Juniper JN0-648 Free Practice Questions

NEW QUESTION 1
What is the correct authentication processing order on EX Series switches when multiple Layer 2 authentication methods are enabled?

• A. captive portal-> MAC RADIUS -> 802.1x
• B. 802.1x-> captive portal -> MAC RADIUS
• C. MAC RADIUS -> 1x -> captive portal
• D. 802.1x -> MAC RADIUS -> captive portal

Answer: D

NEW QUESTION 2
Click the Exhibit button.

During an outage, you review the status of the Q-in-Q implementation on VLAN 300. Referring to the exhibit, what would be the cause of the outage?

• A. The S-VLAN is disabled.
• B. The VLAN range overlaps.
• C. The C-VLANs are disabled.
• D. There are no active ports.

Answer: D

NEW QUESTION 3
When configuring 802.1X authentication, what are three server fail fallback settings? (Choose three.)

• A. log
• B. sustain
• C. permit
• D. count
• E. move

Answer: BCE

NEW QUESTION 4
Click the Exhibit button.

You are configuring BGP policies for a site with a dual-homed connection as shown in the exhibit. You must ensure that inbound traffic from Internet hosts flow through the ISP A connection.
Which statement is correct in this scenario?

• A. Apply a BGP export policy on R1 to assign a lower MED value to routes advertised to ISP A
• B. Apply a BGP export policy on R1 to assign a higher local preference value to routes advertised to ISP A
• C. Apply a BGP export policy onR2to assign a lower origin value to routes advertised to ISP B
• D. Apply a BGP export policy to R2 to prepend [65001 65001 65001 65001 65001] to the AS path of routes advertised to ISP B

Answer: D

NEW QUESTION 5
You are implementing 802.1x authentication in your Layer 2 network. Each user will have a computer and a phone and you must ensure that both device are authenticated individually.
In this scenario, which supplicant mode should be used?

• A. Single-secure
• B. Single
• C. Captive-portal
• D. multiple

Answer: B

NEW QUESTION 6
You have an IPv4 multicast network configured as PIM-SM. What must be done before replacing your static RP with auto-RP?

• A. Enable sparse-dense mode on each of the routers in the network.
• B. Configure auto-RP domains on each router in the network.
• C. Configure each router in the network as a candidate BSR.
• D. Enable each router in the network to forward multicast packets.

Answer: A

NEW QUESTION 7
You have multiple BGP routes to the same prefix with equal local-preference values and AS-path lengths. In this scenario, which route will be preferred in the route selection process?

• A. The route with the least preferred origin value.
• B. The route with the lowest MED value.
• C. The route with the most preferred origin value.
• D. The route with the highest MED value.

Answer: C

NEW QUESTION 8
Your network is configured for EVPN load balancing on three different access switches During an outage, you notice that not all interfaces are receiving traffic as expected
Which two requirements would you validate to identify this problem? (Choose two )

• A. Validate that the same esi value is only configured on one interface per switch
• B. Validate that the same esi value is configured on multiple interfaces on all switches.
• C. Validate that all-active is configured for only interface per switch
• D. Validate that the all-active flag configured for multiple interfaces on each switch

Answer: BD

NEW QUESTION 9
Exhibit.


You have applied the CoS configuration shown in the exhibit to an EX4300 switch. Which two statements are true? (Choose two. )

• A. All strict-high priority queues are serviced in a round-robin fashion as long as they have remaining credits
• B. All strict-high priority queues are serviced in a round-robin fashion regardless of available credits.
• C. Packets in low priority queues transmit only when start-high priority queues are empty
• D. Packets in low priority queues are serviced when strict-high priority queues have no available credits

Answer: AC

NEW QUESTION 10
which protocol is a multicast routing protocol?

• A. OSPF
• B. BGP
• C. PIM
• D. IS-IS

Answer: C

NEW QUESTION 11
What information is contained in an OSPF LSA header? (Choose two.)

• A. protocol
• B. options
• C. length
• D. subnet mask

Answer: BC

NEW QUESTION 12
You are designing a multicast topology to support IPv4 IPTV broadcasts in your organization. The design should support multiple multicast senders with overlapping group addresses while preventing interference between them. Client devices currently do not support IGMPv3.
Which approach would fulfill these requirements?

• A. Implement PIM-SM and SSM with SSM maps to support IGMPv2 clients
• B. Implement bidirectional PIM
• C. Assign group addresses in the 224/4 range and implement PIM-DM
• D. Implement MLD

Answer: C

NEW QUESTION 13
Which protocol is used for port-level access control and authentication?

• A. MD5
• B. IPsec
• C. 802.1x
• D. AES

Answer: C

NEW QUESTION 14
Click the Exhibit button.

You are investigating reports of increased latency and discover that some routes cause customer traffic to traverse a route reflector instead of the optimal path.
Referring to the exhibit, which configuration statement would solve the problem?

• A. delete protocols bgp group BGP-MESH peer-as
• B. set policy-options policy-statement NHS term BGP_ROUTES from external
• C. set protocols bgp group BGP-MESH import NHS
• D. delete protocols bgp group BGP-MESH export NHS

Answer: B

NEW QUESTION 15
Exhibit.

You are authenticating user devices connected to your ex Series switch. You have 802.1X and MAC RADIUS configured for all ports A user is complaining about the time it takes to connect their non-802.1X device on ge-0/0/15 using MAC RADIUS authentication
Referring to the exhibit, what should be done to accelerate the authentication process?

• A. Change the supplicant mode to multiple on ge-0/0/15
• B. Configure the no-reauthentication feature for 802.1X on ge-0/0/15
• C. Configure the restrict feature for MAC RADIUS on ge-0/0/15.
• D. Change the 802.1X retry attempts value to 5 on ge-0/0/15

Answer: A

NEW QUESTION 16
You are asked to deploy 802.1X on your EX Series switches. You need to ensure authenticated devices continue to have access to the network even if the authentication server fails.
Which action meets this configuration objective?

• A. Configure the server fail fallback with a value of sustain.
• B. Set the reauthentication interval to a value of 0.
• C. Configure the static MAC bypass for the authentication server.
• D. Set the reauthentication interval to a value of disable.

Answer: A

NEW QUESTION 17
When redistributing IGP routes into BGP. what information .s used by default on Junos platforms to determine
the BGP route's MED attribute value?

• A. routing information base
• B. the IGP route preference
• C. the IGP Metric
• D. route protocol source

Answer: C

NEW QUESTION 18
You are deploying IP phones in your Layer 2 network and are asked to ensure that the switch sends VLAN and CoS information to the IP phones automatically.
In this scenario, which protocol should be used?

• A. PoE
• B. PoE+
• C. LLDP
• D. LLDP_MED

Answer: D

NEW QUESTION 19
You want to view the VLANs that have been created dynamically using MVRP. Which operational mode command will display this information?

• A. Show mvrp dynamic-vlan memberships
• B. Show mvrp interface
• C. Show mvrp registration-state
• D. Show mvrp applicant-state

Answer: A

NEW QUESTION 20
You are redistributing static routes into an OSPF area. Which two statement are true is this scenario? (Choose two.)

• A. The external route advertisements have a domain scope.
• B. The area must be stub area.
• C. The area must be the backbone area.
• D. The routes can be advertised in type 7 LSAs.

Answer: CD

NEW QUESTION 21
......