Juniper JN0-650 Practice Test 43
Question 420
A 1-Gbps router port feeds a slower carrier subrate and queues build upstream. After deploying the recommended Junos egress shaping rate change, which result MOST directly verifies success?
- Aggregate traffic conforms to the carrier contract without unnecessary downstream discards.
- Each participating VTEP has the required BUM flood destinations for the VNI.
- Packet counters show EF-marked traffic assigned to approved forwarding class and queue.
- Bursty traffic sees acceptable loss with controlled memory usage.
Explanation
Correct Answer
A:Aggregate traffic conforms to the carrier contract without unnecessary downstream discards. This is the directly observable outcome for Junos egress shaping rate. Shaping delays packets to smooth egress rate while policing meters and may drop.
Incorrect Answers
B:Each participating VTEP has the required BUM flood destinations for the VNI. This validates EVPN Type3 IMET inclusive multicast routes but does not directly demonstrate the required Junos egress shaping rate result. Shaping delays packets to smooth egress rate while policing meters and may drop.
C:Packet counters show EF-marked traffic assigned to approved forwarding class and queue. This validates Junos ingress BA DSCP classifier but does not directly demonstrate the required Junos egress shaping rate result. Shaping delays packets to smooth egress rate while policing meters and may drop.
D:Bursty traffic sees acceptable loss with controlled memory usage. This validates Queue buffer-size allocation but does not directly demonstrate the required Junos egress shaping rate result. Shaping delays packets to smooth egress rate while policing meters and may drop.
Question 421
During an operational risk review, this situation is reported: Two tenants share a physical fabric but their overlay segments must remain isolated. If the underlying control is neglected, which failure would MOST directly follow?
- Confusing local preference with Junos route preference can produce wrong active-route reasoning.
- Excessively broad RT import can expose tenant routes or create wrong forwarding entries.
- Different ESI values on supposed peers can defeat multihoming loop protection.
- Reusing wrong VNI mapping can leak traffic across tenant boundaries or break reachability.
Explanation
Correct Answer
D:Reusing wrong VNI mapping can leak traffic across tenant boundaries or break reachability. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains. A useful corrective investigation is to inspect VNI mapping interface bridge domain and encapsulated VNI values.
Incorrect Answers
A:Confusing local preference with Junos route preference can produce wrong active-route reasoning. This is a BGP route preference versus OSPF failure pattern, not the primary VXLAN VNI to VLAN association failure in this case. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
B:Excessively broad RT import can expose tenant routes or create wrong forwarding entries. This is a EVPN route target import export scope failure pattern, not the primary VXLAN VNI to VLAN association failure in this case. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
C:Different ESI values on supposed peers can defeat multihoming loop protection. This is a Ethernet segment identifier ESI consistency failure pattern, not the primary VXLAN VNI to VLAN association failure in this case. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
Question 422
MST instance 2 unexpectedly selects an access switch as its root after a priority change. Which technical principle BEST explains the MSTP instance root selection decision?
- MST region identity depends on matching region attributes including VLAN mapping digest.
- MSTP can group VLANs into instances with independent root bridge elections.
- IGMP snooping uses observed host joins to constrain layer-2 multicast replication.
- Root protection guards designated bridge roles against unexpected root changes.
Explanation
Correct Answer
B:MSTP can group VLANs into instances with independent root bridge elections. In this situation, the relevant action is to set explicit MSTI bridge priorities in the intended MST region.
Incorrect Answers
A:MST region identity depends on matching region attributes including VLAN mapping digest. That principle is related to MSTP region name revision and VLAN digest, not the main MSTP instance root selection choice. Leaving roots uncontrolled may put access switches in core transit roles.
C:IGMP snooping uses observed host joins to constrain layer-2 multicast replication. That principle is related to IGMP snooping access-port replication, not the main MSTP instance root selection choice. Leaving roots uncontrolled may put access switches in core transit roles.
D:Root protection guards designated bridge roles against unexpected root changes. That principle is related to Root protection on designated links, not the main MSTP instance root selection choice. Leaving roots uncontrolled may put access switches in core transit roles.
Question 423
A remote router unexpectedly prefers a type-two external despite a longer route to its ASBR. Which next investigation or correction is MOST appropriate?
- Check packet authentication indicators and interface OSPF security settings.
- Increase a LAN VLAN ID and expect it to change the OSPF external metric type.
- Inspect route details including external type metrics and forwarding next hops.
- Compare show route protocol ospf and interface metric contributions along both paths.
Explanation
Correct Answer
C:Inspect route details including external type metrics and forwarding next hops. This checks whether the preferred external route follows correct E1 total metric or E2 selection rules.
Incorrect Answers
A:Check packet authentication indicators and interface OSPF security settings. That check applies chiefly to OSPF authentication key or algorithm, not the current OSPF external type-one versus type-two metrics issue. OSPF E1 includes internal cost to ASBR whereas E2 comparison primarily uses external metric.
B:Increase a LAN VLAN ID and expect it to change the OSPF external metric type. That bypass leaves the OSPF external type-one versus type-two metrics issue unresolved. Treating E1 and E2 as interchangeable can send traffic over an unsuitable exit.
D:Compare show route protocol ospf and interface metric contributions along both paths. That check applies chiefly to OSPF path cost selection, not the current OSPF external type-one versus type-two metrics issue. OSPF E1 includes internal cost to ASBR whereas E2 comparison primarily uses external metric.
Question 424
OSPFv3 neighbors reach Full but an IPv6 LAN prefix is absent from other routers. Which configuration or operational step BEST meets the stated requirement?
- Add an IPv4 network statement and assume it advertises every IPv6 LAN.
- Configure compatible stub area attributes on all affected OSPF routers.
- Align supported MTU and OSPF adjacency expectations on the link.
- Verify IPv6 interface participation and OSPFv3 prefix advertisement settings.
Explanation
Correct Answer
D:Verify IPv6 interface participation and OSPFv3 prefix advertisement settings. OSPFv3 separates neighbor topology information from IPv6 prefix dissemination. The expected validation is that intended inet6 routes appear on remote Junos nodes with resolvable next hops.
Incorrect Answers
A:Add an IPv4 network statement and assume it advertises every IPv6 LAN. This is a risky or ineffective shortcut for OSPFv3 IPv6 prefix advertisement. An established IPv6 adjacency does not prove every attached prefix is advertised.
B:Configure compatible stub area attributes on all affected OSPF routers. This addresses OSPF stub area external LSA suppression rather than the required OSPFv3 IPv6 prefix advertisement decision. OSPFv3 separates neighbor topology information from IPv6 prefix dissemination.
C:Align supported MTU and OSPF adjacency expectations on the link. This addresses OSPF interface MTU mismatch rather than the required OSPFv3 IPv6 prefix advertisement decision. OSPFv3 separates neighbor topology information from IPv6 prefix dissemination.
Question 425
A receiver is joined but one transit router never sends the upstream PIM Join. After deploying the recommended PIM join prune forwarding path change, which result MOST directly verifies success?
- Each hop has the intended upstream join and only subscribed downstream interfaces.
- Receivers join the intended group and packets retain a valid unicast source.
- Critical VLAN stays present and dynamic VLANs appear only when advertised.
- (S,G) state forwards only the desired source without RP discovery for SSM.
Explanation
Correct Answer
A:Each hop has the intended upstream join and only subscribed downstream interfaces. This is the directly observable outcome for PIM join prune forwarding path. PIM builds and removes multicast distribution state using joins and prunes.
Incorrect Answers
B:Receivers join the intended group and packets retain a valid unicast source. This validates IPv4 multicast group address versus unicast but does not directly demonstrate the required PIM join prune forwarding path result. PIM builds and removes multicast distribution state using joins and prunes.
C:Critical VLAN stays present and dynamic VLANs appear only when advertised. This validates MVRP static versus dynamic registration but does not directly demonstrate the required PIM join prune forwarding path result. PIM builds and removes multicast distribution state using joins and prunes.
D:(S,G) state forwards only the desired source without RP discovery for SSM. This validates SSM without rendezvous point but does not directly demonstrate the required PIM join prune forwarding path result. PIM builds and removes multicast distribution state using joins and prunes.
Question 426
During an operational risk review, this situation is reported: A prepending policy unexpectedly modifies inbound routes rather than outbound announcements. If the underlying control is neglected, which failure would MOST directly follow?
- Inserting prepends into all paths can cause unexpected global traffic shifts.
- Confusing local preference with Junos route preference can produce wrong active-route reasoning.
- An accepted advertisement with an unusable next hop may not be installed.
- Treating a MAC address as strong cryptographic proof can weaken segmentation.
Explanation
Correct Answer
A:Inserting prepends into all paths can cause unexpected global traffic shifts. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy. A useful corrective investigation is to inspect show route advertising-protocol BGP and remote policy confirmation if available.
Incorrect Answers
B:Confusing local preference with Junos route preference can produce wrong active-route reasoning. This is a BGP route preference versus OSPF failure pattern, not the primary BGP AS path prepend outbound advertisement failure in this case. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy.
C:An accepted advertisement with an unusable next hop may not be installed. This is a BGP next-hop reachability hidden route failure pattern, not the primary BGP AS path prepend outbound advertisement failure in this case. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy.
D:Treating a MAC address as strong cryptographic proof can weaken segmentation. This is a MAC RADIUS printer onboarding failure pattern, not the primary BGP AS path prepend outbound advertisement failure in this case. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy.
Question 427
A Junos route exists in an OSPF LSDB but does not become an active route as expected. Which next investigation or correction is MOST appropriate?
- Compare the interface area bindings and decoded Hello area field.
- Hide one route in show output and claim other OSPF routers no longer know the LSA.
- Compare show route protocol ospf and interface metric contributions along both paths.
- Inspect route hidden reason protocol database and configured policy chains.
Explanation
Correct Answer
D:Inspect route hidden reason protocol database and configured policy chains. This checks whether the local route table follows documented acceptance policy while LSDB visibility is understood.
Incorrect Answers
A:Compare the interface area bindings and decoded Hello area field. That check applies chiefly to OSPFv2 area identifier consistency, not the current OSPF routing policy import filtering issue. Local route preference or policy and OSPF flooding are distinct decisions.
B:Hide one route in show output and claim other OSPF routers no longer know the LSA. That bypass leaves the OSPF routing policy import filtering issue unresolved. Mistaking local import rejection for universal LSA suppression produces false reachability assumptions.
C:Compare show route protocol ospf and interface metric contributions along both paths. That check applies chiefly to OSPF path cost selection, not the current OSPF routing policy import filtering issue. Local route preference or policy and OSPF flooding are distinct decisions.
Question 428
A non-Juniper phone receives no identity information from the adjacent access switch. Which next investigation or correction is MOST appropriate?
- Inspect show lldp neighbors and packet captures from the access port.
- Verify phone tag IDs and PC untagged frames in a mirrored capture.
- Inspect LLDP-MED advertisements and tagged phone frames on the link.
- Configure BGP route reflection and expect LLDP neighbor advertisements.
Explanation
Correct Answer
A:Inspect show lldp neighbors and packet captures from the access port. This checks whether the switch and phone discover each other with accurate system and port details.
Incorrect Answers
B:Verify phone tag IDs and PC untagged frames in a mirrored capture. That check applies chiefly to Voice VLAN tagged versus PC data traffic, not the current LLDP neighbor advertisement issue. LLDP provides Layer 2 neighbor discovery independent of IP routing.
C:Inspect LLDP-MED advertisements and tagged phone frames on the link. That check applies chiefly to LLDP-MED voice network policy, not the current LLDP neighbor advertisement issue. LLDP provides Layer 2 neighbor discovery independent of IP routing.
D:Configure BGP route reflection and expect LLDP neighbor advertisements. That bypass leaves the LLDP neighbor advertisement issue unresolved. A physically connected device without LLDP exchange cannot receive LLDP-based network policy.
Question 429
IP multicast join tables are populated but UDP stream packets never arrive. Which configuration or operational step BEST meets the stated requirement?
- Apply a consistent scoped RP mapping with verified routing to the RP.
- Reboot all switching devices every time an IGMP group table contains an entry.
- Apply scoped multicast policy restricting eligible groups at the proper boundary.
- Troubleshoot source activity group membership RPF PIM joins and data packet counters in order.
Explanation
Correct Answer
D:Troubleshoot source activity group membership RPF PIM joins and data packet counters in order. Multicast involves host membership router tree state and actual forwarding traffic. The expected validation is that a consistent state chain from source to receivers explains successful data delivery.
Incorrect Answers
A:Apply a consistent scoped RP mapping with verified routing to the RP. This addresses Static RP mapping group range rather than the required Multicast troubleshooting separate control and data planes decision. Multicast involves host membership router tree state and actual forwarding traffic.
B:Reboot all switching devices every time an IGMP group table contains an entry. This is a risky or ineffective shortcut for Multicast troubleshooting separate control and data planes. Seeing an IGMP group alone does not prove an active source or valid routed data path.
C:Apply scoped multicast policy restricting eligible groups at the proper boundary. This addresses Multicast policy group scoping rather than the required Multicast troubleshooting separate control and data planes decision. Multicast involves host membership router tree state and actual forwarding traffic.
Question 430
During an operational risk review, this situation is reported: A backbone adjacency has identical IP addressing but mismatched authentication type. If the underlying control is neglected, which failure would MOST directly follow?
- An established IPv6 adjacency does not prove every attached prefix is advertised.
- Inspecting only a configured class name can hide actual drops and misclassification.
- A healthy IPv4 neighbor is not proof of IPv6 adjacency or prefix reachability.
- Invalid keys or incompatible authentication configuration silently discard adjacencies.
Explanation
Correct Answer
D:Invalid keys or incompatible authentication configuration silently discard adjacencies. OSPF authentication compatibility is independent of ordinary IP reachability. A useful corrective investigation is to check packet authentication indicators and interface OSPF security settings.
Incorrect Answers
A:An established IPv6 adjacency does not prove every attached prefix is advertised. This is a OSPFv3 IPv6 prefix advertisement failure pattern, not the primary OSPF authentication key or algorithm failure in this case. OSPF authentication compatibility is independent of ordinary IP reachability.
B:Inspecting only a configured class name can hide actual drops and misclassification. This is a CoS end-to-end verification of drop behavior failure pattern, not the primary OSPF authentication key or algorithm failure in this case. OSPF authentication compatibility is independent of ordinary IP reachability.
C:A healthy IPv4 neighbor is not proof of IPv6 adjacency or prefix reachability. This is a OSPFv2 versus OSPFv3 operations failure pattern, not the primary OSPF authentication key or algorithm failure in this case. OSPF authentication compatibility is independent of ordinary IP reachability.