QUESTION: 1

You are troubleshooting a BGP connection.
Referring to the exhibit, which two statements are correct? (Choose two.)

Packet fragmentation is preventing the session from establishing.
The 192.168.1.5 peer has a misconfigured MD5 key.
The ge-0/0/1 interface is disabled.
The 192.168.1.4 peer has a misconfigured autonomous system number.

Answer(s): B,D

Referring to the exhibit, anycast RP is implemented to ensure multicast service availability. The source is currently sending multicast traffic using group 239.1.1.1 and R3 is receiving PIM register messages, but R2 does not have active source information. In this scenario, what are two methods to receive the active source information on R2? (Choose two.)

Configure an RP set in PIM on R1, allowing R1 to forward PIM register messages to R2 and R3 in the set.
Configure an MSDP protocol between R2 and R3.
Configure an RP set in PIM on R2 and R3, allowing the RPs to forward PIM register messages to the other RPs in the set.
Configure an MSDP protocol between R1 and R2.

Answer(s): A,C

Explanation:

https://www.juniper.net/documentation/us/en/software/junos/multicast/topics/ref/statement/rp- set-edit-protocols-pim.html

Reveal Solution Next Question

QUESTION: 3

You are asked to establish interface level authentication for users connecting to your network. You must ensure that only corporate devices, identified by MAC addresses, are allowed to connect and authenticate. Authentication must be handled by a centralized server to increase scalability.
Which authentication method would satisfy this requirement?

MAC RADIUS
captive portal
802.1X with single-secure supplicant mode
802.1X with multiple supplicant mode

Answer(s): A

Explanation:

https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/topic-map/mac- radius-authentication-switching-devices.html

You can configure MAC RADIUS authentication on an interface that also allows 802.1X authentication, or you can configure either authentication method alone.

If both MAC RADIUS and 802.1X authentication are enabled on the interface, the switch first sends the host three EAPoL requests to the host. If there is no response from the host, the switch sends the host's MAC address to the RADIUS server to check whether it is a permitted MAC address. If the MAC address is configured as permitted on the RADIUS server, the RADIUS server sends a message to the switch that the MAC address is a permitted address, and the switch opens LAN access to the nonresponsive host on the interface to which it is connected.

Reveal Solution Next Question

QUESTION: 4

Referring to the exhibit, which LSA type is used to advertise 192.168.1.0/24 to R5?

Type 5
Type 4
Type 3
Type 7

Answer(s): A

Explanation:

Area-1 has no external connections. However, Area-1 has static route (172.16.31.0/24) that are not internal OSPF route. You can limit the external route advertisements to the area and advertise the static routes by designating the area an NSSA. In an NSSA, the ASBR (vMX1) generates NSSA external (Type 7) LSAs and floods them into the NSSA, where they are contained.

Type-7 LSAs allow an NSSA to support the presence of ASBR and their corresponding external routing information. The ABR (vMX2) converts Type-7 LSAs into Type-5 External LSAs and leaks them to the other areas, but external routes from other areas are not advertised within the NSSA.

An admin should check this and change it https://www.packetswitch.co.uk/configuring-junos-ospf-stub-and-nssa-areas/

https://www.juniper.net/documentation/us/en/software/junos/ospf/topics/ref/statement/nssa- edit-protocols-ospf.html

Reveal Solution Next Question

Free JN0-649 Exam Braindumps (page: 1)

Pass your Enterprise Routing and Switching, Professional (JNCIP-ENT) exam with these free Actual Questions and Answers

QUESTION: 1

QUESTION: 2

Explanation:

QUESTION: 3

Explanation:

QUESTION: 4

Explanation: