Juniper JN0-364 Practice Test 29
Question 280
A provider network team identifies this situation: An endpoint moves to a new port but cannot reach peers within its service VLAN. Which engineering decision BEST fits the stated requirement? Choose ONE best answer.
- Examine route detail and policy reasons when a valid-looking Junos route is hidden or inactive
- Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass
- Choose VLAN tag translation when the service needs intentional replacement of an 802.1Q tag
- Assign single-VLAN untagged endpoint traffic to the correct access VLAN on Junos switches
Explanation
Correct Answer
D:Assign single-VLAN untagged endpoint traffic to the correct access VLAN on Junos switches is the best technical design or decision for this Junos service-provider case: An endpoint moves to a new port but cannot reach peers within its service VLAN. Technical basis: An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
Incorrect Answers
A:That option concerns Active-route versus hidden-route triage. An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
B:Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass is relevant to the different engineering topic "Native VLAN and untagged trunk behavior", but it is not the most directly supported technical design or decision for this precise case: An endpoint moves to a new port but cannot reach peers within its service VLAN. the best answer here is: Assign single-VLAN untagged endpoint traffic to the correct access VLAN on Junos switches.
C:Choose VLAN tag translation when the service needs intentional replacement of an 802.1Q tag is relevant to the different engineering topic "VLAN translation distinction", but it is not the most directly supported technical design or decision for this precise case: An endpoint moves to a new port but cannot reach peers within its service VLAN. the best answer here is: Assign single-VLAN untagged endpoint traffic to the correct access VLAN on Junos switches.
Question 281
A provider network team identifies this situation: An endpoint moves to a new port but cannot reach peers within its service VLAN. Which implementation or troubleshooting step is MOST APPROPRIATE here? Choose ONE best answer.
- Inspect loss of BPDU reception and directionality
- Compare VLAN-to-port mapping and underlying physical connectivity
- Inspect whether the interface uses a swap or push operation
- Check access VLAN assignment and port state
Explanation
Correct Answer
D:Check access VLAN assignment and port state is the best implementation and troubleshooting step for this Junos service-provider case: An endpoint moves to a new port but cannot reach peers within its service VLAN. Technical basis: An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
Incorrect Answers
A:That option concerns Loop protection when BPDUs vanish. An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
B:That option concerns Junos VLAN operational validation. An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
C:Inspect whether the interface uses a swap or push operation is relevant to the different engineering topic "VLAN translation distinction", but it is not the most directly supported implementation and troubleshooting step for this precise case: An endpoint moves to a new port but cannot reach peers within its service VLAN. the best answer here is: Check access VLAN assignment and port state.
Question 282
A provider network team identifies this situation: An endpoint moves to a new port but cannot reach peers within its service VLAN. What verification evidence MOST CLEARLY demonstrates the solution is working? Choose ONE best answer.
- The endpoint MAC is learned in the expected VLAN
- The expected tagged VLAN appears on the port and forwarding resumes
- Unknown unicast is contained within the intended broadcast domain
- The metric normalizes when the required label readiness is confirmed
Explanation
Correct Answer
A:The endpoint MAC is learned in the expected VLAN is the best operational verification evidence for this Junos service-provider case: An endpoint moves to a new port but cannot reach peers within its service VLAN. Technical basis: An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
Incorrect Answers
B:The expected tagged VLAN appears on the port and forwarding resumes is relevant to the different engineering topic "Trunk tagging and VLAN allowlist", but it is not the most directly supported operational verification evidence for this precise case: An endpoint moves to a new port but cannot reach peers within its service VLAN. the best answer here is: The endpoint MAC is learned in the expected VLAN.
C:That option concerns Unknown unicast and flooding. An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
D:That option concerns LDP-IGP synchronization. An access port generally carries one untagged VLAN, unlike a trunk carrying multiple tagged VLANs.
Question 283
A Junos service-provider engineer is reviewing this operational case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. Which technical approach MOST DIRECTLY addresses the issue? Select ONE best answer.
- Use a resolvable next hop for a Junos static route instead of assuming a configured route is automatically active
- Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation
- Diagnose Ethernet MAC learning by VLAN and ingress port before changing bridge forwarding policy
- Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains
Explanation
Correct Answer
D:Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains is the best technical design or decision for this Junos service-provider case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. Technical basis: Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Incorrect Answers
A:That option concerns Static-route next-hop resolution. Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
B:Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported technical design or decision for this precise case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. the best answer here is: Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains.
C:Diagnose Ethernet MAC learning by VLAN and ingress port before changing bridge forwarding policy is relevant to the different engineering topic "MAC-address dynamic learning", but it is not the most directly supported technical design or decision for this precise case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. the best answer here is: Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains.
Question 284
A Junos service-provider engineer is reviewing this operational case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. What specific configuration or diagnostic action BEST implements the intended response? Select ONE best answer.
- Configure the approved access port membership
- Set trunk membership to approved VLANs and verify tag handling
- Inspect show vlans and show ethernet-switching table with port membership
- Configure a supported GRE tunnel and ensure proper underlay endpoints
Explanation
Correct Answer
B:Set trunk membership to approved VLANs and verify tag handling is the best implementation and troubleshooting step for this Junos service-provider case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. Technical basis: Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Incorrect Answers
A:That option concerns Access port VLAN membership. Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
C:Inspect show vlans and show ethernet-switching table with port membership is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported implementation and troubleshooting step for this precise case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. the best answer here is: Set trunk membership to approved VLANs and verify tag handling.
D:That option concerns GRE encapsulation purpose. Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Question 285
A Junos service-provider engineer is reviewing this operational case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. Which observation would MOST RELIABLY verify the intended outcome? Select ONE best answer.
- Traffic exits using the translated tag required by the remote segment
- The host's source MAC is learned on the correct interface
- The preferred route follows actual ordered policy rules
- Both allowed VLANs pass while VLAN700 is absent
Explanation
Correct Answer
D:Both allowed VLANs pass while VLAN700 is absent is the best operational verification evidence for this Junos service-provider case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. Technical basis: Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Incorrect Answers
A:Traffic exits using the translated tag required by the remote segment is relevant to the different engineering topic "VLAN translation distinction", but it is not the most directly supported operational verification evidence for this precise case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. the best answer here is: Both allowed VLANs pass while VLAN700 is absent.
B:The host's source MAC is learned on the correct interface is relevant to the different engineering topic "MAC-address dynamic learning", but it is not the most directly supported operational verification evidence for this precise case: An inter-switch uplink must transport VLANs 210 and 211 but not customer VLAN 700. the best answer here is: Both allowed VLANs pass while VLAN700 is absent.
C:That option concerns BGP best-path selection order. Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Question 286
A provider network team identifies this situation: A customer VLAN stops crossing a newly replaced trunk link. Which engineering decision BEST fits the stated requirement? Choose ONE best answer.
- Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains
- Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation
- Diagnose Ethernet MAC learning by VLAN and ingress port before changing bridge forwarding policy
- Assign distinct valid ISO NET addresses with the intended area and system identifiers for Junos IS-IS
Explanation
Correct Answer
A:Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains is the best technical design or decision for this Junos service-provider case: A customer VLAN stops crossing a newly replaced trunk link. Technical basis: Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Incorrect Answers
B:Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported technical design or decision for this precise case: A customer VLAN stops crossing a newly replaced trunk link. the best answer here is: Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains.
C:Diagnose Ethernet MAC learning by VLAN and ingress port before changing bridge forwarding policy is relevant to the different engineering topic "MAC-address dynamic learning", but it is not the most directly supported technical design or decision for this precise case: A customer VLAN stops crossing a newly replaced trunk link. the best answer here is: Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains.
D:That option concerns IS-IS NET addressing. Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Question 287
A provider network team identifies this situation: A customer VLAN stops crossing a newly replaced trunk link. Which implementation or troubleshooting step is MOST APPROPRIATE here? Choose ONE best answer.
- Align timer configuration under controlled change on both ends
- Compare native VLAN configuration on each side
- Compare VLAN-to-port mapping and underlying physical connectivity
- Check both ends for matching VLAN allowlists and tags
Explanation
Correct Answer
D:Check both ends for matching VLAN allowlists and tags is the best implementation and troubleshooting step for this Junos service-provider case: A customer VLAN stops crossing a newly replaced trunk link. Technical basis: Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Incorrect Answers
A:That option concerns OSPF hello/dead agreement. Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
B:Compare native VLAN configuration on each side is relevant to the different engineering topic "Native VLAN and untagged trunk behavior", but it is not the most directly supported implementation and troubleshooting step for this precise case: A customer VLAN stops crossing a newly replaced trunk link. the best answer here is: Check both ends for matching VLAN allowlists and tags.
C:Compare VLAN-to-port mapping and underlying physical connectivity is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported implementation and troubleshooting step for this precise case: A customer VLAN stops crossing a newly replaced trunk link. the best answer here is: Check both ends for matching VLAN allowlists and tags.
Question 288
A provider network team identifies this situation: A customer VLAN stops crossing a newly replaced trunk link. What verification evidence MOST CLEARLY demonstrates the solution is working? Choose ONE best answer.
- Accepted LSPs correspond to authenticated peers
- Untagged traffic is consistently mapped and unrelated tenant VLANs remain isolated
- The expected tagged VLAN appears on the port and forwarding resumes
- Only the intended tag replacement is applied
Explanation
Correct Answer
C:The expected tagged VLAN appears on the port and forwarding resumes is the best operational verification evidence for this Junos service-provider case: A customer VLAN stops crossing a newly replaced trunk link. Technical basis: Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
Incorrect Answers
A:That option concerns IS-IS authentication checks. Trunk ports carry multiple allowed VLANs with tagged frames while access ports generally carry one untagged domain.
B:Untagged traffic is consistently mapped and unrelated tenant VLANs remain isolated is relevant to the different engineering topic "Native VLAN and untagged trunk behavior", but it is not the most directly supported operational verification evidence for this precise case: A customer VLAN stops crossing a newly replaced trunk link. the best answer here is: The expected tagged VLAN appears on the port and forwarding resumes.
D:Only the intended tag replacement is applied is relevant to the different engineering topic "VLAN translation distinction", but it is not the most directly supported operational verification evidence for this precise case: A customer VLAN stops crossing a newly replaced trunk link. the best answer here is: The expected tagged VLAN appears on the port and forwarding resumes.
Question 289
A Junos service-provider engineer is reviewing this operational case: A service-management port sends untagged control traffic on a shared trunk. Which technical approach MOST DIRECTLY addresses the issue? Select ONE best answer.
- Use IRB interfaces when authorized L3 routing is needed between distinct VLAN broadcast domains
- Recognize a type-two Network LSA generated for an appropriate transit multi-access OSPF network
- Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains
- Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass
Explanation
Correct Answer
D:Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass is the best technical design or decision for this Junos service-provider case: A service-management port sends untagged control traffic on a shared trunk. Technical basis: On platforms supporting a native VLAN, untagged frames on a trunk can be assigned to a designated VLAN.
Incorrect Answers
A:That option concerns Integrated routing and bridging. On platforms supporting a native VLAN, untagged frames on a trunk can be assigned to a designated VLAN.
B:That option concerns Network-LSA type-two interpretation. On platforms supporting a native VLAN, untagged frames on a trunk can be assigned to a designated VLAN.
C:Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains is relevant to the different engineering topic "Virtual-switch routing instance", but it is not the most directly supported technical design or decision for this precise case: A service-management port sends untagged control traffic on a shared trunk. the best answer here is: Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass.
Question 290
A Junos service-provider engineer is reviewing this operational case: A service-management port sends untagged control traffic on a shared trunk. What specific configuration or diagnostic action BEST implements the intended response? Select ONE best answer.
- Check native VLAN policy on both peers and avoid accidental customer mixing
- Assign separate provider S-VLANs while retaining each customer inner tag
- Inspect show vlans and show ethernet-switching table with port membership
- Configure the common VRRP virtual address and appropriate priorities
Explanation
Correct Answer
A:Check native VLAN policy on both peers and avoid accidental customer mixing is the best implementation and troubleshooting step for this Junos service-provider case: A service-management port sends untagged control traffic on a shared trunk. Technical basis: On platforms supporting a native VLAN, untagged frames on a trunk can be assigned to a designated VLAN.
Incorrect Answers
B:Assign separate provider S-VLANs while retaining each customer inner tag is relevant to the different engineering topic "Provider bridging Q-in-Q", but it is not the most directly supported implementation and troubleshooting step for this precise case: A service-management port sends untagged control traffic on a shared trunk. the best answer here is: Check native VLAN policy on both peers and avoid accidental customer mixing.
C:Inspect show vlans and show ethernet-switching table with port membership is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported implementation and troubleshooting step for this precise case: A service-management port sends untagged control traffic on a shared trunk. the best answer here is: Check native VLAN policy on both peers and avoid accidental customer mixing.
D:That option concerns VRRP virtual gateway failover. On platforms supporting a native VLAN, untagged frames on a trunk can be assigned to a designated VLAN.