JN0-649別格な問題集をダウンロードして無料で最新の（JN0-649テスト問題集をゲット) [Q27-Q43]

JN0-649別格な問題集をダウンロードして無料で最新の（JN0-649テスト問題集をゲット2024年04月27日)

JN0-649問題集は合格保証します合格できるJN0-649試験問題2024年更新

質問 # 27
Remote branches connect to the corporate WAN through access switches. The access switches connect to access ports on the WAN distribution switch, as shown in the exhibit. L2PT has previously been configured on the tunnel Layer 2 traffic across the WAN. You decide to move the L2PT tunnel endpoints to the access switches. When you apply the L2PT configuration to the access switches, the ports that connect the access switches to the distribution switch shut down.
Which action would solve this problem?

A. Disable the BPDU block function on the access switches.
B. Disable the BPDU block function on the distribution switch.
C. Configure a GRE tunnel to encapsulate the L2PT traffic across the WAN.
D. Configure the links between the access switches and the distribution switch as a trunk port.

正解：D

質問 # 28
You are enabling MSTP in your Layer 2 network to prevent loops. In this scenario, which three parameters must match on all switches in the network? (Choose three. )

A. MSTI-to-VLAN mapping
B. configuration name
C. revision level
D. bridge priority
E. max age

正解：A、B、C

質問 # 29
You are asked to enforce user authentication using a captive portal before users access the corporate network.
Which statement is correct in this scenario?

A. All Web browser requests are redirected to the captive portal until authentication is successful.
B. When enabled, a captive portal must be applied to each individual interface.
C. A captive portal can be bypassed using an allowlist command containing a device's IP address.
D. HTTPS is the default protocol for a captive portal.

正解：A

質問 # 30
Which three MSTP parameters must match on all switches in the same MST region? (Choose three.)

A. revision number
B. forwarding delay
C. configuration name
D. bridge priority
E. MSTI-to-VLAN mapping

正解：A、C、D

質問 # 31
You are configuring MSTP to prevent loops in your Layer 2 network. After applying the configuration, you notice that MSTO is not working correctly.

Referring to the exhibit, what is causing the problem?

A. Too many VLANs have been defined.
B. Context identifier must be specified.
C. MSTI-to-VLAN mappings must be the same.
D. Incorrect revision number is used.

正解：C

質問 # 32
You are 802.1X supplicant, but traffic must be accepted once the user has authenticated their computer on the port In this scenario, which supplicant mode should be used?

A. captive-portal
B. single
C. multiple
D. single-secure

正解：B

質問 # 33
Referring to the exhibit, anycast RP is implemented to ensure multicast service availability. The source is currently sending multicast traffic using group 239.1.1.1 and R3 is receiving PIM register messages, but R2 does not have active source information.
In this scenario, what are two methods to receive the active source information on R2? (Choose two.)

A. Configure an MSDP protocol between R2 and R3.
B. Configure an MSDP protocol between R1 and R2.
C. Configure an RP set in PIM on R1, allowing R1 to forward PIM register messages to R2 and R3 in the set.
D. Configure an RP set in PIM on R2 and R3, allowing the RPs to forward PIM register messages to the other RPs in the set.

正解：C、D

解説：
https://www.juniper.net/documentation/us/en/software/junos/multicast/topics/ref/statement/rp-set-edit-protocols-pim.html

質問 # 34
Referring to the exhibit, how is R1 learning the route from R2?

A. R2 has interface ge-0/0/2 configured in another area under OSPFv3.
B. R2 has an export policy with external type 2 configured.
C. R2 has an export policy with external type 1 configured.
D. R2 has interface ge-0/0/2 configured as a passive interface under OSPFv3.

正解：C

質問 # 35
Referring to the exhibit, you configured a new multicast classifier for the ge-1/2/0 interface ICMP traffic to the best-effort queue and traffic from 190.168.20.0/24 to the expedited forwarding queue.
You received noticed that some application are not working after the change.
Which configuration change will remedy the problem?

A. [edit firewall family inet filter ingress
User@host # set term 2 from protocol tcp
B. [edit firewall family inet filter ingress
User@host # set term 3 then next
C. [edit firewall family inet filter ingress
User@host # set term 2 from service-filter hit
D. [edit firewall family inet filter ingress
User@host # set term 3 then accept

正解：D

質問 # 36
Which two statements are correct about the deployment of EVPN-VXLAN on QFX Series devices? (Choose two.)

A. Junos OS supports underlay replication for BUM traffic forwarding.
B. Junos OS supports ingress replication for BUM traffic forwarding.
C. Type 1 route advertisements always have the single-active flag set to 1.
D. Type 1 route advertisements always have the single-active flag set to 0.

正解：B、D

解説：
BUM Traffic Forwarding
Junos devices that use MPLS encapsulation for EVPNs can only use ingress replication at this time.
Ingress replication means, to flood traffic to remote PE routers, the traffic has to be replicated, once for each remote PE router.
The EVPN label for this BUM traffic is learned per PE router from the route type 3, inclusive multicast Ethernet tag route.
This table shows the format of the inclusive multicast Ethernet tag route.
All-Active Redundancy (4)
This diagram shows the format of the type 1 route, A-D route per ES. The split horizon label is advertised as part of an extended community attached to the type 1 route. The split horizon label is also called the ESI label. The extended community also indicates what type of redundancy mode is used for this given ESI: single-active represented by binary 1 or active-active represented by binary 0.

質問 # 37
Your network has an unmanaged switch between the hosts and your EX Series switch. After the traffic enters the EX Series switch, each host must be on a separate VLAN.
How would you accomplish this task?

A. Configure an input firewall filter on interface ge-0/0/3 to match the source MAC or IP address of the hosts to assign the VLANs.
B. Configure an output firewall filter on interface ge-0/0/1 to match the destination MAC or IP address of the hosts to assign the VLANs.
C. Configure VSTP on interface ge-0/0/1 to assign the VLANs.
D. Configure interface ge-0/0/3 to a mode trunk to assign the VLANs.

正解：D

質問 # 38
What allows non-Web enabled devices to access the network on a port configured for captive portal?

A. Authentication credentials for specific devices can be preconfigured on the switch for automatic authentication.
B. A MAC address white list can be configured on the switch to allow specific MAC addresses to bypass the captive portal process.
C. LLDP can be used to query the type of device that is attempting to access the network, and predefined device types can be allowed to bypass the captive portal process.
D. Captive portal can be configured to only prompt for credentials when HTTP or HTTPS traffic is requested on a port to allow on-HTTP enabled devices access to the network.

正解：B

質問 # 39
You are troubleshooting connectivity between an EVPN spine switch configured as a route reflector and a leaf node with an IP address of 10.30.100.6.
Referring to the exhibit, what is the problem?

A. The neighbor 10.30.100.3 statement is missing from leaf1's configuration.
B. The spine node is not configured for the family inet NLRI.
C. The neighbor 10.30.100.6 statement is missing from spine1's configuration.
D. The leaf node is not configured for the family evpn NLRI.

正解：B

質問 # 40
Juniper devices use the token bucket algorithm for policing. Which two statements are true regarding the token bucket algorithm? (Choose two.)

A. Policers transmit streams of traffic at the maximum interface speed until the burst rate is reached.
B. Policers reduce the speed of an interface.
C. Policers do not reduce the speed of an interface.
D. Policers enforce gaps between transmitted packets.

正解：C、D

質問 # 41
You are asked to troubleshoot voice quality issues on your newly implement VoIP network. You notice that the voice packets are being dropped. You have verified that the packets are correctly marked for expedited forwarding queue.
Referring to the exhibit, what must you configure to solve the problem?
You are asked to troubleshoot voice quality issues on your newly implement VoIP network. You notice that the voice packets are being dropped. You have verified that the packets are correctly marked for expedited forwarding queue.
Referring to the exhibit, what must you configure to solve the problem?

A. You must configure a multifield classifier to put the VoIP traffic in the correct queue.
B. You must configure a rewrite rule to ensure that the traffic is scheduled properly in the device.
C. You must configure a policer to ensure that the queue is not being starved.
D. You must configure a scheduler to allocate bandwidth to the expedited forwarding queue.

正解：D

質問 # 42
Router R1, in peer AS 65001, advertises routes to R2 using EBGP. R2 advertises the routes learned from R1 to R3 using IBGP.

Referring to the exhibit, to which routers will R3 advertise the BGP routes received from R2?