Juniper JN0-650 Practice Test 41
Question 400
A receiver cannot get a stream even though PIM and IGMP neighbors appear healthy. Which configuration or operational step BEST meets the stated requirement?
- Apply scoped multicast policy restricting eligible groups at the proper boundary.
- Build supported anycast-RP reachability and synchronize source awareness as required.
- Correlate multicast route incoming interface with outgoing-interface list and group state.
- Check only the BGP session up flag and conclude multicast delivery is healthy.
Explanation
Correct Answer
C:Correlate multicast route incoming interface with outgoing-interface list and group state. Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state. The expected validation is that traffic from the expected source reaches only authorized receiver interfaces.
Incorrect Answers
A:Apply scoped multicast policy restricting eligible groups at the proper boundary. This addresses Multicast policy group scoping rather than the required Multicast routing table incoming outgoing lists decision. Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state.
B:Build supported anycast-RP reachability and synchronize source awareness as required. This addresses Anycast RP with shared address rather than the required Multicast routing table incoming outgoing lists decision. Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state.
D:Check only the BGP session up flag and conclude multicast delivery is healthy. This is a risky or ineffective shortcut for Multicast routing table incoming outgoing lists. Missing OIF state yields no receiver traffic despite an upstream multicast feed.
Question 401
A change to one VLAN-to-MSTI map unexpectedly creates a region boundary. Which technical principle BEST explains the MSTP region name revision and VLAN digest decision?
- Communities can be selectively matched manipulated and stripped in routing policy.
- Filter terms are evaluated in policy order subject to terminating actions.
- MSTP can group VLANs into instances with independent root bridge elections.
- MST region identity depends on matching region attributes including VLAN mapping digest.
Explanation
Correct Answer
D:MST region identity depends on matching region attributes including VLAN mapping digest. In this situation, the relevant action is to align MSTP region name revision and VLAN-to-instance mapping across intended peers.
Incorrect Answers
A:Communities can be selectively matched manipulated and stripped in routing policy. That principle is related to BGP communities match and deletion, not the main MSTP region name revision and VLAN digest choice. Slight configuration mismatches can create independent MST regions and unexpected port states.
B:Filter terms are evaluated in policy order subject to terminating actions. That principle is related to Filter-based VLAN rule precedence, not the main MSTP region name revision and VLAN digest choice. Slight configuration mismatches can create independent MST regions and unexpected port states.
C:MSTP can group VLANs into instances with independent root bridge elections. That principle is related to MSTP instance root selection, not the main MSTP region name revision and VLAN digest choice. Slight configuration mismatches can create independent MST regions and unexpected port states.
Question 402
A growing enterprise iBGP topology cannot support full mesh sessions between all routers. Which configuration or operational step BEST meets the stated requirement?
- Configure supported route reflector clients and cluster identifiers with loop safeguards.
- Compare Junos route preference across protocols separately from intraprotocol BGP attributes.
- Configure the route reflector as an OSPF DR and assume BGP reflection is enabled.
- Use deliberate AS-path policy without bypassing loop-prevention safeguards.
Explanation
Correct Answer
A:Configure supported route reflector clients and cluster identifiers with loop safeguards. BGP route reflection reduces iBGP full-mesh needs using originator and cluster loop controls. The expected validation is that client routes are reflected as intended without iBGP full mesh or reflection loops.
Incorrect Answers
B:Compare Junos route preference across protocols separately from intraprotocol BGP attributes. This addresses BGP route preference versus OSPF rather than the required BGP route reflection cluster decision. BGP route reflection reduces iBGP full-mesh needs using originator and cluster loop controls.
C:Configure the route reflector as an OSPF DR and assume BGP reflection is enabled. This is a risky or ineffective shortcut for BGP route reflection cluster. Incorrect reflection topology can hide otherwise valid internal paths.
D:Use deliberate AS-path policy without bypassing loop-prevention safeguards. This addresses BGP AS_PATH loop prevention and length rather than the required BGP route reflection cluster decision. BGP route reflection reduces iBGP full-mesh needs using originator and cluster loop controls.
Question 403
Devices within one application cluster must communicate while different clusters cannot. Which configuration or operational step BEST meets the stated requirement?
- Set every service port to isolated and claim community members will keep talking.
- Reorder policy terms so specific supported VLAN matches precede broad fallback actions.
- Configure community secondary roles and the appropriate promiscuous uplink association.
- Identify MAC learning state and remediate loops or incorrect topology.
Explanation
Correct Answer
C:Configure community secondary roles and the appropriate promiscuous uplink association. Private VLAN community ports have scoped peer reachability and promiscuous ports serve shared resources. The expected validation is that same-community endpoints communicate while different communities stay isolated.
Incorrect Answers
A:Set every service port to isolated and claim community members will keep talking. This is a risky or ineffective shortcut for Private VLAN community and promiscuous roles. Mistaking community roles for isolated roles can interrupt same-group operation.
B:Reorder policy terms so specific supported VLAN matches precede broad fallback actions. This addresses Filter-based VLAN rule precedence rather than the required Private VLAN community and promiscuous roles decision. Private VLAN community ports have scoped peer reachability and promiscuous ports serve shared resources.
D:Identify MAC learning state and remediate loops or incorrect topology. This addresses Ethernet MAC learning and flooding rather than the required Private VLAN community and promiscuous roles decision. Private VLAN community ports have scoped peer reachability and promiscuous ports serve shared resources.
Question 404
One end runs PIM sparse mode while the other end enables only IGMP host joins. Which technical principle BEST explains the PIM sparse-mode neighbor discovery decision?
- IPv6 multicast uses ff00::/8 scoped addressing separate from IPv4 group syntax.
- BGP OPEN exchange checks autonomous-system identity and capability compatibility.
- PIM establishes multicast router adjacencies independently of host IGMP group membership.
- Dynamic RP discovery advertises RP group associations while PIM still requires routing reachability.
Explanation
Correct Answer
C:PIM establishes multicast router adjacencies independently of host IGMP group membership. In this situation, the relevant action is to enable compatible PIM on intended routed interfaces and verify neighbor discovery.
Incorrect Answers
A:IPv6 multicast uses ff00::/8 scoped addressing separate from IPv4 group syntax. That principle is related to IPv6 multicast scope and group use, not the main PIM sparse-mode neighbor discovery choice. IGMP-only interfaces do not create interrouter PIM forwarding state.
B:BGP OPEN exchange checks autonomous-system identity and capability compatibility. That principle is related to BGP eBGP peer AS and local identity, not the main PIM sparse-mode neighbor discovery choice. IGMP-only interfaces do not create interrouter PIM forwarding state.
D:Dynamic RP discovery advertises RP group associations while PIM still requires routing reachability. That principle is related to PIM RP discovery and bootstrap mapping, not the main PIM sparse-mode neighbor discovery choice. IGMP-only interfaces do not create interrouter PIM forwarding state.
Question 405
A Junos route shows one best path while ECMP traffic sharing was expected. Which technical principle BEST explains the BGP multipath equal-cost path installation decision?
- Junos route selection between protocols is not the same as BGP best-path selection.
- EVPN route targets control distribution membership independently of VNI packet encapsulation.
- BGP multipath requires compatible path properties and FIB programming beyond two received advertisements.
- MED is a nontransitive path attribute often compared between paths from the same neighboring AS.
Explanation
Correct Answer
C:BGP multipath requires compatible path properties and FIB programming beyond two received advertisements. In this situation, the relevant action is to enable compatible BGP multipath and forwarding-table load balancing where justified.
Incorrect Answers
A:Junos route selection between protocols is not the same as BGP best-path selection. That principle is related to BGP route preference versus OSPF, not the main BGP multipath equal-cost path installation choice. Merely seeing multiple BGP routes does not prove load balancing occurs.
B:EVPN route targets control distribution membership independently of VNI packet encapsulation. That principle is related to EVPN route target import export scope, not the main BGP multipath equal-cost path installation choice. Merely seeing multiple BGP routes does not prove load balancing occurs.
D:MED is a nontransitive path attribute often compared between paths from the same neighboring AS. That principle is related to BGP MED inbound traffic hint, not the main BGP multipath equal-cost path installation choice. Merely seeing multiple BGP routes does not prove load balancing occurs.
Question 406
An ASM source registers on RP-A while all receivers currently use RP-B. Which technical principle BEST explains the MSDP source active exchange decision?
- Anycast RP can present one logical RP address across multiple physical routers.
- OSPF SPF selects lowest cumulative link cost subject to policy and availability.
- MSDP can exchange source-active awareness across ASM RP domains.
- Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state.
Explanation
Correct Answer
C:MSDP can exchange source-active awareness across ASM RP domains. In this situation, the relevant action is to configure supported MSDP peering and source-active advertisements between intended RP nodes.
Incorrect Answers
A:Anycast RP can present one logical RP address across multiple physical routers. That principle is related to Anycast RP with shared address, not the main MSDP source active exchange choice. Missing MSDP source advertisements can isolate multicast sources between RPs.
B:OSPF SPF selects lowest cumulative link cost subject to policy and availability. That principle is related to OSPF path cost selection, not the main MSDP source active exchange choice. Missing MSDP source advertisements can isolate multicast sources between RPs.
D:Multicast forwarding depends on both RPF incoming checks and valid outgoing interface state. That principle is related to Multicast routing table incoming outgoing lists, not the main MSDP source active exchange choice. Missing MSDP source advertisements can isolate multicast sources between RPs.
Question 407
Corporate users present certificates but authentication fails after an enterprise CA rollover. After deploying the recommended 802.1X EAP authentication credential validation change, which result MOST directly verifies success?
- The guest is redirected appropriately and receives only permitted post-portal access.
- Registered printers receive limited required access while unknown MACs are rejected.
- Authorized user EAP exchanges complete while invalid or expired certificates are rejected.
- The IGMP state records the intended source and excludes other senders.
Explanation
Correct Answer
C:Authorized user EAP exchanges complete while invalid or expired certificates are rejected. This is the directly observable outcome for 802.1X EAP authentication credential validation. EAP credential validation requires mutual compatible authentication and trust policy.
Incorrect Answers
A:The guest is redirected appropriately and receives only permitted post-portal access. This validates Captive portal web authentication but does not directly demonstrate the required 802.1X EAP authentication credential validation result. EAP credential validation requires mutual compatible authentication and trust policy.
B:Registered printers receive limited required access while unknown MACs are rejected. This validates MAC RADIUS printer onboarding but does not directly demonstrate the required 802.1X EAP authentication credential validation result. EAP credential validation requires mutual compatible authentication and trust policy.
D:The IGMP state records the intended source and excludes other senders. This validates IGMPv3 source include mode but does not directly demonstrate the required 802.1X EAP authentication credential validation result. EAP credential validation requires mutual compatible authentication and trust policy.
Question 408
A new link cost changes which MSTI uplink forwards unexpectedly. Which technical principle BEST explains the MSTP root port and alternate path decision?
- Private VLAN isolation provides Layer 2 separation within a shared primary VLAN.
- L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries.
- Spanning tree chooses port roles to avoid loops while maintaining redundant paths.
- Anycast RP can present one logical RP address across multiple physical routers.
Explanation
Correct Answer
C:Spanning tree chooses port roles to avoid loops while maintaining redundant paths. In this situation, the relevant action is to tune approved MST port costs and priorities based on the intended topology.
Incorrect Answers
A:Private VLAN isolation provides Layer 2 separation within a shared primary VLAN. That principle is related to Private VLAN isolated port separation, not the main MSTP root port and alternate path choice. Forcing every redundant port to forwarding can create broadcast storms.
B:L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries. That principle is related to L2PT protocol selection and isolation, not the main MSTP root port and alternate path choice. Forcing every redundant port to forwarding can create broadcast storms.
D:Anycast RP can present one logical RP address across multiple physical routers. That principle is related to Anycast RP with shared address, not the main MSTP root port and alternate path choice. Forcing every redundant port to forwarding can create broadcast storms.
Question 409
A dual-attached server should use both healthy access links through two EVPN leaves. After deploying the recommended EVPN all-active multihoming forwarding change, which result MOST directly verifies success?
- Expected EVPN NLRI appears in the routing instance and route table.
- The intended eligible DR and BDR appear on the broadcast segment after reelection.
- The selected active leaf forwards while standby becomes active after controlled failure.
- Traffic can use eligible multihomed links while loss of one link preserves connectivity.
Explanation
Correct Answer
D:Traffic can use eligible multihomed links while loss of one link preserves connectivity. This is the directly observable outcome for EVPN all-active multihoming forwarding. EVPN all-active multihoming can use parallel forwarding paths with designated loop protection.
Incorrect Answers
A:Expected EVPN NLRI appears in the routing instance and route table. This validates BGP EVPN address-family peer negotiation but does not directly demonstrate the required EVPN all-active multihoming forwarding result. EVPN all-active multihoming can use parallel forwarding paths with designated loop protection.
B:The intended eligible DR and BDR appear on the broadcast segment after reelection. This validates OSPF designated router election broadcast LAN but does not directly demonstrate the required EVPN all-active multihoming forwarding result. EVPN all-active multihoming can use parallel forwarding paths with designated loop protection.
C:The selected active leaf forwards while standby becomes active after controlled failure. This validates EVPN single-active multihoming access mode but does not directly demonstrate the required EVPN all-active multihoming forwarding result. EVPN all-active multihoming can use parallel forwarding paths with designated loop protection.
Question 410
Two routers can ping each other but TCP port 179 is filtered in one direction. Which configuration or operational step BEST meets the stated requirement?
- Apply controlled AS_PATH prepending in export policy to appropriate external neighbors.
- Set a policy-based higher local preference for preferred internal BGP paths.
- Permit the intended TCP179 flow under explicit control-plane security policy.
- Allow all internet TCP ports permanently as a necessary BGP adjacency fix.
Explanation
Correct Answer
C:Permit the intended TCP179 flow under explicit control-plane security policy. BGP relies on TCP transport and does not form merely because IP reachability exists. The expected validation is that peering establishes over the authorized endpoints without opening unrelated management ports.
Incorrect Answers
A:Apply controlled AS_PATH prepending in export policy to appropriate external neighbors. This addresses BGP AS path prepend outbound advertisement rather than the required BGP TCP 179 and firewall reachability decision. BGP relies on TCP transport and does not form merely because IP reachability exists.
B:Set a policy-based higher local preference for preferred internal BGP paths. This addresses BGP LOCAL_PREF outbound exit selection rather than the required BGP TCP 179 and firewall reachability decision. BGP relies on TCP transport and does not form merely because IP reachability exists.
D:Allow all internet TCP ports permanently as a necessary BGP adjacency fix. This is a risky or ineffective shortcut for BGP TCP 179 and firewall reachability. Rejecting TCP session establishment keeps BGP Idle or Active.