Q1

Exhibit.

You are troubleshooting a route problem in the topology shown in the exhibit. The 10.30.0 0/24 route is not reachable
from the R3 router. What would cause this problem?

A. R3 does not have a route to the BGP next hop of 10.30.0.0/24

B. R4 is not advertising the 10.30.0.0/24route to R3
C. R3 does not have an established BGP session with R4.
D. R3 does not have an OSPF route for 10.30.0.0/24

Answer: A

Q2

which protocol is a multicast routing protocol?

A. OSPF
B. BGP
C. PIM
D. IS-IS

Answer: C

Q3

You ate deploying PIM source-specific multicast (SSM) for a new multicast messaging service. You have configured the
multicast source to use 236.44.123.100 as the multicast address. You are not able to join the PIM SSM multicast teed
Which two solutions would resolve this problem? (Choose two)

A. Add the multicast address to the (edit routing-options multicast ssm-map) stanza.
B. Reconfigure the multicast source to use an address in the range of 224.0.0 0 through 224.255.255.255.
C. Reconfigure the multicast source to use an address in the range of 232 0.0 0 through 232.255.255.255
D. Add the multicast address to the [edit routing-options multicast ssm-groups] stanza.

Answer: AC

Q4

Exhibit.
Referring to the exhibit, a RMSM network is set up to enable communication between multicast devices.
Which statement is true in this scenario?

A. After the formation of the shortest-path tree, a join message is sent from R2 to R1.
B. After the formation of the shortest-path tree, a join message is sent from R1 to R5
C. After the formation of the shortest-path tree, a prune message is sent from R1 to R2.
D. After the formation of the shortest-path free, a prune message is sent from R1 to R5.

Answer: C

Q5

You are implementing 802.1x authentication in your Layer 2 network. Each user will have a computer and a phone, and
you must ensure that both devices are authenticated individually.
In this scenario, which supplicant mode should be used?

A. Single-secure
B. Single
C. Captive-portal
D. multiple

Answer: B
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/802-1x-authentication-switching- devices.html

Q6

Exhibit.
Referring to the exhibit, you configured a new multicast classifier for the ge-1/2/0 interface ICMP traffic to the best- effort
queue and traffic from 190.168.20.0/24 to the expedited forwarding queue. You received noticed that some application is
not working after the change. Which configuration change will remedy the problem?

A. [edit firewall family inet filter ingress

User@host # set term 3 then accept

B. [edit firewall family inet filter ingress

User@host # set term 3 then next

C. [edit firewall family inet filter ingress

User@host # set term 2 from protocol tcp

D. [edit firewall family inet filter ingress

User@host # set term 2 from service-filter hit

Answer: A

Q7
Which two statements are true regarding bidirectional PIM? (Choose two)
A. It eliminates the need for an RP.
B. Devices only store group specific entries.
C. It uses multicast tunneling to forward traffic
D. Forwarding paths can be suboptimal

Answer: BD

Q8
Your IS-IS adjacency is not established as shown in the exhibit. What is the problem?
A. There is an invalid IPv6 router ID
B. There is an MTU mismatch
C. There is an invalid IPv4 router ID
D. There is an area mismatch

Answer: D

Q9

Exhibit.

You are investigating reports of increased latency and discover that some routes cause customer traffic to traverse a
route reflector instead of the optimal path.
Referring to the exhibit, which configuration statement would solve the problem?

A. set protocols bgp group BGP-HESH import NHS

B. delete protocols bgp group BGP-MESH peer-as
C. set policy-option, policy-statement NHS term BGP_ROUTES from external
D. delete protocol bop group BGP-MESH export NH3

Answer: C

Q10

Which statement is correct about MSTP?

A. MSTP enables mapping multiple independent spanning tree instances onto one physical topology
B. MSTP enables dynamic discovery of Layer 2 neighbors.
C. MSTP dynamically manages VLAN registration in a LAN
D. MSTP uses slacked VLAN tags to extend a Layer 2 Ethernet connection between multiple sites

Answer: A

Q11

Exhibit.

Referring to the exhibit, which TTL value will be sent to the LLDP neighbors?

A. 120 seconds
B. 200 seconds
C. 400 seconds
D. 90 seconds

Answer: A

Q12

Which three types of ports are used for Junos Fusion Enterprise? (Choose three.)
A. extended port
B. authenticated port
C. cascade port
D. uplink port
E. designated port

Answer: ACD

Q13

Exhibit.
You have applied the CoS configuration shown in the exhibit to an EX4300 switch.
Which two statements are true? (Choose two. )

A. All strict-high priority queues are serviced in a round-robin fashion as long as they have remaining credits
B. All strict-high priority queues are serviced in a round-robin fashion regardless of available credits.
C. Packets in low priority queues transmit only when start-high priority queues are empty
D. Packets in low priority queues are serviced when strict-high priority queues have no available credits

Answer: AC

Q14

Which two statements about BGP communities are true? (Choose two.)
A. A prefix can only belong to one community.
B. A prefix can belong to more than community.
C. A community is not a transitive attribute.
D. A BGP device can set, append, or modify the community of a route.

Answer: AD
Q15

Exhibit.

The policy shown in the exhibit is applied as an export policy to your BGP neighborship.
Which action will be taken for route 12.233.45.5?

A. It will be evaluated by the next policy.

B. It will be accomplished by term 1.
C. It will be accepted by term 1.
D. It will be rejected by term 2.
E. It will be accepted by the default policy

Answer: D

Q16

Which protocol is used for port-level access control and authentication?

A. MD5
B. IPsec
C. 802.1x
D. AES

Answer: C

Q17

What information is contained in an OSPF LSA header? (Choose two.)

A. protocol
B. options
C. length
D. subnet mask

Answer: BC

Q18

Exhibit.
You are authenticating user devices connected to your ex Series switch. You have 802.1X and MAC RADIUS configured
for all ports A user is complaining about the time it takes to connect their non-802.1X device on ge-0/0/15 using MAC
RADIUS authentication
Referring to the exhibit, what should be done to accelerate the authentication process?

A. Change the supplicant mode to multiple on ge-0/0/15

B. Configure the no-reauthentication feature for 802.1X on ge-0/0/15
C. Configure the restrict feature for MAC RADIUS on ge-0/0/15.
D. Change the 802.1X retry attempts value to 5 on ge-0/0/15

Answer: A

Q19

Exhibit.
Referring to the exhibit, which two statements are true regarding Q-in-Q tunneling? {Choose two)

A. The C-VLAN traffic will be encapsulated with an outer VLAN tag of 10.
B. The C-VLANs 100-200 will be sent as the inner VLAN tag
C. The C-VLAN 150 will be sent as the inner VLAN tag
D. The C-VLAN traffic will be encapsulated with an outer VLAN lag of 150

Answer: AB

Q20

Exhibit.
You have configured MSTP in your Layer 2 network. You are having problems with it establishing correctly.
Referring to the exhibit, what is causing the problem?

A. You must assign a context ID number other than zero

B. The MSTI-to-VLAN mapping does not match
C. The region name is not correct
D. The revision number is the same on both devices

Answer: B

Q21

Exhibit.
Referring to the exhibit, how is R1 learning the route from R2? R2 has an export policy with external type 2 configured.

A. R2 has interface ge-0/0 configured as a passive interface under OSPFv3.

B. R2 has interface ge-0/0/2 configured as a passive interface under OSPFv3.
C. R2 has an interface policy with external type 1 configured.
D. R2 has interface ge-0/0/2 configured in another area under OSPFv3.

Answer: C

Q22

In IS-IS advertising POUs with the overload bit has which effect?
A. The local device will no longer be used for transit traffic
B. The local device's POUs are marked with a metric of 65535
C. The ISIS adjacencies become passive
D. The IS-IS adjacencies enter the "new" state

Answer: A

Q23

You are deploying IP phones in your Layer 2 network and are asked to ensure that the switch sends VLAN and CoS
information to the IP phones automatically. In this scenario, which protocol should be used?
A. PoE
B. PoE+
C. LLDP
D. LLDP_MED

Answer: D

Q24
Exhibit.

YourNet is learning the 210.210.40.0/24 route from Provider A and Provider B YourNet would like to forward traffic
destined to the 210.210.40.0/24 networking using Provider B. Referring to the exhibit, how would you accomplish this
task?

A. Add the well-known no-export community to the routes learned through R2.
B. Apply an export policy to R1's IBGP peers to set a higher local preference.
C. Add the well-known no-export community to the routes learned through R1.
D. Apply an export policy to R2's IBGP peers to set a Their local preference.

Answer: D

Q25

You are redistributing static routes into an OSPF area.

Which two statement are true is this scenario? (Choose two.)

A. The external route advertisements have a domain scope.

B. The area must be stub area.
C. The area must be the backbone area.
D. The routes can be advertised in type LSAs.

Answer: CD
Q26

Exhibit.
Referring to the exhibit, which statement is correct*?

A. This router is an ASBR.

B. This router is an ABR.
C. This router is connected to 27 different areas.
D. This router originated the LSA.

Answer: D

Q27

You will have to route Layer 3 PVLAN traffic within the secondary VLAN. What is required to accomplish this task?
A. a community VIAN
B. an IRB
C. an FBF policy
D. an isolated VLAN

Answer: B

Q28
Exhibit.

Referring to the exhibit, on which three IS-IS routers will the attached bit be set? (Choose three. )

A. UR5
B. UR3
C. R2
D. R4
E. R6

Answer: BCE

Q29

Which two statements are true about IS-IS levels? (Choose two.)

A. Level 2 systems do not advertise Level 2 routes into a Level area by default.
B. Level 2 systems must use the loopback address as a part of the ISO network address.
C. Level 1 system only from adjacencies with other systems that have different area IDs.
D. Level 1 systems use a default route to reach AS external routes located in other areas.

Answer: D
Q30

When redistributing IGP routes into BGP. what information is used by default on Junos platforms to determine the BGP
route's MED attribute value?

A. routing information base

B. the IGP route preference
C. the IGP Metric
D. route protocol source

Answer: C

Q31

Exhibit.
You are implementing CoS for a custom application that is labeling its packets with DSCP code-point 101111. You have
applied the configuration shown in the exhibit, but not that while some custom application traffic ingressin on ge-0/0/1
transits the SRX Series device successfully, packets ingressing all other ge-* interfaces are being dropped.
Which action should you take to solve this problem?

A. Configure a scheduler and scheduler map for expedited-forwarding and apply to all interfaces.
B. Modify the BAclassifier to assign code point 101111 to loss priority low.
C. Remove the BA classifier from all ge-interfaces.
D. Apply the rate-limit-ef policer to all ge-interfaces.

Answer: D

Q32

You are implementing 802.1x access control in your network of EX Series switches. You have some older client devices
connecting to your network which do not support 802.1x. Which statement is true regarding the older devices?

A. By default, the supplicant will send EAP messages and keep the port in an unauthorized state.
B. By default, the authenticator will send EAP messages and keep the port in an unauthorized state.
C. By default, the supplicant will send EAP messages until it reaches a predefined limit, after which it begins to forward
traffic.
D. By default, the authenticator will send EAP messages until it reaches a predefined, after which it begins to forward
traffic.

Answer: C

Q33

Which type of BGP is used to peer with a different autonomous system?

A. external
B. classless
C. dynamic
D. static

Answer: A

Q34

You want to view the VLANs that have been created dynamically using MVRP.
Which operational mode command will display this information?

A. Show mvrp dynamic-vlan memberships

B. Show mvrp interface
C. Show mvrp registration-state
D. Show mvrp applicant-state

Answer: A

Q35

Exhibit.
You are adding VNI 101 to your EVPN-VXLAN network, but traffic is not being sent to received.

Referring to the exhibit, which configuration statement will solve the problem?

A. set routing-instances EVPN1 instance-type evpn

B. set routing-instances EVPN1 vxlan encapsulate-inner-vlan
C. set routing-instances EVPN1 bridge-domains BD-101 vxlan vni 101
D. set routing-instances EVPN1 vrf-table-label

Answer: A

Q36

Your network is configured for EVPN load balancing on three different access switches During an outage, you notice that
not all interfaces are receiving traffic as expected
Which two requirements would you validate to identify this problem? (Choose two )

A. Validate that the same esi value is only configured on one interface per switch
B. Validate that the same esi value is configured on multiple interfaces on all switches.
C. Validate that all-active is configured for only interface per switch
D. Validate that the all-active flag configured for multiple interfaces on each switch

Answer: CD

Q37

What are two supported PoE management modes? (Choose two.)

A. mixed
B. standalone
C. class
D. static

Answer: CD

Q38

What are three well-known mandatory BGP attributes? (Choose three.)

A. AS-path
B. community
C. origin
D. MED
E. next-hop

Answer: ACE

Q39

You are currently using VLAN IDs 2 through 300 within your Layer2 domain and you need to configure VSTP to prevent
loops You must ensure that all VL ANs are loop free.In this scenario, which statement is correct?

A. You must enable RSTP to account for all VLANs.

B. You must ensure that the VLANs are balanced between two different root bridges.
C. You must ensure that the bridge priority is set to the lowest value on all switches in the Layer 2 domain.
D. You must enable all VLANs, 2 through 300, under the VSTP configuration

Answer: D

Q40

Which EVPN route type is used for fast convergence and for advertising the split horizon label?
A. Type 4
B. Type 2
C. Type 1
D. Type 5

Answer: C

Q41

Click the Exhibit button

You are configuring an EVPN overlay to allow VLANs to be stretched between two campus sites, but EVPN routes are
not being exchanged Referring to the exhibit, which configuration statement would solve this problem?

A. Apply the set protocols bgp group EVPN family inet-vpn any configuration on MX1 and MX?
B. Apply the set protocols bgp group EVPN family EVPN signaling configuration on MX2.
C. Apply the delete protocols bgp group EVPN multipath multiple-an configuration on MX1 and MX2
D. Apply thedelete protocols bgp group EVPN cluster 172 .1.1. 53 configuration on MX2

Answer: B
Q42

Exhibit.
A router is attempting to form an OSPF neighborship with another router However, the OSPF neighborship tails to
establish completely Referring to the exhibit, what is the problem?

A. There 15 an OSPF area mismatch

B. There is an interface MTU mismatch
C. There is an interface subnet mask mismatch
D. There is an interface type mismatch

Answer: B

Q43

You receive the same 100.200.0/16 route from all four ISPs to which you are connected. Referring to the exhibit, which
ISP's route will be selected as active?
A. ISP-A
B. ISP-B
C. ISP-C
D. ISP-D

Answer: A

Q44

Exhibit.
Referring to the exhibit, whichtwo statements are true with regards to deploying CoS? (Choose two.)

A. You should apply BA classifiers on the point-to point interfaces of the routers.
B. You should apply MF classifiers on the LAN-facing interfaces of the routers
C. You should apply BAclassifiers on the LAN-facing interfaces of the routers
D. You should apply MF classifiers on the point-to-point interfaces of the routers

Answer: AB

Q45

Exhibit.
Referring to the log shown in the exhibit, what is the problem with the OSPF adjacency establishment?

A. The interface IP addresses on the subnet are duplicates.

B. There is an MDS authentication mismatch.
C. The referenced IP address does not exist on the network segment.
D. The OSPF database description packet is malformed.

Answer: A

Q46

Exhibit.
Referring to the configuration shown in the exhibit, how many of the routes received from 10.0.0.2 will be active in the
routing table?

A. 2
B. 8
C. 3
D. 5

Answer: C

Q47

Exhibit.
Referring to the exhibit, there are multiple ASM groups in the 224 0 0.0/4 range Which configuration change is needed to
ensure R1 is always the RP for group 224.224.1.1?

A. Increase the priority on R1 to higher than R2

B. Configure R1 with a higher localRP address
C. Set the priority on R1 to zero
D. Ensure R1 has a more specific group range

Answer: A

Q48

You are deploying IP phones to a customer site. The IP phones will be installed to share a common access port with the
user's desktop computer. You are required to provide a mechanism to place user data traffic and voice traffic in different
VLANs for class-service application. How would you implement this solution?

A. Configure flexible VLAN tagging on the user ports with the data and voice VLANs as members
B. Apply a multifield classifier on the access ports that assigns voice packets to the assured forwarding class, based on
the IP phone manufacturer's MAC QUI
C. Configure the IP phones to label voice traffic with the DSCP of code point and apply a BA classifier to the access ports
to classify voce traffic
D. Configure VLAN tagging on the IP phones and use the voice VLAN feature on the access ports to assign lagged
frames to the voice VLAN and untagged frames to a data VLAN

Answer: D
Q49

Exhibit.

Referring to the exhibit, which two statements are true? (Choose two )

A. There can be more than one OSPF neighbor on the ge-0/0/0 interface
B. There can be more than one OSPF neighbor on the ge-0/0/1 interface.
C. There is no need for a DR for the ge-0/0/0 interface.
D. The DR election process is not finished for the ge-0/0/0 interface

Answer: C

Q50
Exhibit.

Which two statements are true about the 802. 1X output shown in the exhibit? (Choose two.)

A. EAPoL traffic will not be sent out of the use ge-0/0/1 interface
B. EAPoL traffic will be sent out of the ge-0/0/1 interface.
C. The supplicant is authenticated using 802. 1X
D. The supplicant is not authenticated using 802. 1X

Answer: BD

Q51

You are enabling MSTP in your Layer 2 network to prevent loops.In this scenario, which three parameters must match on
all switches in the network? (Choose three. )

A. configuration name
B. bridge priority
C. MSTI-to-VLAN mapping
D. max age
E. revision level

Answer: ACE

Q52

Exhibit.
You recently implemented the configurations shown in the exhibit. After committing these changes, the community
devices connected to AS-1 are not able to communication with the appropriate community devices connected to AS-2.
What must be to allow these community devices to communicate?

A. You must configure to allow the ge-0/0/1 interface on AS-1 as the inter-switch.
B. You must configure the ge-0/0/10 interface on AS-1 as the inter-switch link.
C. You must configure the ge-0/0/1 interface on both switchesthe inter-switch links.
D. You must configure an isolation VLAN ID under the vlan-pri vlan on the AS-2 switch. E. You must configure an isolation
VLAN ID under the vlan-pri VLAN on both switches.

Answer: C
Q53

Your network has Junos Fusion configured with MX960 routers as aggregation devices (AD) and QFX5100 switches as
satellite devices (SO) Which two statements are coned in this scenario? (Choose two )

A. The AD runs the Junos software for all its connectedSDs.

B. The Fusion extended ports are configured on the SDs.
C. SDs are added to the AD by configuring the cascade port on the AD.
D. All SDs connected to a single AD must use the same software version.

Answer: BC

Q54

You are designing a multicast topology to supportIPv4 IPTV broadcasts in your organization. The design should support
multiple multicast senders with overlapping group addresses while preventing interference between them. Client devices
currently do not support IGMPv3.
Which approach would fulfill these requirements?

A. Implement PIM-SM and SSM with SSM maps to support IGMPv2 clients
B. Implement bidirectional PIM
C. Assign group addresses in the 224/4 range and implement PIM-DM
D. Implement MLD

Answer: C

Q55

Packets enter a Juniper device and are classified as best effort. During the processing of the packet, the classification of
the packets is changed to expedited forwarding by a multi-field classifier. The device is using the default CoS policies
Which statement is true in this scenario?

A. The packet is forwarded according to the new packet classification, and the DSCP bits are rewritten to the new class.
B. The packet is forwarded according to the new packet classification, and the DSCP bits do not change.
C. The packet is forwarded according to the original packet classification, and the DSCP bits do not change.
D. The packet is forwarded according to the original packet classification, and the DSCP bits are rewritten to the new
class.

Answer: B

Q 56

What is the correct authentication processing order on EX Series switches when multiple Layer 2 authentication methods
are enabled?

A. captive portal-> MAC RADIUS -> 802.1x

B. 802.1x-> captive portal -> MAC RADIUS
C. MAC RADIUS -> 1x -> captive portal
D. 802.1x -> MAC RADIUS -> captive portal

Answer: D

Q57

A BA classifier, input policer, and a multifield classifier are applied to an interface in which order are these features
processed?

A. policer -> BA classifier -> multifield classifier

B. BA classifier -> multifield classifier -> policer
C. multifield classifier -> BA classifier -> policer
D. policer > multifield classifier -> BA classifier

Answer: A

Q58

You have PIM SM multicast configure and running in a network environment comprised of EX4300 devices. Your
customer report increased delay when switching channels using IPTV. To help decrease the delay, you implement PIM
join balancing. You add the set protocol pim join-load-balance command to the configuration. After committing, you notice
that the flows are still using one path. In this scenario, which statement is correct?

A. The interface must be specified to use for load balancing

B. PIM join load-balancing also be configured.
C. IGMP snooping must be configured.
D. The clear pim join-distribution command must be issued.

Answer: D

Q59

Exhibit.
You ate configuring BGP policies for a site with a dual-homed connection as shown in the exhibit. You must ensure that
inbound traffic from Internet hosts flow through the ISP A connection.
Which statement is correct in this scenario?

A. Apply a BGP export policy on R1 to assign a lower MED value to routes advertised to ISP A.
B. Apply a BGP export policy on R1 to assign a higher local preference value to routes advertised to ISP A.
C. Apply a BGP export policy onR2to assign a lower origin value to routes advertised to ISP B.
D. Apply a BGP export policy to R2 to prepend [65001 65001 65001 65001 65001] to the AS path of routes advertised to
ISP B.

Answer: D

Q60

You are 802.1X supplicant, but traffic must be accepted once the user has authenticated their computer on the port In this
scenario, which supplicant mode should be used?

A. single-secure
B. single
C. multiple
D. captive-portal

Answer: B

Q61
Which two statements are correct about a functional ESI LAG interface? (Choose two )

A. The LACP system ID must be different

B. The LACP system ID must be the same
C. The ESI values must be the same
D. The ESI values must be different

Answer: BC

Q62

Exhibit.

You are configuring BGP policies for a site with a dual-homed connection as shown In the exhibit. You need all outbound
traffic to egress the network through the link to ISP B by default. The ISPs should not be able to override this behavior
through BGP attributes. Which BGP attribute would you modify on the ISP-received routes to accomplish this objective?

A. local preference
B. next-hop
C. MED
D. origin

Answer: A

Q63

Exhibit.
Referring to the exhibit, which statement is true?

A. Only 802. 1X authentication will be used for devices connecting to ge-0/0/15

B. The current device is authenticated using MAC RADIUS
C. Additional users will automatically be allowed to connect to ge-0/0/15
D. The current device was allowed after authentication attempts to the RADIUS server failed

Answer: D

Q64

Exhibit.
You are configuring, the PVLAN feature on your switches. The PVLAN will span the two EX Series switches shown in the
exhibit
Which three configuration parameters must be enabled on the ports connecting the two switches? (Choose three)

A. family inet
B. interface-mode access
C. interface-mode trunk
D. family Ethernet-switching
E. inter-switch-link

Answer: CDE

Q65

When configuring class of services, what would be you use to allocate bandwidth to a forwarding class?
A. buffer depth
B. transmit rate
C. bandwidth
D. speed

Answer: B