Juniper Juniper Certification JN0-649 Questions & Answers

• Question 1:

  BGP multipath or multihop are not configured in your network.

  In this scenario, what is the correct sequence for BGP active route selection?

  A. higher local preference shortest AS path lowest peer address lowest router ID lower origin code

  B. higher local preference shortest AS path lower origin code lowest router ID lowest peer address

  C. higher local preference lowest router ID lowest peer address lower origin code shortest AS path

  D. higher local preference shortest AS path lowest router ID lowest peer address lower origin code

  Correct Answer: B

  BGP Path Selection process follows this order

  1.Weight (Bigger is better)

  2.

  Local preference (Bigger is better)

  3.

  Self originated (Locally injected is better than iBGP/eBGP learned)

  4.

  AS-Path (Smaller is better)

  5.

  Origin

  6.

  MED (Smaller is better)

  7.

  External (Prefer eBGP over iBGP)

  8.

  IGP cost (Smaller is better)

  9.

  EBGP Peering (Older is better)

  10.

  Router-ID http://www.next-itsolutions.co.uk/wp-content/uploads/2015/09/CCIE-BGP-Best-Path-Selection1.png https://www.juniper.net/documentation/us/en/software/junos/vpn-l2/bgp/topics/concept/routing-protocols-address-representation.html

• Question 2:

  You are deploying IP phones in your enterprise networks. When plugged in, the IP phones mustbe automatically provided with the correct VLAN ID needed for sending voice traffic to the EX Series switches.

  In this scenario, which two solutions are required to accomplish this task? (Choose two.)

  A. Enable LLDP-MED on appropriate access interfaces.

  B. Create two VLANs and assign them as VLAN members to the appropriate access interfaces.

  C. Enable the voice VLAN feature with the appropriate access interfaces and VLAN ID for voice traffic.

  D. Use LLDP on appropriate interfaces.

  Correct Answer: AC

• Question 3:

  Your network has an unmanaged switch between the hosts and your EX Series switch. After the traffic enters theEX Series switch, each host must be on a separate VLAN.

  How would you accomplish this task?

  

  A. Configure an input firewall filter on interface ge-0/0/3 to match the source MAC or IP address of the hosts to assign the VLANs.

  B. Configure an output firewall filter on interface ge-0/0/1 to match the destination MAC or IP address of the hosts to assign the VLANs.

  C. Configure interface ge-0/0/3 to a mode trunk to assign the VLANs.

  D. Configure VSTP on interface ge-0/0/1 to assign the VLANs.

  Correct Answer: C

• Question 4:

  Your network is multihomed to two ISPs. The BGP sessions are established; however, the ISP peers are not receiving any routes.

  Which two statements are correct about troubleshooting your configuration? (Choose two.)

  A. Verify the import policies on your router.

  B. Verify that the BGP routes are active in your routing table.

  C. Verify the export policies on your router.

  D. Verity that the multihop settings are configured on your router.

  Correct Answer: CD

• Question 5:

  You want to create an OSPF area that only contains intra-area route information in the form of Type 1 and Type 2 LSAs.

  In this scenario, which area is needed to accomplish this task?

  A. totally non-to-stubby area

  B. totally stubby area

  C. stub area

  D. non-to-stubby area

  Correct Answer: B

  A totally stubby area (TSA) is a stub area in which summary link-state advertisement (type 3 LSAs) are not sent. A default summary LSA, with a prefix of 0.0. 0.0/0 is originated into the stub area by an ABR, so that devices in the area can forward all traffic for which a specific route is not known, via ABR.

• Question 6:

  Which statement is correct about IS-IS?

  A. IS-IS uses areas and an autonomous system.

  B. Level 1/2 routers automatically inject a default route to the nearest Level 1 router.

  C. Level 2 routers must share the same area address.

  D. Level 1 routers route traffic between autonomous systems.

  Correct Answer: A

  Level 1/2 routers automatically inject a default route to the nearest Level 1 router. It's the other way around

• Question 7:

  Your enterprise network is running BGP VPNs to support multitenancy. Some of the devices with which you peer BGP do not support the VPN NLRI. You must ensure that you do not send BGP VPN routes to the remote peer.

  Which two configuration steps will satisfy this requirement? (Choose two.)

  A. Configure an import policy on the remote peer to reject the routes when they are received.

  B. Configure an export policy on the local BGP peer to reject the VPN routes being sent to the remote peer.

  C. Configure a route reflector for the VPN NLRI.

  D. Configure the apply-vpn-export feature on the local BGP peer.

  Correct Answer: BD

  Apply both the VRF export and BGP group or neighbor export policies (VRF first, then BGP) before routes from the vrf or l2vpn routing tables are advertised to other PE routers. https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/ref/statement/vpn-apply-export-edit-protocols-bgp-vp.html

• Question 8:

  A BGP network has been designed to provide resiliency and redundancy to a multihomed customer network.

  Which two statements are correct in this scenario? (Choose two.)

  

  A. Both the next hops will be used to forward traffic to R2.

  B. A routing policy will be required to forward traffic to both next hops.

  C. The TTL value of 1 is set to limit the scope of the EBGP session.

  D. The ttl statement must be configuredto accommodate peering to a loopback address of a directly connected peer.

  Correct Answer: BD

• Question 9:

  There are two BGP routes to 10.200.200.0/24 received from twoexternal peers. Route 1 comes from a neighbor with a router ID of 10.10.100.1 and a peer IP address of 10.10.30.1, and route 2 comes from a neighbor with a router ID of

  10.10.200.1 and a peer IP address of 10.10.50.1. Both routes have the same MED value, origin value, AS path length, and local preference number.

  In this scenario, which statement is correct about the active route?

  A. Route 1 will be active because of the peer IP address.

  B. Route 2 will be active because of the peer IP address.

  C. Route 1 will be active because of the router ID.

  D. Route 2 will be active because of the router ID.

  Correct Answer: C

  The router determines the router ID for each peer that advertised a path to the route destination. A lower router ID value is preferred over a higher router ID value. 10. The router determines the peer ID for each peer that advertised a path to the router destination. A lower peer ID value is preferred over a higher peer ID value. The peer ID is the IP address of the established BGP peering session.

• Question 10:

  You are troubleshooting an EVPN-VXLAN IP fabric and observe the loop shown in the exhibit. Which two steps would you take to further troubleshoot this problem? (Choose two.)

  

  A. Verify that the same ESI is configured on the link from thehost and that it matches the source.

  B. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 4 routes are present.

  C. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 3 routes are present.

  D. Verify thatthe same ESI is configured on the two links from the source.

  Correct Answer: BC

  Type 2 route, MAC with IP advertisement route--Type 2 routes are per-VLAN routes, so only PEs that are part of a VNI need these routes. EVPN allows an end host's IP and MAC addresses to be advertised within the EVPN Network Layer reachability information (NLRI). This allows for control plane learning of ESI MAC addresses. Because there are many Type 2 routes, a separate route-target auto-derived per VNI helps to confine their propagation. This route type is supported by all EVPN switches and routers. Type 5 route, IP prefix Route--An IP prefix route provides encoding for inter-subnet forwarding. In the control plane, EVPN Type 5 routes are used to advertise IP prefixes for inter-subnet connectivity across data centers. To reach a tenant using connectivity provided by the EVPN Type 5 IP prefix route, data packets are sent as Layer 2 Ethernet frames encapsulated in the VXLAN header over the IP network across the data centers.