GoShikenからの試験合格準備の必需品JN0-649試験トレーニング問題
有効なパス率はJNCIP-ENTのJN0-649試験問題
質問 # 116
Which EVPN route type is used for fast convergence and for advertising the split horizon label?
- A. Type 1
- B. Type 5
- C. Type 2
- D. Type 4
正解：A
質問 # 117
A modified deficit round-robin scheduler is defined by which three variables? (Choose three.)
- A. Layer 3 fields
- B. transmit rate
- C. buffer size
- D. WRED
- E. priority
正解：B、D、E
質問 # 118
A BGP network has been designed to provide resiliency and redundancy to a multihomed customer network.
Which two statements are correct in this scenario? (Choose two.)
- A. Both the next hops will be used to forward traffic to R2.
- B. A routing policy will be required to forward traffic to both next hops.
- C. The TTL value of 1 is set to limit the scope of the EBGP session.
- D. The ttl statement must be configured to accommodate peering to a loopback address of a directly connected peer.
正解：B、C
解説：
B - Because only one next hop in forwarding table.
C- Becuse TTL=1 limiting bgp connection to be established only over loopbacks interface.
https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/topic-map/multihop- sessions.html Use the multihop statement to alter the default use of the neighbor's physical address. In addition, you can also specify a time-to-live (TTL) value in the BGP packets to control how far they propagate. We use a TTL value of 1 to ensure that the session cannot be established across any other backdoor links in the network.
質問 # 119
Which three configuration parameters must match on all switches within the same MSTP region? (Choose three.)
- A. revision level
- B. VLAN to instance mapping
- C. configuration name
- D. region name
- E. bridge priority
正解：A、B、C
解説：
For Multiple Spanning Tree Protocol (MSTP) to operate correctly, all switches in the same region must have the same VLAN to instance mapping, revision level, and configuration name. These parameters ensure that all switches interpret the MSTP configuration consistently.
References:
* MSTP Configuration Guide, Juniper Networks
質問 # 120
You are authenticating user devices connected to your ex Series switch. You have 802.1X and MAC RADIUS configured for all ports. A user is complaining about the time it takes to connect their non- 802.1X device on ge-0/0/15 using MAC RADIUS authentication.
Referring to the exhibit, what should be done to accelerate the authentication process?
- A. Configure the restrict feature for MAC RADIUS on ge-0/0/15.
- B. Configure the no-reauthentication feature for 802.1X on ge-0/0/15
- C. Change the 802.1X retry attempts value to 5 on ge-0/0/15
- D. Change the supplicant mode to multiple on ge-0/0/15
正解：D
質問 # 121
Which two statements are correct about the deployment of EVPN-VXLAN on QFX Series devices? (Choose two.)
- A. Junos OS supports underlay replication for BUM traffic forwarding.
- B. Type 1 route advertisements always have the single-active flag set to 1.
- C. Junos OS supports ingress replication for BUM traffic forwarding.
- D. Type 1 route advertisements always have the single-active flag set to 0.
正解：A、C
質問 # 122
You ate configuring BGP policies for a site with a dual-homed connection as shown in the exhibit.
You must ensure that inbound traffic from Internet hosts flow through the ISP A connection.
Which statement is correct in this scenario?
- A. Apply a BGP export policy to R2 to prepend [65001 65001 65001 65001 65001] to the AS path of routes advertised to ISP B.
- B. Apply a BGP export policy on R1 to assign a lower MED value to routes advertised to ISP A.
- C. Apply a BGP export policy on R1 to assign a higher local preference value to routes advertised to ISP A.
- D. Apply a BGP export policy onR2to assign a lower origin value to routes advertised to ISP B.
正解：A
質問 # 123
Which protocol allows a switch to pass configuration information to an IP phone?
- A. IPv6
- B. VCCP
- C. LLDP-MED
- D. BFD
正解：C
質問 # 124
A BGP network has been designed to provide resiliency and redundancy to a multihomed customer network.
Which two statements are correct in this scenario? (Choose two.)
- A. Both the next hops will be used to forward traffic to R2.
- B. A routing policy will be required to forward traffic to both next hops.
- C. The ttl statement must be configured to accommodate peering to a loopback address of a directly connected peer.
- D. The TTL value of 1 is set to limit the scope of the EBGP session.
正解：B、C
質問 # 125
You are asked to configure 802.1X on your access ports to allow only a single device to authenticate. In this scenario, which configuration would you use?
- A. MAC authentication mode
- B. multiple supplicant mode
- C. single-secure supplicant mode
- D. single supplicant mode
正解：D
質問 # 126
Which three statements are correct about EVPN route types? (Choose three.)
- A. Type 2 routes carry endpoint IP address information.
- B. Type 5 routes carry replication information.
- C. Type 3 routes carry replication information.
- D. Type 2 routes carry endpoint MAC address information.
- E. Type 1 routes carry endpoint MAC address information.
正解：A、C、D
解説：
Cisco explains it better: The EVPN control plane advertises the following types of information:
Route type 1 - This is an Ethernet Auto-Discovery (EAD) route type used to advertise Ethernet segment identifier, Ethernet Tag ID, and EVPN instance information. EAD route advertisements may be sent for each EVPN instance or for each Ethernet segment.
Route type 2 - This advertises endpoint reachability information, including MAC and IP addresses of the endpoints or VTEPs.
Route type 3 - This performs multicast router advertisement, announcing the capability and intention to use ingress replication for specific VNIs.
Route type 4 - This is an Ethernet Segment route used to advertise the Ethernet segment identifier, IP address length, and the originating router's IP address.
Route type 5 - This is an IP prefix route used to advertise internal IP subnet and externally learned routes to a VXLAN network.
質問 # 127
You have a workstation and an IP phone that connect to the same physical port on your Juniper switch. Which statement is true?
- A. The workstation and the phone both must send tagged traffic to the switch.
- B. The switch port must be configured as a trunk port.
- C. You must configure two logical interfaces on the switch port.
- D. The access port can be configured to accept tagged and untagged traffic.
正解：D
質問 # 128
Referring to the exhibit, which statement is true?
- A. Only 802. 1X authentication will be used for devices connecting to ge-0/0/15
- B. The current device was allowed after authentication attempts to the RADIUS server failed
- C. Additional users will automatically be allowed to connect to ge-0/0/15
- D. The current device is authenticated using MAC RADIUS
正解：B
質問 # 129
Which two statements are true about the 802. 1X output shown in the exhibit? (Choose two.)
- A. EAPoL traffic will be sent out of the ge-0/0/1 interface.
- B. The supplicant is not authenticated using 802. 1X
- C. EAPoL traffic will not be sent out of the use ge-0/0/1 interface
- D. The supplicant is authenticated using 802. 1X
正解：A、B
質問 # 130
You have multiple BGP routes to the same prefix with equal local-preference values and AS-path lengths.
In this scenario, which route will be preferred in the route selection process?
- A. The route with the least preferred origin value.
- B. The route with the most preferred origin value.
- C. The route with the lowest MED value.
- D. The route with the highest MED value.
正解：B
解説：
https://www.juniper.net/documentation/en_US/junos/topics/reference/general/routing-protocols- address-representation.html
質問 # 131
Referring to the exhibit, which two statements are correct? (Choose two.)
- A. The BGP neighbor cannot advertise EVPN related routes.
- B. The BGP neighbor can advertise L3 VPN related routes.
- C. The BGP neighbor cannot advertise L3 VPN related routes.
- D. The BGP neighbor can advertise EVPN related routes.
正解：C、D
解説：
L3 VPN route exchange requires inet-vpn unicast address family.
質問 # 132
You are asked to configure an 802.1X solution that supports dynamic VLAN assignment. In this scenario, which two modes support using vendor-specific attributes (VSAs)? (Choose two.)
- A. static MAC bypass mode
- B. single supplicant mode
- C. multiple supplicant mode
- D. single-secure supplicant mode
正解：C、D
質問 # 133
Which two authentication methods are available for OSPF on Juniper devices? (Choose two.)
- A. MD5 authentication
- B. none
- C. Certificate
- D. RSA
正解：A、B
質問 # 134
Referring to the exhibit, ServerA sends a single IP packet destined to 10.0.0.127. Which two statements correctly describe the behavior of the resulting outbound VXLAN packets that contain the original packet destined to 10.0.0.127? (Choose two.)
- A. Router C will send a VXLAN packet destined only to router D and router E.
- B. Router C will send a single VXLAN packet to one remote VTEP.
- C. Router D will not replicate and send a copy of the received VXLAN packet to router E.
- D. Router E will replicate and send a copy of the received VXLAN packet to router D.
正解：B、D
質問 # 135
You are troubleshooting an EVPN-VXLAN IP fabric and observe the loop shown in the exhibit.
Which two steps would you take to further troubleshoot this problem? (Choose two.)
- A. Verify that the same ESI is configured on the two links from the source.
- B. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 3 routes are present.
- C. Verify that the same ESI is configured on the link from the host and that it matches the source.
- D. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 4 routes are present.
正解：B、D
解説：
Type 2 route, MAC with IP advertisement route-Type 2 routes are per-VLAN routes, so only PEs that are part of a VNI need these routes. EVPN allows an end host's IP and MAC addresses to be advertised within the EVPN Network Layer reachability information (NLRI). This allows for control plane learning of ESI MAC addresses. Because there are many Type 2 routes, a separate route-target auto-derived per VNI helps to confine their propagation. This route type is supported by all EVPN switches and routers. Type 5 route, IP prefix Route-An IP prefix route provides encoding for inter-subnet forwarding. In the control plane, EVPN Type 5 routes are used to advertise IP prefixes for inter-subnet connectivity across data centers. To reach a tenant using connectivity provided by the EVPN Type 5 IP prefix route, data packets are sent as Layer 2 Ethernet frames encapsulated in the VXLAN header over the IP network across the data centers.
質問 # 136
The connection between DC1 and DC2 is routed as shown in the exhibit.
In this scenario, which statement is correct?
- A. The border devices must be able to perform Layer 3 routing and provide IRB functionality.
- B. Type 2 and Type 5 routes will be exchanged between DC1 and DC2.
- C. L3VPN must be enabled to advertise reachability.
- D. An IP prefix route provides encoding for intra-subnet forwarding.
正解：A
解説：
In the given scenario, the connection between DC1 and DC2 is routed through a Layer 3 network. This indicates that the devices connecting the two data centers must be capable of performing Layer 3 routing to ensure that traffic can be properly forwarded across the network. Additionally, the use of VXLAN suggests that Integrated Routing and Bridging (IRB) functionality is required to enable communication between Layer
2 networks over the Layer 3 infrastructure.
* The border devices (QFX10002) must handle Layer 3 routing to manage IP traffic between the data centers.
* IRB functionality is necessary for routing between VLANs, allowing VXLAN to carry Layer 2 traffic across the Layer 3 network.
References:
* The diagrams indicate the use of VXLAN for Layer 2 extension over a Layer 3 network.
* The need for IRB is suggested by the presence of routed interfaces (IRB1 and IRB2) in the data center diagrams.
* The "Tech Ops Managed Router Juniper Install Guide" provides insights into the Layer 3 routing capabilities and configurations necessary for such setups.
質問 # 137
You are troubleshooting connectivity between an EVPN spine switch configured as a route reflector and a leaf node with an IP address of 10.30.100.6.
Referring to the exhibit, what is the problem?
- A. The neighbor 10.30.100.6 statement is missing from spine1's configuration.
- B. The leaf node is not configured for the family evpn NLRI.
- C. The neighbor 10.30.100.3 statement is missing from leaf1's configuration.
- D. The spine node is not configured for the family inet NLRI.
正解：D
質問 # 138
Referring to the exhibit, which LSA type is used to advertise 192.168.1.0/24 to R5?
- A. Type 5
- B. Type 7
- C. Type 3
- D. Type 4
正解：A
解説：
* Area-1 has no external connections. However, Area-1 has static route (172.16.31.0/24) that are not internal OSPF route. You can limit the external route advertisements to the area and advertise the static routes by designating the area an NSSA. In an NSSA, the ASBR (vMX1) generates NSSA external (Type 7) LSAs and floods them into the NSSA, where they are contained. Type-7 LSAs allow an NSSA to support the presence of ASBR and their corresponding external routing information. The ABR (vMX2) converts Type-7 LSAs into Type-5 External LSAs and leaks them to the other areas, but external routes from other areas are not advertised within the NSSA. An admin should check this and
* change it https://www.packetswitch.co.uk/configuring-junos-ospf-stub-and-nssa-areas/
https://www.juniper.net/documentation/us/en/software/junos/ospf/topics/ref/statement/nssa-edit-protocols-
質問 # 139
......
全問JN0-649問題集とEnterprise Routing and Switching, Professional (JNCIP-ENT)トレーニングコース：https://www.goshiken.com/Juniper/JN0-649-mondaishu.html
無料テストエンジンEnterprise Routing and Switching, Professional (JNCIP-ENT)認定試験：https://drive.google.com/open?id=1j3vAy2u1ivxiqoRGzpUFEkMNPaEWLiif