Check the Free demo of our JN0-649 Exam Dumps with 195 Questions
Clear your concepts with JN0-649 Questions Before Attempting Real exam
NEW QUESTION # 93
You are asked to implement fault tolerant RPs in your multicast network. Which two solutions would accomplish this behavior? (Choose two.)
- A. Use anycast PIM with statically defined RPs.
- B. Use MSDP with statically defined RPs.
- C. Use IGMPv3 with statically defined RPs.
- D. Use BFD with statically defined RPs.
Answer: A,B
NEW QUESTION # 94
You want to provide Layer 2 connectivity between campus sites using Ethernet switches through a metro Ethernet service provider who is using Q-in-Q tagging on their network.
Referring to the exhibit, what are two design considerations in this environment? (Choose two.)
- A. L2PT is required on the SP network to support the spanning tree protocol.
- B. VXLAN could be implemented on your network across this service provider network.
- C. Each campus switch shown must have a C-Tag 300 configured.
- D. Each campus switch shown must have S-Tag 300 configured.
Answer: A,C
Explanation:
VXLAN , L2PT and S-Tag(service VLAN) are handled by ISP.
C-Tag (customer VLAN) is handled by customer. In fact, in customer view, 2 campus switches are direct connected to each others so that they have to configure same vlan info whatever it is trunk or access port.
NEW QUESTION # 95
Click the Exhibit button.
You have configured and applied the policer shown in the exhibit to your Junos device.
Which statement is true in this scenario?
- A. Traffic exceeding the committed-burst size will be marked with a loss priority of high.
- B. Traffic exceeding the committed-burst size will be discarded.
- C. Traffic exceeding the committed-information-rate will be rate limited.
- D. Traffic exceeding the excess-burst size will be discarded.
Answer: D
Explanation:
Red--Traffic that exceeds the burst size for peak traffic (EBS), single-rate marks packets with an implicit loss priority of high and, optionally, discards the packets.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/policer-single-rate-three- color.html
https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/topic- map/policer-single-rate-three-color.html
NEW QUESTION # 96
You must ensure that all management traffic sourced from your Junos devices is set with a specific DSCP code-point value.
Which action will accomplish this task?
- A. Apply the DSCP code-point to the [edit class-of-service host-outbound-traffic] hierarchy.
- B. Apply the DSCP code-point in an egress policer.
- C. Apply the DSCP code-point to a rewrite rule.
- D. Apply the DSCP code-point to the [edit class-of-service interface lo0.0] hierarchy
Answer: A
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/concept/cos-host-outbound-traffic- default-classification-and-dscp-remarking.html To change these default settings, include the forwarding-class class-name statement and the dscp-code-point value statement at the [edit class-of-service host-outbound-traffic] hierarchy level. This feature does not affect transit traffic or incoming traffic.
NEW QUESTION # 97
You are troubleshooting a route problem in the topology shown in the exhibit. The 10.30.0 0/24 route is not reachable from the R3 router. What would cause this problem?
- A. R4 is not advertising the 10.30.0.0/24 route to R3
- B. R3 does not have a route to the BGP next hop of 10.30.0.0/24
- C. R3 does not have an established BGP session with R4.
- D. R3 does not have an OSPF route for 10.30.0.0/24
Answer: B
NEW QUESTION # 98
In IS-IS advertising POUs with the overload bit has which effect?
- A. The local device's POUs are marked with a metric of 65535
- B. The ISIS adjacencies become passive
- C. The IS-IS adjacencies enter the "new" state
- D. The local device will no longer be used for transit traffic
Answer: D
NEW QUESTION # 99
Which three MSTP parameters must match on all switches in the same MST region? (Choose three.)
- A. MSTI-to-VLAN mapping
- B. forwarding delay
- C. bridge priority
- D. revision number
- E. configuration name
Answer: C,D,E
NEW QUESTION # 100
You recently implemented the configurations shown in the exhibit. After committing these changes, the community devices connected to AS-1 are not able to communication with the appropriate community devices connected to AS-2.
What must be to allow these community devices to communicate?
- A. You must configure the ge-0/0/1 interface on both switches the inter-switch links.
- B. You must configure the ge-0/0/10 interface on AS-1 as the inter-switch link.
- C. You must configure an isolation VLAN ID under the vlan-pri VLAN on both switches.
- D. You must configure an isolation VLAN ID under the vlan-pri vlan on the AS-2 switch.
- E. You must configure to allow the ge-0/0/1 interface on AS-1 as the inter-switch.
Answer: A
NEW QUESTION # 101
You are asked to configure 802.1X on your access ports to allow only a single device to authenticate.
In this scenario, which configuration would you use?
- A. single supplicant mode
- B. single-secure supplicant mode
- C. MAC authentication mode
- D. multiple supplicant mode
Answer: B
Explanation:
Single supplicant mode authenticates only the first end device that connects to an authenticator port. All other end devices connecting to the authenticator port after the first has connected successfully, whether they are
802.1X-enabled or not, are permitted access to the port without further authentication. If the first authenticated end device logs out, all other end devices are locked out until an end device authenticates. Single-secure supplicant mode authenticates only one end device to connect to an authenticator port. No other end device can connect to the authenticator port until the first logs out
NEW QUESTION # 102
Referring to the exhibit, how is R1learning the route from R2? R2 has an export policy with external type 2 configured.
- A. R2 has an interface policy with external type 1 configured.
- B. R2 has interface ge-0/0/2 configured as a passive interface under OSPFv3.
- C. R2 has interface ge-0/0 configured as a passive interface under OSPFv3.
- D. R2 has interface ge-0/0/2 configured in another area under OSPFv3.
Answer: A
NEW QUESTION # 103
You are asked to establish interface level authentication for users connecting to your network. You must ensure that only corporate devices, identified by MAC addresses, are allowed to connect and authenticate. Authentication must be handled by a centralized server to increase scalability.
Which authentication method would satisfy this requirement?
- A. captive portal
- B. 802.1X with single-secure supplicant mode
- C. MAC RADIUS
- D. 802.1X with multiple supplicant mode
Answer: C
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/mac-radius-authentication-switching-devices.html You can configure MAC RADIUS authentication on an interface that also allows 802.1X authentication, or you can configure either authentication method alone.
If both MAC RADIUS and 802.1X authentication are enabled on the interface, the switch first sends the host three EAPoL requests to the host. If there is no response from the host, the switch sends the host's MAC address to the RADIUS server to check whether it is a permitted MAC address. If the MAC address is configured as permitted on the RADIUS server, the RADIUS server sends a message to the switch that the MAC address is a permitted address, and the switch opens LAN access to the nonresponsive host on the interface to which it is connected.
NEW QUESTION # 104
You are asked to configure 802.1X on your access ports to allow only a single device to authenticate. In this scenario, which configuration would you use?
- A. single supplicant mode
- B. single-secure supplicant mode
- C. MAC authentication mode
- D. multiple supplicant mode
Answer: B
Explanation:
Single supplicant mode authenticates only the first end device that connects to an authenticator port. All other end devices connecting to the authenticator port after the first has connected successfully, whether they are 802.1X-enabled or not, are permitted access to the port without further authentication. If the first authenticated end device logs out, all other end devices are locked out until an end device authenticates.
Single-secure supplicant mode authenticates only one end device to connect to an authenticator port. No other end device can connect to the authenticator port until the first logs out
NEW QUESTION # 105
Referring to the exhibit, which statement is true?
- A. The current device is authenticated using MAC RADIUS
- B. Additional users will automatically be allowed to connect to ge-0/0/15
- C. Only 802. 1X authentication will be used for devices connecting to ge-0/0/15
- D. The current device was allowed after authentication attempts to the RADIUS server failed
Answer: D
NEW QUESTION # 106
You are implementing CoS for a custom application that is labeling its packets with DSCP code- point 101111. You have applied the configuration shown in the exhibit, but not that while some custom application traffic ingressin on ge-0/0/1 transits the SRX Series device successfully, packets ingressing all other ge-* interfaces are being dropped.
Which action should you take to solve this problem?
- A. Remove the BA classifier from all ge-interfaces.
- B. Configure a scheduler and scheduler map for expedited-forwarding and apply to all interfaces.
- C. Modify the BA classifier to assign code point 101111 to loss priority low.
- D. Apply the rate-limit-ef policer to all ge-interfaces.
Answer: D
NEW QUESTION # 107
Referring to the exhibit, you have placed the cos multifield classifier on all edge interfaces and configured the relevant CoS parameters.
In this scenario, which two statements are correct? (Choose two.)
- A. UDP traffic using the 16000 port will be placed in the best-effort forwarding class and accepted.
- B. SSH traffic using the default port will be placed in the af forwarding class and accepted.
- C. UDP traffic using the 16000 port will be placed in the voice forwarding class and accepted.
- D. SSH traffic using the default port will be placed in the best-effort forwarding class and accepted.
Answer: B,C
NEW QUESTION # 108
Referring to the exhibit, anycast RP is implemented to ensure multicast service availability. The source is currently sending multicast traffic using group 239.1.1.1 and R3 is receiving PIM register messages, but R2 does not have active source information. In this scenario, what are two methods to receive the active source information on R2? (Choose two.)
- A. Configure an RP set in PIM on R2 and R3, allowing the RPs to forward PIM register messages to the other RPs in the set.
- B. Configure an MSDP protocol between R2 and R3.
- C. Configure an MSDP protocol between R1 and R2.
- D. Configure an RP set in PIM on R1, allowing R1 to forward PIM register messages to R2 and R3 in the set.
Answer: A,D
NEW QUESTION # 109
Referring to the exhibit, ServerA sends a single IP packet destined to 10.0.0.127. Which two statements correctly describe the behavior of the resulting outbound VXLAN packets that contain the original packet destined to 10.0.0.127? (Choose two.)
- A. Router D will not replicate and send a copy of the received VXLAN packet to router E.
- B. Router E will replicate and send a copy of the received VXLAN packet to router D.
- C. Router C will send a single VXLAN packet to one remote VTEP.
- D. Router C will send a VXLAN packet destined only to router D and router E.
Answer: B,C
NEW QUESTION # 110
You are deploying IP phones in your enterprise networks. When plugged in, the IP phones must automatically negotiate the power requirements for the new connection with the EX Series switches.
In this scenario, which protocol should be used to enable this behavior?
- A. LLDP
- B. MP-BGP
- C. CDP
- D. LLDP-MED
Answer: D
Explanation:
LLDP-MED (Link Layer Discovery Protocol-Media Endpoint Discovery) is an extension of LLDP (Link Layer Discovery Protocol) that provides additional functionalities specifically for voice over IP (VoIP) devices, including automatic negotiation of power requirements. This protocol is essential for automatically negotiating power with IP phones when they are connected to EX Series switches.
Steps:
* Enable LLDP-MED:
set protocols lldp-med
* Configure LLDP-MED on the interfaces:
set interfaces ge-0/0/0 unit 0 family ethernet-switching port-mode access set interfaces ge-0/0/0 unit 0 family ethernet-switching interface-mode access set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members default set interfaces ge-0/0/0 unit 0 family ethernet-switching storm-control default
* Commit the configuration:
References:
* Useful Juniper Commands.txt
* Tech Ops Managed Router Juniper Install Guide
NEW QUESTION # 111
You are deploying IP phones in your enterprise networks. When plugged in, the IP phones must automatically negotiate the power requirements for the new connection with the EX Series switches. In this scenario, which protocol should be used to enable this behavior?
- A. LLDP
- B. MP-BGP
- C. CDP
- D. LLDP-MED
Answer: D
NEW QUESTION # 112
......
Get professional help from our JN0-649 Dumps PDF: https://www.testinsides.top/JN0-649-dumps-review.html
Give You Free Regular Updates on JN0-649 Exam Questions: https://drive.google.com/open?id=1lBt23oBWjWF7YcDtSWUxGWI9YcLlgIOE