You want to control bursts of HTTP traffic entering your SRX Series Gateway. To support varying requirements, interfaces ge-0/0/0 through ge-0/0/3 should each be rate-limited separately, using the same parameters.
What is the correct way to meet these requirements?
A. Configure a single policer and apply it directly on the appropriate interfaces.
B. Configure four policers and apply each one directly on the appropriate interface.
C. Configure a policer and reference it in a firewall filter that uses the interface-specific option; apply the filter to the appropriate interfaces.
D. Configure four policers and reference them all in a firewall filter; apply the filter to the appropriate interfaces.
Which CoS component helps with TCP global synchronization problems?
A. WRR with rewrite rules
B. WRED with drop profiles
C. tail drop profiles with a behavior aggregate classifier
D. exact term with a scheduler
You are troubleshooting a problem on interface ge-0/0/3.
Which command shows statistics in real time?
A. show interfaces statistics
B. monitor interface statistics ge-0/0/3
C. monitor interface traffic
D. monitor traffic interface ge-0/0/3
When 802.1X, MAC-RADIUS, and Captive Portal are enabled on an interface, which authentication sequence occurs?
A. The authentication sequence is based on the order of the configuration.
B. If MAC-RADIUS is rejected, Captive Portal will start. If Captive portal is timed out, 802.1X will start.
C. If 802.1X times out, then MAC-RADIUS will start. If MAC-RADIUS is timed out by the RADIUS server, then Captive Portal will start.
D. If 802.1X times out, then MAC-RADIUS will start. If MAC-RADIUS is rejected by the RADIUS server, then Captive Portal will start.
Which statement regarding LLDP update messages is correct?
A. Updates can be secured using the MD5 algorithm.
B. Updates are advertised every 60 seconds by default.
C. Updates require bidirectional communication.
D. Updates can be triggered by local changes.
When using PIM-SM in SSM mode, which event triggers the creation of a shortest-path tree?
A. Multicast traffic received at the receiver's designated router (DR).
B. An IGMPv3 report received at the receiver's designated router (DR).
C. Multicast traffic received at the rendezvous point (RP).
D. An IGMPv3 report received at the source's designated router (DR).
A medium-sized enterprise has some devices that are 802.1X capable and some that are not. Any device that fails authentication must be provided limited access through a VLAN called NONAUTH.
How do you provide this access?
A. Configure NONAUTH VLAN as the guest VLAN.
B. Configure NONAUTH VLAN as the server-reject VLAN.
C. Configure NONAUTH VLAN as the guest VLAN and the server-reject VLAN.
D. Configure a separate VLAN for each type of user: 802.1X and non-802.1X.
If your WAN-edge router is multihomed to different ISPs, which two BGP attributes would you modify to affect outbound traffic? (Choose two.)
A. MED
B. origin
C. local preference
D. community
You have been asked to implement a private VLAN with two community VLANs. This private VLAN must span multiple switches in your Layer 2 network.
Which two statements about this deployment are true? (Choose two.)
A. All isolated ports must be configured as trunk ports.
B. A minimum of one promiscuous trunk port is required.
C. Both community VLANs must have assigned VLAN IDs.
D. A minimum of one private VLAN trunk port is required.
Which configuration parameter causes a router to ignore router ID and peer ID from the BGP route selection algorithm?
A. multihop
B. as-path loops
C. multipath
D. next-hop self
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Juniper exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your JN0-643 exam preparations and Juniper certification application, do not hesitate to visit our Vcedump.com to find your solutions here.