NEW QUESTION NO: 10
-- Exhibit --
user@router> show configuration routing-options
rib-groups {
foo {
import-rib [ inet.8 inet.2 inet.0 ];
}
}
user@router> show configuration protocols pim
rib-group inet foo;
interface all;
-- Exhibit --
Click the Exhibit button.
Based on the configuration in the exhibit, which routing table is used for IPv4 multicast RPF checks?
A. inet.0
B. inet.2
C. foo.inet.0
D. inet.8
Answer: D
Explanation/Reference:

NEW QUESTION NO: 11
You want to control bursts of HTTP traffic entering your SRX Series Gateway. To support varying requirements, interfaces ge-0/0/0 through ge-0/0/3 should each be rate-limited separately, using the same parameters.
What is the correct way to meet these requirements?
A. Configure a policer and reference it in a firewall filter that uses the interface-specific option; apply the filter to the appropriate interfaces.
B. Configure four policers and apply each one directly on the appropriate interface.
C. Configure a single policer and apply it directly on the appropriate interfaces.
D. Configure four policers and reference them all in a firewall filter; apply the filter to the appropriate interfaces.
Answer: A

NEW QUESTION NO: 12
-- Exhibit --
{master:0}[edit]
user@router# show class-of-service
classifiers {
inet-precedence normal-traffic {
forwarding-class best-effort {
loss-priority low code-points [ my1 my2 ];
}
}
}
code-point-aliases {
inet-precedence {
my1 000;
my2 001;
cs1 010;
cs2 011;
cs3 100;
cs4 101;
cs5 111;
cs6 111;
}
}
-- Exhibit --
Click the Exhibit button.
In the exhibit, you see a configuration for CoS. Incoming traffic with specific IP precedence bits should be mapped to a forwarding class named best-effort. A classifier named normal-traffic is defined.
What must you add to complete this configuration?
A. Apply classifier normal traffic to the interface hierarchy under the class-of-service stanza.
B. Configure a rewrite marker on the ingress Gigabit Ethernet interface.
C. Include the option q-pic-large-buffer under the chassis hierarchy to accommodate the new code points.
D. Add code point values for the expedited-forwarding forwarding class as well as the best-effort forwarding class.
Answer: A

NEW QUESTION NO: 13
During the BGP route-resolution process, the Junos OS must calculate the appropriate next-hop based on the BGP protocol next-hop attribute.
Which two routing tables are checked during this process in a default Junos configuration? (Choose two.)
A. inet.2
B. inet.0
C. inet.3
D. inet.1
Answer: B,C

NEW QUESTION NO: 14
What are three types of PVLAN broadcast domains? (Choose three.)
A. dynamic VLAN
B. S-VLAN
C. primary VLAN
D. community VLAN
E. isolated VLAN
Answer: C,D,E

NEW QUESTION NO: 15
You are implementing PoE on your EX Series switch to provide power to your VoIP phones. You have a device that does not provide its class information to the switch.
Which power class is assigned for this device?
A. 2
B. 1
C. 3
D. 0
Answer: D

NEW QUESTION NO: 16
-- Exhibit --
{master:0}[edit protocols dot1x]
user@switch# show
authenticator {
authentication-profile-name my-profile;
static {
00:21:cc:ba:c7:00/40 {
interface ge-0/0/12.0;
}
}
interface {
ge-0/0/12.0 {
supplicant multiple;
server-fail deny;
}
ge-1/0/14.0 {
reauthentication 120;
server-fail vlan-name local-only;
}
ge-1/0/15.0 {
supplicant multiple;
mac-radius {
restrict;
}
reauthentication 120;
server-fail vlan-name guest;
}
}
}
-- Exhibit --
Click the Exhibit button.
You just added a device on port ge-0/0/12 with the MAC address 00:21:cc:ba:c7:59. All access ports on this device are members of VLAN v20. The RADIUS server is currently not reachable.
Referring to the configuration shown in the exhibit, what happens to traffic sent from this device?
A. The traffic is accepted and uses the guest VLAN.
B. The traffic is accepted and uses the local-only VLAN.
C. The traffic is denied.
D. The traffic is accepted and uses the v20 VLAN.
Answer: D

NEW QUESTION NO: 17
-- Exhibit -

-- Exhibit --
Click the Exhibit button.
You are the administrator for the network shown in the exhibit. R1 receives the 196.15.4.0/24 route from routers R2, R3, and R4. Local preference values have not been modified in this network. You are asked to ensure that R1 prefers the path through AS 3149 for traffic destined to 196.15.4.0/24.
Which two methods will accomplish this task? (Choose two.)
A. Configure a lower local preference on R3.
B. Configure local-as on R3.
C. Configure always-compare-med on R1.
D. Configure as-path-prepend on R2 and R4.
Answer: C,D

NEW QUESTION NO: 18
Which statement is true regarding the SPF algorithm?
A. If you apply an import policy to OSPF, it keeps LSAs from being flooded, and the SPF calculation can be affected.
B. The SPF algorithm is run on a per-domain basis.
C. There are two databases used in the calculation, the link-state database and the tree database.
D. The SPF calculation is run on a per-area basis on each router.
Answer: D

NEW QUESTION NO: 19
A company is deploying a new 802.1X port-based security infrastructure to allow users to access resources through wired Ethernet ports. However they recently deployed an RSA token-based system for users to connect remotely. The network administrator wants to reuse the same security database for
802.1X port-based security.
Which 802.1X authentication protocol is required?
A. LAN-PEAP
B. EAP-TTLS
C. RSA-EAP
D. EAP-TLS
Answer: B

NEW QUESTION NO: 20
-- Exhibit -

-- Exhibit --
Click the Exhibit button.
Referring to the exhibit, which type of LSA will be seen on router A for routes originating in Customer A's network?
A. Type 5 LSA
B. Type 7 LSA
C. Type 2 LSA
D. Type 1 LSA
Answer: A

NEW QUESTION NO: 21
-- Exhibit -

-- Exhibit --
Click the Exhibit button.
Which statement is true about the IPv6 network shown in the exhibit?
A. OSPFv3 can route IPv4 prefixes.
B. Areas 1 and 2 cannot be a stub or NSSA.
C. OSPFv2 must be configured to route IPv4 prefixes.
D. OSPFv3 can use MD5 authentication.
Answer: A

NEW QUESTION NO: 22
What are two benefits of configuring OSPF database protection? (Choose two.)
A. Provides intra-area route filtering and route summarization.
B. Protects the LSDB from being flooded by excessive LSA flooding.
C. Limits the number of LSAs in the LSDB (excluding those generated by the local router).
D. Allows the device to participate in OSPF routing but not be used for transit traffic.
Answer: B,C

NEW QUESTION NO: 23
You just configured an interface as an access port and it is up and passing traffic. However, you notice that all traffic transiting this interface is being classified as best effort.
Which default BA classifier is causing this behavior?
A. ieee8021p-untrust
B. dscp-default
C. ieee8021p-default
D. dscp-ipv6-default
Answer: A

NEW QUESTION NO: 24
-- Exhibit --
{master:0}[edit]
user@switch# show vlans
v1 {
vlan-id 1;
interface {
ge-0/0/1.0;
}
}
v2 {
vlan-id 2;
interface {
ge-0/0/2.0;
}
}
v3 {
vlan-id 3;
interface {
ge-0/0/1.0 {
}
{master:0}[edit]
user@switch# show interfaces ge-0/0/3
unit 0 {
family ethernet-switching {
port-mode trunk;
}
}
{master:0}[edit]
user@switch# run show vlans
Name Tag Interfaces
default
None
v1 1
ge-0/0/1.0*, ge-0/0/3.0*
v2 2
ge-0/0/2.0*, ge-0/0/3.0*
v3 3
ge-0/0/1.0*, ge-0/0/3.0*
-- Exhibit --
Click the Exhibit button.
Referring to the exhibit, what would explain interface ge-0/0/3.0 being active in VLANs v1, v2, and v3?
A. You have enabled MVRP for interface ge-0/0/3.0.
B. You have enabled RSTP for interface ge-0/0/3.0.
C. You have enabled MSTP for interface ge-0/0/3.0.
D. You have enabled L2PT for interface ge-0/0/3.0.
Answer: A

NEW QUESTION NO: 25
A non-802.1X printer is connected to ge-0/0/0 on an EX Series switch.
Which configuration statement will authenticate the device against an authentication server?
A. set protocols dot1x authenticator interface ge-0/0/0 supplicant single
B. set protocols dot1x authenticator interface ge-0/0/0 mac-radius restrict
C. set protocols dot1x authenticator interface ge-0/0/0 disable
D. set protocols dot1x authenticator static 22:22:22:22:22:22 interface ge-0/0/0
Answer: B

NEW QUESTION NO: 26
-- Exhibit --
{master:0}[edit]
user@router# run show ospf interface vl-10.20.10.2 extensive
Interface State Area DR ID BDR ID Nbrs
vl-10.20.10.2 Down 0.0.0.0 0.0.0.0 0.0.0.0 0
TypE. Virtual, Address: 0.0.0.0, Mask: 0.0.0.0, MTU: 0, Cost: 1
Transit AreA. 0.0.0.1
Adj count: 0
Hello: 10, DeaD. 40, ReXmit: 5, Not Stub
Auth typE. None
Protection typE. None, No eligible backup
Topology default (ID 0) -> Down, Cost: 0
-- Exhibit --
Click the Exhibit button.
Your company is integrating another OSPF area into your existing OSPF infrastructure. You created a virtual link that spans Area 2 and connects Area 3 to the backbone area.
Based on the exhibit, what is preventing the adjacency?
A. The backup route to Area 2 has not been configured.
B. The interface configured for the virtual link is incorrect. It should be a vt and not a vl interface.
C. The wrong transit area is configured.
D. No designated router (DR) has been elected.
Answer: C

NEW QUESTION NO: 27
Which statement regarding LLDP update messages is correct?
A. Updates can be triggered by local changes.
B. Updates can be secured using the MD5 algorithm.
C. Updates require bidirectional communication.
D. Updates are advertised every 60 seconds by default.
Answer: A

NEW QUESTION NO: 28
R1 and R2 are ASBRs in the same area, each with an equal cost external path to the same external network prefix. R1 advertises an external route into OSPF with a Type 1 metric. R2 advertises an external route into OSPF with a Type 2 metric.
Which route would be preferred?
A. R2's route is preferred because Type 2 metrics take into account the internal and external cost.
B. R2's route is preferred because Type 2 metrics take into account the external cost only.
C. R1's route is preferred because Type 1 metrics take into account the internal and external cost.
D. R1's route is preferred because Type 1 metrics take into account the external cost only.
Answer: B

NEW QUESTION NO: 29
You are setting up a new switch in your network that is using MSTP. You want to make sure that any port connected to a host starts forwarding traffic immediately.
How can you meet this requirement?
A. Configure the interfaces as point-to-point.
B. Configure the forward-delay option as zero.
C. Configure the interfaces as edge.
D. Configure the interfaces as shared.
Answer: C

NEW QUESTION NO: 30
-- Exhibit -

-- Exhibit --
Click the Exhibit button.
Based on the exhibit, why is R2 marking the routes coming from AS 200 as hidden?
A. AS 200 is configured with the advertise-inactive option.
B. R3 has an import policy filtering all routes.
C. R2 does not have a route to the peer ID of R4.
D. R4 is not configured with a next-hop self policy.
Answer: C

Refer to followning link:

https://www.examslabs.com/Juniper/JNCIP/best-JN0-643-exam-dumps.html