Download pdf - JUNIPER JN0-350 EXAM QUESTIONS & ANSWERS … · 03/06/2014 · You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, R1's loopback

JUNIPER JN0-350 EXAM QUESTIONS & ANSWERS

Number: JN0-350Passing Score: 800Time Limit: 120 minFile Version: 49.7

http://www.gratisexam.com/

JUNIPER JN0-350 EXAM QUESTIONS & ANSWERS

Exam Name: ER.Specialist(JNCIS-ER)

Certdumps

QUESTION 1Which statement is true about external BGP peering sessions?

A. A peer-group must be defined as type external.B. A peer-as must be configured for each peering session.C. You must specify a local-address for each peering session.D. You must specify a ttl for each peering session.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 2You want to determine what IP address and port number the router is using to NAT a particular connection.Which command will display this information?

A. show services stateful-firewall flowsB. show services session-tableC. show services nat flowsD. show services nat conversations

Correct Answer: ASection: (none)Explanation


QUESTION 3Which statement is true about the area-range command?

A. When the area-range command is used, the ABR generates a default route.B. You can have only one area-range statement per OSPF area.C. The area-range command can only be used to summarize internal routes.D. The area-range statement can be configured under an NSSA area to summarize external routes.

Correct Answer: DSection: (none)Explanation


QUESTION 4You need to transport non-IP traffic between a branch office and headquarters. What is a valid connectivityoption?

A. MPLS Layer 3 VPNB. IPSec tunnelC. MPLS Layer 2 VPN

D. IP in IP tunnel

Correct Answer: CSection: (none)Explanation


QUESTION 5Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, what willbe the result of a packet sourced from address 10.10.1.1 when the filter is applied?

A. The packet will be counted and then discarded.B. The packet will be counted and then accepted.C. The packet will be accepted with no other action.D. The packet will be discarded with no other action.



QUESTION 6You are configuring a router under [edit services nat]. Which command will configure the router to performNetwork Address Port Translation (NAPT/PAT)?


A. set pool my-pool port automaticB. set pool my-pool port overloadC. set rule my-rule term 1 then translated overloadD. set rule my-rule term 1 then translated port automatic



QUESTION 7Which two statements are true about scheduler maps? (Choose two.)

A. A scheduler map controls the resources assigned to a specific queue.B. A scheduler map is applied before a multifield firewall filter.C. A default scheduler map is applied to each interface.D. A scheduler map is only needed on low speed interfaces.

Correct Answer: ACSection: (none)Explanation


QUESTION 8You have multiple routes to the same destination using default route preference values. Which source ofrouting information will be chosen?

A. directB. staticC. OSPFD. RIP



QUESTION 9What is a common use for CoS in a branch office?

A. to eliminate the need for congestion managementB. to implement congestion avoidance using DSCPC. to ensure different classes of traffic receive allocated bandwidthD. to prioritize network control traffic



QUESTION 10Which statement about stateless firewall filters is true?

A. You must specify the action "then log" for the packets to be logged in the syslog file.B. You must specify the action "then syslog" for packets to be logged in the firewall log.C. All rejected or discarded packets are sent to the firewall log.D. You must specify the action "then log" for packets to be logged to the firewall log.



QUESTION 11Using the command show system connections, you see the following result:tcp4 0 0 *.179 *.* LISTENWhat does this mean?

A. 179 packets have been received by the router.B. Four TCP sessions are established.C. The BGP protocol has been activated on the router.D. A BGP session is established.



QUESTION 12Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, R1'sloopback address is 192.168.100.100. There is a static route for 192.168.200.200/32 with a next-hop of se-1/0/0.0. Which step must you take to allow communications through the GRE tunnel?

A. Configure keepalives for the GRE tunnel.B. Allow the outbound GRE packets in the restrict-traffic firewall filter.C. Use the se-1/0/0 unit 0 IP address as the source address for the GRE tunnel.D. Configure an IP address on gr-0/0/0 unit 0.



QUESTION 13Which command will show you the number of packets secured within IPSec VPN tunnels for a given serviceset?

A. show services ipsec statisticsB. show services service-sets statisticsC. show ipsec statisticsD. show services ipsec-vpn ipsec statistics



QUESTION 14You set the syslog to log any warning messages. Which command allows you to monitor warning messages inreal time?

A. show system alarmsB. monitor start messagesC. show log messagesD. monitor traffic



QUESTION 15Which two commands would you use to list all active alarm on a router? (Choose two.)

A. request system alarmsB. show chassis alarmsC. show chassis environmentD. show system alarms

Correct Answer: BDSection: (none)Explanation


QUESTION 16All operations team members are authenticated and authorized by a TACACS+ server. All users are membersof the same login class with view permissions only. You want to give one user in the same login classpermission to also run the show configuration command. How do you accomplish this?

A. You must have the TACACS+ server return the Juniper-Allow-Commands attribute.B. You cannot do this without assigning the user to a different login class.C. You must have the TACACS+ server return the Juniper-Configure attribute.D. You must have the TACACS+ server return the Juniper-Local-User-Name attribute.



QUESTION 17Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, assumingyou apply the firewall filter to the input of an interface, which two statements are true for incoming packets onthis interface? (Choose two.)

A. Packets destined to the BGP port with precedence 4 will be rate-limited.B. Packets destined to the BGP port will never be rate-limited.C. Packets destined to the BGP port will be classified to queue P3.D. All packets in forwarding class P3 are rate-limited.

Correct Answer: BCSection: (none)

Explanation


QUESTION 18Which statement is true about route-filters and prefix-lists?

A. Prefix-lists are defined within a routing policy.B. All routes in a route-filter are evaluated sequentially.C. All prefixes in a prefix-list are evaluated sequentially.D. Route-filters are defined within a routing policy.



QUESTION 19Which two statements are true about BGP? (Choose two.)

A. The BGP next-hop attribute must always be set to a non-private IP address when peering with a serviceprovider.

B. The as-path attribute tracks loops within an autonomous system.C. The BGP next-hop attribute is automatically updated when sending routes to an external peer on a point-to-

point link.D. The as-path attribute is automatically updated when sending routes to an external peer.

Correct Answer: CDSection: (none)Explanation


QUESTION 20You are using an ISP provided Layer 3 MPLS VPN solution for remote connectivity. Which BA classificationoptions do you use for traffic coming from the provider? (Choose two.)

A. IP precedence bitsB. source IP addressC. DSCP bitsD. EXP bits



QUESTION 21When would you use BGP as a routing protocol?

A. When you do not want to run other IGPs such as OSPF, RIP or IS-IS.B. When you need internet access through an Internet Service Provider.C. When you are dual-homed to multiple Internet Service Providers.D. When you need a gateway out of your network.



QUESTION 22Your enterprise is dual homed to the same ISP using BGP. You want to influence the return traffic to alwayscome back to your network over one of the links. Which three BGP attributes can you modify in a policy toaccomplish this goal? (Choose three.)

A. local preferenceB. AS pathC. next hopD. originE. MED

Correct Answer: BDESection: (none)Explanation


QUESTION 23Which statement describes where to apply a packet filter to protect the router?

A. Apply a firewall filter to the fxp0 interface.B. Apply a firewall filter to the fxp1 interface.C. Apply firewall filters to all physical interfaces on the router.D. Apply a firewall filter to the lo0 interface.



QUESTION 24You want to configure the router to match all Telnet (tcp/23) connections. You are configuring the router in the[edit services stateful-firewall rule my-rule term my-term] hierarchy. Which command will cause this to happen?

A. set from tcp-destination-port 23B. set from destination-port 23C. set from applications junos-telnetD. set from application-set junos-telnet

Correct Answer: C

Section: (none)Explanation


QUESTION 25You have set the OSPF reference bandwidth to 1 Gigabit. Which statement is true?

A. Fast Ethernet interfaces will all calculate a metric value of 100.B. This setting will override any bandwidth setting in a routing policy.C. This setting will override any static metric configured under the OSPF interface.D. This setting will not override any static metric configured under the OSPF interface.



QUESTION 26Which statement is correct regarding policer use for CoS in the enterprise?

A. Traffic can only be policed once in ingress.B. Traffic can only be policed once in egress.C. Policers are a tool to classify packets.D. Policers are only useful in ingress.



QUESTION 27Your Juniper WAN router is connected to an Ethernet switch that is configured to use 802.1p bits for classifyingtraffic. Which statement is correct about the configuration of CoS on the router?

A. Additional configuration is needed to use the 802.1 bits for classification.B. You can only use multifield classifiers for this traffic.C. By default the router will use the 802.1p bits for classification.D. You can only use multifield rewrites for this traffic.



QUESTION 28What is the primary reason to configure CoS for branch office connectivity?

A. To provide differentiated services to network traffic.

B. You want to make the network faster.C. You want to reduce congestion.D. You want to treat all traffic transiting the router equally.



QUESTION 29Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. Router Certkiller 3 andRouter Certkiller 6 are peering using loopback addresses. In the exhibit, how will the link failure between RouterCertkiller 6 and Router Certkiller 3 affect the internal BGP session between Router Certkiller 6 and RouterCertkiller 3?

A. The internal BGP session will fail and will be re-established when the physical link between Router Certkiller6 and Router Certkiller 3 is repaired.

B. The internal BGP session will drop and a new session will be established through Router Certkiller 1.C. The session will remain up, and packets crossing the network will be forwarded through Router Certkiller 1.D. The session will remain up, but forwarding will be interrupted until the physical link between Router Certkiller

6 and Router Certkiller 3 is repaired.



QUESTION 30What is the primary reason for configuring a multi area OSPF network?

A. to allow external OSPF routes to be advertised to all areasB. to reduce the possibility of creating a routing loop

C. to allow scalability by reducing the size of the OSPF databaseD. to reduce the number of routers in the backbone area



QUESTION 31The router is using the RED algorithm to selectively drop random packets before congestion becomes critical.Which two statements are correct? (Choose two)

A. Higher-bandwidth data streams are the least likely to be affected.B. Lower-bandwidth streams are the most likely to be affected.C. Higher-bandwidth data streams are the most likely to be affected.D. Lower-bandwidth streams are the least likely to be affected.



QUESTION 32Which statement is true for a DTE frame-relay interface on a Juniper Networks router?

A. point-to-point must be set on the logical unit.B. keepalives must be disabled on the physical interface.C. dte must be set on the physical interface.D. A dlci value must be defined on the logical unit.



QUESTION 33You are at the [edit policy-options policy-statement my-policy term one] configuration hierarchy. Which twocommands are valid syntax? (Choose two.)

A. set then counter fourB. set then term threeC. set from metric 2D. set from prefix-list five



QUESTION 34You are an ISP. Your backbone IP address space is 10.10.0.0/16. Your network management IP addressspace is 192.168.100.0/24. A firewall filter is applied to lo0 which allows management access using Telnet andFTP. Which firewall filter will also allow OSPF and BGP to function without blocking management access ?

A. [edit firewall family inet]user@r2# showfilter management-access {term allow_telnet_ftp {from {source-address {192.168.100.0/24;}protocol tcp;destination-port [ telnet ftp ];}then accept;}

B. [edit firewall family inet]user@r2# showfilter management-access {term allow_telnet_ftp {from {source-address {192.168.100.0/24;}then accept;}

C. [edit firewall family inet]user@r2# showfilter management-access {term allow_telnet_ftp {from {source-address {192.168.100.0/24;}destination-port [ telnet ftp ];}then accept;}term 2 {from {source-address {10.10.0.0/16;}then accept;}

D. [edit firewall family inet]user@r2# showfilter management-access {term allow_telnet_ftp {from {source-address {192.168.100.0/24;10.10.0.0/16;}destination-port [ telnet ftp ];

}then accept;}term 2 {then {discard;}} }



QUESTION 35What are three types of NAT that Juniper Networks routers support? (Choose three.)

A. dynamic destination port translationB. static destination address translationC. static source address translationD. dynamic source port translationE. dynamic destination address translation

Correct Answer: BCDSection: (none)Explanation


QUESTION 36You are using the route redistribution strategy to transition your network from RIP to OSPF. What must you doto avoid routing loops?

A. Apply import policies to restrict routing exchange between protocols.B. Decease the preference of OSPF.C. Apply export policies to restrict routing exchange between protocols.D. Increase the preference of RIP.



QUESTION 37Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, whichcommands will cause the router to use both ESP and AH to secure traffic in the IPSec tunnel?

A. [edit services ipsec-vpn ipsec]lab@R1# set policy my-policy protocol [ esp ah ]

B. [edit services ipsec-vpn ipsec]lab@R1# set proposal my-proposal protocol bundle

C. [edit services ipsec-vpn ipsec]lab@R1# set proposal my-proposal protocol [ esp ah ]

D. [edit services ipsec-vpn ipsec]lab@R1# set policy my-policy protocol bundle



QUESTION 38BGP communities can be used to influence your ingress traffic from the Internet. The communities signal theISP to change specific route attributes for this purpose. Which two attributes should be used for this? (Choosetwo.)

A. MEDB. local preferenceC. next hopD. AS path



QUESTION 39You are examining the output of the stateful firewall session table. Which state indicates that the router is usingan application-layer gateway (ALG) to forward traffic?

A. ForwardB. NATC. ALGD. Watch



QUESTION 40You want to verify that traffic is being classified correctly and forwarded in the proper queue on interface fe-0/0/1. Which two commands would show you this information? (Choose two.)

A. show interfaces queue fe-0/0/1B. show interfaces fe-0/0/1 detailC. show class-of-service interface fe-0/0/1D. show interfaces fe-0/0/1 statistics

Correct Answer: ABSection: (none)Explanation


QUESTION 41Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. The re-protect firewallfilter is applied as an input filter on the lo0.0 interface. You have a single BGP peering session with 10.0.0.1.Which statement is true?

A. term two has an incorrect match condition.B. term three is necessary for the correct operation of BGP.C. term one is necessary for the correct operation of BGP.D. term one has an incorrect match condition.



QUESTION 42Which statement is true?

A. Configuring a stateful firewall requires a stateless firewall filter to also be configured.B. Stateful firewalls allow conditional acceptance of a packet based on compliance with protocol state.C. Stateless firewall filters allow conditional acceptance of a packet based on compliance with protocol state.D. Stateful firewalls and stateless firewall filters are mutually exclusive.



QUESTION 43You are troubleshooting a CoS problem for packets transitioning the router. What are two useful actions?(Choose two.)

A. Use show interfaces queue to look for policed traffic.B. Use monitor traffic to look for BA markings in the header of outgoing packets.C. Use show interfaces queue to look for dropped traffic.D. Use a firewall filter to check the IP precedence of incoming packets and the rewrite results for outgoing

packets.



QUESTION 44Which command will allow you to monitor the fan status on a router?

A. show chassis fan-statusB. show chassis systemC. show chassis coolingD. show chassis environment



QUESTION 45

Which single command would you use to identify all protocols running on a router?

A. show system servicesB. show system processesC. show system statisticsD. show system connections



QUESTION 46You found a log message from your router as follows:Aug 9 19:16:51 radon-re0 chassisd[2622]: CHASSISD_FRU_EVENT:scb_recv_slot_attach: attached FPC 0Which part of the message code indicates the process that generated the message?

A. radon-re0B. scb_recv_slot_attachC. CHASSISD_FRU_EVENTD. chassisd[2622]



QUESTION 47Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit ascheduler-map is applied to fe-0/0/0 interface of an M7i router.Which statement is correct?

A. With the exception of the assigned bandwidth, all queues will share the remaining bandwidth.B. Packets in queue P0 and P2 will be dropped because there is no bandwidth assigned to them.C. Traffic in queue P3 will use all bandwidth if there is enough traffic in the queue .D. Traffic in P1 and P3 will share the remaining bandwidth.



QUESTION 48What are three functions associated with the JUNOS software class of service? (Choose three.)

A. Manage congestion by intelligently dropping traffic.B. Manage outbound bandwidth.C. Map each forwarding class to a different ATM VC.D. Classify incoming packets.

E. Manage ingress bandwidth.

Correct Answer: ABDSection: (none)Explanation


QUESTION 49Which two statements are correct when configuring an IBGP peering session? (Choose two.)

A. You do not need to define a "peer-as" if you specify "type internal"B. You must define the session as "type internal" if you specify a "peer-as".C. You should peer to loopback interfaces.D. The source address of your updates will be your loopback interface by default.



QUESTION 50You need to transport sensitive financial data between a branch office and headquarters. Which connectivityoption provides optimum security?

A. GRE tunnelB. Frame RelayC. IPSec tunnelD. MPLS Layer 2 VPN




QUESTION 51Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, the BAclassifiers are applied to an interface. The packets incoming to this interface will be classified accordingly.Which forwarding class will the router assign to an IP packet with precedence bits 101?

A. P0B. P3C. P2D. P1



QUESTION 52Which statement is true when configuring CoS?

A. Priority and transmission rate define how packets are stored and dropped.B. Buffer size and RED configuration define how packets are stored and dropped.C. Buffer size and RED configuration define the priority and transmission rate.D. You define the transmit rate and buffer size in the scheduler map.



QUESTION 53How can you perform a debug on a Juniper enterprise router?

A. Use the debug command.B. JUNOS does not have a debug command.C. Use the show debug information.D. Use traceoptions.



QUESTION 54You want to run RIPv2 as the IGP in your network. Which two statements are true? (Choose two.)

A. RIP multicasts updates to neighbors by default.B. You must apply an export policy to RIP in order to send RIP routes to neighbors.C. RIP broadcasts updates to neighbors by default.D. RIP routers automatically discover neighbors on an interface and send RIP routes to them.



QUESTION 55Which three statements are correct with respect to stateful and stateless firewalls? (Choose three.)

A. Stateless firewalls provide packet level protection.B. Stateless firewalls provide application level protection.C. Stateful firewalls provide application level protection.D. Stateless firewalls provide session level protection.E. Stateful firewalls provide session level protection.

Correct Answer: ACESection: (none)Explanation


QUESTION 56Which step is required to configure an FRF.16 Multilink Frame Relay interface on a J-series router?

A. Configure a logical unit between 1000 and 1022.B. Configure multiple DLCIs on a logical unit.C. Configure the number of bundles at the [edit chassis fpc 0 pic 0] hierarchy.D. Set encapsulation frame-relay at the [edit interfaces ls-0/0/0] hierarchy.



QUESTION 57Where are CoS multifield classifiers configured?

A. firewall filterB. routing policyC. rewrite markerD. scheduler



QUESTION 58Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, whatwould the result be when the prefix 192.168.192.0/18 is evaluated by the term?

A. The route would be accepted with no modifications.B. The route would be accepted with the metric set to 10.C. The route would be rejected.D. No match is found.



QUESTION 59Which two commands would you use to verify the Routing Engine memory utilization? (Choose two.)

A. show system processes extensiveB. show system memoryC. show process memoryD. show chassis routing-engine

Correct Answer: ADSection: (none)Explanation


QUESTION 60Which two commands will show you the effects of an import policy applied to BGP neighbor 1.1.1.1? (Choosetwo.)

A. show bgp neighbor 1.1.1.1 received-routesB. show route protocol bgpC. show route receive-protocol bgp 1.1.1.1D. show bgp neighbor 1.1.1.1 detail

Correct Answer: BCSection: (none)Explanation


QUESTION 61Which two statements about policers are correct? (Choose two.)

A. Policers can only be configured using firewall filters.B. Traffic exceeding the policer can be dropped or reclassified.C. You can only police traffic once per direction.D. Policers are useful against Denial of Service (DoS) attacks.



QUESTION 62Which command would you use to display the stateful firewall session table?

A. show services stateful-firewall session-tableB. show services session-tableC. show services flows

D. show services stateful-firewall flows



QUESTION 63Which statement is true about stateless packet filters?

A. Multiple input and output filters can be applied to each logical interface.B. A firewall filter applied to a physical port affects all logical ports on that physical port.C. One input and one output filter can be applied to each logical interface.D. Firewall filters applied to an interface can track session information for statistical analysis.



QUESTION 64What is the purpose of an ASBR summary LSA?

A. to reach networks that are outside of your areaB. to summarize all ASBR routes into a single routeC. to reach ASBR routers that are outside of your areaD. to reach ASBR routers in your area when used in a multi area OSPF network



QUESTION 65You have configured an IPSec-over-GRE tunnel to a non-Juniper router with different IPSec and GREendpoints. The tunnel interface is gr-0/0/0.0, the inside service interface is sp-0/0/0.2, and the outside serviceinterface is sp-0/0/0.1. How do you enable OSPF in area 0 for this tunnel?

A. set protocols ospf area 0 interface sp-0/0/0.1B. set protocols ospf area 0 interface gr-0/0/0.0C. set protocols ospf area 0 interface sp-0/0/0.0D. set protocols ospf area 0 interface sp-0/0/0.2



QUESTION 66Firewall filters are processed by which component in the router?

A. The routing protocols.B. The Routing Process Daemon (rpd).C. The Packet Forwarding Engine.D. The master routing table.



QUESTION 67You are configuring an IPSec VPN on a J-series router. Which two statements are true? (Choose two.)

A. An IPSec proposal can reference multiple encryption algorithms.B. An IPSec rule can reference multiple IPSec policies in a single term.C. An IPSec policy can reference multiple IPSec proposals.D. An IKE policy can reference multiple IKE proposals.



QUESTION 68When you contact JTAC for a troubleshooting problem, which two commands will provide important informationabout the router's hardware and software? (Choose two.)

A. show versionB. show chassis hardwareC. show system coredumpD. show system statistics



QUESTION 69Which form of Multilink Frame Relay allows multiple DLCIs to be bound to a single logical unit?

A. FRF.15B. FRF.26C. FRF.16D. FRF.25

Correct Answer: A

Section: (none)Explanation


QUESTION 70Which statement is true if a packet does not match any terms in a firewall filter?

A. The packet is forwarded and no other action is taken.B. The packet is forwarded and the "no-match" counter is incremented in the firewall statistics.C. The packet is rejected and an "administratively-prohibited" message is sent back to the source.D. The packet is silently discarded.



QUESTION 71Which two statements about the Compressed Real-Time Transport Protocol (CRTP) are correct regarding theJ-series router? (Choose two.)

A. CRTP can only be configured on non-multilink interfaces.B. CRTP can only be configured on multilink interfaces.C. CRTP options are configured on an ls- interface.D. CRTP operates between two directly-connected routers.



QUESTION 72Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit you see apolicy that filters routes based on their community value.Which route will be accepted by the policy?

A. 200.2.0.0/24 community 65002:10B. 200.3.0.0/24 community 65001:11C. 200.1.0.0/24 community 65001:10D. 200.4.0.0/24 community 65002:11



QUESTION 73Exhibit:

Network Topology Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, RouterCertkiller 2 has a stateful firewall and PAT configured on the fe-0/0/0.0 interface, using the stateful firewall andNAT rules shown. When the user contacts the FTP server, the client is able to establish a control connection.However, when the user tries to transfer data, the data transfers fail.What is required to resolve this situation?

A. Configure the stateful firewall to allow all incoming TCP connections from the FTP server.B. Configure the stateful firewall to allow all outgoing TCP connections to the FTP server.

C. Configure the router to use the FTP application-layer gateway.D. Remove the stateful firewall rules.



QUESTION 74Which two CoS options for branch office connectivity should be configured? (Choose two.)

A. a multifield classifier in the coreB. a BA classifier in the coreC. a multifield classifier at the edgeD. a BA classifier at the edge



QUESTION 75Which two statements are true about the as path attribute? (Choose two.)

A. AS path prepending can be modified using policy.B. You can only prepend your own AS number.C. Each BGP router must add its own AS number.D. It is used for loop detection.



QUESTION 76You have enabled traceoptions for IKE using the configuration command set services ipsec-vpn traceoptionsflag ike. Which command will display the resulting IKE logs?

A. show log messagesB. show log ikeC. show log kmdD. show log ipsec-vpn



QUESTION 77Which statement is correct about applying interface-style service sets?

A. Service-domain inside and service-domain outside must be configured.B. No service filter can be used.C. Multiple post-service filters can be used.D. Different service sets for input and output are not allowed.



QUESTION 78Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, how manyinternal BGP sessions are needed on Router 6 if all routers are running BGP and no route reflection orconfederations are being used?

A. 6B. 5C. 3D. 1



QUESTION 79Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. Referring to the exhibit,which two statements are true? (Choose two.)

A. The "input" match direction for the service-set is from the "Trusted" network towards the FTP server.B. A route pointing to the service interface must be configured.C. The "input" match direction for the service-set is from the FTP server towards the "Trusted" network.D. The service-set is applied directly to the interface.



QUESTION 80Which statement is true about next-hop-style and interface-style service sets for IPSec VPNs?

A. Only interface-style supports IPSec-over-GRE with the same tunnel endpoints.B. Both sets support routing protocols directly over IPSec.C. Only interface-style supports multicast traffic directly over IPSec.D. For data encryption you must use interface-style sets.



QUESTION 81Which two statements are true regarding IPSec VPN service rules configured at the [edit services ipsec-vpn]hierarchy? (Choose two.)

A. Each term can specify a different IPSec policy.B. Each term can match multiple source and destination prefixes.C. Each term can specify a different local gateway.D. Each term can specify a different remote gateway.



QUESTION 82Which two statements are true about setting the MED attribute? (Choose two.)

A. MED can only be set using a policy.B. MED cannot be set by using a policy.C. MED can be set to equal the IGP metric.D. MED can be set to equal the IGP metric + offset value.



QUESTION 83Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, what is thecorrect internal BGP configuration for router 192.168.1.6 in order to peer with 192.168.1.3 using loopbackaddresses?

A. [edit protocols]User@Router6#showbgp {group internal-peers {type internal;local-address 192.168.1.6;neighbor 192.168.1.3;}

B. [edit protocols]User@Router6#showbgp {group internal-peers {local-address 192.168.1.6;neighbor 192.168.1.3;}

C. [edit protocols]User@Router6#showbgp {group internal-peers {type internal;local-address 192.168.1.6;neighbor 192.168.1.3 {multihop {ttl 2;}

D. [edit protocols]User@Router6#showbgp {group internal-peers {type internal;peer-as 65000;neighbor 192.168.1.3;}



QUESTION 84Which statement is true when applying policies to BGP?

A. Global policies override group and neighbor policies.B. You must apply a policy directly to a neighbor if you want to filter routes to or from that neighbor.C. Neighbor policies override group and global policies.D. A route must pass through all global, group, and neighbor policies before it can be accepted.



QUESTION 85Which configuration step is required when configuring an OSPF stub area?

A. You must configure the command stub under [edit protocols ospf] on the ASBR.B. You must configure the command stub on all routers under [edit protocols ospf].C. You must configure the command stub under [edit protocols ospf area] on the ABR.D. You must configure the command stub on all routers under [edit protocols opsf area].



QUESTION 86

Which path attribute is automatically updated when a route is sent to an external BGP neighbor on a point-to-point link?

A. originator ID attributeB. aggregator ID attributeC. BGP next-hop attributeD. route preference attribute



QUESTION 87Assume the router is currently using default route preferences. Which command would cause the router toselect different active routes?

A. set protocols bgp preference 170B. set protocols ospf preference 500C. set protocols direct preference 20D. set protocols rip group my-group preference 90



QUESTION 88You want to configure the router to match all FTP connections to 172.30.30.30/32. You are configuring therouter in the [edit services stateful-firewall rule my-rule term my-term] hierarchy. Which commands will causethis to happen?

A. set from applications junos-ftpset from destination-address 172.30.30.30/32

B. set from applications junos-ftpset to destination-address 172.30.30.30/32

C. set to applications junos-ftpset to destination-address 172.30.30.30/32

D. set to applications junos-ftpset from destination-address 172.30.30.30/32



QUESTION 89Which two statements are true about Port Address Translation (PAT) on J-series routers? (Choose two.)

A. It supports dynamic destination PAT.

B. It supports TCP and UDP.C. It supports dynamic source PAT.D. It does not support ICMP as it has no port numbers.



QUESTION 90Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, whatwould the result be when the prefix 10.0.67.43/32 is evaluated by the term?

A. The route would be rejected.B. The route would be accepted with no modifications.C. No match is found.D. The route would be accepted with the metric set to 10.



QUESTION 91You have configured an OSPF stub area. What does adding the no-summaries command do?

A. It blocks summaries out of the stub area, and blocks summaries coming in from the backbone.B. It allows summaries out of the stub area, but blocks summaries coming in from the backbone.C. It allows summaries out of the stub area, and allows summaries coming in from the backbone.D. It blocks summaries out of the stub area, and allows summaries coming in from the backbone.



QUESTION 92Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, what willthe router do when it receives a packet from source address 10.10.10.10 on an interface where the my-service-set service set is applied?

A. Accept the packet.B. Send an ICMP error message.C. Silently discard the packet.D. Send a TCP RST.



QUESTION 93Which statement is correct about the use of BA classifiers for incoming packets?

A. Custom classifiers are needed in some cases.B. No custom classifiers are possible.C. All BA classifiers are enabled by default.D. Only Layer 3 BA classifiers are available.



QUESTION 94Which two statements are true about RIPv2? (Choose two.)

A. RIP routers can update individual prefixes to provide incremental route updates.B. A RIP router acknowledges updates it receives.C. RIP metrics are based on hop count.D. A RIP router can send up to 25 prefixes in a single update.



QUESTION 95Network Topology Exhibit:

Show firewall Exhibit:

Show interfaces Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, afterapplying the firewall filter to the router, you notices that some unwanted ICMP traffic is still passing through therouter. Which two reasons would be the cause? (Choose two.)

A. The filter does not have a reject or discard at the end.B. The filter does not specify which protocol to allow.C. The filter is not applied to the interface correctly.D. The filter is performing as configured.



QUESTION 96What is the most preferred route preference value?

A. 255B. 4294967295C. 1D. 0



QUESTION 97Which benefit do IPSec VPNs provide compared to MPLS-based VPNs?

A. performanceB. securityC. controlD. Internet connectivity

Correct Answer: BSection: (none)

Explanation


QUESTION 98You are configuring the router at the [edit services stateful-firewall rule my-rule term my-term] hierarchy. Youwant to match connections from all source addresses except 10.10.10.17 through 10.10.10.32. Whichcommand will cause the router to match this traffic?

A. set from source-address-range-except 10.10.10.17 through 10.10.10.32B. set from source-address-range-except low 10.10.10.17 high 10.10.10.32C. set from source-address-range 10.10.10.17 through 10.10.10.32 exceptD. set from source-address-range low 10.10.10.17 high 10.10.10.32 except



QUESTION 99A stateful firewall is configured on a Juniper router. Which command displays the number of connections thatthe router has rejected due to errors with the IP headers?

A. show services statisticsB. show services stateful-firewall statistics errorsC. show services stateful-firewall errorsD. show services stateful-firewall statistics extensive



QUESTION 100You are configuring a router at the [edit] hierarchy. Which command will configure the router to log informationregarding IKE sessions?

A. set services ipsec-vpn traceoptions flag ikeB. set services ipsec-vpn ike traceoptions flag allC. set security ipsec traceoptions flag ikeD. set system syslog file messages ike



QUESTION 101Which two statements are correct about IPSec-over-GRE tunnels? (Choose two.)

A. You can use the same endpoint IP addresses for both the IPSec and GRE tunnels.B. You must use a next-hop-style service set when configuring an IPSec-over-GRE tunnel.C. You must use a next-hop-style service set in order to send multicast traffic over an IPSec-over-GRE tunnel.D. You can send multicast traffic over an IPsec-over-GRE tunnel.



QUESTION 102Which two statements are correct about CoS processing on enterprise routers? (Choose two.)

A. On the J-series platform, CoS functions are performed in the software and their availability and limitationsare not dependent on the interface type.

B. On the M-series platform, CoS functions are performed in the hardware and have limitations that aredependent on the interface type.

C. On the J-series platform, CoS functions are performed in the hardware and have limitations that aredependent on the interface type.

D. On the M-series platform, CoS functions are performed in the software and their availability and limitationsare not dependent on the interface type.



QUESTION 103Given OSPF AS external, RIP, EBGP, and IBGP learned routes to the same destination, which route ispreferred?

A. the EBGP routeB. the RIP routeC. the IBGP routeD. the OSPF AS external route



QUESTION 104Which statement is true about external BGP sessions?

A. You normally filter the routes sent to you by your provider using policy.B. Your provider normally does not allow you to filter routes sent to or received from your provider.C. You normally should not filter any routes sent to or received from your provider.D. You normally filter the routes you send to your provider using policy.



QUESTION 105Your router is under a denial-of-service attack, you apply a firewall filter to lo0 to silently drop the packets.Which firewall filter action enables you to achieve this?

A. blackholeB. rejectC. denyD. discard



QUESTION 106Which BGP path attribute is automatically updated when a route is sent to an external BGP peer?

A. originator ID attributeB. AS path attributeC. local preference attributeD. MED attribute



QUESTION 107Which two statements are true about BGP peering sessions? (Choose two.)

A. IBGP peers should peer between loopback interfaces.B. EBGP peers must be directly connected to each other.C. EBGP peering sessions to loopbacks may require static routes.D. IBGP peering sessions require the configuration of a peer-as.



QUESTION 108You have policy-statement my-policy configured at the [edit policy-options] configuration hierarchy. At which two

configuration hierarchies could you reference this policy? (Choose two.)

A. [edit routing-options forwarding-table]B. [edit services service-set my-service-set]C. [edit interfaces lo0 family inet filter]D. [edit protocols bgp]



QUESTION 109What is a proper encapsulation setting for MLPPP?

A. encapsulation mlppp on an se- interfaceB. encapsulation mlppp on an ls- interfaceC. encapsulation multilink-ppp on a logical unit of a t1- interfaceD. encapsulation multilink-ppp on a logical unit of an ls- interface



QUESTION 110Which two statements about AH and ESP are correct? (Choose two.)

A. AH protects the complete packet except mutable fields from being modified in transitB. AH protects only the original packet from being modified in transitC. ESP protects only the original packet from being modified in transitD. ESP protects the complete packet except mutable fields from being viewed in transit



QUESTION 111Which interface type is used to configure MLPPP on a J-series router?

A. as-B. lt-C. ls-D. ml-



QUESTION 112Which two statements are true regarding NAT and PAT support on J-series routers? (Choose two.)

A. You may translate source addresses using a smaller NAT pool.B. You may configure NAT only for source translations.C. You may configure dynamic PAT only for source translations.D. You may use an interface address in a NAT pool with a next-hop-style service set.



QUESTION 113You are configuring an IPSec tunnel between two devices. Which two statements are true? (Choose two.)

A. You define your transit data encryption algorithms under the [services ipsec-vpn ike] configuration hierarchy.B. You must configure IKE to establish the tunnel.C. You define your transit data encryption algorithms under the [services ipsec-vpn ipsec] configuration

hierarchy.D. You can configure manual or dynamic security associations.



QUESTION 114You are configuring schedulers for VoIP, business critical data and best effort data traffic which are classified indifferent forwarding classes. Which two statements are true? (Choose two.)

A. You should assign a large buffer to business critical data traffic to decrease packet loss as much aspossible.

B. You should assign to VoIP traffic the same priority as that of business critical data traffic.C. You should assign high priority and a large buffer to VoIP traffic to prevent packet loss.D. You should assign high priority and a reasonably small buffer to VoIP traffic to minimize delay.



QUESTION 115Which two parameters of a scheduler can control the resources assigned to a queue? (Choose two.)

A. priority

B. period to visit a queueC. buffer-sizeD. delay



QUESTION 116Which statement is true for a DTE frame-relay interface on a Juniper Networks router?

A. dte must be set on the physical interface.B. multipoint must be set on the physical interface.C. The dlci and logical unit values must match.D. Encapsulation frame-relay must be configured on the physical interface.



QUESTION 117What information can be gathered using traceoptions? (Choose two.)

A. interface operational informationB. firewall countersC. chassis statusD. routing protocol information



QUESTION 118Which two statements are correct? (Choose two.)

A. A BA classifier can be applied to egress packets to set the ToS bits in the IPv4 header.B. If a BA classifier puts a packet into a forwarding class, a firewall filter can override it and put the packet into

a different forwarding class.C. A BA classifer can put the incoming packets into different queues based on their destination addresses.D. Both an IPv4 BA classifier and a firewall can classify packets based on their ToS bits.



QUESTION 119Your enterprise is dual homed to two different ISPs (A and B) using BGP. You want to influence traffic enteringyour network to prefer ISP

A. Which two BGP attributes canyou manipulate in a policy to accomplish this goal? (Choose two.)

B. originC. local preferenceD. AS pathE. route preference



QUESTION 120Exhibit:

You work as a network administrator at Certkiller .com. You study the exhibit carefully. In the exhibit, whichexport policy or policies will be applied to BGP neighbor 1.1.1.1?

A. customer-filterB. customer-filter, local-routes and block-privatesC. local-routes and block-privatesD. local-routes


