Which two actions would you perform when you are in the operational mode of the CLI? (Choose two.)
Answer(s): A,C
The Junos Command Line Interface (CLI) is strictly partitioned into operational and configuration modes to maintain a clear boundary between monitoring and administrative changes. Operational mode, identified by the > prompt, is designed for executing commands that monitor device status, troubleshoot network connectivity, and manage the physical system state. One typical administrative task performed here is clearing log files (using the clear log command) to free up storage space or reset diagnostic data during troubleshooting.Additionally, high-level system requests that do not alter the persistent configuration database, such as rebooting the hardware, are executed in operational mode. The request system reboot command allows the administrator to gracefully restart the device after a software update or as part of a maintenance cycle. In contrast, actions such as configuring routing protocols or committing changes require transitioning to configuration mode (the # prompt). Committing a configuration is the specific act of moving changes from the candidate database to the active database, which is a logic-altering event strictly reserved for configuration mode. Therefore, operational mode remains the dedicated environment for real-time observation and system-level requests that ensure the device operates correctly within its existing parameters. Reference:User Interfaces, CLI Modes, Operational Mode Commands.
Which statement about class of service (CoS) in a network is correct?
Answer(s): B
Class of Service (CoS) is a fundamental suite of features in Junos OS designed to manage traffic patterns during periods of network congestion. Rather than treating all packets equally, CoS allows the Packet Forwarding Engine (PFE) to differentiate between various types of traffic—such as latency-sensitive Voice over IP (VoIP), critical routing protocol updates, and standard "best-effort" internet traffic—and prioritize them accordingly.When egress interface buffers become saturated,the CoS mechanism uses defined schedulers and queues to ensure that high-priority packets are transmitted first, while less critical traffic may be delayed or dropped.It is important to distinguish CoS from security or addressing functions. CoS does not provide encryption services (which is the role of IPsec or MACsec), nor does it manage IP address allocation or VLAN segmentation. Instead, it focuses entirely on the intelligent allocation of bandwidth and buffer resources. By implementing CoS, network architects can guarantee a specific level of performance for mission-critical applications, effectively minimizing jitter and packet loss for the most important data streams. This deterministic behavior is vital for modern converged networks where multiple traffic types compete for limited hardware resources across the switch fabric or WAN links. Reference:Junos OS Fundamentals, Class of Service (CoS) Overview.
Which two functions are performed by the PFE? (Choose two.)
Answer(s): B,D
The Packet Forwarding Engine (PFE) represents the data plane of a Junos device, responsible for the high-speed processing and movement of packets through the system. Its primary role is to forward transit traffic—data that enters one interface and exits another—at wire speed using specialized hardware such as Application-Specific Integrated Circuits (ASICs). To accomplish this, the PFE utilizes a local copy of the Forwarding Information Base (FIB) provided by the Routing Engine, ensuring that forwarding decisions are made locally without requiring the main CPU's intervention for every packet.In addition to pure forwarding, the PFE is the functional component that implements and executes firewall filters and policing. Because firewall filters must be applied to transit traffic at line rate to prevent bottlenecks, the PFE evaluates incoming and outgoing packets against configured filter terms in hardware. This ensures that security policies and traffic shaping are applied with minimal latency. It is critical to note that the PFE does not maintain the master routing table (RIB) or perform route selection; those "intelligent" control plane functions are strictly the domain of the Routing Engine. By offloading the repetitive tasks of packet inspection and hardware forwarding to the PFE, Junos OS maintains consistent performance even under heavy traffic loads or complex security configurations. Reference:Junos OS Fundamentals, Packet Forwarding Engine Architecture.
Which command would you use to gracefully power off a Junos device?
Answer(s): D
Maintaining the integrity of the Junos OS file system is a critical operational requirement, especially during maintenance that involves removing power from the hardware. To achieve a graceful power-down, the request system halt command must be used. This command initiates a systematic shutdown of all running software processes and daemons, flushes any pending data from the system's volatile memory (RAM) to the solid-state storage or hard disk, and unmounts the file systems correctly. Once the software has safely shut down, the console will typically display a message indicating that it is safe to turn off the physical power switch or remove the power cables.Using request system halt prevents potential file system corruption that can occur if power is abruptly cut while the OS is actively writing logs or configuration data. This is distinct from request system reboot, which restarts the OS, or request system logout, which merely terminates the current CLI session. As a Senior Architect, it is essential to follow this procedure to ensure that the device remains in a reliable state for its next power-on cycle. For devices equipped with dual Routing Engines, the command can often be directed to a specific member or both simultaneously to ensure a synchronized and safe shutdown of the entire chassis. Reference:Operational Monitoring and Maintenance, System Halt and Reboot Procedures.
Which two statements about firewall filters are correct? (Choose two.)
In Junos OS, standard firewall filters operate as a primary security and traffic management tool within the forwarding plane. These filters are fundamentally stateless, meaning they evaluate each packet individually and in isolation without maintaining a session table or tracking the state of network connections. This stateless nature allows the Packet Forwarding Engine (PFE) to process filters at hardware speeds, ensuring minimal latency for transit traffic. This distinguishes them from the stateful security policies found on Junos security devices like the SRX Series, which track the entire lifecycle of a flow.Furthermore, firewall filters are designed to inspect and match header information up to Layer 4 of the OSI model. This capability allows administrators to define terms based on parameters such as source and destination IP addresses (Layer 3) as well as TCP or UDP port numbers and protocol types (Layer 4).While they provide granular control over packet flow, they do not natively inspect Layer 7 application payloads, which is typically reserved for advanced services like Intrusion Detection and Prevention (IDP). By combining stateless execution with Layer 4 matching, Junos firewall filters provide an efficient method for implementing transit protection, rate limiting through policing, and protecting the local Routing Engine through loopback interface filtering. Reference:Routing Policy and Firewall Filters, Firewall Filter Framework.
Which statement describes the purpose of configuring traceoption log files in Junos OS?
Traceoptions represent an essential diagnostic facility within Junos OS, primarily used by network engineers for deep-level troubleshooting and protocol analysis. The fundamental purpose of configuring traceoption log files is to enable detailed debugging of specific protocols—such as BGP, OSPF, or IS-IS—or specific system processes like the Routing Protocol Process (rpd).When enabled, the system captures detailed information about the internal operations of the protocol, including the exchange of packets, state machine transitions, and error conditions, writing this data to a dedicated file in the /var/log directory.Unlike standard system logging (syslog), which captures high-level events and warnings, traceoptions provide a granular, "behind-the-scenes" view of how a protocol is interacting with its neighbors. This is particularly useful for identifying the root cause of complex adjacency issues or route instability that standard show commands may not reveal. However, because tracing can be resource-intensive, it is typically configured with specific flags to limit the output to relevant events and is disabled once the troubleshooting task is complete. Traceoptions do not serve to optimize routing automatically , nor are they intended for permanent compliance storage or simple bandwidth monitoring. Instead, they remain the premier tool for clinical debugging and protocol verification within the Junos environment. Reference:Operational Monitoring and Maintenance, Troubleshooting Tools and Traceoptions.
Which two statements about route preference in Junos are correct? (Choose two.)
Route preference is the quantitative value Junos OS uses to rank the trustworthiness of different routing sources when multiple protocols provide a path to the same destination. A critical architectural distinction in Junos is that both direct and local routes share the same default preference value of 0. Direct routes represent subnets physically connected to an interface, while local routes represent the specific IP address assigned to the device interface itself. Because a value of 0 is the lowest possible numerical value, these routes are always preferred over any learned via dynamic protocols or static configuration.Additionally, Junos OS treats External BGP (EBGP) and Internal BGP (IBGP) differently than other vendors by assigning both an identical default preference of 170. This means that if the same prefix is learned via both EBGP and IBGP, the preference value alone will not determine the active route; the system must instead proceed to the standard BGP path selection algorithm (evaluating attributes like Local Preference, AS Path, and Origin) to break the tie. In contrast, OSPF distinguishes between its route types, assigning a preference of 10 to internal routes and 150 to AS external routes. Understanding these default values—specifically the parity between direct/local and the unified preference for BGP variants—is foundational for predicting how the Routing Engine populates the forwarding table. Reference:Routing Fundamentals, Default Route Preference Values.
You are creating a new user account on your Junos device. The user must be able to validate the routing table and interface statistics but should not be able to make any configuration changes. In this scenario, which permission flag would satisfy this requirement?
Answer(s): C
User access control in Junos OS is managed through the application of permission flags within login classes.When an architect needs to define a role that allows for robust monitoring and troubleshooting without granting authority to alter the device's operational state, the view permission flag is the appropriate selection. This flag grants the user the ability to execute the majority of show commands in operational mode, which includes viewing the routing table, inspecting interface statistics, and checking hardware status.The view permission is specifically designed for "read-only" access. It ensures that the user can observe all necessary telemetry data to validate network health—satisfying the requirement to check routing and interface stats—while strictly prohibiting access to configuration mode or any set commands. This contrasts with the configure flag, which allows modification of the candidate configuration, or the network flag, which provides specific permissions related to network-level operational tasks. By assigning a user to a class restricted with the view flag, an administrator maintains a secure environment where support personnel can diagnose issues without the risk of accidental or unauthorized configuration changes. This principle of least privilege is a cornerstone of Junos security management. Reference:User Interfaces, User Management and Access Control.
Post your Comments and Discuss Juniper JN0-106 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the JN0-106 content, but please register or login to continue.