Juniper JN0-650 Practice Test 49
Question 480
An engineer expects a rewrite rule to change a packet's ingress forwarding class. Which configuration or operational step BEST meets the stated requirement?
- Trace classifier forwarding class PLP scheduler and rewrite stages in the correct pipeline order.
- Configure supported IEEE 802.1p rewrite mapping at the Ethernet egress boundary.
- Apply the intended scheduler map to the actual output interface.
- Configure one routing policy term and assume all CoS stages are automatically active.
Explanation
Correct Answer
A:Trace classifier forwarding class PLP scheduler and rewrite stages in the correct pipeline order. Junos CoS decisions progress from ingress classification through queue scheduling to egress rewriting. The expected validation is that captures and counters explain ingress class egress queue and final header marking.
Incorrect Answers
B:Configure supported IEEE 802.1p rewrite mapping at the Ethernet egress boundary. This addresses IEEE 802.1p CoS rewrite on Ethernet rather than the required CoS processing order ingress to egress decision. Junos CoS decisions progress from ingress classification through queue scheduling to egress rewriting.
C:Apply the intended scheduler map to the actual output interface. This addresses Scheduler maps attached to egress interface rather than the required CoS processing order ingress to egress decision. Junos CoS decisions progress from ingress classification through queue scheduling to egress rewriting.
D:Configure one routing policy term and assume all CoS stages are automatically active. This is a risky or ineffective shortcut for CoS processing order ingress to egress. Configuring only an egress rewrite does not automatically set an upstream classifier.
Question 481
Voice uses strict priority but high-volume traffic prevents normal data from progressing. After deploying the recommended Scheduler strict priority and starvation change, which result MOST directly verifies success?
- Routing control packets show stable service during expected congestion.
- Expected tagged VLAN traffic traverses the trunk while unapproved VLANs remain blocked.
- Voice latency stays controlled while data classes continue transmitting.
- Captures show intended 802.1Q PCP values without damaging VLAN identity.
Explanation
Correct Answer
C:Voice latency stays controlled while data classes continue transmitting. This is the directly observable outcome for Scheduler strict priority and starvation. Strict priority can reduce latency but must be designed to avoid starvation.
Incorrect Answers
A:Routing control packets show stable service during expected congestion. This validates Network-control forwarding class differentiation but does not directly demonstrate the required Scheduler strict priority and starvation result. Strict priority can reduce latency but must be designed to avoid starvation.
B:Expected tagged VLAN traffic traverses the trunk while unapproved VLANs remain blocked. This validates 802.1Q trunk allowed VLANs but does not directly demonstrate the required Scheduler strict priority and starvation result. Strict priority can reduce latency but must be designed to avoid starvation.
D:Captures show intended 802.1Q PCP values without damaging VLAN identity. This validates IEEE 802.1p CoS rewrite on Ethernet but does not directly demonstrate the required Scheduler strict priority and starvation result. Strict priority can reduce latency but must be designed to avoid starvation.
Question 482
A guest portal and MAC policy compete to assign different roles to one access port. Which technical principle BEST explains the Multiple access control enforcement troubleshooting decision?
- Authentication success does not guarantee matching VLAN mapping or permitted data-plane access.
- Guest VLAN authorizes limited access for eligible unauthenticated clients.
- Routing policy must match the relevant address family as well as eligible source routes.
- Authentication monitoring must inspect credentials authorization and port state separately.
Explanation
Correct Answer
A:Authentication success does not guarantee matching VLAN mapping or permitted data-plane access. In this situation, the relevant action is to trace authentication outcome dynamic VLAN and firewall/filter policies for the effective session.
Incorrect Answers
B:Guest VLAN authorizes limited access for eligible unauthenticated clients. That principle is related to Guest VLAN for unauthenticated clients, not the main Multiple access control enforcement troubleshooting choice. Mixed ACLs and fallback methods can cause access failure after a valid login.
C:Routing policy must match the relevant address family as well as eligible source routes. That principle is related to OSPFv3 routing policy for external IPv6, not the main Multiple access control enforcement troubleshooting choice. Mixed ACLs and fallback methods can cause access failure after a valid login.
D:Authentication monitoring must inspect credentials authorization and port state separately. That principle is related to Junos Layer 2 authentication session monitoring, not the main Multiple access control enforcement troubleshooting choice. Mixed ACLs and fallback methods can cause access failure after a valid login.
Question 483
A redistribution design unexpectedly sets an incomplete BGP origin and affects ranking. Select THREE statements that correctly combine the BGP origin attribute influence implementation, its evidence, or its governing principle.
- Apply supported route-flap damping only where its stability tradeoff is justified.
- BGP origin distinguishes IGP EGP and incomplete values with limited relative ranking.
- Configure supported graceful-restart capabilities and safe timers based on design.
- Rewrite the Ethernet source MAC and expect that to alter BGP origin attribute.
- Examine and apply origin attribute handling only within an intentional routing-policy decision.
- Chosen path reflects the complete ordered decision process rather than origin alone.
Explanation
Correct Answers
B:BGP origin distinguishes IGP EGP and incomplete values with limited relative ranking. It explains the action and observed outcome for BGP origin attribute influence.
E:Examine and apply origin attribute handling only within an intentional routing-policy decision. This is the intended implementation action for BGP origin attribute influence.
F:Chosen path reflects the complete ordered decision process rather than origin alone. This is direct observable evidence for BGP origin attribute influence.
Incorrect Answers
A:Apply supported route-flap damping only where its stability tradeoff is justified. This belongs to BGP route damping flap penalty, not the specified BGP origin attribute influence operation. BGP origin distinguishes IGP EGP and incomplete values with limited relative ranking.
C:Configure supported graceful-restart capabilities and safe timers based on design. This belongs to BGP graceful restart session continuity, not the specified BGP origin attribute influence operation. BGP origin distinguishes IGP EGP and incomplete values with limited relative ranking.
D:Rewrite the Ethernet source MAC and expect that to alter BGP origin attribute. This would not be an appropriate BGP origin attribute influence decision. Treating origin as more important than LOCAL_PREF or AS_PATH yields incorrect predictions.
Question 484
A transit topology changes underlay hops while BGP is configured with default one-hop expectations. Which technical principle BEST explains the BGP loopback peering and multihop decision?
- Private VLAN isolation provides Layer 2 separation within a shared primary VLAN.
- Junos routing policy evaluates ordered terms and control-flow actions.
- eBGP multihop and local-address controls align transport endpoints and TTL.
- LOCAL_PREF is propagated within an AS and commonly steers outbound path selection.
Explanation
Correct Answer
C:EBGP multihop and local-address controls align transport endpoints and TTL. In this situation, the relevant action is to configure supported multihop and correct local address with underlay reachability.
Incorrect Answers
A:Private VLAN isolation provides Layer 2 separation within a shared primary VLAN. That principle is related to Private VLAN isolated port separation, not the main BGP loopback peering and multihop choice. Missing multihop or source-address configuration prevents loopback-based BGP session establishment.
B:Junos routing policy evaluates ordered terms and control-flow actions. That principle is related to Junos BGP policy term matching, not the main BGP loopback peering and multihop choice. Missing multihop or source-address configuration prevents loopback-based BGP session establishment.
D:LOCAL_PREF is propagated within an AS and commonly steers outbound path selection. That principle is related to BGP LOCAL_PREF outbound exit selection, not the main BGP loopback peering and multihop choice. Missing multihop or source-address configuration prevents loopback-based BGP session establishment.
Question 485
An 802.3at phone requires more power than the port initially allocates. Which configuration or operational step BEST meets the stated requirement?
- Test cable integrity PoE detection and switch port power status.
- Increase the interface MTU and expect the PoE power class to increase.
- Set correct voice VLAN membership and data VLAN handling for the access port.
- Verify supported PoE power classes and power negotiation for the specific phone model.
Explanation
Correct Answer
D:Verify supported PoE power classes and power negotiation for the specific phone model. PoE detection classification and allocation are distinct from Ethernet packet switching. The expected validation is that negotiated power class and delivered wattage match the handset requirement.
Incorrect Answers
A:Test cable integrity PoE detection and switch port power status. This addresses PoE fault isolation and cable pair rather than the required PoE class discovery and allocation decision. PoE detection classification and allocation are distinct from Ethernet packet switching.
B:Increase the interface MTU and expect the PoE power class to increase. This is a risky or ineffective shortcut for PoE class discovery and allocation. Assuming any PoE-capable port supplies every device's requested wattage is unsafe.
C:Set correct voice VLAN membership and data VLAN handling for the access port. This addresses Voice VLAN tagged versus PC data traffic rather than the required PoE class discovery and allocation decision. PoE detection classification and allocation are distinct from Ethernet packet switching.
Question 486
A growing enterprise iBGP topology cannot support full mesh sessions between all routers. After deploying the recommended BGP route reflection cluster change, which result MOST directly verifies success?
- Enterprise routers prefer approved primary exit while allowing backup on withdrawal.
- Client routes are reflected as intended without iBGP full mesh or reflection loops.
- Bursty traffic sees acceptable loss with controlled memory usage.
- BGP reaches Established with the expected local and remote ASN and prefix families.
Explanation
Correct Answer
B:Client routes are reflected as intended without iBGP full mesh or reflection loops. This is the directly observable outcome for BGP route reflection cluster. BGP route reflection reduces iBGP full-mesh needs using originator and cluster loop controls.
Incorrect Answers
A:Enterprise routers prefer approved primary exit while allowing backup on withdrawal. This validates BGP LOCAL_PREF outbound exit selection but does not directly demonstrate the required BGP route reflection cluster result. BGP route reflection reduces iBGP full-mesh needs using originator and cluster loop controls.
C:Bursty traffic sees acceptable loss with controlled memory usage. This validates Queue buffer-size allocation but does not directly demonstrate the required BGP route reflection cluster result. BGP route reflection reduces iBGP full-mesh needs using originator and cluster loop controls.
D:BGP reaches Established with the expected local and remote ASN and prefix families. This validates BGP eBGP peer AS and local identity but does not directly demonstrate the required BGP route reflection cluster result. BGP route reflection reduces iBGP full-mesh needs using originator and cluster loop controls.
Question 487
A desk phone bridges a PC to the access port but the PC must not impersonate voice traffic. After deploying the recommended Phone and PC shared switch-port security change, which result MOST directly verifies success?
- The active route reflects documented policy and any hidden route has an explained reason.
- All approved phones receive adequate negotiated power without exceeding switch capacity.
- Phones send frames with expected voice tags and priority values where supported.
- Legitimate phone traffic receives voice service while PC traffic cannot gain voice privileges.
Explanation
Correct Answer
D:Legitimate phone traffic receives voice service while PC traffic cannot gain voice privileges. This is the directly observable outcome for Phone and PC shared switch-port security. Phone pass-through ports need explicit data security and QoS trust design.
Incorrect Answers
A:The active route reflects documented policy and any hidden route has an explained reason. This validates BGP hidden and rejected path diagnosis but does not directly demonstrate the required Phone and PC shared switch-port security result. Phone pass-through ports need explicit data security and QoS trust design.
B:All approved phones receive adequate negotiated power without exceeding switch capacity. This validates PoE power budget switch capacity but does not directly demonstrate the required Phone and PC shared switch-port security result. Phone pass-through ports need explicit data security and QoS trust design.
C:Phones send frames with expected voice tags and priority values where supported. This validates LLDP-MED voice priority signaling but does not directly demonstrate the required Phone and PC shared switch-port security result. Phone pass-through ports need explicit data security and QoS trust design.
Question 488
An eBGP neighbor uses a remote loopback rather than a directly connected interface. After deploying the recommended BGP loopback peering and multihop change, which result MOST directly verifies success?
- Receivers join the intended group and packets retain a valid unicast source.
- Advertised AS_PATH contains expected local-AS repeats while primary route remains reachable.
- Loopback-sourced peers establish across the intended hop count and remain reachable.
- Enterprise routers prefer approved primary exit while allowing backup on withdrawal.
Explanation
Correct Answer
C:Loopback-sourced peers establish across the intended hop count and remain reachable. This is the directly observable outcome for BGP loopback peering and multihop. eBGP multihop and local-address controls align transport endpoints and TTL.
Incorrect Answers
A:Receivers join the intended group and packets retain a valid unicast source. This validates IPv4 multicast group address versus unicast but does not directly demonstrate the required BGP loopback peering and multihop result. eBGP multihop and local-address controls align transport endpoints and TTL.
B:Advertised AS_PATH contains expected local-AS repeats while primary route remains reachable. This validates BGP AS path prepend outbound advertisement but does not directly demonstrate the required BGP loopback peering and multihop result. eBGP multihop and local-address controls align transport endpoints and TTL.
D:Enterprise routers prefer approved primary exit while allowing backup on withdrawal. This validates BGP LOCAL_PREF outbound exit selection but does not directly demonstrate the required BGP loopback peering and multihop result. eBGP multihop and local-address controls align transport endpoints and TTL.
Question 489
A team incorrectly configures a multicast group as the unicast source host IP. Which next investigation or correction is MOST appropriate?
- Assign 239.1.10.20 as the sender interface unicast address and call it standard multicast design.
- Examine show multicast route and per-interface packet counters at each hop.
- Inspect IGMPv3 (S,G) membership report and associated forwarding state.
- Inspect destination group fields in received packets and routing entries.
Explanation
Correct Answer
D:Inspect destination group fields in received packets and routing entries. This checks whether receivers join the intended group and packets retain a valid unicast source.
Incorrect Answers
A:Assign 239.1.10.20 as the sender interface unicast address and call it standard multicast design. That bypass leaves the IPv4 multicast group address versus unicast issue unresolved. Confusing group addresses and source addresses breaks multicast forwarding and diagnostics.
B:Examine show multicast route and per-interface packet counters at each hop. That check applies chiefly to Multicast routing table incoming outgoing lists, not the current IPv4 multicast group address versus unicast issue. IPv4 multicast destination ranges are group identifiers rather than ordinary host addresses.
C:Inspect IGMPv3 (S,G) membership report and associated forwarding state. That check applies chiefly to IGMPv3 source include mode, not the current IPv4 multicast group address versus unicast issue. IPv4 multicast destination ranges are group identifiers rather than ordinary host addresses.
Question 490
A trusted voice device sends unmarked RTP that needs classification by approved source and ports. Which configuration or operational step BEST meets the stated requirement?
- Configure supported priority treatment with bounds and sufficient lower-class service.
- Tune supported scheduler buffer sizes consistent with measured burst requirements.
- Set all incoming traffic to expedited forwarding based solely on one switch description.
- Configure a supported multifield classifier or ingress firewall filter matching relevant flow fields.
Explanation
Correct Answer
D:Configure a supported multifield classifier or ingress firewall filter matching relevant flow fields. Multifield classification can use packet fields beyond preexisting DSCP markings. The expected validation is that approved voice packets gain the intended forwarding class while bulk packets do not.
Incorrect Answers
A:Configure supported priority treatment with bounds and sufficient lower-class service. This addresses Scheduler strict priority and starvation rather than the required Junos multifield firewall filter classification decision. Multifield classification can use packet fields beyond preexisting DSCP markings.
B:Tune supported scheduler buffer sizes consistent with measured burst requirements. This addresses Queue buffer-size allocation rather than the required Junos multifield firewall filter classification decision. Multifield classification can use packet fields beyond preexisting DSCP markings.
C:Set all incoming traffic to expedited forwarding based solely on one switch description. This is a risky or ineffective shortcut for Junos multifield firewall filter classification. Overbroad classifiers permit bulk traffic to consume low-latency queues.