Juniper Juniper Certifications JN0-647 Questions & Answers

• Question 51:

  Click the Exhibit button.

  

  All of the clients attached to your EX4300 report that authentication to the network is abnormally slow. While troubleshooting, you individually test the RADIUS servers used for authentication and receive the information shown in the exhibit.

  What happened to the RADIUS server 172.28.30.95?

  A. The server is no longer reachable.

  B. The RADIUS daemon went offline.

  C. There is a RADIUS version mismatch.

  D. Someone changed the RADIUS secret.

  Correct Answer: D

• Question 52:

  You are enabling 802.1X authentication on an EX Series device. You are configuring the switch in the

  conference room where you will have non-employees with devices that do not support 802.1X

  authentication connecting to your network.

  You must ensure that these users can connect to your network but are restricted to Internet access only.

  What should you do to accomplish this task?

  A. You must add a RADIUS account for each user and assign them to the appropriate VLAN.

  B. You should ensure that the server-fail failback feature is enabled and users are assigned to the appropriate VLAN.

  C. You should assign a guest VLAN to the interfaces and isolate that VLAN to Internet access only.

  D. You should configure a server-reject VLAN to the interfaces and isolate that VLAN to Internet access only.

  Correct Answer: C

• Question 53:

  Which protocol is a multicast routing protocol?

  A. OSPF

  B. BGP

  C. PIM

  D. IS-IS

  Correct Answer: C

• Question 54:

  You are configuring a scheduler map on an EX9200 Series device. You want to ensure that traffic is dropped in a policing action once traffic exceeds the configured transmit rate.

  Which configuration parameter will meet this requirement?

  A. exact

  B. rate-limit

  C. remainder

  D. percent

  Correct Answer: B

• Question 55:

  Click the Exhibit.

  

  Referring to the exhibit, which two statements are correct? (Choose two.)

  A. The satellite device has two ports that are not online.

  B. The satellite device has 14 network-facing ports available.

  C. The satellite device is in a state of transition.

  D. The satellite device can support up to 48 total ports.

  Correct Answer: AD

• Question 56:

  Which two statements are true about 802.1X dynamic filters based on RADUIS attributes? (Choose two.)

  A. Filters can be defined on the network management system and deployed using vendor-specific attributes.

  B. Filters can be defined on the switch and deployed upon authentication.

  C. Filters can be defined on an automation framework and deployed when triggered by an authentication syslog message.

  D. Filters can be defined on the authentication server and deployed using vendor-specific attributes.

  Correct Answer: BD

• Question 57:

  Which protocol is used for port-level access control and authentication?

  A. MD5

  B. IPsec

  C. 802.1X

  D. AES

  Correct Answer: C

• Question 58:

  Click the Exhibit button.

  

  Referring to the exhibit, you are receiving multiple routes from ISP3 through two EBGP neighbors. You must ensure that all traffic leaving R1 destined to the networks advertised by ISP3 go through ISP2.

  What should you do on R1 to accomplish this task?

  A. Create and apply an import policy to set the local preference on routes learned from ISP2 to be lower than those learned from ISP1.

  B. Create and apply an import policy to set the route preference on routes learned from ISP2 to be lower than those learned from ISP1.

  C. Create and apply an import policy to set the route preference on routes learned from ISP2 to be higher than those learned from ISP1.

  D. Create and apply an import policy to set the local preference on routes learned from ISP2 to be higher than those learned from ISP1.

  Correct Answer: D

• Question 59:

  Click the Exhibit button.

  

  Referring to the exhibit, you have EBGP peerings with both ISP1 and ISP2. You are receiving the 172.25.12.0/24, 172.25.13.0/24, 172.25.14.0/24, and 172.25.15.0/24 routes through both neighbors. You must ensure that traffic to these prefixes are load balanced through both service providers. You have configured a load-balancing policy and have applied it to the forwarding table, but the prefixes are not being load balanced.

  What is required to accomplish this task?

  A. The multihop feature should be enabled between both neighbors.

  B. The multipath multiple-as feature should be used between both neighbors.

  C. The as-override feature should be used between both neighbors.

  D. The include-mp-next-hop feature should be used between both neighbors.

  Correct Answer: B

• Question 60:

  Click the Exhibit button.

  

  A customer is concerned that the route damping policy on routes with prefixes greater than/17 is allowing too many flaps to occur. The customer does not want to change the default timer.

  Referring to the exhibit, which two actions would allow fewer flaps per route? (Choose two.)

  A. Increase the suppress parameter to 3500.

  B. Decrease the suppress parameter to 2000.

  C. Increase the half-life parameter to 45.

  D. Decrease the half-life parameter to 15.

  Correct Answer: BC