2023 Updated Verified JN0-349 dumps Q&As - 100% Pass Guaranteed [Q50-Q64] : Top Exam Collection : http://blog.topexamcollection.com

質問50
You are deploying a new switch configuration at a small branch using EX3400 Series switches. You are concerned about loop prevention.
In this scenario, which configuration would you deploy?

アールエスティーピー

エーブイピーエヌ

エムピーエルエス

BPDU

質問51
出展する。

Which statement is true about the configuration shown in the exhibit?

Both the add-community and local-pref import policies will be evaluated routes are learned from neighbor 172.30.2.1.

Only the local -pref import will be evaluated when routes are learned neighbor 172.301.1.

No import policy will be evaluated when routes are learned from neighbor 172.30.2.1.

Only the add-community import policy will be evaluated routers are learned neighbor 172.30.1.1.

質問52
出展ボタンをクリックします。

Referring to the exhibit, the local router should have an IS-IS adjacency with a neighboring router, but the adjacency never establishes correctly.
What should you do to solve the problem?

Disable level 2 for the interfaces.

Disable level 1 for the interfaces.

Disable wide metrics.

Change the local IS-IS area ID to 49.0002.

質問53
You must implement filter-based forwarding. You need to direct traffic from 192.168.1.0/24
through vr1 and traffic from 10.210.0.128/26 through vr2.
Which configuration is correct in this scenario?

firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.1.0/26;
}
}
then {
routing-instance vr2;
}
}
term match-10-subnet {
from {
source-address {
10.210.0.128/26;
}
}
then {
routing-instance vr1;
}
}
}
}
}

firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.0.0/24;
}
}
then {
routing-instance vr1;
}
}
term match-10-subnet {
from {
source-address {
10.210.0.128/27;
}
}
then {
routing-instance vr2;
}
}
}
}
}

firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.2.0/26;
}
}
then {
routing-instance vr2;
}
}
term match-10-subnet {
from {
source-address {
10.210.1.128/26;
}
}
then {
routing-instance vr1;
}
}
}
}
}

firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.1.0/24;
}
}
then {
routing-instance vr1;
}
}
term match-10-subnet {
from {
source-address {
10.210.0.128/26;
}
}
then {
routing-instance vr2;
}
}
}
}
}

質問54
Which three statements describe what happens when processing a frame for a switched packet? (Choose three.)

The ingress PFE performs the MAC address lookup.

The frame enters the ingress port and is forwarded out all ports.

The frame enters the ingress port and is processed by the ingress PFE.

The ingress PFE sends the header information to the Routing Engine.

The egress PFE forwards the packet out the egress port towards the destination.

質問55
Which two situations would cause dynamic ARP inspection to drop traffic? (Choose two.)

if no IP-to-MAC address entry exists in the DHCP snooping database

if the IP address in the ARP packet is deemed invalid

if the requested MAC address exceeds the configured limit on the port

if the ARP packet comes from a port that has been configured as trusted

質問56
What are two characteristics of IS-IS CSNPs? (Choose two.)

IS-IS CSNPs contain header information for all link-state PDUs.

IS-IS CSNPs are used to request a copy of a missing link state PDU.

IS-IS CSNPs are used to maintain the link-state database synchronization.

IS-IS CSNPs contain header information for specific requested link-state PDUs.

質問57
Your network is configured with dynamic ARP inspection (DAI) using the default parameters for all the DHCP and ARP related configurations. You just added a new device connected to a trunk port and configured it to obtain an IP address using DHCP.
Which two statements are correct in this scenario? (Choose two.)

The DHCP server assigns the IP addressing information to the new device.

DAI validates the ARP packets for the new device against the DHCP snooping database.

The ARP request and response packets for the new device will bypass DAI.

DHCP snooping adds the DHCP assigned IP address for the new device to its database.

質問58
You want to use filter-based forwarding (FBF) to forward traffic sourced from subnet 10.0.0.0/24 to a specific destination.
Which two routing instance types would enable you to accomplish this task? (Choose two.)

virtual routing and forwarding

virtual router

forwarding

virtual switch

質問59
On EX Series devices, what are two software features that accommodate redundancy? (Choose two.)

OAM

NSR

IGMP

GRES

質問60
Which OSPF area type receives only the default route from the backbone?

transmit area

totally stubby area

not so stubby area

stub area

質問61
What are three reasons a router would send out an IS-IS link-state PDU? (Choose three.)

A new external route is imported from BGP.

The router’s link to a neighbor goes down.

A new neighbor exists on the link.

The cost of a link to an existing neighbor has changed.

IS-IS sends link-state PDUs at random intervals.

質問62
Which two statements about aggregate routes in the Junos OS are correct? (Choose two.)

An aggregate route has a default next hop of an IP address.

An aggregate route always shows as active in the routing table.

An active route can contribute only to a single aggregate route.

Only one aggregate route can be configured for each destination prefix.

質問63
出展ボタンをクリックします。

Based on the traceoptions output shown in the exhibit, what is the problem with the adjacency?

connectivity

authentication mismatch

MTU mismatch

area mismatch

質問64
出展ボタンをクリックします。

A recent security audit indicates that peer-to-peer applications are allowed on the guest VLAN and employees may have been using the guest VLAN for this purpose. You deploy the configuration shown in the exhibit, but it does not stop the peer-to-peer traffic.
In this scenario, what must you do to implement the security policy?

Implement 802.1X on the guest VLAN

Attach the filter to the VLAN

Deploy storm control to block unknown unicast traffic

Use persistent MAC learning

2023 Updated Verified JN0-349 dumps Q&As - 100% Pass Guaranteed [Q50-Q64]

Juniper JN0-349 Exam Topics: