Juniper Juniper Certifications JN0-643 Questions & Answers

• Question 221:

  -- Exhibit -[edit]

  user@switch# commit

  error: Trunk interface can not be member of both dot1q-tunneling enabled vlan , and a non dot1q-tunneled vlan when dot1q-tunneling ethernet-type is not <0x8100> error: configuration check-out failed

  -- Exhibit -

  Click the Exhibit button.

  When you try to commit your 802.1Q tunneling configuration, you receive the error shown in the exhibit.

  Which configuration statement will allow the configuration to commit?

  A. set vlans cust-1 interface ge-0/0/10 egress

  B. set interfaces ge-0/0/10 ether-options mdi-mode auto

  C. set vlans v11 dot1q-tunneling customer-vlans native

  D. set ethernet-switching-options dot1q-tunneling ether-type 0x8100

  Correct Answer: D

• Question 222:

  -- Exhibit

  

  -- Exhibit -

  Click the Exhibit button.

  Referring to the exhibit, you are asked to ensure that CE1 can communicate with CE2 using VLAN 150.

  Which configuration meets this requirement on S1?

  A. user@S1# show customer-a { vlan-id 200; dot1q-tunneling { customer-vlans 150; } } {master:0}[edit vlans]

  B. user@S1# show customer-a { vlan-id 150; interface { ge-0/0/0.0; ge-0/0/1.0; } dot1q-tunneling { customer-vlans 200; } } {master:0}[edit vlans]

  C. user@S1# show customer-a { vlan-id 200; interface { ge-0/0/0.0; ge-0/0/1.0; } dot1q-tunneling { customer-vlans 150; } } {master:0}[edit vlans]

  D. user@S1# show customer-a { vlan-id 150; interface { ge-0/0/0.0; } } v200 { vlan-id 200; interface { ge-0/0/1.0; } }

  Correct Answer: C

• Question 223:

  -- Exhibit -{master:0}[edit]

  user@switch# show vlans

  v200 {

  vlan-id 200;

  interface {

  ge-0/0/7.0;

  ge-0/0/8.0;

  }

  dot1q-tunneling {

  customer-vlans [ 11 12 ];

  layer2-protocol-tunneling {

  all {

  drop-threshold 800;

  shutdown-threshold 700;

  }

  }

  }

  }

  -- Exhibit -

  Click the Exhibit button.

  Referring to the exhibit, you are attempting to configure L2PT for VLAN v200 but the configuration will not commit.

  Which three configuration statements would resolve the problem? (Choose three.)

  A. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all drop-threshold 600

  B. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all shutdown-threshold 600

  C. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all shutdown-threshold 900

  D. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all drop-threshold 700

  E. set vlans v200 dot1q-tunneling layer2-protocol-tunneling all drop-threshold 900

  Correct Answer: ACD

• Question 224:

  You are asked to implement a filter-based VLAN assignment. You have created the firewall filter and must apply this filter to the incoming interface.

  Where must this filter be applied?

  A. to the access interface configuration

  B. to the interface under the primary VLAN assignment

  C. to the interface under the secondary VLAN assignment

  D. to the trunk interface configuration

  Correct Answer: A

• Question 225:

  -- Exhibit -{master:0}[edit]

  user@switch# show vlans

  v1 {

  vlan-id 1;

  interface {

  ge-0/0/1.0;

  }

  }

  v2 {

  vlan-id 2;

  interface {

  ge-0/0/2.0;

  }

  }

  v3 {

  vlan-id 3;

  interface {

  ge-0/0/1.0 {

  }

  {master:0}[edit]

  user@switch# show interfaces ge-0/0/3

  unit 0 {

  family ethernet-switching {

  port-mode trunk;

  }

  }

  {master:0}[edit]

  user@switch# run show vlans

  Name Tag Interfaces

  default

  None

  v1 1

  ge-0/0/1.0*, ge-0/0/3.0*

  v2 2

  ge-0/0/2.0*, ge-0/0/3.0*

  v3 3

  ge-0/0/1.0*, ge-0/0/3.0*

  -- Exhibit -

  Click the Exhibit button.

  Referring to the exhibit, what would explain interface ge-0/0/3.0 being active in VLANs v1, v2, and v3?

  A. You have enabled RSTP for interface ge-0/0/3.0.

  B. You have enabled MVRP for interface ge-0/0/3.0.

  C. You have enabled MSTP for interface ge-0/0/3.0.

  D. You have enabled L2PT for interface ge-0/0/3.0.

  Correct Answer: B

• Question 226:

  -- Exhibit -

  Mar 16 17:54:51.930726 OSPF periodic xmit from 172.14.10.1 to 224.0.0.5 (IFL 69 area 0.0.0.0) Mar 16 17:54:55.566920 ospf_trigger_build_telink_lsas : No peer found Mar 16 17:54:56.152585 ospf_trigger_build_telink_lsas : No peer found Mar 16 17:54:56.152721 ospf_set_lsdb_statE. Router LSA 192.168.2.1 adv-rtr 192.168.2.1 state QUIET>GEN_PENDING Mar 16 17:54:56.153271 OSPF trigger router LSA 0x156d0f0 build for area 0.0.0.0 lsa-id 192.168.2.1 Mar 16 17:54:56.157854 ospf_set_lsdb_statE. Router LSA 192.168.2.1 adv-rtr 192.168.2.1 state GEN_PENDING->QUIET Mar 16 17:54:56.157971 OSPF built router LSA, area 0.0.0.0, link count 2 Mar 16 17:54:56.158300 OSPF sent Hello 172.14.10.1 -> 224.0.0.5 (ge-0/0/1.0 IFL 69 area 0.0.0.0) Mar 16 17:54:56.158380 Version 2, length 44, ID 192.168.2.1, area 0.0.0.0 Mar 16 17:54:56.158435 mask 255.255.255.0, hello_ivl 10, opts 0x2, prio 128 Mar 16 17:54:56.158485 dead_ivl 40, DR 172.14.10.1, BDR 0.0.0.0 Mar 16 17:54:56.158949 OSPF DR is 192.168.2.1, BDR is 0.0.0.0 Mar 16 17:54:56.159276 OSPF sent Hello 172.14.10.1 -> 224.0.0.5 (ge-0/0/1.0 IFL 69 area 0.0.0.0) Mar 16 17:54:56.159331 Version 2, length 44, ID 192.168.2.1, area 0.0.0.0 Mar 16 17:54:56.159401 mask 255.255.255.0, hello_ivl 10, opts 0x2, prio 128 Mar 16 17:54:56.159563 dead_ivl 40, DR 172.14.10.1, BDR 0.0.0.0 Mar 16 17:54:56.168108 OSPF DR is 192.168.2.1, BDR is 0.0.0.0 Mar 16 17:54:58.237416 OSPF rcvd Hello 172.14.10.2 -> 224.0.0.5 (ge-0/0/1.0 IFL 69 area 0.0.0.0) Mar 16 17:54:58.237540 Version 2, length 44, ID 192.168.2.1, area 0.0.0.0 Mar 16 17:54:58.237623 checksum 0x0, authtype 0 Mar 16 17:54:58.237698 mask 255.255.255.0, hello_ivl 10, opts 0x2, prio 128 Mar 16 17:54:58.237751 dead_ivl 40, DR 172.14.10.2, BDR 0.0.0.0 -- Exhibit -

  Click the Exhibit button.

  Looking at the traceoptions output in the exhibit, why are the OSPF routers stuck in Init state?

  A. There is an MTU mismatch.

  B. There are duplicate router IDs.

  C. The routers are in different areas.

  D. No BDR has been elected.

  Correct Answer: B

• Question 227:

  Two PCs are attached to a hub, which is attached to port ge-0/0/0 on your EX Series switch. You must separate the incoming traffic from the PCs into two VLANs.

  What should you use to accomplish this task?

  A. dynamic VLAN registration with MVRP

  B. private VLAN

  C. filter-based VLAN

  D. guest VLAN

  Correct Answer: C

• Question 228:

  What are three types of PVLAN broadcast domains? (Choose three.)

  A. primary VLAN

  B. dynamic VLAN

  C. isolated VLAN

  D. community VLAN

  E. S-VLAN

  Correct Answer: ACD

• Question 229:

  You are a service provider and have multiple customers in a building. You are installing a new switch that can host all of your customers. However, you would like to ensure that one customer cannot see or broadcast to another customer. You would also like to have them use a common gateway IP address from the building.

  What should be used to provide this access?

  A. VLAN

  B. private VLAN

  C. filter-based VLAN

  D. Layer 2 tunneling

  Correct Answer: B

• Question 230:

  -- Exhibit -- Exhibit -

  

  Click the Exhibit button.

  Referring to the exhibit, a customer noticed that the 802.1Q-tunneled packets received on SwitchB are being dropped.

  What is causing this problem?

  A. There is an ether-type mismatch on SwitchA and SwitchB.

  B. Customer VLANs are not configured on SwitchB.

  C. The SwitchB interface connecting to SwitchA is not a trunk port.

  D. Customer VLANs are mismatched on both switches.

  Correct Answer: A