Juniper JN0-364 Practice Test 53
Question 520
A provider network team identifies this situation: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. Which engineering decision BEST fits the stated requirement? Choose ONE best answer.
- Keep GRE underlay reachability independent of overlay routes to avoid recursive routing loops
- Use GRE to carry supported network payload protocols across a reachable IP underlay
- Account for added GRE and outer IP header overhead when sizing tunneled traffic
- Use BPDU protection at true edge ports to react to unexpected switches
Explanation
Correct Answer
B:Use GRE to carry supported network payload protocols across a reachable IP underlay is the best technical design or decision for this Junos service-provider case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. Technical basis: GRE adds encapsulation but does not provide confidentiality or integrity as an encryption service by itself.
Incorrect Answers
A:Keep GRE underlay reachability independent of overlay routes to avoid recursive routing loops is relevant to the different engineering topic "GRE underlay route recursion", but it is not the most directly supported technical design or decision for this precise case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. the best answer here is: Use GRE to carry supported network payload protocols across a reachable IP underlay.
C:Account for added GRE and outer IP header overhead when sizing tunneled traffic is relevant to the different engineering topic "GRE MTU and encapsulation overhead", but it is not the most directly supported technical design or decision for this precise case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. the best answer here is: Use GRE to carry supported network payload protocols across a reachable IP underlay.
D:Use BPDU protection at true edge ports to react to unexpected switches is relevant to the different engineering topic "BPDU protection for edge ports", but it is not the most directly supported technical design or decision for this precise case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. the best answer here is: Use GRE to carry supported network payload protocols across a reachable IP underlay.
Question 521
A provider network team identifies this situation: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. Which implementation or troubleshooting step is MOST APPROPRIATE here? Choose ONE best answer.
- Review reverse underlay reachability and filter policy at both ends
- Verify IP protocol handling and security policy rather than changing only TCP port rules
- Inspect preference and active forwarding next-hop selection
- Clarify the need for separate encryption when confidentiality is required
Explanation
Correct Answer
D:Clarify the need for separate encryption when confidentiality is required is the best implementation and troubleshooting step for this Junos service-provider case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. Technical basis: GRE adds encapsulation but does not provide confidentiality or integrity as an encryption service by itself.
Incorrect Answers
A:Review reverse underlay reachability and filter policy at both ends is relevant to the different engineering topic "GRE tunnel forwarding tests", but it is not the most directly supported implementation and troubleshooting step for this precise case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. the best answer here is: Clarify the need for separate encryption when confidentiality is required.
B:Verify IP protocol handling and security policy rather than changing only TCP port rules is relevant to the different engineering topic "GRE protocol and security limitations", but it is not the most directly supported implementation and troubleshooting step for this precise case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. the best answer here is: Clarify the need for separate encryption when confidentiality is required.
C:That option concerns Qualified-next-hop selection. GRE adds encapsulation but does not provide confidentiality or integrity as an encryption service by itself.
Question 522
A provider network team identifies this situation: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. What verification evidence MOST CLEARLY demonstrates the solution is working? Choose ONE best answer.
- Bidirectional overlay packets are forwarded correctly
- The design distinguishes encapsulation from cryptographic protection
- The IPv6 service behaves correctly for expected packet sizes
- The root hierarchy stays stable until the customer configuration is corrected
Explanation
Correct Answer
B:The design distinguishes encapsulation from cryptographic protection is the best operational verification evidence for this Junos service-provider case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. Technical basis: GRE adds encapsulation but does not provide confidentiality or integrity as an encryption service by itself.
Incorrect Answers
A:Bidirectional overlay packets are forwarded correctly is relevant to the different engineering topic "GRE tunnel forwarding tests", but it is not the most directly supported operational verification evidence for this precise case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. the best answer here is: The design distinguishes encapsulation from cryptographic protection.
C:The IPv6 service behaves correctly for expected packet sizes is relevant to the different engineering topic "GRE MTU and encapsulation overhead", but it is not the most directly supported operational verification evidence for this precise case: A customer assumes traffic inside GRE is cryptographically hidden from transit observers. the best answer here is: The design distinguishes encapsulation from cryptographic protection.
D:That option concerns Root protection policy. GRE adds encapsulation but does not provide confidentiality or integrity as an encryption service by itself.
Question 523
A Junos service-provider engineer is reviewing this operational case: Two routers need a GRE connection using stable transport loopbacks. Which technical approach MOST DIRECTLY addresses the issue? Select ONE best answer.
- Keep GRE underlay reachability independent of overlay routes to avoid recursive routing loops
- Match IS-IS authentication configuration on participating interfaces and levels
- Validate security and protocol support before selecting GRE for a service-provider application
- Match GRE tunnel source/destination endpoints to reachable transport addresses
Explanation
Correct Answer
D:Match GRE tunnel source/destination endpoints to reachable transport addresses is the best technical design or decision for this Junos service-provider case: Two routers need a GRE connection using stable transport loopbacks. Technical basis: A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
Incorrect Answers
A:Keep GRE underlay reachability independent of overlay routes to avoid recursive routing loops is relevant to the different engineering topic "GRE underlay route recursion", but it is not the most directly supported technical design or decision for this precise case: Two routers need a GRE connection using stable transport loopbacks. the best answer here is: Match GRE tunnel source/destination endpoints to reachable transport addresses.
B:That option concerns IS-IS authentication checks. A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
C:Validate security and protocol support before selecting GRE for a service-provider application is relevant to the different engineering topic "GRE protocol and security limitations", but it is not the most directly supported technical design or decision for this precise case: Two routers need a GRE connection using stable transport loopbacks. the best answer here is: Match GRE tunnel source/destination endpoints to reachable transport addresses.
Question 524
A Junos service-provider engineer is reviewing this operational case: Two routers need a GRE connection using stable transport loopbacks. What specific configuration or diagnostic action BEST implements the intended response? Select ONE best answer.
- Set the correct source/destination addresses and underlay routes
- Configure a supported GRE tunnel and ensure proper underlay endpoints
- Ensure a more specific underlay path to the peer exists outside the tunnel
- Inspect mpls.0 and relevant forwarding entries for the assigned label
Explanation
Correct Answer
A:Set the correct source/destination addresses and underlay routes is the best implementation and troubleshooting step for this Junos service-provider case: Two routers need a GRE connection using stable transport loopbacks. Technical basis: A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
Incorrect Answers
B:Configure a supported GRE tunnel and ensure proper underlay endpoints is relevant to the different engineering topic "GRE encapsulation purpose", but it is not the most directly supported implementation and troubleshooting step for this precise case: Two routers need a GRE connection using stable transport loopbacks. the best answer here is: Set the correct source/destination addresses and underlay routes.
C:Ensure a more specific underlay path to the peer exists outside the tunnel is relevant to the different engineering topic "GRE underlay route recursion", but it is not the most directly supported implementation and troubleshooting step for this precise case: Two routers need a GRE connection using stable transport loopbacks. the best answer here is: Set the correct source/destination addresses and underlay routes.
D:That option concerns MPLS route and forwarding tables. A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
Question 525
A Junos service-provider engineer is reviewing this operational case: Two routers need a GRE connection using stable transport loopbacks. Which observation would MOST RELIABLY verify the intended outcome? Select ONE best answer.
- The intended overlay packets appear within GRE encapsulation
- Encapsulated packets arrive at the intended peer
- Each customer's route is present in its intended table without unintended leakage
- The design meets both reachability and confidentiality requirements
Explanation
Correct Answer
B:Encapsulated packets arrive at the intended peer is the best operational verification evidence for this Junos service-provider case: Two routers need a GRE connection using stable transport loopbacks. Technical basis: A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
Incorrect Answers
A:The intended overlay packets appear within GRE encapsulation is relevant to the different engineering topic "GRE encapsulation purpose", but it is not the most directly supported operational verification evidence for this precise case: Two routers need a GRE connection using stable transport loopbacks. the best answer here is: Encapsulated packets arrive at the intended peer.
C:Each customer's route is present in its intended table without unintended leakage is relevant to the different engineering topic "Routing-instance isolation", but it is not the most directly supported operational verification evidence for this precise case: Two routers need a GRE connection using stable transport loopbacks. the best answer here is: Encapsulated packets arrive at the intended peer.
D:The design meets both reachability and confidentiality requirements is relevant to the different engineering topic "GRE protocol and security limitations", but it is not the most directly supported operational verification evidence for this precise case: Two routers need a GRE connection using stable transport loopbacks. the best answer here is: Encapsulated packets arrive at the intended peer.
Question 526
A provider network team identifies this situation: A tunnel fails after a WAN interface's address changes. Which engineering decision BEST fits the stated requirement? Choose ONE best answer.
- Use GRE to carry supported network payload protocols across a reachable IP underlay
- Use MP-BGP IPv6 unicast family configuration when exchanging IPv6 NLRI between BGP peers
- Match GRE tunnel source/destination endpoints to reachable transport addresses
- Account for added GRE and outer IP header overhead when sizing tunneled traffic
Explanation
Correct Answer
C:Match GRE tunnel source/destination endpoints to reachable transport addresses is the best technical design or decision for this Junos service-provider case: A tunnel fails after a WAN interface's address changes. Technical basis: A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
Incorrect Answers
A:Use GRE to carry supported network payload protocols across a reachable IP underlay is relevant to the different engineering topic "GRE encapsulation purpose", but it is not the most directly supported technical design or decision for this precise case: A tunnel fails after a WAN interface's address changes. the best answer here is: Match GRE tunnel source/destination endpoints to reachable transport addresses.
B:That option concerns BGP IPv6 unicast family. A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
D:Account for added GRE and outer IP header overhead when sizing tunneled traffic is relevant to the different engineering topic "GRE MTU and encapsulation overhead", but it is not the most directly supported technical design or decision for this precise case: A tunnel fails after a WAN interface's address changes. the best answer here is: Match GRE tunnel source/destination endpoints to reachable transport addresses.
Question 527
A provider network team identifies this situation: A tunnel fails after a WAN interface's address changes. Which implementation or troubleshooting step is MOST APPROPRIATE here? Choose ONE best answer.
- Compare encapsulation overhead and effective tunnel MTU
- Review configured GRE endpoint addressing against the new transport path
- Check active transport route resolution for the outer destination
- Check interface routing-instance membership and installed forwarding context
Explanation
Correct Answer
B:Review configured GRE endpoint addressing against the new transport path is the best implementation and troubleshooting step for this Junos service-provider case: A tunnel fails after a WAN interface's address changes. Technical basis: A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
Incorrect Answers
A:Compare encapsulation overhead and effective tunnel MTU is relevant to the different engineering topic "GRE MTU and encapsulation overhead", but it is not the most directly supported implementation and troubleshooting step for this precise case: A tunnel fails after a WAN interface's address changes. the best answer here is: Review configured GRE endpoint addressing against the new transport path.
C:Check active transport route resolution for the outer destination is relevant to the different engineering topic "GRE underlay route recursion", but it is not the most directly supported implementation and troubleshooting step for this precise case: A tunnel fails after a WAN interface's address changes. the best answer here is: Review configured GRE endpoint addressing against the new transport path.
D:Check interface routing-instance membership and installed forwarding context is relevant to the different engineering topic "Routing-instance isolation", but it is not the most directly supported implementation and troubleshooting step for this precise case: A tunnel fails after a WAN interface's address changes. the best answer here is: Review configured GRE endpoint addressing against the new transport path.
Question 528
A provider network team identifies this situation: A tunnel fails after a WAN interface's address changes. What verification evidence MOST CLEARLY demonstrates the solution is working? Choose ONE best answer.
- The remote endpoint is reached through a valid source route
- The expected C-VLAN remains intact from ingress to egress
- The design distinguishes encapsulation from cryptographic protection
- The required permitted GRE protocol traffic traverses the underlay
Explanation
Correct Answer
A:The remote endpoint is reached through a valid source route is the best operational verification evidence for this Junos service-provider case: A tunnel fails after a WAN interface's address changes. Technical basis: A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
Incorrect Answers
B:That option concerns Provider bridging Q-in-Q. A GRE interface requires valid encapsulation endpoints and uses underlay IP reachability to carry overlay packets.
C:The design distinguishes encapsulation from cryptographic protection is relevant to the different engineering topic "GRE encapsulation purpose", but it is not the most directly supported operational verification evidence for this precise case: A tunnel fails after a WAN interface's address changes. the best answer here is: The remote endpoint is reached through a valid source route.
D:The required permitted GRE protocol traffic traverses the underlay is relevant to the different engineering topic "GRE protocol and security limitations", but it is not the most directly supported operational verification evidence for this precise case: A tunnel fails after a WAN interface's address changes. the best answer here is: The remote endpoint is reached through a valid source route.
Question 529
A Junos service-provider engineer is reviewing this operational case: A tunneled application transfers small packets but large packets fail. Which technical approach MOST DIRECTLY addresses the issue? Select ONE best answer.
- Configure OSPFv3 on the intended IPv6-capable interface and verify link-local neighbor transport
- Account for added GRE and outer IP header overhead when sizing tunneled traffic
- Validate security and protocol support before selecting GRE for a service-provider application
- Use GRE to carry supported network payload protocols across a reachable IP underlay
Explanation
Correct Answer
B:Account for added GRE and outer IP header overhead when sizing tunneled traffic is the best technical design or decision for this Junos service-provider case: A tunneled application transfers small packets but large packets fail. Technical basis: Encapsulation reduces available payload MTU and can trigger fragmentation or PMTUD behavior.
Incorrect Answers
A:That option concerns OSPFv3 neighbor formation. Encapsulation reduces available payload MTU and can trigger fragmentation or PMTUD behavior.
C:That option concerns GRE protocol and security limitations. Encapsulation reduces available payload MTU and can trigger fragmentation or PMTUD behavior.
D:Use GRE to carry supported network payload protocols across a reachable IP underlay is relevant to the different engineering topic "GRE encapsulation purpose", but it is not the most directly supported technical design or decision for this precise case: A tunneled application transfers small packets but large packets fail. the best answer here is: Account for added GRE and outer IP header overhead when sizing tunneled traffic.
Question 530
A Junos service-provider engineer is reviewing this operational case: A tunneled application transfers small packets but large packets fail. What specific configuration or diagnostic action BEST implements the intended response? Select ONE best answer.
- Configure a supported GRE tunnel and ensure proper underlay endpoints
- Inspect tunnel interface, encapsulation routes and return route availability
- Configure the common VRRP virtual address and appropriate priorities
- Review tunnel MTU and supported PMTUD handling
Explanation
Correct Answer
D:Review tunnel MTU and supported PMTUD handling is the best implementation and troubleshooting step for this Junos service-provider case: A tunneled application transfers small packets but large packets fail. Technical basis: Encapsulation reduces available payload MTU and can trigger fragmentation or PMTUD behavior.
Incorrect Answers
A:Configure a supported GRE tunnel and ensure proper underlay endpoints is relevant to the different engineering topic "GRE encapsulation purpose", but it is not the most directly supported implementation and troubleshooting step for this precise case: A tunneled application transfers small packets but large packets fail. the best answer here is: Review tunnel MTU and supported PMTUD handling.
B:Inspect tunnel interface, encapsulation routes and return route availability is relevant to the different engineering topic "GRE tunnel forwarding tests", but it is not the most directly supported implementation and troubleshooting step for this precise case: A tunneled application transfers small packets but large packets fail. the best answer here is: Review tunnel MTU and supported PMTUD handling.
C:That option concerns VRRP virtual gateway failover. Encapsulation reduces available payload MTU and can trigger fragmentation or PMTUD behavior.