Category: Juniper Exam

QUESTION 1
Your ScreenOS device does not have a static IP address. You want to be able to access it using its FQDN. How would you implement this task?

A.    Configure a domain in DNS.
B.    Configure syslog.
C.    Configure SNMP.
D.    Configure DDNS.

Answer: D

QUESTION 2
You have just installed a new ScreenOS device in your network and you want only a select range of IP addresses to have administrative access to the device. Which choice will allow you to accomplish this?

A.    Configure a manager IP.
B.    Configure the management interface.
C.    Configure a management IP on the trust interface.
D.    Configure new system administrators.

Answer: A

QUESTION 3
A routing table contains an IBGP route for 192.168.0.0/24, a RIP route for 192.168.0.0/23, an OSPF route for 192.168.0.0/22, and a static route for 192.168.0.0/16. When the router receives traffic destined for 192.168.0.1, which route will the router use?

A.    the IBGP route
B.    the OSPF route
C.    the RIP route
D.    the static route

Answer: A

QUESTION 4
You are troubleshooting telnet traffic destined to IP address 10.10.10.1. You decide to run debug and want to set the flow filter. Which command will show only the telnet traffic going to the 10.10.10.1 address?

A.    ssg5-serial-> set ffilter dst-ip 10.10.10.1
ssg5-serial-> set ffilter dst-port 23
B.    ssg5-serial-> set ffilter dst-ip 10.10.10.1 dst-port 23
C.    ssg5-serial-> set ffilter dst-port 23
D.    ssg5-serial-> set ffilter dst-ip 10.10.10.1

Answer: B

QUESTION 5
You have enabled BGP on your ScreenOS device and configured a single EBGP peer. The CLI shows that the BGP connection is transitioning between the CONNECT and ACTIVE states, but never reaching the ESTABLISHED state. What are three reasons for this behavior? (Choose three.)

A.    The peer is blocking traffic destined for TCP port 179.
B.    The peer address is not configured correctly.
C.    The enable statement has not been configured for the peer.
D.    The peer AS number is not configured correctly.
E.    BGP has not been enabled on the virtual router.

Answer: ABD

QUESTION 6
You want to set up a last resort route and prevent route lookups in either the source-based routing table or the destination-based routing table. What should you do?

A.    Disable SIBR and create a default route in the trust-vr table using the null interface as the outgoing
interface with a higher metric than other routes.
B.    Disable SIBR and create a default route in the trust-vr table using the null interface as the outgoing
interface with a lower metric than other routes.
C.    Enable SIBR and create a default route in the SIBR table using the null interface as the outgoing
interface with a higher metric than other routes.
D.    Enable SIBR and create a default route in the SIBR table using the null interface as the outgoing
interface with a lower metric than other routes.

Answer: C

QUESTION 7
You have the following BGP configuration in place to establish a session with a remote peer over your ethernet4 interface.
set vrouter trust-vr protocol bgp 65000
set vrouter trust-vr protocol bgp enable
set vrouter trust-vr protocol bgp neighbor remote-as 65500
set vrouter trust-vr protocol bgp neighbor enable
Which additional statement is necessary to establish the session?

A.    set interface protocol bgp enable
B.    set interface ethernet4 bgp enable
C.    set vrouter trust-vr protocol bgp interface ethernet4
D.    set interface ethernet4 protocol bgp

Answer: D

QUESTION 8
You have only one public IP address available and you must allow external access to three servers on a DMZ network. Which two NAT types would allow you to accomplish your objective? (Choose two.)

A.    MIP
B.    VIP
C.    NAT-dst
D.    NAT-src

Answer: BC

QUESTION 9
Your ScreenOS device is configured with multiple NAT types.
What is the order of precedence in this situation?

A.    interface-based NAT -> VIP -> MIP -> policy-based NAT
B.    VIP -> MIP -> policy-based NAT -> interface-based NAT
C.    MIP -> VIP -> interface-based NAT -> policy-based NAT
D.    MIP -> VIP -> policy-based NAT -> interface-based NAT

Answer: D

QUESTION 10
You must translate a range of public IP addresses to a range of internal IP addresses. Which two mechanisms would you use to accomplish your objective? (Choose two.)

A.    MIP using masks
B.    VIP using masks
C.    policy-based NAT-dst
D.    policy-based NAT-src

Answer: AC

QUESTION 11
You enter the following commands:
snoop filter ip dst-ip 1.1.1.10
snoop filter ip src-ip 2.1.1.10
What is the net result of these settings?

A.    Only packets with both a dst-ip of 1.1.1.10 and a src-ip of 2.1.1.10 will be captured
B.    Packets that have either a dst-ip of 1.1.1.10 or packets with a src-ip of 2.1.1.10 will be captured
C.    The second command will be ignored since a second filter cannot be added until the first one has been deleted
D.    The second command you entered will overwrite the first command you entered so you will only capture traffic with a src-ip of 2.1.1.10

Answer: B
Passing your Juniper JN0-533 Exam by using the latest Juniper JN0-533 Exam Demo Full Version: http://www.braindump2go.com/jn0-533.html

QUESTION 1
Which OSPF LSA type is sent from the ABR to describe an ASBR that is in an area to which it is connected?

A.    Type 7
B.    Type 5
C.    Type 4
D.    Type 3

Answer: C

QUESTION 2
Click the Exhibit button. You are asked to configure a new external BGP peering. You have configured BGP on R1 as shown in the exhibit, however the BGP peering remains in Active state.
Which additional configuration is required on R1 to establish the BGP peering?
 

A.    Configure the local-address.
B.    Configure the BGP type as external.
C.    Remove the local-as statement.
D.    Remove the autonomous-system statement.

Answer: C

QUESTION 3
Which OSPF adjacency state is reached when a hello packet has been sent, but bidirectional communication has not been established?

A.    Down
B.    Init
C.    2-way
D.    ExStart

Answer: B

QUESTION 4
Based on the exhibit, which configuration will permit end-to-end routing through the GRE tunnel for R1?
 

A.    [edit]
user@R1# show routing-options static
route 12.168.2.1/32 next-hop gr-0/0/0.0;
route 172.20.111.0/24 next-hop 12.168.1.1;
B.    [edit]
user@R1# show routing-options static
route 12.168.2.1/32 next-hop gr-0/0/0.0;
route 172.20.111.0/24 next-hop 172..1.1;
C.    [edit]
user@R1# show routing-options static
route 12.168.2.1/32 next-hop 172..1.1;
route 172.20.111.0/24 next-hop gr-0/0/0.0;
D.    [edit]
user@R1# show routing-options static
route 12.168.2.1/32 next-hop 172..2.2;
route 172.20.111.0/24 next-hop 172..1.1;

Answer: C

QUESTION 5
Which two OSPF areas allow external routes? (Choose two.)

A.    backbone area
B.    not-so-stubby area
C.    stub area
D.    totally stubby area

Answer: AB

QUESTION 6
Which LSA packet types are originated only by an OSPF ABR router?

A.    Type 2 and Type 3
B.    Type 3 and Type 4
C.    Type 5 and Type 6
D.    Type 6 and Type 7

Answer: B

QUESTION 7
In an OSPF environment, which two configuration parameters are used to determine which router is the DR? (Choose two.)

A.    the router with the highest priority
B.    the router with the lowest priority
C.    the router with the highest RID
D.    the router with the lowest RID

Answer: AC

QUESTION 8
You have entered the show ospf route command and see routes with a metric type of EXT2.
What does this indicate?

A.    These routes are OSPF interarea routes.
B.    These routes have been redistributed into OSPF and are using a Type 2 metric.
C.    These routes are preferred over the same routes with an EXT1 metric.
D.    These routes are OSPF intra-area routes.

Answer: B

QUESTION 9
You want to verify the frequency and type of SPF calculations on your Junos device.
Which command displays this information?

A.    show ospf database | match log
B.    show spf log
C.    show ospf log
D.    show ospf statistics

Answer: C

QUESTION 10
You are troubleshooting an OSPF adjacency that is stuck in the ExStart state.
What would be the correct step to resolve the problem?

A.    Look for a mismatched IP subnet or mask.
B.    Determine whether the neighbor is a DR-Other.
C.    Determine whether the hello and dead intervals are the same on both sides.
D.    Review the MTU settings to ensure that they match.

Answer: D

QUESTION 11
You are asked to redistribute routes into OSPF.
Which action accomplishes this task?

A.    Create a redistribution policy and apply it as an export policy under the [edit protocols ospf area] hierarchy.
B.    Create a redistribution policy and apply it as an import policy in the [edit protocols ospf] hierarchy.
C.    Create a redistribution policy and apply it as an import or an export policy in the [edit protocols ospf] hierarchy.
D.    Create a redistribution policy and apply it as an export policy in the [edit protocols ospf] hierarchy.

Answer: D

QUESTION 12
You are configuring OSPF on a Junos device; however, you have not configured a router ID.
What is the default behavior in this situation?

A.    If the loopback is configured with a 127/8 address, it will be used.
B.    If the loopback is not configured, it will use the interface with the highest IP address.
C.    If the loopback is configured and does not have a usable address, the IP address associated with the first hardware interface is used.
D.    If you configure a dedicated management address and include that interface in OSPF, it will be
used as the router ID.

Answer: C

QUESTION 13
Which two statements correctly describe IS-IS adjacencies? (Choose two.)

A.    Level 1 adjacencies can form in the same (intra) area only.
B.    Level 2 adjacencies are formed between (inter) areas only.
C.    Level 2 adjacencies can be established either interarea or intra-area.
D.    Level 2 adjacencies can form within the same (intra) area only.

Answer: AC

QUESTION 14
Which IS-IS PDU is used to request a retransmission of a missing link-state packet?

A.    the complete sequence number PDU
B.    the partial sequence number PDU
C.    a hello PDU with a request PDU TLV specifying the missing LSP
D.    a hello PDU with a refresh PDU TLV requesting all LSPs

Answer: B
Passing your Juniper JN0-360 Exam by using the latest Juniper JN0-360 Exam Demo Full Version: http://www.braindump2go.com/jn0-360.html

QUESTION 1
What does Junos Pulse Collaboration provide?

A.    group instant messaging services
B.    Web-based meeting services
C.    corporate file sharing services
D.    conference call services

Answer: C

QUESTION 2
What does Secure Virtual Workspace (SVW) provide?

A.    a virtual desktop on a client desktop
B.    protected file storage on a remote server
C.    a protected workspace on a client virtual machine
D.    a protected workspace on the client desktop

Answer: B

QUESTION 3
Which platform supports the Junos Pulse Secure Access Service?

A.    MX Series
B.    SRX Series
C.    MAG Series
D.    EX Series

Answer: A

QUESTION 4
What are two valid Junos Pulse Secure Access Service clustering implementations? (Choose two.)

A.    passive/passive
B.    active/passive
C.    online/offline
D.    active/active

Answer: AC

QUESTION 5
The Junos Pulse client connects to which two Juniper Networks services? (Choose two.)

A.    Junos Pulse Secure Access Service
B.    Junos Pulse Access Control Service
C.    Unified Threat Management
D.    Intrusion Detection Prevention

Answer: CD

QUESTION 7
Which two server instances would be used as secondary authentication servers on the Junos Pulse Secure Access Service? (Choose two.)

A.    RADIUS server
B.    anonymous server
C.    Active Directory server
D.    certificate server

Answer: AC

QUESTION 8
Which two statements describe the functionality of the client standalone installer? (Choose two.)

A.    All Windows clients are available as standalone installers, except Host Checker.
B.    Juniper Installer Service client deployment requires administrative privileges.
C.    Juniper Installer Service client can be deployed using the automated Microsoft Systems Management
Server (SMS) service.
D.    Clients deployed using Juniper Installer Service require post-installation machine reboot.

Answer: BC
Passing your Juniper JN0-355 Exam by using the latest Juniper JN0-355 Exam Demo Full Version: http://www.braindump2go.com/jn0-355.html

QUESTION 1
Click the Exhibit button. Referring to the exhibit, R1, R2, and R3 boot at the same time. Several minutes later, R4 boots.
After R4 has been online for 40 seconds, which router will be the OSPF designated router?
 
A.    R1
B.    R2
C.    R3
D.    R4

Answer: B

QUESTION 2
Click the Exhibit button.
routing-options {
router-id 10.10.1.2;
}
policy-options {
policy-statement loadbalance {
term 1 {
from {
route-filter 100.100.0.0/16 exact;
}
then {
load-balance per-packet;
}
}
}
}
Referring to the exhibit, you have configured a load balancing policy and the router has an equal cost path for traffic to 10.100.0.0/16.
What must you do to complete the load balancing configuration?

A.    Apply the policy as an export policy under the [edit forwarding-options] hierarchy.
B.    Apply the policy as an import policy under the [edit forwarding-options] hierarchy.
C.    Apply the policy as an export policy under the [edit routing-options forwarding-table] hierarchy.
D.    Apply the policy as an import policy under the [edit routing-options forwarding-table] hierarchy.

Answer: C

QUESTION 3
Click the Exhibit button. All OSPF routers shown in the exhibit booted at the same time, and the network has stabilized. How many adjacencies does R1 have?
 
A.    0
B.    1
C.    2
D.    3

Answer: C

QUESTION 4
Click the Exhibit button. You have two routers, R1 and R2, running OSPF in area 0. Router R1 is having problems with forming and adjacency with Router R2.
Referring to the exhibit, which statement is correct about the OSPF configuration in the Router R1 trace output?
 
A.    Router R1 has the wrong OSPF area configured.
B.    Router R2 has the wrong OSPF area configured.
C.    Router R1 has the wrong interface configured for OSPF.
D.    Router R2 has the wrong interface configured for OSPF.

Answer: B

QUESTION 5
Click the Exhibit button.
user@Switch-1# run show dhcp snooping binding
DHCP Snooping Information:
MAC address IP address Lease (seconds) Type VLAN Interface
00:26:88:02:74:89 172.28.1.4 – static default ge-0/0/9.0
00:26:88:02:74:86 172.28.1.2 86113 dynamic default ge-0/0/6.0
00:26:88:02:74:87 172.28.1.3 86378 dynamic default ge-0/0/7.0
DHCP snooping is implemented on an EX Series switch. The results display a static MAC to IP binding on interface ge-0/0/9 as shown in the exhibit.
Which statement is correct?

A.    MAC address 00:26:88:02:74:89 is a static MAC address configured for a host attached to interface ge-0/0/9.
B.    MAC address 00:26:88:02:74:89 is a static MAC address to IP address binding in the DHCP server.
C.    MAC address 00:26:88:02:74:89 is a static MAC address to IP address configured on the L3 interface ge-0/0/9.
D.    MAC address 00:26:88:02:74:89 is a static address assigned using the command set interface ge-0/0/9.0 mac-allowed 00:26:88:02:74:89.

Answer: A

QUESTION 6
Click the Exhibit button.
policy-statement load-balance {
from {
route-filter 172.24.0.0/24 exact;
route-filter 172.24.1.0/24 exact;
}
then {
load-balance per-packet;
}
}
Referring to the exhibit, which command or set of commands completes the configuration that will load balance packets to destinations 172.24.0.0 and 172.24.0.1?

A.    Set forwarding-options load-balance
B.    Set routing-options forwarding-table export load-balance
C.    Set protocols ospf area 0.0.0.0 policy load-balance
D.    Set protocols ospf area 0.0.0.0 load-balance
E.    Set forwarding-options export policy load-balance
F.    Set forwarding-options load-balance

Answer: B

QUESTION 7
Click the Exhibit button.
[edit]
user@router# show routing-options
graceful-restart {
disable;
}
[edit]
user@router# show protocols bgp
graceful-restart;
group my-group {
type internal;
local-address 192.168.1.1;
neighbor 192.168.1.2;
neighbor 192.168.2.2 {
graceful-restart {
disable;
}
}
}
You have configured your router as shown in the exhibit.
Which statement is true based on the graceful restart (GR) configuration?

A.    GR has been disabled globally for all protocols including BGP.
B.    GR is enabled for all BGP neighbors.
C.    GR is enabled only for BGP neighbor 192.168.1.2.
D.    GR is not supported with BGP.

Answer: C

QUESTION 8
Click the Exhibit button. Referring to the exhibit, which interfaces will receive a packet sent to MAC address 00:05:85:7F:EB. 80 from the user with IP address 10.10.10.10?
 

A.    0/0/3 and 0/0/22
B.    0/0/9 and 0/0/23
C.    0/0/3, 0/0/9, 0/0/22, and 0/0/23
D.    0/0/1, 0/0/3, 0/0/9, 0/0/22, and 0/0/23

Answer: A

QUESTION 9
You are using redundant trunk groups (RTG) on your network.
Which two statements accurately describe RTG? (Choose two.)

A.    RTG interfaces pass BPDU packets.
B.    Aggregate Ethernet (AE) interfaces cannot be part of an RTG.
C.    RTG is used as an alternative to STP/RSTP.
D.    RTG connects an access switch to two aggregation switches.

Answer: CD

QUESTION 10
Which two packet types are handled solely by the RE within an EX4200? (Choose two.)

A.    OSPF hellos
B.    DHCP relay
C.    STP BPDUs
D.    IP multicast traffic

Answer: AC

QUESTION 11
Which statement is correct regarding the VLAN factory-default configuration on an EX Series
switch?

A.    The default configuration assigns the default VLAN to use ID 0.
B.    The default configuration assigns the default VLAN to use ID 10.
C.    The default configuration assigns all switch ports to the default VLAN.
D.    The default configuration assigns the management port only to the default VLAN.

Answer: C

QUESTION 12
Under which hierarchy do you configure OSPF?

A.    [edit protocols ospf]
B.    [edit routing-options]
C.    [edit routing-protocols]
D.    [edit protocols igp]

Answer: D

QUESTION 13
You add a GRE tunnel to transport packets between two routers. After implementing this, you notice an increase in the number of dropped packets. While looking at packet captures, you notice that the do-not-fragment (DF) bit is set in the IP header of all the dropped packets.
What would cause this changed behavior?

A.    The GRE tunnel has a lower MTU than the physical interface.
B.    GRE tunnels do not support fragmentation.
C.    GRE tunnels do not support the DF bit.
D.    The GRE tunnel has a higher MTU than the physical interface.

Answer: A

QUESTION 14
Which three statements are correct about a Junos firewall filter? (Choose three.)

A.    It examines each packet individually.
B.    It tracks connections and allows you to specify an action to take on all packets within a flow.
C.    It requires you to configure the Junos operating system to explicitly allow traffic in both directions for each connection that you want to permit.
D.    It permits the initial connection and then automatically permits bidirectional communications for this connection.
E.    It is stateless in nature and is used by the software to control traffic passing through the device.

Answer: ACE
Passing your Juniper JN0-343 Exam by using the latest Juniper JN0-343 Exam Demo Full Version: http://www.braindump2go.com/jn0-343.html

QUESTION 1
Which network mask is the equivalent of 255.255.248.0?

A.    /20
B.    /21
C.    /22
D.    /23

Answer: B

QUESTION 2
Which login class permission will allow a user to use the telnet utility?

A.    Network permission
B.    Maintenance permission
C.    Supervisor permission
D.    Shell permission

Answer: A

QUESTION 3
Which command do you issue to upgrade the current software on Junos devices?

A.    request system software replace
B.    request system software install
C.    request system software add
D.    request system software upgrade

Answer: C

QUESTION 4
Which statement is true about terms in a policy?

A.    A single term can be applied to a protocol or interface, independent of the policy.
B.    Once configured, terms within a policy cannot be reordered.
C.    The name of a term is limited to five characters.
D.    A from statement is optional in a term.

Answer: D

QUESTION 5
What is the decimal equivalent of 10101010?

A.    182
B.    180
C.    172
D.    170

Answer: D

QUESTION 6
Two devices on an Ethernet segment sent frames at the same time causing a collision.
Which two statements are true? (Choose two.)

A.    Both devices stop transmitting, wait a random period of time, verify the wire is idle, and re- transmit.
B.    The device with the lowest MAC address is permitted to retransmit first.
C.    The device with the lowest MAC address sends a jam signal to notify all other devices of the collision.
D.    Both devices send a jam signal to notify all other devices of the collision.

Answer: AD

QUESTION 7
You issue the command telnet interface ge-1/1/0 10.10.10.1 source 192.168.100.1 bypass-routing.
Which statement is correct?

A.    The bypass-routing parameter is ignored when using private IP addressing.
B.    The telnet session will have the source IP address 10.10.10.1.
C.    The telnet session will connect to the neighboring device’s interface ge-1/1/0.
D.    Return traffic for the telnet session might not arrive at interface ge-1/1/0.

Answer: D

QUESTION 8
Which statement is true regarding the Junos OS?

A.    Each process runs in its own protected memory space ensuring that one process cannot directly interfere with another.
B.    Processes share memory space but use separate ASICs so that one process cannot directly interfere with another.
C.    A central processor called the IP2 Chip dynamically assigns memory as process needs fluctuate.
D.    The memory management daemon (mmd) is responsible for allocating new memory for processes as they request it.

Answer: A

QUESTION 9
Which two statements apply when a user has entered private configuration mode by typing configure private? (Choose two.)

A.    All users have their own active configuration.
B.    All users have their own private candidate configuration.
C.    When a user commits, all nonconflicting changes made by all users are committed.
D.    When a user commits, only the user’s own changes are committed.

Answer: BD

QUESTION 10
What is the default SNMP permission level on Junos devices?

A.    read
B.    read-write
C.    read-only
D.    write

Answer: C

QUESTION 11
Which two statements are true of a network mask? (Choose two.)

A.    A subnet mask specifies the portion of an IP address that is in a binary format.
B.    A subnet mask specifies the portion of an IP address that is in a decimal format.
C.    A subnet mask specifies the portion of an IP address that represents a network prefix.
D.    A subnet mask specifies the portion of an IP address that represents network hosts.

Answer: CD

QUESTION 12
Which statement is true regarding the Junos OS?

A.    The Junos kernel is based on the Solaris operating system.
B.    The Junos kernel is based on the GNU Zebra operating system.
C.    The Junos kernel is completely original and not based on any other operating system.
D.    The Junos kernel is based on the FreeBSD UNIX operating system.

Answer: D

QUESTION 13
How can you verify that you have correctly configured SSH access to your Junos device?

A.    user@router# show system services
B.    user@router> show configuration services
C.    user@router# show configuration system services
D.    user@router# show system login

Answer: A

QUESTION 14
Which statement is true regarding the password-recovery process?

A.    You must have a console connection.
B.    You cannot set the console port to an insecure mode.
C.    You must press the Enter key so that you can boot into single-user mode.
D.    When prompted to enter the full pathname of the shell, you must press the Enter key.

Answer: A

QUESTION 15
You are at the top of the hierarchy and must configure OSPF on interface so-0/0/0 unit 100.
Which two achieve this result? (Choose two.)

A.    set protocols
set ospf area 0
set interface so-0/0/0.100
B.    set protocols ospf area 0 interface so-0/0/0.100
C.    edit protocols ospf interface so-0/0/0.100
D.    edit protocols ospf area 0
set interface so-0/0/0.100

Answer: BD

QUESTION 16
Which statement describes an advantage of dynamic routing?

A.    Dynamic routing provides redundant IP addresses for end-user devices, unlike static routing.
B.    Dynamic routing requires no initial user configuration, unlike static routing.
C.    Dynamic routing provides DNS services along with IP connectivity; static routing does not.
D.    Dynamic routing typically requires less time to implement than static routing in a large network.

Answer: D

QUESTION 17
Which statement is true about the forwarding plane?

A.    It uses ASICs for increased performance.
B.    It is the intelligence of the platform.
C.    It maintains the routing tables.
D.    It is based on an x86 architecture.

Answer: A

QUESTION 18
Which two can be used to create and apply an export policy that advertises static routes to RIP neighbors? (Choose two.)

A.    set protocols rip export demo
B.    edit policy-options policy-statement demo
set term 1 from protocol static
set term 1 then accept
C.    edit policy-options policy-statement demo
set term 1 from protocol static accept
D.    set protocols rip group internal export demo

Answer: BD
Passing your Juniper JN0-102 Exam by using the latest Juniper JN0-102 Exam Demo Full Version: http://www.braindump2go.com/jn0-102.html