You are asked to enforce user authentication using a captive portal before users access the corporate network.
Which statement is correct in this scenario?

A. HTTPS is the default protocol for a captive portal.

B. A captive portal can be bypassed using an allowlist command containing a device’s IP address.

C. When enabled, a captive portal must be applied to each individual interface.

D. All Web browser requests are redirected to the captive portal until authentication is successful.

In OSPF, how does a router ensure that LSAs advertised to a neighboring router are received?

A. LSA flooding guarantees that all routers will receive them successfully.

B. LSAs are sent over a TCP connection.

C. LSAs are acknowledged by the neighboring router.

D. LSAs are advertised with an acknowledgement bit.

Which three MSTP parameters must match on all switches in the same MST region? (Choose three.)

A. forwarding delay

B. bridge priority

C. revision number

D. MSTI-to-VLAN mapping

E. configuration name

You are deploying new Juniper EX Series switches in a network that currently is using Cisco’s Per-VLAN spanning tree plus (PVST+) and you must provide compatibility with this environment.
Which spanning tree protocol do you deploy in this scenario?

A. STP

B. MSTP

C. VSTP

D. RSTP

When using wide metrics, which two statements about route advertisement between IS-IS levels are correct? (Choose two.)

A. Level 1 and Level 2 routers do not advertise Level 2 routes into the Level 1 area by default.

B. Level 1 routes are advertised to Level 2 routers by default.

C. If wide-metrics-only is configured, Level 1 routes are not advertised to Level 2 routers by default.

D. Level 1 routes advertised as external routes into Level 1 are not advertised to any Level 2 routers by default.

You are asked to configure an 802.1X solution that supports dynamic VLAN assignment.
In this scenario, which two modes support using vendor-specific attributes (VSAs)? (Choose two.)

A. static MAC bypass mode

B. single-secure supplicant mode

C. multiple supplicant mode

D. single supplicant mode

A modified deficit round-robin scheduler is defined by which three variables? (Choose three.)

A. priority

B. WRED

C. transmit rate

D. Layer 3 fields

E. buffer size

Click the Exhibit button.
Referring to the exhibit, which two statements are correct? (Choose two.)
 

A. The DS-2 switch will be root bridge for MSTI 2.

B. The DS-1 switch will be root bridge for MSTI 1.

C. The DS-1 switch will be root bridge for MSTI 2.

D. The DS-2 switch will be root bridge for MSTI 1.

Click the Exhibit button.
Referring to the exhibit, which two statements are correct? (Choose two.)
 

A. BPDUs from the root bridge for VLAN 10 have been received on the ge-0/0/7.0 interface.

B. DS-1 is the root bridge for VLAN 10.

C. BPDUs from the root bridge for VLAN 20 have been received on the ge-0/0/7.0 interface.

D. Default VSTP bridge priority values are configured.

You are using 802.1X authentication in your network to secure all ports. You have a printer that does not support 802.1X and you must ensure that traffic is allowed to and from this printer without authentication.
In this scenario, what will satisfy the requirement?

A. MAC filtering

B. MACsec

C. static MAC bypass

D. MAC RADIUS

Your network is multihomed to two ISPs. The BGP sessions are established; however, the ISP peers are not receiving any routes.
Which two statements are correct about troubleshooting your configuration? (Choose two.)

A. Verify the import policies on your router.

B. Verify that the BGP routes are active in your routing table.

C. Verify the export policies on your router.

D. Verity that the multihop settings are configured on your router.

Click the Exhibit button.
You are running OSPF as your IGP. The interfaces connecting two routers are in the ExStart state. You notice that something is incorrect with the configuration.
Referring to the exhibit, which statement is correct?
 

A. The subnet mask is incorrect.

B. The MTU setting are incorrect.

C. The interface type is incorrect.

D. The IP addresses are incorrect.

Click the Exhibit button.
Which two statements are correct regarding the behavior shown in the exhibit? (Choose two.)
 

A. The ge-1/1/0 interface is configured as secondary for Area 0.

B. The router is an ABR.

C. The router is not an ABR.

D. The ge-1/1/0 interface is configured as secondary for Area 100.

Your enterprise network is running BGP VPNs to support multitenancy. Some of the devices with which you peer BGP do not support the VPN NLRI. You must ensure that you do not send BGP VPN routes to the remote peer.
Which two configuration steps will satisfy this requirement? (Choose two.)

A. Configure an import policy on the remote peer to reject the routes when they are received.

B. Configure an export policy on the local BGP peer to reject the VPN routes being sent to the remote peer.

C. Configure a route reflector for the VPN NLRI.

D. Configure the apply-vpn-export feature on the local BGP peer.

You want to create an OSPF area that only contains intra-area route information in the form of Type 1 and Type 2 LSAs.
In this scenario, which area is needed to accomplish this task?

A. totally non-to-stubby area

B. totally stubby area

C. stub area

D. non-to-stubby area

Click the Exhibit button.
Referring to the exhibit, which statement is correct?
 

A. The route is learned from a multihop BGP session.

B. The route is learned from only one neighbor.

C. The route is learned from a multipath BGP session.

D. The route is learned from three different neighbors.

You are deploying an 802.1X solution and must determine what would happen if clients are unable to re-authenticate to the RADIUS server.
In this scenario, which configuration would provide access to the network if the supplicant is already authenticated?

A. move

B. permit

C. deny

D. sustain

Click the Exhibit button.
You are asked to establish full connectivity between all devices in the BGP network.
Referring to the exhibit, which two configuration changes will allow BGP route advertisements? (Choose two.)
 

A. On R2, include the loops 2 statement at the [edit protocols bgp family inet unicast] hierarchy.

B. On R1 and R3, include the loops 2 statement at the [edit protocols bgp family inet unicast] hierarchy.

C. On R1 and R3, include the advertise-peer-as statement at the [edit protocols bgp group external] hierarchy.

D. On R2, include the advertise-peer-as statement at the [edit protocols bgp group external] hierarchy.

Click the Exhibit button.
Referring to the exhibit, anycast RP is implemented to ensure multicast service availability. The source is currently sending multicast traffic using group 239.1.1.1 and R3 is receiving PIM register messages, but R2 does not have active source information.
In this scenario, what are two methods to receive the active source information on R2? (Choose two.)
 

A. Configure an RP set in PIM on R1, allowing R1 to forward PIM register messages to R2 and R3 in the set.

B. Configure an MSDP protocol between R2 and R3.

C. Configure an RP set in PIM on R2 and R3, allowing the RPs to forward PIM register messages to the other RPs in the set.

D. Configure an MSDP protocol between R1 and R2.

You are asked to implement fault tolerant RPs in your multicast network.
Which two solutions would accomplish this behavior? (Choose two.)

A. Use BFD with statically defined RPs.

B. Use MSDP with statically defined RPs.

C. Use anycast PIM with statically defined RPs.

D. Use IGMPv3 with statically defined RPs.

Click the Exhibit button.
You are troubleshooting connectivity between an EVPN spine switch configured as a route reflector and a leaf node with an IP address of 10.30.100.6.
Referring to the exhibit, what is the problem?
 

A. The neighbor 10.30.100.3 statement is missing from leaf1’s configuration.

B. The spine node is not configured for the family inet NLRI.

C. The neighbor 10.30.100.6 statement is missing from spine1’s configuration.

D. The leaf node is not configured for the family evpn NLRI.

You are deploying IP phones in your enterprise networks. When plugged in, the IP phones must automatically negotiate the power requirements for the new connection with the EX Series switches.
In this scenario, which protocol should be used to enable this behavior?

A. CDP

B. MP-BGP

C. LLDP-MED

D. LLDP

Click the Exhibit button.
Referring to the exhibit, how will router E quickly learn that the remote MAC addresses are no longer reachable through the router attached to the failed link?
 

A. Router E receives Type 2 withdrawal messages from router D.

B. Router E receives Type 1 withdrawal messages from router D.

C. Router E receives Type 1 withdrawal messages from router C.

D. Router E receives Type 2 withdrawal messages from router C.

Click the Exhibition button.
A BGP network has been designed to provide resiliency and redundancy to a multihomed customer network.
Which two statements are correct in this scenario? (Choose two.)
 

A. Both the next hops will be used to forward traffic to R2.

B. A routing policy will be required to forward traffic to both next hops.

C. The TTL value of 1 is set to limit the scope of the EBGP session.

D. The ttl statement must be configured to accommodate peering to a loopback address of a directly connected peer.

Which two statements are correct about the deployment of EVPN-VXLAN on QFX Series devices? (Choose two.)

A. Type 1 route advertisements always have the single-active flag set to 1.

B. Junos OS supports underlay replication for BUM traffic forwarding.

C. Junos OS supports ingress replication for BUM traffic forwarding.

D. Type 1 route advertisements always have the single-active flag set to 0.

Click the Exhibit button.
You are troubleshooting a BGP connection.
Referring to the exhibit, which two statements are correct? (Choose two.)
 

A. Packet fragmentation is preventing the session from establishing.

B. The 192.168.1.5 peer has a misconfigured MD5 key.

C. The ge-0/0/1 interface is disabled.

D. The 192.168.1.4 peer has a misconfigured autonomous system number.

Your organization has recently acquired another company. You must carry all of the company’s existing VLANs across the corporate backbone to the existing branch locations without changing addressing and with minimal configuration.
Which technology will accomplish this task?

A. Q-in-Q all-in-one bundling

B. PVLAN isolated VLAN

C. MVRP registration normal

D. EVPN-VXLAN anycast gateway

Click the Exhibit button.
A user is attempting to watch a high-definition video being streamed from the media server over the network. However, the user complains that the experienced video quality is poor. While logged on to router B, a Juniper Networks device, you notice that video packets are being dropped.
In this scenario, what would solve this problem?
 

A. Adjust the scheduler for the expedited-forwarding forwarding class to support a higher transmit rate.

B. Adjust the expedited-forwarding BA classifier to router B’s ge-0/0/0 interface to support a higher transmit rate.

C. Adjust the scheduler-map to support a higher transmit rate.

D. Adjust the expedited-forwarding BA classifier on router B’s ge-0/0/1 interface to support a higher transmit rate.

Which statement is correct about IS-IS?

A. IS-IS uses areas and an autonomous system.

B. Level 1/2 routers automatically inject a default route to the nearest Level 1 router.

C. Level 2 routers must share the same area address.

D. Level 1 routers route traffic between autonomous systems.

Click the Exhibit button.
Remote branches connect to the corporate WAN through access switches. The access switches connect to access ports on the WAN distribution switch, as shown in the exhibit. L2PT has previously been configured on the tunnel Layer 2 traffic across the WAN. You decide to move the L2PT tunnel endpoints to the access switches. When you apply the L2PT configuration to the access switches, the ports that connect the access switches to the distribution switch shut down.
Which action would solve this problem?
 

A. Configure the links between the access switches and the distribution switch as a trunk port.

B. Disable the BPDU block function on the access switches.

C. Disable the BPDU block function on the distribution switch.

D. Configure a GRE tunnel to encapsulate the L2PT traffic across the WAN.

Click the Exhibit button.
The connection between DC1 and DC2 is routed as shown in the exhibit.
In this scenario, which statement is correct?
 

A. The border devices must be able to perform Layer 3 routing and provide IRB functionality.

B. L3VPN must be enabled to advertise reachability.

C. An IP prefix route provides encoding for intra-subnet forwarding.

D. Type 2 and Type 5 routes will be exchanged between DC1 and DC2.

What are two similarities between OSPFv2 and OSPFv3? (Choose two.)

A. virtual links

B. support for multiple instances per link

C. 32-bit router ID

D. protocol processing per link, not per subnet

Your EX Series switch has IP telephones and computers connected to a single switch port. You are considering implementing the voice VLAN feature to help with this setup.
In this scenario, which two statements are correct? (Choose two.)

A. The voice VLAN feature must be used with LLDP-MED to associate VLAN ID and 802.1p values with the traffic.

B. The interfaces must be configured as access ports.

C. Assigning the incoming voice and data traffic to separate VLANs enables the ability to prioritize the traffic using CoS.

D. The voice VLAN feature will enable incoming tagged data and voice traffic to be associated with separate VLANs.

You enable the Multiple VLAN Registration Protocol (MVRP) to automate the creation and management of virtual LANs.
Which statement is correct in this scenario?

A. The forbidden mode does not register or declare VLANs.

B. When enabled, MVRP affects all interfaces.

C. Timers dictate when link state changes are propagated.

D. MVRP works with RSTP and VSTP.

Click the Exhibit button.
You recently committed a change to a router to reject OSPF routes sourced from area 10. However, you are still seeing area 10 routes in the routing table.
Referring to the exhibit, which statement is correct?
 

A. The OSPF protocol is first matched by find-ospf and accepted.

B. The routes only timeout after 24 hours.

C. The routes remain in the table until the device is rebooted.

D. The routes remain in the table until the routing daemon is restarted.

Your enterprise network uses routing instances to support multitenancy. Your Junos devices use BGP to peer to multiple BGP devices. You must ensure that load balancing is achieved within the routing instance.
Which two statements would accomplish this task? (Choose two.)

A. Configure the multipath option at the [edit protocols bgp group neighbor] hierarchy.

B. Configure the multipath option at the [edit protocols bgp group] hierarchy.

C. Configure a load-balance per-packet policy and apply it at the [edit routing-options forwarding-table] hierarchy.

D. Configure the multipath option at the [edit routing-instances routing-options] hierarchy.

Click the Exhibit button.
Referring to the exhibit, traffic ingresses on interface ge-0/0/3 and egresses on interface ge-0/0/4.
Which queue does traffic with the IP precedence value of 100 use?
 

A. network-control

B. assured-forwarding

C. best-effort

D. expedited-forwarding

Click the Exhibition button.
Referring to the exhibit, ServerA sends a single IP packet destined to 10.0.0.127.
Which two statements correctly describe the behavior of the resulting outbound VXLAN packets that contain the original packet destined to 10.0.0.127? (Choose two.)
 

A. Router E will replicate and send a copy of the received VXLAN packet to router D.

B. Router C will send a VXLAN packet destined only to router D and router E.

C. Router D will not replicate and send a copy of the received VXLAN packet to router E.

D. Router C will send a single VXLAN packet to one remote VTEP.

You must provide network connectivity to hosts that fail authentication.
In this scenario, what would be used in a network secured with 802.1X to satisfy this requirement?

A. Configure the native-vlan-id parameter on the port.

B. Use the server-reject-vlan command to specify a guest VLAN.

C. Configure a secondary IP address on the port for unauthenticated hosts.

D. Configure the port as a spanning tree edge port.

You are asked to configure 802.1X on your access ports to allow only a single device to authenticate.
In this scenario, which configuration would you use?

A. single supplicant mode

B. multiple supplicant mode

C. single-secure supplicant mode

D. MAC authentication mode

Click the Exhibit button.
Referring to the exhibit, which statement is correct when a failure exists on the link between host2 and switch5 on this EVPN-VXLAN fabric?
 

A. The switch5 device will send a Type 2 route to all peers.

B. The switch5 device will send a Type 4 route to all peers.

C. The switch5 device will send a Type 1 route to all peers.

D. The switch5 device will send a Type 3 route to all peers.

Which two multicast listener registration protocols are supported in the Junos operating system? (Choose two.)

A. MLD

B. DVMRP

C. IGMP

D. PIM

A Layer 2 connection does not expend across data centers. The IP subnet in a Layer 2 domain is confined within a single data center.
Which EVPN route type is used to communicate prefixes between the data centers?

A. Type 1

B. Type 2

C. Type 4

D. Type 5

Which three statements are correct about EVPN route types? (Choose three.)

A. Type 3 routes carry replication information.

B. Type 2 routes carry endpoint MAC address information.

C. Type 2 routes carry endpoint IP address information.

D. Type 5 routes carry replication information.

E. Type 1 routes carry endpoint MAC address information.

Click the Exhibit button.
You want to provide Layer 2 connectivity between campus sites using Ethernet switches through a metro Ethernet service provider who is using Q-in-Q tagging on their network.
Referring to the exhibit, what are two design considerations in this environment? (Choose two.)
 

A. VXLAN could be implemented on your network across this service provider network.

B. Each campus switch shown must have a C-Tag 300 configured.

C. L2PT is required on the SP network to support the spanning tree protocol.

D. Each campus switch shown must have S-Tag 300 configured.

There are two BGP routes to 10.200.200.0/24 received from two external peers. Route 1 comes from a neighbor with a router ID of 10.10.100.1 and a peer IP address of 10.10.30.1, and route 2 comes from a neighbor with a router ID of 10.10.200.1 and a peer IP address of 10.10.50.1. Both routes have the same MED value, origin value, AS path length, and local preference number.
In this scenario, which statement is correct about the active route?

A. Route 1 will be active because of the peer IP address.

B. Route 2 will be active because of the peer IP address.

C. Route 1 will be active because of the router ID.

D. Route 2 will be active because of the router ID.

You are deploying IP phones in your enterprise networks. When plugged in, the IP phones must be automatically provided with the correct VLAN ID needed for sending voice traffic to the EX Series switches.
In this scenario, which two solutions are required to accomplish this task? (Choose two.)

A. Enable LLDP-MED on appropriate access interfaces.

B. Create two VLANs and assign them as VLAN members to the appropriate access interfaces.

C. Enable the voice VLAN feature with the appropriate access interfaces and VLAN ID for voice traffic.

D. Use LLDP on appropriate interfaces.

Click the Exhibit button.
Referring to the exhibit, a PIM-SM network is set up to enable communication between multicast devices.
Which two statements are true? (Choose two.)
 

A. Before the formation of the rendezvous-point tree, a join message is sent from R1 to R3.

B. Before the formation of the rendezvous-point tree, an IGMP is sent from the Receiver to R1.

C. Before the formation of the rendezvous-point tree, an IGMP is sent from the Source to R5.

D. Before the formation of the rendezvous-point tree, a join message is sent from R1 to R5.

Click the Exhibit button.
You have scheduled maintenance operations for one of the devices in your OSPF network.
Referring to the exhibit, which three statements are correct? (Choose three.)
 

A. R1 does not participate in OSPF routing.

B. Any traffic destined for networks that terminate on R1 will still be forwarded to R1.

C. The metrics for all transit interfaces on R1 is set to the maximum value of 65,535.

D. R1 participates in OSPF routing but does not send or receive transit traffic.

E. R1 does not send or receive transit traffic during the maintenance window even if no alternative paths exist to the given destination.

Click the Exhibit button.
You are troubleshooting an EVPN-VXLAN IP fabric and observe the loop shown in the exhibit.
Which two steps would you take to further troubleshoot this problem? (Choose two.)
 

A. Verify that the same ESI is configured on the link from the host and that it matches the source.

B. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 4 routes are present.

C. Issue the show route table bgp.evpn.0 command on Leaf2 and verify that Type 3 routes are present.

D. Verify that the same ESI is configured on the two links from the source.