Juniper Juniper Certifications JN0-643 Questions & Answers

• Question 161:

  You have implemented 802.1X authentication in your Layer 2 network and you have only a single RADIUS server. You are asked to ensure that if the RADIUS server becomes unreachable or fails, users connected to the ge-0/0/0 port are still

  able to reach the Internet using a predefined guest VLAN.

  Which command allows this access?

  A. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 radius-fail vlan guest

  B. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 server-fail vlan-name guest

  C. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 auth-fail assign-vlan guest

  D. [edit] user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 radius-fail assign guest

  Correct Answer: B

• Question 162:

  A Layer 2 forwarding loop occurred on your network during a scheduled maintenance period. You must prevent this behavior in the future.

  Which protocol should you enable on the EX Series switch to address this condition in the future?

  A. DVMRP

  B. L2TPv3

  C. STP

  D. RSVP

  Correct Answer: D

• Question 163:

  A network routes IPv4 traffic only. You want to add IPv6 to the network, but you must use a single IGP for both IPv4 and IPv6 traffic.

  Which protocol meets this requirement?

  A. OSPFv2

  B. BGPv4

  C. ES-ISv1

  D. OSPFv3

  Correct Answer: D

• Question 164:

  Port authentication falls back to Captive Portal.

  In which two scenarios would the port authentication move back to 802.1X? (Choose two.)

  A. if any MAC RADIUS request packet is received on the interface and if there are no sessions in authenticated/authenticating state

  B. if Captive Portal is deactivated on the interface

  C. if the user gets logged out

  D. if the EAP packet is received on the interface and if there are no sessions in authenticated/ authenticating state

  Correct Answer: BD

• Question 165:

  A user complains about connectivity problems from their IP address (10.1.1.87) to a server (10.65.1.100).

  Which Junos command can help verify connectivity in the network? (Choose Two)

  A. mroute

  B. traceoptions

  C. ping

  D. clear bgp neighbor

  Correct Answer: BC

• Question 166:

  On your EX Series switch you must configure a delay buffer for the best effort queue scheduler named BE- sch which restricts the buffer usage to only 25 percent of the available buffer size.

  Which configuration statement will accomplish this task?

  A. [edit class-of-service schedulers BE-sch] user@switch# set buffer-size buffer-size temporal 25

  B. [edit class-of-service schedulers BE-sch] user@switch# set buffer-size buffer-size temporal 25 exact

  C. [edit class-of-service schedulers BE-sch] user@switch# set buffer-size percent 25

  D. [edit class-of-service schedulers BE-sch] user@switch# set buffer-size exact percent 25

  Correct Answer: D

• Question 167:

  You are configuring CoS classifiers and want to use both BA and MF classification. After applying the configuration, you realize that the classifiers have a conflict.

  Which statement is true?

  A. BA classification overrides MF classification.

  B. MF classification overrides BA classification.

  C. Neither classification method is applied.

  D. Both classifications are applied randomly.

  Correct Answer: B

• Question 168:

  You are configuring port ge-0/0/0 on an EX Series switch connected to an IP phone that does not support LLDP-MED.

  Which three configuration statements do you need to accomplish this task? (Choose three.)

  A. set interfaces ge-0/0/0 unit 0 family ethernet-switching native-vlan-id voice-vlan

  B. set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members voice-vlan

  C. set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members data-vlan

  D. set interfaces ge-0/0/0 unit 0 family ethernet-switching native-vlan-id data-vlan

  E. set interfaces ge-0/0/0 unit 0 family ethernet-switching port-mode trunk

  Correct Answer: BDE

• Question 169:

  -- Exhibit -Controller Maximum Power Guard Management Status Lldp index power consumption band Priority 0 792.00W 603.50W 0W Class AT_MODE Disabled -- Exhibit -Click the Exhibit button.

  Referring to the exhibit, which statement is true?

  A. The switch supports PoE+.

  B. The switch is protected against spikes in power demand.

  C. The switch supports a maximum power draw per PoE port of 15.4 watts.

  D. The switch can manually assign priorities per interface.

  Correct Answer: A

• Question 170:

  You are asked to implement a captive portal on your EX Series switches.

  What are three required steps? (Choose three.)

  A. You must create the captive portal login page.

  B. You must ensure the Web service is turned on.

  C. You must specify the interfaces participating in the captive portal.

  D. You must create and apply an authentication profile.

  E. You must create an authentication whitelist.

  Correct Answer: BCD