. In this example, CE-1 is using AS 65530 and CE-2 is using AS 65531, but they can still communicate through the VPN because they have BGP sessions with PE-1 and PE-2, respectively.


質問 # 75
Refer to the exhibit.

Click the Exhibit hutton.
You are configuring an interprovider Option C Layer 3 VPN to connect two customer sites.
Referring to the exhibit, which three statements are correct? (Choose three.)

  • A. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.
  • B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.
  • C. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.
  • D. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.
  • E. P routers only maintain the internal routes from their own AS.

正解:B、D、E

解説:
Interprovider Option C for Layer 3 VPNs involves the use of Autonomous System Boundary Routers (ASBRs) to exchange labeled VPN-IPv4 routes between different Autonomous Systems (AS). This option requires BGP sessions between ASBRs, and the VPN routes are carried end-to-end using MPLS labels. Here's a detailed analysis of the roles of different routers in this scenario:
1. **ASBR Routers**:
- ASBRs are responsible for exchanging VPN-IPv4 routes between different ASes.
- **A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**
- Correct. ASBRs maintain routes to internal destinations within their own AS, and they also need to know the loopback addresses of PEs in the other AS to set up the BGP sessions and MPLS tunnels.
2. **PE Routers**:
- PE routers are responsible for maintaining VPN routes and label information to forward VPN traffic correctly.
- **B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
- Correct. PE routers need to maintain:
- Internal routes within their AS for routing.
- Loopback addresses of other AS PEs for establishing MPLS LSPs.
- L3VPN routes to provide end-to-end VPN connectivity.
3. **P Routers**:
- P routers are the core routers that do not participate in BGP VPN routing but forward labeled packets based on MPLS labels.
- **C. P routers only maintain the internal routes from their own AS.**
- Correct. P routers maintain the internal routing information to forward packets within the AS and use MPLS labels for forwarding VPN packets. They do not maintain VPN routes or routes from other ASes.
4. **Incorrect Statements**:
- **D. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.**
- Incorrect. P routers do not need to maintain the loopback addresses of other AS PEs. They only maintain internal routing and MPLS label information.
- **E. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
- Incorrect. ASBR routers do not maintain L3VPN routes. They exchange labeled VPN-IPv4 routes with other ASBRs and forward them to PE routers.
**Conclusion**:
The correct answers are:
**A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**
**B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
**C. P routers only maintain the internal routes from their own AS.**
**Reference**:
- Juniper Networks Documentation on Interprovider VPNs: [Interprovider VPN Configuration](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/mpls-vpn-interprovider.html)
- MPLS and VPN Architectures, CCIP Edition by Ivan Pepelnjak and Jim Guichard


質問 # 76
Click the Exhibit button.

Referring to the exhibit, which statement is correct?

  • A. You cannot use the vrf-target and vrf-export statements in the same VRF.
  • B. VPN routes with the target:65512:1 and target:65512:2 route targets are imported.
  • C. VPN routes are exported with the target:65512:1 and target:65512:2 route targets.
  • D. VPN routes are exported with only the target:65512:1 route target

正解:C

解説:
The exhibit shows the configuration of a VRF (Virtual Routing and Forwarding) instance on a Juniper PE router. Let's break down the key components:
VRF Configuration (VPN-A)
The instance type is VRF, meaning this is an L3VPN (Layer 3 VPN).
The routing instance contains a static route (10.1.0.0/16 next-hop 10.1.0.1).
The interface ge-0/0/2.0 is assigned to the VRF.
Route Distinguisher (RD): 172.17.20.1:1
VRF-Export Policy: vpn-a-export
VRF-Target: target:65512:1 (This defines which routes will be imported into the VRF).
VRF Export Policy (vpn-a-export)
The vpn-a-export policy adds two BGP communities (route targets) to exported VPN routes:
community add vpn-a-target;
community add vpn-m-target;
accept;
The vpn-a-target community corresponds to target:65512:1.
The vpn-m-target community corresponds to target:65512:2.
Policy-Options (Community Definitions)
community vpn-a-target members target:65512:1;
community vpn-m-target members target:65512:2;
This confirms that routes exported from this VRF will have BOTH target:65512:1 and target:65512:2.
Evaluating the Answer Choices
✅ Option A: "VPN routes are exported with the target:65512:1 and target:65512:2 route targets." The vpn-a-export policy explicitly adds both vpn-a-target (65512:1) and vpn-m-target (65512:2) to exported routes.
This is correct. ✅
❌ Option B: "You cannot use the vrf-target and vrf-export statements in the same VRF." This is incorrect.
Juniper allows the use of both vrf-target and vrf-export in the same VRF:
vrf-target is used for importing routes.
vrf-export defines export policies (which can add additional route targets).
This is incorrect. ❌
❌ Option C: "VPN routes with the target:65512:1 and target:65512:2 route targets are imported." The vrf-target target:65512:1; statement only controls importing routes.
The import policy does not include target:65512:2, so routes tagged with target:65512:2 alone would not be imported into this VRF.
This is incorrect. ❌
❌ Option D: "VPN routes are exported with only the target:65512:1 route target." The export policy (vpn-a-export) clearly adds both 65512:1 and 65512:2.
This is incorrect. ❌
Final answer:
✅ A. VPN routes are exported with the target:65512:1 and target:65512:2 route targets.
Verification from Juniper Documentation
Juniper MPLS L3VPN Configuration Guide confirms that vrf-target is used for importing, while vrf-export can be used for exporting multiple route targets.
Juniper Routing Policy Documentation states that export policies can add multiple BGP communities (route targets).
RFC 4364 (BGP/MPLS IP VPNs) defines the use of route targets for VPN route control.


質問 # 77
Which two statements are correct regarding bootstrap messages that are forwarded within a PIM sparse mode domain? (Choose two.)

  • A. Bootstrap messages are forwarded only to routers that explicitly requested the messages within the PIM sparse-mode domain.
  • B. Bootstrap messages distribute RP information dynamically during an RP election.
  • C. Bootstrap messages are used to notify which router is the PIM RP.
  • D. Bootstrap messages are forwarded to all routers within a PIM sparse-mode domain.

正解:B、D


質問 # 78
......

究極のJN0-664無料準備ガイド最新のJuniper練習テスト問題集:https://www.goshiken.com/Juniper/JN0-664-mondaishu.html

今すぐゲットせよ!高評価Juniper JN0-664試験問題集:https://drive.google.com/open?id=1zWCG9XMA0l_dCZ3fAS6HRcfiLZyCKv2G