JN0-649 Exam Questions Get Updated [2024] with Correct Answers
Practice JN0-649 Questions With Certification guide Q&A from Training Expert Pass4guide
Juniper JN0-649 exam is a certification exam that measures the knowledge and skills of network engineers in enterprise routing and switching. Passing JN0-649 exam is a requirement for obtaining the Juniper Networks Certified Professional Enterprise Routing and Switching (JNCIP-ENT) certification. The JNCIP-ENT certification demonstrates an individual's expertise in designing and configuring complex enterprise-level networks using Juniper Networks technologies.
NEW QUESTION # 11
You ate configuring BGP policies for a site with a dual-homed connection as shown in the exhibit.
You must ensure that inbound traffic from Internet hosts flow through the ISP A connection.
Which statement is correct in this scenario?
- A. Apply a BGP export policy on R1 to assign a higher local preference value to routes advertised to ISP A.
- B. Apply a BGP export policy onR2to assign a lower origin value to routes advertised to ISP B.
- C. Apply a BGP export policy to R2 to prepend [65001 65001 65001 65001 65001] to the AS path of routes advertised to ISP B.
- D. Apply a BGP export policy on R1 to assign a lower MED value to routes advertised to ISP A.
Answer: C
NEW QUESTION # 12
The policy shown in the exhibit is applied as an export policy to your BGP neighborship.
Which action will be taken for route 12.233.45.5?
- A. It will be accomplished by term 1.
- B. It will be accepted by the default policy
- C. It will be rejected by term 2.
- D. It will be accepted by term 1.
- E. It will be evaluated by the next policy.
Answer: C
NEW QUESTION # 13
There are two BGP routes to 10.200.200.0/24 received from two external peers. Route 1 comes from a neighbor with a router ID of 10.10.100.1 and a peer IP address of 10.10.30.1, and route 2 comes from a neighbor with a router ID of 10.10.200.1 and a peer IP address of 10.10.50.1. Both routes have the same MED value, origin value, AS path length, and local preference number. In this scenario, which statement is correct about the active route?
- A. Route 1 will be active because of the peer IP address.
- B. Route 2 will be active because of the router ID.
- C. Route 1 will be active because of the router ID.
- D. Route 2 will be active because of the peer IP address.
Answer: B
NEW QUESTION # 14
You are troubleshooting connectivity between an EVPN spine switch configured as a route reflector and a leaf node with an IP address of 10.30.100.6.
Referring to the exhibit, what is the problem?
- A. The leaf node is not configured for the family evpn NLRI.
- B. The neighbor 10.30.100.6 statement is missing from spine1's configuration.
- C. The neighbor 10.30.100.3 statement is missing from leaf1's configuration.
- D. The spine node is not configured for the family inet NLRI.
Answer: D
NEW QUESTION # 15
You are using 802.1X in your access network consisting of EX Series switches. You recently had a failure with your RADIUS server which resulted in authenticating client devices being denied access to the network. You want to change this behavior so that authenticating clients are directed to a remediation VLAN. Which RADIUS server failback setting satisfies this requirement?
- A. permit
- B. deny
- C. sustain
- D. move
Answer: D
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/radius-server-configuration- ex-series-cli.html#id-configuring-radius-server-fail-fallback-cli-procedure Permit authentication, allowing traffic to flow from the end device through the interface as if the end device were successfully authenticated by the RADIUS server.
Deny authentication, preventing traffic from flowing from the end device through the interface.
This is the default.
Move the end device to a specified VLAN if the switch receives a RADIUS access-reject message. The configured VLAN name overrides any attributes sent by the server. (The VLAN must already exist on the switch.) Sustain authenticated end devices that already have LAN access and deny unauthenticated end devices. If the RADIUS servers time out during reauthentication, previously authenticated end devices are reauthenticated and new users are denied LAN access.
NEW QUESTION # 16
Which three MSTP parameters must match on all switches in the same MST region? (Choose three.)
- A. forwarding delay
- B. MSTI-to-VLAN mapping
- C. revision number
- D. configuration name
- E. bridge priority
Answer: C,D,E
NEW QUESTION # 17
You are troubleshooting connectivity between an EVPN spine switch configured as a route reflector and a leaf node with an IP address of 10.30.100.6.
Referring to the exhibit, what is the problem?
- A. The leaf node is not configured for the family evpn NLRI.
- B. The neighbor 10.30.100.6 statement is missing from spine1's configuration.
- C. The neighbor 10.30.100.3 statement is missing from leaf1's configuration.
- D. The spine node is not configured for the family inet NLRI.
Answer: D
NEW QUESTION # 18
Which protocol allows a switch to pass configuration information to an IP phone?
- A. LLDP-MED
- B. BFD
- C. IPv6
- D. VCCP
Answer: A
NEW QUESTION # 19
You are troubleshooting an EVPN-VXLAN IP fabric and observe the loop shown in the exhibit.
Which two steps would you take to further troubleshoot this problem? (Choose two.)
- A. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 3 routes are present.
- B. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 4 routes are present.
- C. Verify that the same ESI is configured on the link from the host and that it matches the source.
- D. Verify that the same ESI is configured on the two links from the source.
Answer: A,B
NEW QUESTION # 20
Referring to the exhibit, which statement is correct?
- A. The route is learned from only one neighbor.
- B. The route is learned from a multihop BGP session.
- C. The route is learned from a multipath BGP session.
- D. The route is learned from three different neighbors.
Answer: A
NEW QUESTION # 21
You are using 802.1X authentication in your network to secure all ports. You have a printer that does not support 802.1X and you must ensure that traffic is allowed to and from this printer without authentication.
In this scenario, what will satisfy the requirement?
- A. static MAC bypass
- B. MAC RADIUS
- C. MAC filtering
- D. MACsec
Answer: A
NEW QUESTION # 22
Which two authentication methods are available for OSPF on Juniper devices? (Choose two.)
- A. none
- B. Certificate
- C. RSA
- D. MD5 authentication
Answer: A,D
NEW QUESTION # 23
You are asked to implement fault tolerant RPs in your multicast network. Which two solutions would accomplish this behavior? (Choose two.)
- A. Use IGMPv3 with statically defined RPs.
- B. Use BFD with statically defined RPs.
- C. Use MSDP with statically defined RPs.
- D. Use anycast PIM with statically defined RPs.
Answer: C,D
NEW QUESTION # 24
You are configuring, the PVLAN feature on your switches. The PVLAN will span the two EX Series switches shown in the exhibit.
Which three configuration parameters must be enabled on the ports connecting the two switches?
(Choose three. )
- A. family inet
- B. interface-mode trunk
- C. interface-mode access
- D. family Ethernet-switching
- E. inter-switch-link
Answer: B,D,E
NEW QUESTION # 25
Click the Exhibit.
You have a workstation and VoIP phone connected to port ge-0/0/1 on an access switch.
Referring to the configuration shown in the exhibit, which statement is true?
- A. The phone will require a manual VLAN ID configuration.
- B. All frames that leave the switch on interface ge-0/0/1 will be dropped.
- C. Untagged frames that enter the switch on interface ge-0/0/1 will be dropped.
- D. The phone will not be able to communicate over the network.
Answer: A
NEW QUESTION # 26
You must ensure that all routes in the 10.0.0/8 address range are not advertised outside of your AS. Which well-known BGP community should be assigned to these addresses to accomplish this task?
- A. no-export
- B. no-advertise
- C. internet
- D. no-peer
Answer: A
NEW QUESTION # 27
You configured static mode power management on an EX4300 to provide PoE power to telephone and access point equipment.
Which statement is correct regarding the PoE power budget?
- A. The power budgeted will be based on the device class connected to each port.
- B. Power is budgeted to a port even if no device is connected to the port.
- C. Power is budgeted to devices on a first come, first served basis as devices are connected.
- D. The power budgeted to ports will adjust to how much power a device actually uses.
Answer: B
NEW QUESTION # 28
Referring to the outputs shown in the exhibit, which two statements are correct about the IS-IS adjacency? (Choose two.)
- A. R1 is configured to participate in Level 2 only.
- B. R1 is configured to participate in both Level 1 and Level 2.
- C. R2 is configured to participate in Level 2 only.
- D. R2 is configured to participate in both Level 1 and Level 2.
Answer: A,D
NEW QUESTION # 29
Which three statements are correct about EVPN route types? (Choose three.)
- A. Type 2 routes carry endpoint MAC address information.
- B. Type 2 routes carry endpoint IP address information.
- C. Type 5 routes carry replication information.
- D. Type 3 routes carry replication information.
- E. Type 1 routes carry endpoint MAC address information.
Answer: A,B,E
NEW QUESTION # 30
......
Prepare Top Juniper JN0-649 Exam Audio Study Guide Practice Questions Edition: https://www.pass4guide.com/JN0-649-exam-guide-torrent.html
Free Juniper JN0-649 Test Practice Test Questions Exam Dumps: https://drive.google.com/open?id=14rK6pRtPK22SP8_D__icwMwy20W8lSaj