Juniper JN0-650 Practice Test 58
Question 570
A leaf's loopback address disappears from the fabric underlay after a routing change. Which technical principle BEST explains the VXLAN VTEP loopback underlay route decision?
- Type1 Ethernet A-D routes signal Ethernet segment reachability and support multihoming convergence.
- RP mapping and unicast RP reachability are separate multicast requirements.
- EVPN all-active multihoming can use parallel forwarding paths with designated loop protection.
- VXLAN data plane depends on routable VTEP endpoints independent of EVPN MAC learning.
Explanation
Correct Answer
D:VXLAN data plane depends on routable VTEP endpoints independent of EVPN MAC learning. In this situation, the relevant action is to restore valid underlay routing to VTEP addresses and verify permitted VXLAN traffic.
Incorrect Answers
A:Type1 Ethernet A-D routes signal Ethernet segment reachability and support multihoming convergence. That principle is related to EVPN Type1 Ethernet auto discovery, not the main VXLAN VTEP loopback underlay route choice. An EVPN Type2 route with unreachable tunnel next hop cannot deliver traffic.
B:RP mapping and unicast RP reachability are separate multicast requirements. That principle is related to Static RP mapping group range, not the main VXLAN VTEP loopback underlay route choice. An EVPN Type2 route with unreachable tunnel next hop cannot deliver traffic.
C:EVPN all-active multihoming can use parallel forwarding paths with designated loop protection. That principle is related to EVPN all-active multihoming forwarding, not the main VXLAN VTEP loopback underlay route choice. An EVPN Type2 route with unreachable tunnel next hop cannot deliver traffic.
Question 571
A network wants remote ASes to prefer another inbound site for its own prefix. After deploying the recommended BGP AS path prepend outbound advertisement change, which result MOST directly verifies success?
- Outgoing routes retain required communities without leaking internal-only tag values.
- Advertised AS_PATH contains expected local-AS repeats while primary route remains reachable.
- Stable source MAC entries map to intended ingress interfaces and unknown floods are limited.
- The active route reflects documented policy and any hidden route has an explained reason.
Explanation
Correct Answer
B:Advertised AS_PATH contains expected local-AS repeats while primary route remains reachable. This is the directly observable outcome for BGP AS path prepend outbound advertisement. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy.
Incorrect Answers
A:Outgoing routes retain required communities without leaking internal-only tag values. This validates BGP communities match and deletion but does not directly demonstrate the required BGP AS path prepend outbound advertisement result. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy.
C:Stable source MAC entries map to intended ingress interfaces and unknown floods are limited. This validates Ethernet MAC learning and flooding but does not directly demonstrate the required BGP AS path prepend outbound advertisement result. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy.
D:The active route reflects documented policy and any hidden route has an explained reason. This validates BGP hidden and rejected path diagnosis but does not directly demonstrate the required BGP AS path prepend outbound advertisement result. AS_PATH prepending may influence remote inbound selection but is not guaranteed to override peer policy.
Question 572
One copper link has wiring faults while data LEDs intermittently appear active. Which technical principle BEST explains the PoE fault isolation and cable pair decision?
- PoE delivery requires compatible power sourcing and physical cable conditions.
- Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates.
- 802.1X separates supplicant authenticator and authentication server roles.
- Phone access-port design can carry tagged voice and untagged data for separate policies.
Explanation
Correct Answer
A:PoE delivery requires compatible power sourcing and physical cable conditions. In this situation, the relevant action is to test cable integrity PoE detection and switch port power status.
Incorrect Answers
B:Power negotiation Layer 2 VLAN discovery and IP addressing are separate first-hop gates. That principle is related to IP phone first-hop diagnostic workflow, not the main PoE fault isolation and cable pair choice. A physical pair or overload fault can stop power before any voice VLAN setup matters.
C:802.1X separates supplicant authenticator and authentication server roles. That principle is related to 802.1X supplicant authenticator RADIUS roles, not the main PoE fault isolation and cable pair choice. A physical pair or overload fault can stop power before any voice VLAN setup matters.
D:Phone access-port design can carry tagged voice and untagged data for separate policies. That principle is related to Voice VLAN tagged versus PC data traffic, not the main PoE fault isolation and cable pair choice. A physical pair or overload fault can stop power before any voice VLAN setup matters.
Question 573
A Junos route shows one best path while ECMP traffic sharing was expected. Which next investigation or correction is MOST appropriate?
- Set two interfaces to identical descriptions and assume the forwarding table hashes across both.
- Examine suppression status penalty decay and recovery timing.
- Inspect advertised BGP MED and compare upstream decision policy when accessible.
- Inspect eligible multipath route detail and forwarding table next hops.
Explanation
Correct Answer
D:Inspect eligible multipath route detail and forwarding table next hops. This checks whether multiple eligible next hops are installed and traffic follows approved ECMP hashing.
Incorrect Answers
A:Set two interfaces to identical descriptions and assume the forwarding table hashes across both. That bypass leaves the BGP multipath equal-cost path installation issue unresolved. Merely seeing multiple BGP routes does not prove load balancing occurs.
B:Examine suppression status penalty decay and recovery timing. That check applies chiefly to BGP route damping flap penalty, not the current BGP multipath equal-cost path installation issue. BGP multipath requires compatible path properties and FIB programming beyond two received advertisements.
C:Inspect advertised BGP MED and compare upstream decision policy when accessible. That check applies chiefly to BGP MED inbound traffic hint, not the current BGP multipath equal-cost path installation issue. BGP multipath requires compatible path properties and FIB programming beyond two received advertisements.
Question 574
A flood packet received from a multihomed segment returns to the same segment through the other leaf. Which configuration or operational step BEST meets the stated requirement?
- Verify local MAC learning and Type2 MAC/IP route advertisement and import.
- Enforce supported ESI split-horizon handling and verify multihomed replication behavior.
- Disable all ESI-aware forwarding checks so every flooded packet is replicated to all ports.
- Apply supported ARP suppression using valid local or EVPN learned bindings.
Explanation
Correct Answer
B:Enforce supported ESI split-horizon handling and verify multihomed replication behavior. EVPN split-horizon prevents replication back toward the same multihomed Ethernet segment. The expected validation is that bUM frames are not looped back to the originating Ethernet segment.
Incorrect Answers
A:Verify local MAC learning and Type2 MAC/IP route advertisement and import. This addresses EVPN Type2 MAC IP advertisement rather than the required EVPN multihoming split horizon loop avoidance decision. EVPN split-horizon prevents replication back toward the same multihomed Ethernet segment.
C:Disable all ESI-aware forwarding checks so every flooded packet is replicated to all ports. This is a risky or ineffective shortcut for EVPN multihoming split horizon loop avoidance. Lack of split-horizon handling can cause duplicate or looping flooded frames.
D:Apply supported ARP suppression using valid local or EVPN learned bindings. This addresses EVPN ARP suppression from IP MAC bindings rather than the required EVPN multihoming split horizon loop avoidance decision. EVPN split-horizon prevents replication back toward the same multihomed Ethernet segment.
Question 575
One authorized device accidentally permits all other downstream MAC addresses. Which technical principle BEST explains the 802.1X multi-supplicant port control decision?
- RADIUS outcomes express AAA authorization decisions separate from transport connectivity.
- RP mapping and unicast RP reachability are separate multicast requirements.
- Reauthentication refreshes an existing access session's policy decision.
- 802.1X host-mode behavior controls whether access applies per endpoint or per port.
Explanation
Correct Answer
D:802.1X host-mode behavior controls whether access applies per endpoint or per port. In this situation, the relevant action is to configure a supported multi-supplicant policy with the intended authorization granularity.
Incorrect Answers
A:RADIUS outcomes express AAA authorization decisions separate from transport connectivity. That principle is related to RADIUS Access-Accept versus Access-Reject handling, not the main 802.1X multi-supplicant port control choice. Treating one successful login as authorization for every attached client increases exposure.
B:RP mapping and unicast RP reachability are separate multicast requirements. That principle is related to Static RP mapping group range, not the main 802.1X multi-supplicant port control choice. Treating one successful login as authorization for every attached client increases exposure.
C:Reauthentication refreshes an existing access session's policy decision. That principle is related to 802.1X periodic reauthentication, not the main 802.1X multi-supplicant port control choice. Treating one successful login as authorization for every attached client increases exposure.
Question 576
A standards-based phone must learn the intended voice VLAN through LLDP-MED. Which configuration or operational step BEST meets the stated requirement?
- Set the switch system-name to Voice and claim LLDP-MED policy is automatically configured.
- Set correct voice VLAN membership and data VLAN handling for the access port.
- Enable supported LLDP transmit and receive functions on the intended interface.
- Configure supported LLDP-MED voice VLAN network policy for the relevant ports.
Explanation
Correct Answer
D:Configure supported LLDP-MED voice VLAN network policy for the relevant ports. LLDP-MED extends neighbor discovery with voice-oriented network policy information. The expected validation is that the handset receives voice VLAN policy and tags voice frames as intended.
Incorrect Answers
A:Set the switch system-name to Voice and claim LLDP-MED policy is automatically configured. This is a risky or ineffective shortcut for LLDP-MED voice network policy. Basic LLDP neighbor discovery alone may not advertise the required voice VLAN.
B:Set correct voice VLAN membership and data VLAN handling for the access port. This addresses Voice VLAN tagged versus PC data traffic rather than the required LLDP-MED voice network policy decision. LLDP-MED extends neighbor discovery with voice-oriented network policy information.
C:Enable supported LLDP transmit and receive functions on the intended interface. This addresses LLDP neighbor advertisement rather than the required LLDP-MED voice network policy decision. LLDP-MED extends neighbor discovery with voice-oriented network policy information.
Question 577
An export filter must allow only a dedicated prefix list toward a transit provider. After deploying the recommended Junos BGP policy term matching change, which result MOST directly verifies success?
- Only sanctioned routes pass the policy and term counters identify the decision.
- Critical VLAN stays present and dynamic VLANs appear only when advertised.
- Client routes are reflected as intended without iBGP full mesh or reflection loops.
- Received and advertised route sets satisfy their separate intended controls.
Explanation
Correct Answer
A:Only sanctioned routes pass the policy and term counters identify the decision. This is the directly observable outcome for Junos BGP policy term matching. Junos routing policy evaluates ordered terms and control-flow actions.
Incorrect Answers
B:Critical VLAN stays present and dynamic VLANs appear only when advertised. This validates MVRP static versus dynamic registration but does not directly demonstrate the required Junos BGP policy term matching result. Junos routing policy evaluates ordered terms and control-flow actions.
C:Client routes are reflected as intended without iBGP full mesh or reflection loops. This validates BGP route reflection cluster but does not directly demonstrate the required Junos BGP policy term matching result. Junos routing policy evaluates ordered terms and control-flow actions.
D:Received and advertised route sets satisfy their separate intended controls. This validates BGP import versus export policy direction but does not directly demonstrate the required Junos BGP policy term matching result. Junos routing policy evaluates ordered terms and control-flow actions.
Question 578
A point-to-point transit link unexpectedly attempts broadcast DR election behavior. After deploying the recommended OSPF point-to-point network type change, which result MOST directly verifies success?
- Active routes prefer the expected lowest cumulative OSPF metric.
- Authorized IPv6 BGP routes appear in inet6.0 with valid next hops.
- Both ends form a Full adjacency without an unnecessary DR election.
- IPv6 link-local neighbors exchange OSPFv3 packets and learn approved prefixes.
Explanation
Correct Answer
C:Both ends form a Full adjacency without an unnecessary DR election. This is the directly observable outcome for OSPF point-to-point network type. Point-to-point OSPF interfaces do not use broadcast-network DR election.
Incorrect Answers
A:Active routes prefer the expected lowest cumulative OSPF metric. This validates OSPF path cost selection but does not directly demonstrate the required OSPF point-to-point network type result. Point-to-point OSPF interfaces do not use broadcast-network DR election.
B:Authorized IPv6 BGP routes appear in inet6.0 with valid next hops. This validates BGP NLRI IPv6 unicast inet6 family but does not directly demonstrate the required OSPF point-to-point network type result. Point-to-point OSPF interfaces do not use broadcast-network DR election.
D:IPv6 link-local neighbors exchange OSPFv3 packets and learn approved prefixes. This validates OSPFv3 IPv6 link-local neighbor formation but does not directly demonstrate the required OSPF point-to-point network type result. Point-to-point OSPF interfaces do not use broadcast-network DR election.
Question 579
A user port is connected to an untagged workstation but assigned to the wrong VLAN. After deploying the recommended Ethernet access interface VLAN membership change, which result MOST directly verifies success?
- Isolated endpoints reach the intended shared gateway but not peer isolated ports.
- Untagged frames enter the correct VLAN and reach only eligible peers.
- Downstream superior BPDUs are rejected while the intended root remains authoritative.
- Egress queue behavior follows the scheduler-map settings during representative load.
Explanation
Correct Answer
B:Untagged frames enter the correct VLAN and reach only eligible peers. This is the directly observable outcome for Ethernet access interface VLAN membership. Access VLAN membership maps untagged endpoint traffic into one logical broadcast domain.
Incorrect Answers
A:Isolated endpoints reach the intended shared gateway but not peer isolated ports. This validates Private VLAN isolated port separation but does not directly demonstrate the required Ethernet access interface VLAN membership result. Access VLAN membership maps untagged endpoint traffic into one logical broadcast domain.
C:Downstream superior BPDUs are rejected while the intended root remains authoritative. This validates Root protection on designated links but does not directly demonstrate the required Ethernet access interface VLAN membership result. Access VLAN membership maps untagged endpoint traffic into one logical broadcast domain.
D:Egress queue behavior follows the scheduler-map settings during representative load. This validates Scheduler maps attached to egress interface but does not directly demonstrate the required Ethernet access interface VLAN membership result. Access VLAN membership maps untagged endpoint traffic into one logical broadcast domain.
Question 580
An edge policy uses community values to decide whether to advertise specific routes. Select TWO statements that correctly combine the BGP communities tagging routing intent implementation, its evidence, or its governing principle.
- Apply supported route-flap damping only where its stability tradeoff is justified.
- Trace BGP received route status through import policy next-hop resolution and path eligibility.
- Rename a BGP group Backup and assume it inserts communities into all updates.
- Add approved BGP community tags and match them in explicit import or export policies.
- Tagged prefixes follow documented export or preference behavior at the target neighbor.
Explanation
Correct Answers
D:Add approved BGP community tags and match them in explicit import or export policies. This is the intended implementation action for BGP communities tagging routing intent.
E:Tagged prefixes follow documented export or preference behavior at the target neighbor. This is direct observable evidence for BGP communities tagging routing intent.
Incorrect Answers
A:Apply supported route-flap damping only where its stability tradeoff is justified. This belongs to BGP route damping flap penalty, not the specified BGP communities tagging routing intent operation. BGP communities carry policy metadata without directly supplying next-hop reachability.
B:Trace BGP received route status through import policy next-hop resolution and path eligibility. This belongs to BGP hidden and rejected path diagnosis, not the specified BGP communities tagging routing intent operation. BGP communities carry policy metadata without directly supplying next-hop reachability.
C:Rename a BGP group Backup and assume it inserts communities into all updates. This would not be an appropriate BGP communities tagging routing intent decision. Marking a community without a matching policy may not change routing.