Try JN0-649 Exam Valid Dumps with Instant Download Free Updates
JN0-649 Dumps First Attempt Guaranteed Success
NEW QUESTION # 16
You are asked to deploy 802.1X on your EX Series switches. You need to ensure authenticated devices continue to have access to the network even if the authentication server fails.
Which action meets this configuration objective?
- A. Configure the static MAC bypass for the authentication server.
- B. Configure the server fail fallback with a value of sustain.
- C. Set the reauthentication interval to a value of 0.
- D. Set the reauthentication interval to a value of disable.
Answer: B
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/concept/802-1x- pnac-divert-authentication-understanding-mx-series.html
NEW QUESTION # 17
Which two statements are true about PIM source-specific multicast (SSM)? (Choose two.)
- A. The receiver DR builds a source-base tree to the RP.
- B. A Different group address must be used by each source.
- C. S, G is always used.
- D. IGMPv3 is required.
Answer: C,D
NEW QUESTION # 18
You want to view the VLANs that have been created dynamically using MVRP. Which operational mode command will display this information?
- A. Show mvrp registration-state
- B. Show mvrp dynamic-vlan memberships
- C. Show mvrp interface
- D. Show mvrp applicant-state
Answer: B
NEW QUESTION # 19
Which two authentication methods are available for OSPF on Juniper devices? (Choose two.)
- A. Certificate
- B. none
- C. RSA
- D. MD5 authentication
Answer: B,D
NEW QUESTION # 20
When configuring connectivity to a VoIP enabled phone, which two statements are correct?
(Choose two.)
- A. The telephone device can signal to the switch which VLAN tag it will place on voice traffic.
- B. The switch can signal to the phone device which VLAN tag it should use for voice traffic.
- C. The switch places voice traffic in the expedited forwarding class by default.
- D. The switch places voice traffic in the best-effort forwarding class by default.
Answer: B,C
NEW QUESTION # 21
You recently committed a change to a router to reject OSPF routes sourced from area 10.
However, you are still seeing area 10 routes in the routing table. Referring to the exhibit, which statement is correct?
- A. The routes only timeout after 24 hours.
- B. The routes remain in the table until the routing daemon is restarted.
- C. The OSPF protocol is first matched by find-ospf and accepted.
- D. The routes remain in the table until the device is rebooted.
Answer: B
NEW QUESTION # 22
The connection between DC1 and DC2 is routed as shown in the exhibit.
In this scenario, which statement is correct?
- A. L3VPN must be enabled to advertise reachability.
- B. An IP prefix route provides encoding for intra-subnet forwarding.
- C. Type 2 and Type 5 routes will be exchanged between DC1 and DC2.
- D. The border devices must be able to perform Layer 3 routing and provide IRB functionality.
Answer: D
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/evpn-vxlan/topics/concept/evpn-route-type5-understanding.html
NEW QUESTION # 23
Referring to the exhibit, a PIM-SM network is set up to enable communication between multicast devices.
Which two statements are true? (Choose two.)
- A. Before the formation of the rendezvous-point tree, a join message is sent from R1 to R3.
- B. Before the formation of the rendezvous-point tree, an IGMP is sent from the Source to R5.
- C. Before the formation of the rendezvous-point tree, a join message is sent from R1 to R5.
- D. Before the formation of the rendezvous-point tree, an IGMP is sent from the Receiver to R1.
Answer: B,D
NEW QUESTION # 24
You are troubleshooting connectivity between an EVPN spine switch configured as a route reflector and a leaf node with an IP address of 10.30.100.6.
Referring to the exhibit, what is the problem?
- A. The neighbor 10.30.100.6 statement is missing from spine1's configuration.
- B. The neighbor 10.30.100.3 statement is missing from leaf1's configuration.
- C. The leaf node is not configured for the family evpn NLRI.
- D. The spine node is not configured for the family inet NLRI.
Answer: D
NEW QUESTION # 25
When configuring 802.1X authentication, what are three server fail fallback settings? (Choose three.)
- A. permit
- B. move
- C. sustain
- D. log
- E. count
Answer: A,B,C
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/radius-server-configuration- ex-series-cli.html#id-configuring-radius-server-fail-fallback-cli-procedure
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/radius-server-configuration- ex-series-cli.html Permit authentication, allowing traffic to flow from the end device through the interface as if the end device were successfully authenticated by the RADIUS server.
Deny authentication, preventing traffic from flowing from the end device through the interface.
This is the default.
Move the end device to a specified VLAN if the switch receives a RADIUS access-reject message. The configured VLAN name overrides any attributes sent by the server. (The VLAN must already exist on the switch.) Sustain authenticated end devices that already have LAN access and deny unauthenticated end devices. If the RADIUS servers time out during reauthentication, previously authenticated end devices are reauthenticated and new users are denied LAN access.
NEW QUESTION # 26
You are investigating reports of increased latency and discover that some routes cause customer traffic to traverse a route reflector instead of the optimal path.
Referring to the exhibit, which configuration statement would solve the problem?
- A. delete protocols bgp group BGP-MESH peer-as
- B. delete protocol bop group BGP-MESH export NH3
- C. set protocols bgp group BGP-HESH import NHS
- D. set policy-option, policy-statement NHS term BGP_ROUTES from external
Answer: D
NEW QUESTION # 27
Referring to the exhibit, which statement is correct?
- A. The route is learned from only one neighbor.
- B. The route is learned from three different neighbors.
- C. The route is learned from a multipath BGP session.
- D. The route is learned from a multihop BGP session.
Answer: A
NEW QUESTION # 28
You are using 802.1X authentication in your network to secure all ports. You have a printer that does not support 802.1X and you must ensure that traffic is allowed to and from this printer without authentication.
In this scenario, what will satisfy the requirement?
- A. MAC RADIUS
- B. MACsec
- C. static MAC bypass
- D. MAC filtering
Answer: C
NEW QUESTION # 29
The policy shown in the exhibit is applied as an export policy to your BGP neighborship.
Which action will be taken for route 12.233.45.5?
- A. It will be accepted by the default policy
- B. It will be accomplished by term 1.
- C. It will be evaluated by the next policy.
- D. It will be rejected by term 2.
- E. It will be accepted by term 1.
Answer: D
NEW QUESTION # 30
Which two statements are correct about the deployment of EVPN-VXLAN on QFX Series devices? (Choose two.)
- A. Type 1 route advertisements always have the single-active flag set to 1.
- B. Type 1 route advertisements always have the single-active flag set to 0.
- C. Junos OS supports ingress replication for BUM traffic forwarding.
- D. Junos OS supports underlay replication for BUM traffic forwarding.
Answer: C,D
NEW QUESTION # 31
You are currently using VLAN IDs 2 through 300 within your Layer 2 domain and you need to configure VSTP to prevent loops You must ensure that all VL ANs are loop free.
In this scenario, which statement is correct?
- A. You must ensure that the VLANs are balanced between two different root bridges.
- B. You must enable all VLANs, 2 through 300, under the VSTP configuration
- C. You must enable RSTP to account for all VLANs.
- D. You must ensure that the bridge priority is set to the lowest value on all switches in the Layer 2 domain.
Answer: B
NEW QUESTION # 32
......
100% Guarantee Download JN0-649 Exam Dumps PDF Q&A: https://braindumps.actual4exams.com/JN0-649-real-braindumps.html