Juniper JN0-650 Practice Test 50
Question 490
A trusted voice device sends unmarked RTP that needs classification by approved source and ports. Which configuration or operational step BEST meets the stated requirement?
- Configure supported priority treatment with bounds and sufficient lower-class service.
- Tune supported scheduler buffer sizes consistent with measured burst requirements.
- Set all incoming traffic to expedited forwarding based solely on one switch description.
- Configure a supported multifield classifier or ingress firewall filter matching relevant flow fields.
Explanation
Correct Answer
D:Configure a supported multifield classifier or ingress firewall filter matching relevant flow fields. Multifield classification can use packet fields beyond preexisting DSCP markings. The expected validation is that approved voice packets gain the intended forwarding class while bulk packets do not.
Incorrect Answers
A:Configure supported priority treatment with bounds and sufficient lower-class service. This addresses Scheduler strict priority and starvation rather than the required Junos multifield firewall filter classification decision. Multifield classification can use packet fields beyond preexisting DSCP markings.
B:Tune supported scheduler buffer sizes consistent with measured burst requirements. This addresses Queue buffer-size allocation rather than the required Junos multifield firewall filter classification decision. Multifield classification can use packet fields beyond preexisting DSCP markings.
C:Set all incoming traffic to expedited forwarding based solely on one switch description. This is a risky or ineffective shortcut for Junos multifield firewall filter classification. Overbroad classifiers permit bulk traffic to consume low-latency queues.
Question 491
A core IGP change removes the route toward a remote BGP next-hop loopback. Which technical principle BEST explains the BGP next-hop reachability hidden route decision?
- BGP neighbor state and route installation are separate control-plane gates.
- BGP path eligibility depends on successful next-hop resolution in the routing table.
- Anycast RP can present one logical RP address across multiple physical routers.
- Junos routing policy evaluates ordered terms and control-flow actions.
Explanation
Correct Answer
B:BGP path eligibility depends on successful next-hop resolution in the routing table. In this situation, the relevant action is to restore valid next-hop reachability without indiscriminately accepting broken routes.
Incorrect Answers
A:BGP neighbor state and route installation are separate control-plane gates. That principle is related to BGP hidden and rejected path diagnosis, not the main BGP next-hop reachability hidden route choice. An accepted advertisement with an unusable next hop may not be installed.
C:Anycast RP can present one logical RP address across multiple physical routers. That principle is related to Anycast RP with shared address, not the main BGP next-hop reachability hidden route choice. An accepted advertisement with an unusable next hop may not be installed.
D:Junos routing policy evaluates ordered terms and control-flow actions. That principle is related to Junos BGP policy term matching, not the main BGP next-hop reachability hidden route choice. An accepted advertisement with an unusable next hop may not be installed.
Question 492
A new ASM group has receivers but no RP information on branch routers. Which configuration or operational step BEST meets the stated requirement?
- Configure an IP host default gateway and assume that automatically elects a PIM RP.
- Apply a consistent scoped RP mapping with verified routing to the RP.
- Configure reachable appropriate RP mapping for the required ASM group range.
- Enable appropriate IGMP snooping and maintain valid querier membership learning.
Explanation
Correct Answer
C:Configure reachable appropriate RP mapping for the required ASM group range. Sparse-mode ASM commonly uses an RP to establish initial shared-tree multicast state. The expected validation is that (*,G) joins establish a shared tree via the intended RP and receivers get the stream.
Incorrect Answers
A:Configure an IP host default gateway and assume that automatically elects a PIM RP. This is a risky or ineffective shortcut for PIM sparse-mode RP shared tree. Absent or inconsistent RP mapping prevents initial ASM group discovery.
B:Apply a consistent scoped RP mapping with verified routing to the RP. This addresses Static RP mapping group range rather than the required PIM sparse-mode RP shared tree decision. Sparse-mode ASM commonly uses an RP to establish initial shared-tree multicast state.
D:Enable appropriate IGMP snooping and maintain valid querier membership learning. This addresses IGMP snooping access-port replication rather than the required PIM sparse-mode RP shared tree decision. Sparse-mode ASM commonly uses an RP to establish initial shared-tree multicast state.
Question 493
A wiring-closet switch moves all ports into full employee access when RADIUS times out. Select TWO statements that correctly combine the RADIUS server unreachable fallback policy implementation, its evidence, or its governing principle.
- Configure a restricted guest VLAN as an explicit supported fallback for selected unauthenticated devices.
- Define a risk-approved server-fail fallback action with restrictive VLAN or deny behavior.
- Treat every invalid password as proof RADIUS is down and admit all users.
- AAA outages trigger the documented limited continuity state and recovery restores normal authentication.
- Review authentication policy and RADIUS response attributes with an authorized test identity.
Explanation
Correct Answers
B:Define a risk-approved server-fail fallback action with restrictive VLAN or deny behavior. This is the intended implementation action for RADIUS server unreachable fallback policy.
D:AAA outages trigger the documented limited continuity state and recovery restores normal authentication. This is direct observable evidence for RADIUS server unreachable fallback policy.
Incorrect Answers
A:Configure a restricted guest VLAN as an explicit supported fallback for selected unauthenticated devices. This belongs to Guest VLAN for unauthenticated clients, not the specified RADIUS server unreachable fallback policy operation. Server timeout and explicit credential rejection should use different fallback decisions.
C:Treat every invalid password as proof RADIUS is down and admit all users. This would not be an appropriate RADIUS server unreachable fallback policy decision. Fail-open all access during AAA outages can expose critical assets.
E:Review authentication policy and RADIUS response attributes with an authorized test identity. This belongs to RADIUS Access-Accept versus Access-Reject handling, not the specified RADIUS server unreachable fallback policy operation. Server timeout and explicit credential rejection should use different fallback decisions.
Question 494
One customer VLAN is mapped to the wrong VNI on a leaf. After deploying the recommended VXLAN VNI to VLAN association change, which result MOST directly verifies success?
- Authorized groups forward while disallowed group joins or advertisements are rejected.
- Same-segment endpoints communicate while other VNIs remain isolated.
- Remote peers recognize Ethernet segment participation and respond to advertised withdrawals.
- Peers agree on a common Ethernet segment and relevant EVPN ES routes.
Explanation
Correct Answer
B:Same-segment endpoints communicate while other VNIs remain isolated. This is the directly observable outcome for VXLAN VNI to VLAN association. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
Incorrect Answers
A:Authorized groups forward while disallowed group joins or advertisements are rejected. This validates Multicast policy group scoping but does not directly demonstrate the required VXLAN VNI to VLAN association result. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
C:Remote peers recognize Ethernet segment participation and respond to advertised withdrawals. This validates EVPN Type1 Ethernet auto discovery but does not directly demonstrate the required VXLAN VNI to VLAN association result. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
D:Peers agree on a common Ethernet segment and relevant EVPN ES routes. This validates Ethernet segment identifier ESI consistency but does not directly demonstrate the required VXLAN VNI to VLAN association result. VXLAN network identifiers distinguish overlay Layer 2 broadcast domains.
Question 495
A routed uplink mistakenly joins area 0.0.0.1 while its peer belongs to backbone area 0. Which configuration or operational step BEST meets the stated requirement?
- Add an unrelated static default route and expect the OSPF area mismatch to disappear.
- Put both interfaces in the same intended OSPF area and verify shared area policy.
- Apply a guarded OSPFv3 export policy matching the correct inet6 source and prefix.
- Configure compatible supported point-to-point OSPF network types when appropriate.
Explanation
Correct Answer
B:Put both interfaces in the same intended OSPF area and verify shared area policy. OSPF adjacency requires compatible area identity at both ends. The expected validation is that hello packets agree on area identification and neighbors reach Full.
Incorrect Answers
A:Add an unrelated static default route and expect the OSPF area mismatch to disappear. This is a risky or ineffective shortcut for OSPFv2 area identifier consistency. Different configured area IDs prevent neighbors forming even when IP transport works.
C:Apply a guarded OSPFv3 export policy matching the correct inet6 source and prefix. This addresses OSPFv3 routing policy for external IPv6 rather than the required OSPFv2 area identifier consistency decision. OSPF adjacency requires compatible area identity at both ends.
D:Configure compatible supported point-to-point OSPF network types when appropriate. This addresses OSPF point-to-point network type rather than the required OSPFv2 area identifier consistency decision. OSPF adjacency requires compatible area identity at both ends.
Question 496
A non-Juniper phone receives no identity information from the adjacent access switch. Select TWO statements that correctly combine the LLDP neighbor advertisement implementation, its evidence, or its governing principle.
- The switch and phone discover each other with accurate system and port details.
- Calculate supported switch PoE budget and per-port device allocation before deployment.
- Enable supported LLDP transmit and receive functions on the intended interface.
- Configure BGP route reflection and expect LLDP neighbor advertisements.
- Configure supported LLDP-MED voice VLAN network policy for the relevant ports.
Explanation
Correct Answers
A:The switch and phone discover each other with accurate system and port details. This is direct observable evidence for LLDP neighbor advertisement.
C:Enable supported LLDP transmit and receive functions on the intended interface. This is the intended implementation action for LLDP neighbor advertisement.
Incorrect Answers
B:Calculate supported switch PoE budget and per-port device allocation before deployment. This belongs to PoE power budget switch capacity, not the specified LLDP neighbor advertisement operation. LLDP provides Layer 2 neighbor discovery independent of IP routing.
D:Configure BGP route reflection and expect LLDP neighbor advertisements. This would not be an appropriate LLDP neighbor advertisement decision. A physically connected device without LLDP exchange cannot receive LLDP-based network policy.
E:Configure supported LLDP-MED voice VLAN network policy for the relevant ports. This belongs to LLDP-MED voice network policy, not the specified LLDP neighbor advertisement operation. LLDP provides Layer 2 neighbor discovery independent of IP routing.
Question 497
A network engineer needs to distinguish EAP failure from a VLAN or transport problem. Which next investigation or correction is MOST appropriate?
- Verify assigned VLAN and ACLs with valid employee and guest test clients.
- Test authorized and unauthorized MACs behind the same physical port.
- Correlate failure timestamp with EAPOL RADIUS and assigned VLAN evidence.
- Replace every access switch because one Ethernet interface reports no authenticated sessions.
Explanation
Correct Answer
C:Correlate failure timestamp with EAPOL RADIUS and assigned VLAN evidence. This checks whether session logs identify the failing exchange or authorized role without broad policy bypass.
Incorrect Answers
A:Verify assigned VLAN and ACLs with valid employee and guest test clients. That check applies chiefly to Guest VLAN for unauthenticated clients, not the current Junos Layer 2 authentication session monitoring issue. Authentication monitoring must inspect credentials authorization and port state separately.
B:Test authorized and unauthorized MACs behind the same physical port. That check applies chiefly to 802.1X multi-supplicant port control, not the current Junos Layer 2 authentication session monitoring issue. Authentication monitoring must inspect credentials authorization and port state separately.
D:Replace every access switch because one Ethernet interface reports no authenticated sessions. That bypass leaves the Junos Layer 2 authentication session monitoring issue unresolved. Checking only link-up LED can miss failed 802.1X or RADIUS authorization.
Question 498
During an operational risk review, this situation is reported: A double-tagged customer frame loses its outer transport VLAN before crossing provider switches. If the underlying control is neglected, which failure would MOST directly follow?
- Forcing every redundant port to forwarding can create broadcast storms.
- A loop can cause rapid MAC movement and high broadcast utilization.
- Treating every packet as identical PLP may defeat differentiated congestion policy.
- Removing the inner tag can merge otherwise separate customer networks.
Explanation
Correct Answer
D:Removing the inner tag can merge otherwise separate customer networks. Q-in-Q tunnels customer 802.1Q tags inside a provider service VLAN. A useful corrective investigation is to inspect ingress and egress double-tag format and switch VLAN translation state.
Incorrect Answers
A:Forcing every redundant port to forwarding can create broadcast storms. This is a MSTP root port and alternate path failure pattern, not the primary QinQ service VLAN outer tag failure in this case. Q-in-Q tunnels customer 802.1Q tags inside a provider service VLAN.
B:A loop can cause rapid MAC movement and high broadcast utilization. This is a Ethernet MAC learning and flooding failure pattern, not the primary QinQ service VLAN outer tag failure in this case. Q-in-Q tunnels customer 802.1Q tags inside a provider service VLAN.
C:Treating every packet as identical PLP may defeat differentiated congestion policy. This is a Packet loss priority PLP marking failure pattern, not the primary QinQ service VLAN outer tag failure in this case. Q-in-Q tunnels customer 802.1Q tags inside a provider service VLAN.
Question 499
During an operational risk review, this situation is reported: A transit topology changes underlay hops while BGP is configured with default one-hop expectations. If the underlying control is neglected, which failure would MOST directly follow?
- Ignoring the local-AS loop check can introduce unstable routing behavior.
- Missing multihop or source-address configuration prevents loopback-based BGP session establishment.
- An overly general term can prevent subsequent protective terms from being reached.
- Naming a class Voice without mapping it does not guarantee queue scheduling.
Explanation
Correct Answer
B:Missing multihop or source-address configuration prevents loopback-based BGP session establishment. eBGP multihop and local-address controls align transport endpoints and TTL. A useful corrective investigation is to trace BGP source IP TTL and IP route toward the loopback.
Incorrect Answers
A:Ignoring the local-AS loop check can introduce unstable routing behavior. This is a BGP AS_PATH loop prevention and length failure pattern, not the primary BGP loopback peering and multihop failure in this case. eBGP multihop and local-address controls align transport endpoints and TTL.
C:An overly general term can prevent subsequent protective terms from being reached. This is a Junos BGP policy term matching failure pattern, not the primary BGP loopback peering and multihop failure in this case. eBGP multihop and local-address controls align transport endpoints and TTL.
D:Naming a class Voice without mapping it does not guarantee queue scheduling. This is a Junos forwarding class to queue mapping failure pattern, not the primary BGP loopback peering and multihop failure in this case. eBGP multihop and local-address controls align transport endpoints and TTL.
Question 500
A replacement OSPF peer stops at Exchange after previously becoming Full. Which technical principle BEST explains the OSPF neighbor state troubleshooting workflow decision?
- ECMP commonly hashes traffic flows rather than balancing individual packets deterministically.
- Two-Way may be normal between DROther neighbors while Exchange stuck indicates database issues.
- OSPF interarea summarization originates at area boundaries with reachability tradeoffs.
- OSPF stub areas restrict external AS-external advertisements and require compatible area flags.
Explanation
Correct Answer
B:Two-Way may be normal between DROther neighbors while Exchange stuck indicates database issues. In this situation, the relevant action is to interpret neighbor state relative to network type and compare timers MTU and authentication.
Incorrect Answers
A:ECMP commonly hashes traffic flows rather than balancing individual packets deterministically. That principle is related to BGP ECMP per-flow hashing, not the main OSPF neighbor state troubleshooting workflow choice. Treating every Two-Way adjacency as a fatal database synchronization failure causes unnecessary changes.
C:OSPF interarea summarization originates at area boundaries with reachability tradeoffs. That principle is related to OSPF interarea route summarization, not the main OSPF neighbor state troubleshooting workflow choice. Treating every Two-Way adjacency as a fatal database synchronization failure causes unnecessary changes.
D:OSPF stub areas restrict external AS-external advertisements and require compatible area flags. That principle is related to OSPF stub area external LSA suppression, not the main OSPF neighbor state troubleshooting workflow choice. Treating every Two-Way adjacency as a fatal database synchronization failure causes unnecessary changes.