Juniper JN0-650 Practice Test 40
Question 390
A workstation marks all backup packets as EF and consumes voice scheduling resources. Which configuration or operational step BEST meets the stated requirement?
- Apply the intended scheduler map to the actual output interface.
- Configure suitable RED or WRED drop profiles and map PLP to planned thresholds.
- Classify or remark untrusted edge traffic while retaining appropriate trusted phone service.
- Trust all DSCP on every public access port because users may have telephony apps.
Explanation
Correct Answer
C:Classify or remark untrusted edge traffic while retaining appropriate trusted phone service. A CoS trust boundary defines whose markings should be honored. The expected validation is that untrusted workstation EF markings cannot steal the intended voice queue.
Incorrect Answers
A:Apply the intended scheduler map to the actual output interface. This addresses Scheduler maps attached to egress interface rather than the required QoS trust boundary at campus edge decision. A CoS trust boundary defines whose markings should be honored.
B:Configure suitable RED or WRED drop profiles and map PLP to planned thresholds. This addresses RED WRED drop profile thresholds rather than the required QoS trust boundary at campus edge decision. A CoS trust boundary defines whose markings should be honored.
D:Trust all DSCP on every public access port because users may have telephony apps. This is a risky or ineffective shortcut for QoS trust boundary at campus edge. Trusting all edge markings lets ordinary traffic claim priority service.
Question 391
An NSSA ABR fails to propagate an intended locally originated external destination into the backbone. Which next investigation or correction is MOST appropriate?
- Check area capabilities and LSDB LSA types at the ABR and branch.
- Assume a type-7 LSA is a BGP VPN label advertisement.
- Inspect NSSA LSAs and translated external entries at the ABR.
- Verify per-interface network type and Hello processing at both endpoints.
Explanation
Correct Answer
C:Inspect NSSA LSAs and translated external entries at the ABR. This checks whether nSSA-local external reachability is advertised as expected into other areas.
Incorrect Answers
A:Check area capabilities and LSDB LSA types at the ABR and branch. That check applies chiefly to OSPF stub area external LSA suppression, not the current OSPF NSSA type-seven translation issue. NSSA can carry type-7 external LSAs and ABRs may translate them to type-5.
B:Assume a type-7 LSA is a BGP VPN label advertisement. That bypass leaves the OSPF NSSA type-seven translation issue unresolved. Treating NSSA redistribution as a normal stub area can suppress required external routes.
D:Verify per-interface network type and Hello processing at both endpoints. That check applies chiefly to OSPF point-to-point network type, not the current OSPF NSSA type-seven translation issue. NSSA can carry type-7 external LSAs and ABRs may translate them to type-5.
Question 392
A guest uplink sends bursts far above its allowed traffic contract. After deploying the recommended Junos ingress policer rate limit change, which result MOST directly verifies success?
- Approved voice packets gain the intended forwarding class while bulk packets do not.
- Excess traffic is treated according to policy and compliant traffic continues.
- The preferred external route follows correct E1 total metric or E2 selection rules.
- Packet counters show EF-marked traffic assigned to approved forwarding class and queue.
Explanation
Correct Answer
B:Excess traffic is treated according to policy and compliant traffic continues. This is the directly observable outcome for Junos ingress policer rate limit. A policer meters traffic and may drop or remark traffic exceeding its limits.
Incorrect Answers
A:Approved voice packets gain the intended forwarding class while bulk packets do not. This validates Junos multifield firewall filter classification but does not directly demonstrate the required Junos ingress policer rate limit result. A policer meters traffic and may drop or remark traffic exceeding its limits.
C:The preferred external route follows correct E1 total metric or E2 selection rules. This validates OSPF external type-one versus type-two metrics but does not directly demonstrate the required Junos ingress policer rate limit result. A policer meters traffic and may drop or remark traffic exceeding its limits.
D:Packet counters show EF-marked traffic assigned to approved forwarding class and queue. This validates Junos ingress BA DSCP classifier but does not directly demonstrate the required Junos ingress policer rate limit result. A policer meters traffic and may drop or remark traffic exceeding its limits.
Question 393
One multihoming link fails but remote routers cannot withdraw the failed segment's reachability efficiently. Which next investigation or correction is MOST appropriate?
- Inspect Type1 A-D per-ES and per-EVI routes before and after a link failure.
- Inspect Ethernet segment state and EVPN ESI route fields on both leaves.
- Use only an IGMP group join as a substitute for Ethernet A-D advertisements.
- Inspect elected DF status and BUM frames before and after link events.
Explanation
Correct Answer
A:Inspect Type1 A-D per-ES and per-EVI routes before and after a link failure. This checks whether remote peers recognize Ethernet segment participation and respond to advertised withdrawals.
Incorrect Answers
B:Inspect Ethernet segment state and EVPN ESI route fields on both leaves. That check applies chiefly to Ethernet segment identifier ESI consistency, not the current EVPN Type1 Ethernet auto discovery issue. Type1 Ethernet A-D routes signal Ethernet segment reachability and support multihoming convergence.
C:Use only an IGMP group join as a substitute for Ethernet A-D advertisements. That bypass leaves the EVPN Type1 Ethernet auto discovery issue unresolved. Incorrect or missing Type1 signaling can slow convergence or misrepresent ES availability.
D:Inspect elected DF status and BUM frames before and after link events. That check applies chiefly to EVPN designated forwarder DF for BUM, not the current EVPN Type1 Ethernet auto discovery issue. Type1 Ethernet A-D routes signal Ethernet segment reachability and support multihoming convergence.
Question 394
A dual-stack branch forms IPv4 OSPF neighbors but IPv6 route propagation remains broken. Select THREE statements that correctly combine the OSPFv2 versus OSPFv3 operations implementation, its evidence, or its governing principle.
- Disable OSPFv3 because OSPFv2 already carries every IPv6 prefix by default.
- Configure compatible stub area attributes on all affected OSPF routers.
- OSPFv2 and OSPFv3 have related SPF logic but separate protocol and address-family configuration.
- Use a consistent OSPF reference-bandwidth policy across the intended routing domain.
- Both IPv4 and IPv6 routes appear via their configured protocols independently.
- Troubleshoot OSPF and OSPFv3 sessions and tables as distinct address-family contexts.
Explanation
Correct Answers
C:OSPFv2 and OSPFv3 have related SPF logic but separate protocol and address-family configuration. It explains the action and observed outcome for OSPFv2 versus OSPFv3 operations.
E:Both IPv4 and IPv6 routes appear via their configured protocols independently. This is direct observable evidence for OSPFv2 versus OSPFv3 operations.
F:Troubleshoot OSPF and OSPFv3 sessions and tables as distinct address-family contexts. This is the intended implementation action for OSPFv2 versus OSPFv3 operations.
Incorrect Answers
A:Disable OSPFv3 because OSPFv2 already carries every IPv6 prefix by default. This would not be an appropriate OSPFv2 versus OSPFv3 operations decision. A healthy IPv4 neighbor is not proof of IPv6 adjacency or prefix reachability.
B:Configure compatible stub area attributes on all affected OSPF routers. This belongs to OSPF stub area external LSA suppression, not the specified OSPFv2 versus OSPFv3 operations operation. OSPFv2 and OSPFv3 have related SPF logic but separate protocol and address-family configuration.
D:Use a consistent OSPF reference-bandwidth policy across the intended routing domain. This belongs to OSPF reference bandwidth and high-speed links, not the specified OSPFv2 versus OSPFv3 operations operation. OSPFv2 and OSPFv3 have related SPF logic but separate protocol and address-family configuration.
Question 395
Two tenants share a physical fabric but their overlay segments must remain isolated. Which next investigation or correction is MOST appropriate?
- Inspect VNI mapping interface bridge domain and encapsulated VNI values.
- Inspect EVPN Type3 routes and flood lists for the affected VNI.
- Rename tenant VLANs to identical names and assume the VNI collision becomes safe.
- Inspect Type1 A-D per-ES and per-EVI routes before and after a link failure.
Explanation
Correct Answer
A:Inspect VNI mapping interface bridge domain and encapsulated VNI values. This checks whether same-segment endpoints communicate while other VNIs remain isolated.
Incorrect Answers
B:Inspect EVPN Type3 routes and flood lists for the affected VNI. That check applies chiefly to EVPN Type3 IMET inclusive multicast routes, not the current VXLAN VNI to VLAN association issue. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
C:Rename tenant VLANs to identical names and assume the VNI collision becomes safe. That bypass leaves the VXLAN VNI to VLAN association issue unresolved. Reusing wrong VNI mapping can leak traffic across tenant boundaries or break reachability.
D:Inspect Type1 A-D per-ES and per-EVI routes before and after a link failure. That check applies chiefly to EVPN Type1 Ethernet auto discovery, not the current VXLAN VNI to VLAN association issue. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
Question 396
One anycast-RP node fails and multicast should continue through an alternate active node. Select TWO statements that correctly combine the Anycast RP with shared address implementation, its evidence, or its governing principle.
- Receivers continue forwarding through the surviving RP without changing group configuration.
- Apply a consistent scoped RP mapping with verified routing to the RP.
- Replace RP configuration with an ordinary Ethernet anycast MAC and assume PIM state synchronizes.
- Enable compatible PIM on intended routed interfaces and verify neighbor discovery.
- Build supported anycast-RP reachability and synchronize source awareness as required.
Explanation
Correct Answers
A:Receivers continue forwarding through the surviving RP without changing group configuration. This is direct observable evidence for Anycast RP with shared address.
E:Build supported anycast-RP reachability and synchronize source awareness as required. This is the intended implementation action for Anycast RP with shared address.
Incorrect Answers
B:Apply a consistent scoped RP mapping with verified routing to the RP. This belongs to Static RP mapping group range, not the specified Anycast RP with shared address operation. Anycast RP can present one logical RP address across multiple physical routers.
C:Replace RP configuration with an ordinary Ethernet anycast MAC and assume PIM state synchronizes. This would not be an appropriate Anycast RP with shared address decision. Identical RP addresses without source-state coordination can break ASM reachability.
D:Enable compatible PIM on intended routed interfaces and verify neighbor discovery. This belongs to PIM sparse-mode neighbor discovery, not the specified Anycast RP with shared address operation. Anycast RP can present one logical RP address across multiple physical routers.
Question 397
An operator must tunnel only customer LACP control frames while keeping provider control protocols local. After deploying the recommended L2PT protocol selection and isolation change, which result MOST directly verifies success?
- (*,G) joins establish a shared tree via the intended RP and receivers get the stream.
- Intended customer control frames cross the service without exposing provider control state.
- Expected tagged VLAN traffic traverses the trunk while unapproved VLANs remain blocked.
- Matching flows land in the intended VLAN without changing unrelated traffic handling.
Explanation
Correct Answer
B:Intended customer control frames cross the service without exposing provider control state. This is the directly observable outcome for L2PT protocol selection and isolation. L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries.
Incorrect Answers
A:(*,G) joins establish a shared tree via the intended RP and receivers get the stream. This validates PIM sparse-mode RP shared tree but does not directly demonstrate the required L2PT protocol selection and isolation result. L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries.
C:Expected tagged VLAN traffic traverses the trunk while unapproved VLANs remain blocked. This validates 802.1Q trunk allowed VLANs but does not directly demonstrate the required L2PT protocol selection and isolation result. L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries.
D:Matching flows land in the intended VLAN without changing unrelated traffic handling. This validates Filter-based VLAN assignment but does not directly demonstrate the required L2PT protocol selection and isolation result. L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries.
Question 398
A router learns one prefix from BGP and OSPF with different Junos preferences. After deploying the recommended BGP route preference versus OSPF change, which result MOST directly verifies success?
- Legitimate phone traffic receives voice service while PC traffic cannot gain voice privileges.
- Authorized IPv6 BGP routes appear in inet6.0 with valid next hops.
- Peering establishes over the authorized endpoints without opening unrelated management ports.
- Active route reflects Junos protocol preference then applicable next-hop and policy conditions.
Explanation
Correct Answer
D:Active route reflects Junos protocol preference then applicable next-hop and policy conditions. This is the directly observable outcome for BGP route preference versus OSPF. Junos route selection between protocols is not the same as BGP best-path selection.
Incorrect Answers
A:Legitimate phone traffic receives voice service while PC traffic cannot gain voice privileges. This validates Phone and PC shared switch-port security but does not directly demonstrate the required BGP route preference versus OSPF result. Junos route selection between protocols is not the same as BGP best-path selection.
B:Authorized IPv6 BGP routes appear in inet6.0 with valid next hops. This validates BGP NLRI IPv6 unicast inet6 family but does not directly demonstrate the required BGP route preference versus OSPF result. Junos route selection between protocols is not the same as BGP best-path selection.
C:Peering establishes over the authorized endpoints without opening unrelated management ports. This validates BGP TCP 179 and firewall reachability but does not directly demonstrate the required BGP route preference versus OSPF result. Junos route selection between protocols is not the same as BGP best-path selection.
Question 399
During an operational risk review, this situation is reported: One end runs PIM sparse mode while the other end enables only IGMP host joins. If the underlying control is neglected, which failure would MOST directly follow?
- An unexpected source route preference may cause RPF failures after a control-plane change.
- Confusing group addresses and source addresses breaks multicast forwarding and diagnostics.
- Unreachable preserved eBGP next hops can make internally advertised routes unusable.
- IGMP-only interfaces do not create interrouter PIM forwarding state.
Explanation
Correct Answer
D:IGMP-only interfaces do not create interrouter PIM forwarding state. PIM establishes multicast router adjacencies independently of host IGMP group membership. A useful corrective investigation is to check show pim neighbors interface and hello packet exchange.
Incorrect Answers
A:An unexpected source route preference may cause RPF failures after a control-plane change. This is a Multicast source route policy and RPF failure pattern, not the primary PIM sparse-mode neighbor discovery failure in this case. PIM establishes multicast router adjacencies independently of host IGMP group membership.
B:Confusing group addresses and source addresses breaks multicast forwarding and diagnostics. This is a IPv4 multicast group address versus unicast failure pattern, not the primary PIM sparse-mode neighbor discovery failure in this case. PIM establishes multicast router adjacencies independently of host IGMP group membership.
C:Unreachable preserved eBGP next hops can make internally advertised routes unusable. This is a iBGP next-hop-self on edge failure pattern, not the primary PIM sparse-mode neighbor discovery failure in this case. PIM establishes multicast router adjacencies independently of host IGMP group membership.
Question 400
A receiver cannot get a stream even though PIM and IGMP neighbors appear healthy. Which configuration or operational step BEST meets the stated requirement?
- Apply scoped multicast policy restricting eligible groups at the proper boundary.
- Build supported anycast-RP reachability and synchronize source awareness as required.
- Correlate multicast route incoming interface with outgoing-interface list and group state.
- Check only the BGP session up flag and conclude multicast delivery is healthy.
Explanation
Correct Answer
C:Correlate multicast route incoming interface with outgoing-interface list and group state. Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state. The expected validation is that traffic from the expected source reaches only authorized receiver interfaces.
Incorrect Answers
A:Apply scoped multicast policy restricting eligible groups at the proper boundary. This addresses Multicast policy group scoping rather than the required Multicast routing table incoming outgoing lists decision. Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state.
B:Build supported anycast-RP reachability and synchronize source awareness as required. This addresses Anycast RP with shared address rather than the required Multicast routing table incoming outgoing lists decision. Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state.
D:Check only the BGP session up flag and conclude multicast delivery is healthy. This is a risky or ineffective shortcut for Multicast routing table incoming outgoing lists. Missing OIF state yields no receiver traffic despite an upstream multicast feed.