Juniper JN0-650 Practice Test 52
Question 510
One anycast-RP node fails and multicast should continue through an alternate active node. Which next investigation or correction is MOST appropriate?
- Inspect show pim rps and multicast route shared-tree state.
- Replace RP configuration with an ordinary Ethernet anycast MAC and assume PIM state synchronizes.
- Test loss of one RP while checking source registration and receiver delivery.
- Review RP election discovery information and group-range reachability.
Explanation
Correct Answer
C:Test loss of one RP while checking source registration and receiver delivery. This checks whether receivers continue forwarding through the surviving RP without changing group configuration.
Incorrect Answers
A:Inspect show pim rps and multicast route shared-tree state. That check applies chiefly to PIM sparse-mode RP shared tree, not the current Anycast RP with shared address issue. Anycast RP can present one logical RP address across multiple physical routers.
B:Replace RP configuration with an ordinary Ethernet anycast MAC and assume PIM state synchronizes. That bypass leaves the Anycast RP with shared address issue unresolved. Identical RP addresses without source-state coordination can break ASM reachability.
D:Review RP election discovery information and group-range reachability. That check applies chiefly to PIM RP discovery and bootstrap mapping, not the current Anycast RP with shared address issue. Anycast RP can present one logical RP address across multiple physical routers.
Question 511
A VoIP migration introduces LLDP-MED and DHCP errors at the same access port. Which next investigation or correction is MOST appropriate?
- Inspect show poe interface and total allocated versus available watts.
- Inspect device class and port power negotiation counters.
- Disable all VLAN separation and power policing network-wide to make one phone boot.
- Review PoE status LLDP policy tagged frames and DHCP offers from the failing port.
Explanation
Correct Answer
D:Review PoE status LLDP policy tagged frames and DHCP offers from the failing port. This checks whether each setup step is verified and the handset obtains correct network settings.
Incorrect Answers
A:Inspect show poe interface and total allocated versus available watts. That check applies chiefly to PoE power budget switch capacity, not the current IP phone first-hop diagnostic workflow issue. Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates.
B:Inspect device class and port power negotiation counters. That check applies chiefly to PoE class discovery and allocation, not the current IP phone first-hop diagnostic workflow issue. Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates.
C:Disable all VLAN separation and power policing network-wide to make one phone boot. That bypass leaves the IP phone first-hop diagnostic workflow issue unresolved. Changing one DHCP option does not repair absent PoE or unsupported LLDP-MED.
Question 512
A route carrying the local ASN is received from a transit peer and is rejected. After deploying the recommended BGP AS_PATH loop prevention and length change, which result MOST directly verifies success?
- Authorized IPv6 BGP routes appear in inet6.0 with valid next hops.
- Selected routes have expected AS sequence and no local-AS loop.
- Multiple eligible next hops are installed and traffic follows approved ECMP hashing.
- Intended guest frames match their rule and general traffic uses the appropriate default.
Explanation
Correct Answer
B:Selected routes have expected AS sequence and no local-AS loop. This is the directly observable outcome for BGP AS_PATH loop prevention and length. BGP AS_PATH records AS traversal and participates in loop prevention and path selection.
Incorrect Answers
A:Authorized IPv6 BGP routes appear in inet6.0 with valid next hops. This validates BGP NLRI IPv6 unicast inet6 family but does not directly demonstrate the required BGP AS_PATH loop prevention and length result. BGP AS_PATH records AS traversal and participates in loop prevention and path selection.
C:Multiple eligible next hops are installed and traffic follows approved ECMP hashing. This validates BGP multipath equal-cost path installation but does not directly demonstrate the required BGP AS_PATH loop prevention and length result. BGP AS_PATH records AS traversal and participates in loop prevention and path selection.
D:Intended guest frames match their rule and general traffic uses the appropriate default. This validates Filter-based VLAN rule precedence but does not directly demonstrate the required BGP AS_PATH loop prevention and length result. BGP AS_PATH records AS traversal and participates in loop prevention and path selection.
Question 513
During an operational risk review, this situation is reported: A wrong ESI on one leaf makes the access segment appear as unrelated attachments. If the underlying control is neglected, which failure would MOST directly follow?
- Treating both uplinks as independent uncoordinated bridges can form duplication or loops.
- Troubleshooting only end-host IP routes can miss a transport VLAN mismatch.
- Having an IP-connected VTEP does not mean its peer negotiates EVPN NLRI.
- Different ESI values on supposed peers can defeat multihoming loop protection.
Explanation
Correct Answer
D:Different ESI values on supposed peers can defeat multihoming loop protection. ESI identifies a shared multihomed Ethernet segment to EVPN control plane. A useful corrective investigation is to inspect Ethernet segment state and EVPN ESI route fields on both leaves.
Incorrect Answers
A:Treating both uplinks as independent uncoordinated bridges can form duplication or loops. This is a EVPN all-active multihoming forwarding failure pattern, not the primary Ethernet segment identifier ESI consistency failure in this case. ESI identifies a shared multihomed Ethernet segment to EVPN control plane.
B:Troubleshooting only end-host IP routes can miss a transport VLAN mismatch. This is a Layer 2 trunk VLAN mismatch diagnosis failure pattern, not the primary Ethernet segment identifier ESI consistency failure in this case. ESI identifies a shared multihomed Ethernet segment to EVPN control plane.
C:Having an IP-connected VTEP does not mean its peer negotiates EVPN NLRI. This is a BGP EVPN address-family peer negotiation failure pattern, not the primary Ethernet segment identifier ESI consistency failure in this case. ESI identifies a shared multihomed Ethernet segment to EVPN control plane.
Question 514
An expired security credential stays accepted on a long-lived active switch port. Which technical principle BEST explains the 802.1X periodic reauthentication decision?
- Reauthentication refreshes an existing access session's policy decision.
- Server timeout and explicit credential rejection should use different fallback decisions.
- IEEE 802.1Q tags distinguish VLAN traffic across a common trunk.
- MAC RADIUS can authorize nonsupplicant devices but MAC identity is easier to spoof.
Explanation
Correct Answer
A:Reauthentication refreshes an existing access session's policy decision. In this situation, the relevant action is to configure supported periodic reauthentication with realistic operational timers.
Incorrect Answers
B:Server timeout and explicit credential rejection should use different fallback decisions. That principle is related to RADIUS server unreachable fallback policy, not the main 802.1X periodic reauthentication choice. Excessively short reauthentication periods can destabilize normal connectivity.
C:IEEE 802.1Q tags distinguish VLAN traffic across a common trunk. That principle is related to 802.1Q trunk allowed VLANs, not the main 802.1X periodic reauthentication choice. Excessively short reauthentication periods can destabilize normal connectivity.
D:MAC RADIUS can authorize nonsupplicant devices but MAC identity is easier to spoof. That principle is related to MAC RADIUS printer onboarding, not the main 802.1X periodic reauthentication choice. Excessively short reauthentication periods can destabilize normal connectivity.
Question 515
An ASM receiver first gets traffic through its RP before moving toward a direct source path. Which configuration or operational step BEST meets the stated requirement?
- Troubleshoot source activity group membership RPF PIM joins and data packet counters in order.
- Verify PIM join prune messages and incoming outgoing interface lists across the chain.
- Disable all unicast routes to the source to force a healthy shortest-path tree.
- Verify PIM sparse-mode SPT switch behavior and source-specific forwarding entries.
Explanation
Correct Answer
D:Verify PIM sparse-mode SPT switch behavior and source-specific forwarding entries. PIM-SM can transition from shared RP tree to a source shortest-path tree. The expected validation is that a (S,G) shortest-path tree forms when supported and efficient source routing is available.
Incorrect Answers
A:Troubleshoot source activity group membership RPF PIM joins and data packet counters in order. This addresses Multicast troubleshooting separate control and data planes rather than the required ASM shared tree versus SPT switchover decision. PIM-SM can transition from shared RP tree to a source shortest-path tree.
B:Verify PIM join prune messages and incoming outgoing interface lists across the chain. This addresses PIM join prune forwarding path rather than the required ASM shared tree versus SPT switchover decision. PIM-SM can transition from shared RP tree to a source shortest-path tree.
C:Disable all unicast routes to the source to force a healthy shortest-path tree. This is a risky or ineffective shortcut for ASM shared tree versus SPT switchover. Assuming all ASM traffic must stay permanently on RP shared tree may waste bandwidth.
Question 516
A non-Juniper phone receives no identity information from the adjacent access switch. Which technical principle BEST explains the LLDP neighbor advertisement decision?
- Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates.
- LLDP-MED can convey voice network policy including VLAN and priority information.
- LLDP provides Layer 2 neighbor discovery independent of IP routing.
- OSPF adjacency requires compatible area identity at both ends.
Explanation
Correct Answer
C:LLDP provides Layer 2 neighbor discovery independent of IP routing. In this situation, the relevant action is to enable supported LLDP transmit and receive functions on the intended interface.
Incorrect Answers
A:Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates. That principle is related to IP phone first-hop diagnostic workflow, not the main LLDP neighbor advertisement choice. A physically connected device without LLDP exchange cannot receive LLDP-based network policy.
B:LLDP-MED can convey voice network policy including VLAN and priority information. That principle is related to LLDP-MED voice priority signaling, not the main LLDP neighbor advertisement choice. A physically connected device without LLDP exchange cannot receive LLDP-based network policy.
D:OSPF adjacency requires compatible area identity at both ends. That principle is related to OSPFv2 area identifier consistency, not the main LLDP neighbor advertisement choice. A physically connected device without LLDP exchange cannot receive LLDP-based network policy.
Question 517
A routed uplink mistakenly joins area 0.0.0.1 while its peer belongs to backbone area 0. After deploying the recommended OSPFv2 area identifier consistency change, which result MOST directly verifies success?
- Hello packets agree on area identification and neighbors reach Full.
- Remote IPv6 routers receive only the intended OSPFv3 external destinations.
- Registered printers receive limited required access while unknown MACs are rejected.
- Active routes prefer the expected lowest cumulative OSPF metric.
Explanation
Correct Answer
A:Hello packets agree on area identification and neighbors reach Full. This is the directly observable outcome for OSPFv2 area identifier consistency. OSPF adjacency requires compatible area identity at both ends.
Incorrect Answers
B:Remote IPv6 routers receive only the intended OSPFv3 external destinations. This validates OSPFv3 routing policy for external IPv6 but does not directly demonstrate the required OSPFv2 area identifier consistency result. OSPF adjacency requires compatible area identity at both ends.
C:Registered printers receive limited required access while unknown MACs are rejected. This validates MAC RADIUS printer onboarding but does not directly demonstrate the required OSPFv2 area identifier consistency result. OSPF adjacency requires compatible area identity at both ends.
D:Active routes prefer the expected lowest cumulative OSPF metric. This validates OSPF path cost selection but does not directly demonstrate the required OSPFv2 area identifier consistency result. OSPF adjacency requires compatible area identity at both ends.
Question 518
During an operational risk review, this situation is reported: A branch bandwidth issue appears because multicast continues hairpinning through a distant RP. If the underlying control is neglected, which failure would MOST directly follow?
- Changing the switch IP address does not correct an endpoint access VLAN mismatch.
- Using group-only membership can accept unwanted sources in a source-specific design.
- Assuming all ASM traffic must stay permanently on RP shared tree may waste bandwidth.
- A valid group membership cannot compensate for a failed RPF incoming-interface check.
Explanation
Correct Answer
C:Assuming all ASM traffic must stay permanently on RP shared tree may waste bandwidth. PIM-SM can transition from shared RP tree to a source shortest-path tree. A useful corrective investigation is to inspect (*,G) and (S,G) state and RPF interface during reception.
Incorrect Answers
A:Changing the switch IP address does not correct an endpoint access VLAN mismatch. This is a Ethernet access interface VLAN membership failure pattern, not the primary ASM shared tree versus SPT switchover failure in this case. PIM-SM can transition from shared RP tree to a source shortest-path tree.
B:Using group-only membership can accept unwanted sources in a source-specific design. This is a IGMPv3 source include mode failure pattern, not the primary ASM shared tree versus SPT switchover failure in this case. PIM-SM can transition from shared RP tree to a source shortest-path tree.
D:A valid group membership cannot compensate for a failed RPF incoming-interface check. This is a Multicast RPF shortest reverse path check failure pattern, not the primary ASM shared tree versus SPT switchover failure in this case. PIM-SM can transition from shared RP tree to a source shortest-path tree.
Question 519
An application receives bursts only after repeated PIM state clearing. Which next investigation or correction is MOST appropriate?
- Compare RP mappings group ranges and route to RP across nodes.
- Reboot all switching devices every time an IGMP group table contains an entry.
- Collect show igmp group show pim join show multicast route and packet capture evidence.
- Inspect show pim rps and multicast route shared-tree state.
Explanation
Correct Answer
C:Collect show igmp group show pim join show multicast route and packet capture evidence. This checks whether a consistent state chain from source to receivers explains successful data delivery.
Incorrect Answers
A:Compare RP mappings group ranges and route to RP across nodes. That check applies chiefly to Static RP mapping group range, not the current Multicast troubleshooting separate control and data planes issue. Multicast involves host membership router tree state and actual forwarding traffic.
B:Reboot all switching devices every time an IGMP group table contains an entry. That bypass leaves the Multicast troubleshooting separate control and data planes issue unresolved. Seeing an IGMP group alone does not prove an active source or valid routed data path.
D:Inspect show pim rps and multicast route shared-tree state. That check applies chiefly to PIM sparse-mode RP shared tree, not the current Multicast troubleshooting separate control and data planes issue. Multicast involves host membership router tree state and actual forwarding traffic.
Question 520
A broad Layer 2 tunnel unexpectedly carries provider-facing LLDP messages to a customer. Which technical principle BEST explains the L2PT protocol selection and isolation decision?
- MVRP learned registrations have different lifecycle from explicitly configured static VLAN memberships.
- Multifield classification can use packet fields beyond preexisting DSCP markings.
- L2PT encapsulates selected customer Layer 2 control frames across a provider domain.
- L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries.
Explanation
Correct Answer
D:L2PT should scope control-protocol tunneling to intended customer Ethernet boundaries. In this situation, the relevant action is to select explicitly supported customer protocols and enforce L2PT boundaries.
Incorrect Answers
A:MVRP learned registrations have different lifecycle from explicitly configured static VLAN memberships. That principle is related to MVRP static versus dynamic registration, not the main L2PT protocol selection and isolation choice. Overbroad tunneling may couple independent customer and provider control planes.
B:Multifield classification can use packet fields beyond preexisting DSCP markings. That principle is related to Junos multifield firewall filter classification, not the main L2PT protocol selection and isolation choice. Overbroad tunneling may couple independent customer and provider control planes.
C:L2PT encapsulates selected customer Layer 2 control frames across a provider domain. That principle is related to L2PT customer BPDU tunneling, not the main L2PT protocol selection and isolation choice. Overbroad tunneling may couple independent customer and provider control planes.