Juniper Networks Certified Internet Specialist (JNCIS-ENT) (JN0-343) Free Practice Test

Question 1

You need to prevent people outside the 192.168.1.0/24 network from accessing your Junos device using FTP.
Which configuration, when applied to interface lo0.0, will provide the desired result?

A. firewall {
family inet {
filter protect-host {
term limit-ftp {
from {
source-address {
192.168.1.0/24;
}
port ftp;
}
then discard;
}
}
}
}

B. firewall {
family inet {
filter protect-host {
term limit-ftp {
from {
source-address {
192.168.1.0/24 except;
0.0.0.0/0;
}
port ftp;
}
then discard;
} } } }

C. firewall {
family inet {
filter protect-host {
term limit-ftp {
from {
source-address {
192.168.1.0/24 except;
0.0.0.0/0;
}
protocol tcp;
port ftp;
}
then discard;
}
term all-else {
then accept;
}
}
}
}

D. firewall {
family inet {
filter protect-host {
term limit-ftp {
from {
source-address {
192.168.1.0/24;
} protocol tcp; port ftp; } then discard; } term all-else { then accept; } } } }

Correct Answer: C

Question 2

Which two statements about GRE tunnels are true? (Choose two.)

A. GRE adds overhead of 16 bytes per packet.

B. GRE can be used to tunnel non-IP protocols, such as IPX.

C. GRE can be used to tunnel IPv6 traffic.

D. GRE can provide encrypted communication.

Correct Answer: B,C

Question 3

Which configuration will cause IPv4 interface routes from inet.0 to appear in the myinstance routing instance?

A. routing-options {
rib-groups {
interface-routes {
import-rib [ inet.0 myinstance.inet.0 ];
}
}
}

B. routing-options {
interface-routes {
rib-group inet myribgroup;
}
rib-groups {
myribgroup {
export-rib inet.0;
import-rib myinstance.inet.0;
}
}
}

C. routing-options {
interface-routes {
rib-group inet myribgroup;
}
rib-groups {
myribgroup {
import-rib [ inet.0 myinstance.inet.0 ];
}
}
}

D. routing-options {
interface-routes {
import into myinstance.inet.0;
}
}

Correct Answer: C

Question 4

Which three configurations are required for an operational routed VLAN interface (RVI)? (Choose three.)

A. {master:0}[edit]
user@ex# show vlans v10
vlan-id 10;
interface {
ge-0/0/1.0;
} l3-interface vlan.10;

B. {master:0}[edit]
user@ex# show ethernet-switching vlan-map
vlan-id 10;
interface {
ge-0/0/1.0;
}

C. {master:0}[edit]
user@ex# show interfaces rvi.1
interface {
ge-0/0/1.0;
}

D. {master:0}[edit]
user@ex# show interfaces ge-0/0/1
unit 0 {
family ethernet-switching;
}

E. {master:0}[edit]
user@ex# show interfaces vlan.10
family inet {
address 192.168.10.1/24;
}

Correct Answer: A,D,E

Question 5

UESTION NO: 191
You want to configure per-flow equal-cost multipath (ECMP) load balancing for only the OSPF routes on Router-1. Which configuration example accomplishes this?

A. routing-options {
forwarding-table {
export ECMP;
}
}
policy-options {
policy-statement ECMP {
term first {
from protocol ospf;
then {
load-balance ECMP;
}
}
}
}

B. routing-options {
export ECMP;
}
policy-options {
policy-statement ECMP {
term first {
from protocol ospf;
then {
load-balance per-packet;
}
}
}
}

C. protocols {
ospf {
export EMCP;
}
}
policy-options {
policy-statement ECMP {
term first {
from protocol ospf;
then {
load-balance per-packet;
}
}
}
}

D. routing-options {
forwarding-table {
export ECMP;
}
}
policy-options {
policy-statement ECMP {
term first {
from protocol ospf;
then {
load-balance per-packet;
}
}
}
}

Correct Answer: D

Question 6

You are asked to ensure that an unauthorized switch running spanning tree cannot be added to any edge port on your EX Series switch. The ports must discard any incoming spanning tree packets but the interface must continue to forward traffic.
What should you do to accomplish the behavior?

A. Enable root protection and use the drop feature.

B. Enable BPDU protection.

C. Enable root protection.

D. Enable BPDU protection and use the drop feature.

Correct Answer: D

Question 7

By default, how is the best IGP path determined when there are multiple equal-cost paths to a destination?

A. random choice

B. highest next-hop IP address

C. most recent one learned

D. first one learned

Correct Answer: A

Question 8

Which configuration provides dynamic ARP inspection on access port ge-0/0/0?

A. secure-access-port {
interface ge-0/0/0.0 {
dhcp-trusted;
}
vlan vlan10 {
arp-inspection;
examine-dhcp;
}
}

B. secure-access-port {
interface ge-0/0/0.0 {
static-ip 255.255.255.255
}
vlan vlan10 {
arp-inspection;
}
}

C. secure-access-port {
interface ge-0/0/0.0 {
no-dhcp-trusted;
}
vlan vlan10 {
dynamic-arp-inspection;
examine-dhcp;
}
}

D. secure-access-port {
interface ge-0/0/0.0 {
dhcp-trusted;
}
vlan vlan10 {
dynamic-arp-inspection;
}
}

Correct Answer: A

Question 9

-- Exhibit - -- Exhibit -

Referring to the exhibit, if all four switches in the Virtual Chassis boot at the same time, which of the members will assume the master and the backup Routing Engine roles?

A. Member 0 and Member 2 will participate in an election process to determine the master and the backup.

B. Member 0 will be the master and Member 2 will be the backup based on the serial number.

C. Member 2 will be the master and Member 0 will be the backup based on the serial number.

D. The configuration is missing a priority statement to make the determination.

Correct Answer: A

Question 10

At which configuration hierarchy level is a static bridge table entry configured?

A. [ protocols ]

B. [ forwarding-options ]

C. [ ethernet-switching-options ]

D. [ interfaces interface-name ]

Correct Answer: C

Question 11

Two routers have established a peering using EBGP over a single T1 link.
How often will the routing table be synchronized between the two routers?

A. when a notification message is received

B. when an update message is received

C. every 30 minutes

D. every 30 seconds

Correct Answer: B

Question 12

Which statement describes how root protection protects your network?

A. It is enabled on a switch and uses BPDUs to negotiate a better bridge priority than its neighbors.

B. It ignores superior BPDUs from being accepted on a protected interface.

C. It changes protected ports to the blocking state if they receive superior BPDUs.

D. It dynamically modifies the STP bridge priority to the best value in your network.

Correct Answer: C

Question 13

What is the primary purpose of the LLDP-MED?

A. It communicates the provisioned VLAN ID to the peer device.

B. It authenticates the peer device.

C. It eliminates the need for a spanning tree.

D. It learns the MAC address of the peer device.

Correct Answer: A

Welcome to TestSimulate

Juniper Networks Certified Internet Specialist (JNCIS-ENT) (JN0-343) Free Practice Test