cert
cert-1
cert-2

Pass Juniper JN0-650 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
JN0-650 Exam - Verified By Experts
JN0-650 Premium File

JN0-650 Premium File

$69.99
$76.99
  • Premium File 107 Questions & Answers. Last Update: Nov 08, 2026

Whats Included:

  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
 
$76.99
$69.99
accept 18 downloads in the last 7 days
block-screenshots
Juniper JN0-650 Practice Test 2

Question 10

Two VLAN-selection conditions match a device packet and only one should win. Which technical principle BEST explains the Filter-based VLAN rule precedence decision?

  1. Routing policy must match the relevant address family as well as eligible source routes.
  2. VSTP runs per-VLAN spanning-tree decisions rather than one shared instance.
  3. L2PT encapsulates selected customer Layer 2 control frames across a provider domain.
  4. Filter terms are evaluated in policy order subject to terminating actions.

Explanation

Correct Answer

D:

Filter terms are evaluated in policy order subject to terminating actions. In this situation, the relevant action is to reorder policy terms so specific supported VLAN matches precede broad fallback actions.

Incorrect Answers

A:

Routing policy must match the relevant address family as well as eligible source routes. That principle is related to OSPFv3 routing policy for external IPv6, not the main Filter-based VLAN rule precedence choice. Broad first-match conditions can eclipse later VLAN classification terms.

B:

VSTP runs per-VLAN spanning-tree decisions rather than one shared instance. That principle is related to VSTP per-VLAN root distribution, not the main Filter-based VLAN rule precedence choice. Broad first-match conditions can eclipse later VLAN classification terms.

C:

L2PT encapsulates selected customer Layer 2 control frames across a provider domain. That principle is related to L2PT customer BPDU tunneling, not the main Filter-based VLAN rule precedence choice. Broad first-match conditions can eclipse later VLAN classification terms.

Question 11

A VoIP migration introduces LLDP-MED and DHCP errors at the same access port. Select TWO statements that correctly combine the IP phone first-hop diagnostic workflow implementation, its evidence, or its governing principle.

  1. Apply a deliberate trust boundary and separate PC and voice VLAN access policies.
  2. Each setup step is verified and the handset obtains correct network settings.
  3. Verify supported PoE power classes and power negotiation for the specific phone model.
  4. Disable all VLAN separation and power policing network-wide to make one phone boot.
  5. Diagnose PoE physical link LLDP-MED voice VLAN and DHCP stages in order.

Explanation

Correct Answers

B:

Each setup step is verified and the handset obtains correct network settings. This is direct observable evidence for IP phone first-hop diagnostic workflow.

E:

Diagnose PoE physical link LLDP-MED voice VLAN and DHCP stages in order. This is the intended implementation action for IP phone first-hop diagnostic workflow.

Incorrect Answers

A:

Apply a deliberate trust boundary and separate PC and voice VLAN access policies. This belongs to Phone and PC shared switch-port security, not the specified IP phone first-hop diagnostic workflow operation. Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates.

C:

Verify supported PoE power classes and power negotiation for the specific phone model. This belongs to PoE class discovery and allocation, not the specified IP phone first-hop diagnostic workflow operation. Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates.

D:

Disable all VLAN separation and power policing network-wide to make one phone boot. This would not be an appropriate IP phone first-hop diagnostic workflow decision. Changing one DHCP option does not repair absent PoE or unsupported LLDP-MED.

Question 12

Some VLANs loop after the peer changes STP mode or tagging. Which technical principle BEST explains the VSTP interoperation and VLAN tagging decision?

  1. Phone access-port design can carry tagged voice and untagged data for separate policies.
  2. MSTP can group VLANs into instances with independent root bridge elections.
  3. IEEE 802.1Q tags distinguish VLAN traffic across a common trunk.
  4. Per-VLAN STP compatibility depends on VLAN tagging and protocol expectations.

Explanation

Correct Answer

D:

Per-VLAN STP compatibility depends on VLAN tagging and protocol expectations. In this situation, the relevant action is to validate compatible VSTP participation per VLAN and consistent trunk membership.

Incorrect Answers

A:

Phone access-port design can carry tagged voice and untagged data for separate policies. That principle is related to Voice VLAN tagged versus PC data traffic, not the main VSTP interoperation and VLAN tagging choice. Different BPDU handling per VLAN can leave only some VLANs unprotected.

B:

MSTP can group VLANs into instances with independent root bridge elections. That principle is related to MSTP instance root selection, not the main VSTP interoperation and VLAN tagging choice. Different BPDU handling per VLAN can leave only some VLANs unprotected.

C:

IEEE 802.1Q tags distinguish VLAN traffic across a common trunk. That principle is related to 802.1Q trunk allowed VLANs, not the main VSTP interoperation and VLAN tagging choice. Different BPDU handling per VLAN can leave only some VLANs unprotected.

Question 13

A QoS policy seems correct but measured voice latency remains high on one uplink. After deploying the recommended CoS end-to-end verification of drop behavior change, which result MOST directly verifies success?

  1. Under controlled load intended voice QoS remains protected while other classes retain service.
  2. Captures and counters explain ingress class egress queue and final header marking.
  3. Routing control packets show stable service during expected congestion.
  4. Isolated endpoints reach the intended shared gateway but not peer isolated ports.

Explanation

Correct Answer

A:

Under controlled load intended voice QoS remains protected while other classes retain service. This is the directly observable outcome for CoS end-to-end verification of drop behavior. Successful CoS needs consistent ingress classification egress scheduling and congestion management.

Incorrect Answers

B:

Captures and counters explain ingress class egress queue and final header marking. This validates CoS processing order ingress to egress but does not directly demonstrate the required CoS end-to-end verification of drop behavior result. Successful CoS needs consistent ingress classification egress scheduling and congestion management.

C:

Routing control packets show stable service during expected congestion. This validates Network-control forwarding class differentiation but does not directly demonstrate the required CoS end-to-end verification of drop behavior result. Successful CoS needs consistent ingress classification egress scheduling and congestion management.

D:

Isolated endpoints reach the intended shared gateway but not peer isolated ports. This validates Private VLAN isolated port separation but does not directly demonstrate the required CoS end-to-end verification of drop behavior result. Successful CoS needs consistent ingress classification egress scheduling and congestion management.

Question 14

During an operational risk review, this situation is reported: An ASM source registers on RP-A while all receivers currently use RP-B. If the underlying control is neglected, which failure would MOST directly follow?

  1. Missing join or stale prune state interrupts receiver delivery despite source health.
  2. An unrestricted policy can carry sensitive multicast into unintended domains.
  3. Missing MSDP source advertisements can isolate multicast sources between RPs.
  4. Accepting every certificate to restore access undermines network identity controls.

Explanation

Correct Answer

C:

Missing MSDP source advertisements can isolate multicast sources between RPs. MSDP can exchange source-active awareness across ASM RP domains. A useful corrective investigation is to inspect show msdp peer and source-active caches for known sources.

Incorrect Answers

A:

MSDP can exchange source-active awareness across ASM RP domains. This is a PIM join prune forwarding path failure pattern, not the primary MSDP source active exchange failure in this case.

B:

MSDP can exchange source-active awareness across ASM RP domains. An unrestricted policy can carry sensitive multicast into unintended domains.

D:

MSDP can exchange source-active awareness across ASM RP domains. This is a 802.1X EAP authentication credential validation failure pattern, not the primary MSDP source active exchange failure in this case.

Question 15

A user connects an unmanaged bridge that starts sending spanning-tree BPDUs. Which configuration or operational step BEST meets the stated requirement?

  1. Tune approved MST port costs and priorities based on the intended topology.
  2. Configure community secondary roles and the appropriate promiscuous uplink association.
  3. Apply BPDU protection to appropriate edge ports and document recovery.
  4. Enable BPDU protection on every core trunk without assessing spanning-tree adjacency.

Explanation

Correct Answer

C:

Apply BPDU protection to appropriate edge ports and document recovery. BPDU protection blocks unexpected spanning-tree participation at designated access edges. The expected validation is that rogue bridge BPDUs trigger the intended guard action without affecting valid trunks.

Incorrect Answers

A:

Tune approved MST port costs and priorities based on the intended topology. This addresses MSTP root port and alternate path rather than the required BPDU protection on access edges decision. BPDU protection blocks unexpected spanning-tree participation at designated access edges.

B:

Configure community secondary roles and the appropriate promiscuous uplink association. This addresses Private VLAN community and promiscuous roles rather than the required BPDU protection on access edges decision. BPDU protection blocks unexpected spanning-tree participation at designated access edges.

D:

Enable BPDU protection on every core trunk without assessing spanning-tree adjacency. This is a risky or ineffective shortcut for BPDU protection on access edges. Enabling it on legitimate interswitch links can unnecessarily disable useful uplinks.

Question 16

A new floor installs forty IP phones and a switch reports insufficient PoE budget. After deploying the recommended PoE power budget switch capacity change, which result MOST directly verifies success?

  1. All approved phones receive adequate negotiated power without exceeding switch capacity.
  2. The handset receives voice VLAN policy and tags voice frames as intended.
  3. Each participating VTEP has the required BUM flood destinations for the VNI.
  4. Phones send frames with expected voice tags and priority values where supported.

Explanation

Correct Answer

A:

All approved phones receive adequate negotiated power without exceeding switch capacity. This is the directly observable outcome for PoE power budget switch capacity. IEEE PoE total power budget and per-port allocation constrain powered endpoints.

Incorrect Answers

B:

The handset receives voice VLAN policy and tags voice frames as intended. This validates LLDP-MED voice network policy but does not directly demonstrate the required PoE power budget switch capacity result. IEEE PoE total power budget and per-port allocation constrain powered endpoints.

C:

Each participating VTEP has the required BUM flood destinations for the VNI. This validates EVPN Type3 IMET inclusive multicast routes but does not directly demonstrate the required PoE power budget switch capacity result. IEEE PoE total power budget and per-port allocation constrain powered endpoints.

D:

Phones send frames with expected voice tags and priority values where supported. This validates LLDP-MED voice priority signaling but does not directly demonstrate the required PoE power budget switch capacity result. IEEE PoE total power budget and per-port allocation constrain powered endpoints.

Question 17

An IP phone connected to an EX switch is not listed as an LLDP neighbor. After deploying the recommended LLDP neighbor advertisement change, which result MOST directly verifies success?

  1. The switch and phone discover each other with accurate system and port details.
  2. Receivers join the intended group and packets retain a valid unicast source.
  3. Phones send frames with expected voice tags and priority values where supported.
  4. Negotiated power class and delivered wattage match the handset requirement.

Explanation

Correct Answer

A:

The switch and phone discover each other with accurate system and port details. This is the directly observable outcome for LLDP neighbor advertisement. LLDP provides Layer 2 neighbor discovery independent of IP routing.

Incorrect Answers

B:

Receivers join the intended group and packets retain a valid unicast source. This validates IPv4 multicast group address versus unicast but does not directly demonstrate the required LLDP neighbor advertisement result. LLDP provides Layer 2 neighbor discovery independent of IP routing.

C:

Phones send frames with expected voice tags and priority values where supported. This validates LLDP-MED voice priority signaling but does not directly demonstrate the required LLDP neighbor advertisement result. LLDP provides Layer 2 neighbor discovery independent of IP routing.

D:

Negotiated power class and delivered wattage match the handset requirement. This validates PoE class discovery and allocation but does not directly demonstrate the required LLDP neighbor advertisement result. LLDP provides Layer 2 neighbor discovery independent of IP routing.

Question 18

A branch OSPF area should avoid learning thousands of external type-5 LSAs. After deploying the recommended OSPF stub area external LSA suppression change, which result MOST directly verifies success?

  1. Expected adjacency relationships achieve correct state for the selected network type.
  2. The stub receives an appropriate default or interarea reachability without external type-5 flooding.
  3. The intended eligible DR and BDR appear on the broadcast segment after reelection.
  4. Remote peers recognize Ethernet segment participation and respond to advertised withdrawals.

Explanation

Correct Answer

B:

The stub receives an appropriate default or interarea reachability without external type-5 flooding. This is the directly observable outcome for OSPF stub area external LSA suppression. OSPF stub areas restrict external AS-external advertisements and require compatible area flags.

Incorrect Answers

A:

Expected adjacency relationships achieve correct state for the selected network type. This validates OSPF neighbor state troubleshooting workflow but does not directly demonstrate the required OSPF stub area external LSA suppression result. OSPF stub areas restrict external AS-external advertisements and require compatible area flags.

C:

The intended eligible DR and BDR appear on the broadcast segment after reelection. This validates OSPF designated router election broadcast LAN but does not directly demonstrate the required OSPF stub area external LSA suppression result. OSPF stub areas restrict external AS-external advertisements and require compatible area flags.

D:

Remote peers recognize Ethernet segment participation and respond to advertised withdrawals. This validates EVPN Type1 Ethernet auto discovery but does not directly demonstrate the required OSPF stub area external LSA suppression result. OSPF stub areas restrict external AS-external advertisements and require compatible area flags.

Question 19

Two eligible BGP paths should be used for resilient egress when configured as multipath. After deploying the recommended BGP multipath equal-cost path installation change, which result MOST directly verifies success?

  1. The preferred external route follows correct E1 total metric or E2 selection rules.
  2. The BGP route becomes active after recursive next-hop resolution succeeds.
  3. The active route reflects documented policy and any hidden route has an explained reason.
  4. Multiple eligible next hops are installed and traffic follows approved ECMP hashing.

Explanation

Correct Answer

D:

Multiple eligible next hops are installed and traffic follows approved ECMP hashing. This is the directly observable outcome for BGP multipath equal-cost path installation. BGP multipath requires compatible path properties and FIB programming beyond two received advertisements.

Incorrect Answers

A:

The preferred external route follows correct E1 total metric or E2 selection rules. This validates OSPF external type-one versus type-two metrics but does not directly demonstrate the required BGP multipath equal-cost path installation result. BGP multipath requires compatible path properties and FIB programming beyond two received advertisements.

B:

The BGP route becomes active after recursive next-hop resolution succeeds. This validates BGP next-hop reachability hidden route but does not directly demonstrate the required BGP multipath equal-cost path installation result. BGP multipath requires compatible path properties and FIB programming beyond two received advertisements.

C:

The active route reflects documented policy and any hidden route has an explained reason. This validates BGP hidden and rejected path diagnosis but does not directly demonstrate the required BGP multipath equal-cost path installation result. BGP multipath requires compatible path properties and FIB programming beyond two received advertisements.

Question 20

A MAC address keeps moving between ports because a physical loop exists. Which next investigation or correction is MOST appropriate?

  1. Inspect ethernet-switching table per VLAN and MAC movement logs.
  2. Inspect interface ethernet-switching configuration and VLAN counters on both ends.
  3. Configure an OSPF route filter to stop Layer 2 unknown-unicast flooding.
  4. Inspect ingress and egress double-tag format and switch VLAN translation state.

Explanation

Correct Answer

A:

Inspect ethernet-switching table per VLAN and MAC movement logs. This checks whether stable source MAC entries map to intended ingress interfaces and unknown floods are limited.

Incorrect Answers

B:

Inspect interface ethernet-switching configuration and VLAN counters on both ends. That check applies chiefly to 802.1Q trunk allowed VLANs, not the current Ethernet MAC learning and flooding issue. Ethernet switches learn source MACs per VLAN and flood unknown destinations until learned.

C:

Configure an OSPF route filter to stop Layer 2 unknown-unicast flooding. That bypass leaves the Ethernet MAC learning and flooding issue unresolved. A loop can cause rapid MAC movement and high broadcast utilization.

D:

Inspect ingress and egress double-tag format and switch VLAN translation state. That check applies chiefly to QinQ service VLAN outer tag, not the current Ethernet MAC learning and flooding issue. Ethernet switches learn source MACs per VLAN and flood unknown destinations until learned.

Enterprise Routing and Switching, Professional (JNCIP-ENT) (JN0-650) Practice Tests