(2026) JN0-351 Exam Dumps, Practice Test Questions BUNDLE PACK
JNCIS-ENT Certification JN0-351 Sample Questions Reliable
NEW QUESTION # 64
Which statement is correct about IP-IP tunnels?
- A. There are 24 bytes of overhead with IP-IP encapsulation.
- B. IP-IP tunnels only support encapsulating IP traffic.
- C. IP-IP tunnels only support encapsulating non-IP traffic.
- D. The TTL in the inner packet is decremented during transit to the tunnel endpoint.
Answer: B
Explanation:
Explanation
IP-IP tunnels are a type of tunnels that use IP as both the encapsulating and encapsulated protocol. IP-IP tunnels are simple and easy to configure, but they do not provide any security or authentication features. IP-IP tunnels only support encapsulating IP traffic, which means that the payload of the inner packet must be an IP packet. IP-IP tunnels cannot encapsulate non-IP traffic, such as Ethernet frames or MPLS labels1.
Option A is correct, because IP-IP tunnels only support encapsulating IP traffic. Option B is incorrect, because IP-IP tunnels only support encapsulating non-IP traffic. Option C is incorrect, because the TTL in the inner packet is not decremented during transit to the tunnel endpoint. The TTL in the outer packet is decremented by each router along the path, but the TTL in the inner packet is preserved until it reaches the tunnel endpoint2.
Option D is incorrect, because there are 20 bytes of overhead with IP-IP encapsulation. The overhead consists of the header of the outer packet, which has a fixed size of 20 bytes for IPv43.
References:
1: IP-IP Tunneling 2: What is tunneling? | Tunneling in networking 3: IPv4 - Header
NEW QUESTION # 65
Exhibit.
You want to verify prefix information being sent from 10.36.1.4.
Which two statements are correct about the output shown in the exhibit? (Choose two.)
- A. The routes displayed have traversed one or more autonomous systems.
- B. The output shows routes that were received prior to the application of any BGP import policies.
- C. The routes displayed are being learned from an I BGP peer.
- D. The output shows routes that are active and rejected by an import policy.
Answer: A,B
Explanation:
Explanation
The output shown in the exhibit is the result of the command "show ip bgp neighbor 10.36.1.4 received-routes", which displays all received routes (both accepted and rejected) from the specified neighbor.
Option A is correct, because the routes displayed have traversed one or more autonomous systems. This can be seen from the AS_PATH attribute, which shows the sequence of AS numbers that the route has passed through. For example, the route 10.0.0.0/8 has an AS_PATH of 65001 65002, which means that it has traversed AS 65001 and AS 65002 before reaching the local router.
Option B is correct, because the output shows routes that were received prior to the application of any BGP import policies. This can be seen from the fact that some routes have a status code of "r", which means that they are rejected by an import policy. The"received-routes" keyword shows the routes coming from a given neighbor before the inbound policy has been applied. To see the routes after the inbound policy has been applied, the "routes" keyword should be used instead.
Option C is incorrect, because the output does not show routes that are active and rejected by an import policy.
The status code of "r" means that the route is rejected by an import policy, but it does not mean that it is active. The status code of ">" means that the route is active and selected as the best path. None of the routes in the output have both ">" and "r" status codes.
Option D is incorrect, because the routes displayed are not being learned from an IBGP peer. An IBGP peer is a BGP neighbor that belongs to the same AS as the local router. The output shows that the neighbor 10.36.1.4 has a remote AS of 65001, which is different from the local AS of 65002. Therefore, the neighbor is an EBGP peer, not an IBGP peer.
NEW QUESTION # 66
Which two mechanisms are part of building and maintaining a Layer 2 bridge table? (Choose two.)
- A. blocking
- B. flooding
- C. listening
- D. learning
Answer: B,D
Explanation:
* Option B is correct. Flooding is a mechanism used in Layer 2 bridging where the switch sends incoming packets to all its ports except for the port where the packet originated 1 . This is done when the switch doesn't know the destination MAC address or when the packet is a broadcast or multicast 1 .
* Option C is correct. Learning is another mechanism used in Layer 2 bridging where the switch learns the source MAC addresses of incoming packets and associates them with the port on which they were received 2 3 . This information is stored in a MAC address table, also known as a bridge table 2 3 .
* Option A is incorrect. Blocking is a state in Spanning Tree Protocol (STP) used to prevent loops in a network 2 . It's not a mechanism used in building and maintaining a Layer 2 bridge table 2 .
* Option D is incorrect. Listening is also a state in Spanning Tree Protocol (STP) where the switch listens for BPDUs to make sure no loops occur in the network before transitioning to the learning state
2 . It's not a mechanism used in building and maintaining a Layer 2 bridge table 2 .
NEW QUESTION # 67
An EBGP session sources its TCP connection from which IP address?
- A. The IP address of the interface that connects the two BGP speakers.
- B. The IP address of the primary address assigned to the loopback interface.
- C. The IP address of the preferred address assigned to the loopback interface.
- D. The IP address assigned as the router ID.
Answer: A
NEW QUESTION # 68
You are configuring a router as a new Level 1 router in an existing Level 1 area. The NET address for an existing Level 1 router is 49.0011.1111.2222.3333.00. The new router must form a Level 1 adjacency with the existing router.
What should be the area ID in this scenario?
- A. 0
- B. 0011
- C. 00
- D. 1
Answer: B
NEW QUESTION # 69
You are asked to explore adding BGP route reflectors to allow for increased scale in your core network.
Which statement is correct in this scenario?
- A. The cluster ID is not required to use route reflectors.
- B. The cluster ID is required to prevent routing loops.
- C. Route reflectors require that the network is connected in a physical full mesh.
- D. Route reflectors are required whenever internal BGP (IBGP) sessions are needed.
Answer: B
Explanation:
A route reflector is a BGP router that is allowed to break the iBGP loop avoidance rule and advertise routes received from an iBGP peer to another iBGP peer under specific conditions 1 . A route reflector can have three types of peerings: EBGP neighbor, IBGP client neighbor, and IBGP non-client neighbor 2 . A cluster is a group of route reflectors and their clients that are fully meshed 3 . The cluster ID is a 4-byte value that identifies the route reflector cluster and is carried in the ORIGINATOR_ID attribute of the BGP update message 4 . The cluster ID is used to prevent routing loops among route reflectors and their clients. If a route reflector receives a route with its own cluster ID, it discards the route 5 . Therefore, the cluster ID is required to prevent routing loops when using route reflectors.
References:
1 : What is BGP Route Reflector - Explanation & Discussion (Cisco Example)
2 : BGP Route Reflector - NetworkLessons.com
3 : BGP Route Reflectors (RR) - Cisco Community
4 : Junos OS Routing Protocols Library for Routing Devices
5 : Junos OS Routing Protocols Library for Routing Devices
NEW QUESTION # 70
Click the Exhibit button.
You want to redistribute the static routes into BGP, but they do not show as BGP routes.
What causes this result to occur?
- A. The static routes do not have a valid next hop.
- B. The no-readvertise feature is specified.
- C. A community string must be configured.
- D. The as-path parameter must be specified.
Answer: A
Explanation:
The static route to the 0.0.0.0/0 network has a next hop of xe-0/0/0.0, which is a local interface. BGP does not accept static routes with a local interface as the next hop, because it cannot advertise them to other BGP peers.
BGP requires a valid IP address as the next hop for static routes that are redistributed into BGP. To fix this issue, the static route should have a next hop of an IP address that is reachable via the xe-0/0/0.0 interface, such as the IP address of the eBGP neighbor. Alternatively, the next hop can be modified by using a route map when redistributing the static route into BGP12.
The other options are not correct because:
The as-path parameter is not required for redistributing static routes into BGP. The as-path attribute is automatically set by BGP when advertising routes to other BGP peers3.
A community string is not required for redistributing static routes into BGP. A community is an optional attribute that can be used to group routes and apply policies to them4.
The no-readvertise feature is not specified in the configuration. The no-readvertise feature is used to prevent routes learned from one iBGP peer from being advertised to another iBGP peer5.
References:
How to configure BGP to send the default route to a neighbor
Redistributing Static Route in to BGP - Cisco Community
BGP Fundamentals
BGP Communities Attribute
BGP No-Readvertise Feature
NEW QUESTION # 71
Which statement is correct about graceful Routing Engine switchover (GRES)?
- A. GRES has a helper mode and a restarting mode.
- B. When combined with NSR, routing is preserved and the new master RE does not restart rpd.
- C. The PFE restarts and the kernel and interface information is lost.
- D. With no other high availability features enabled, routing is preserved and the new master RE does not restart rpd.
Answer: B
Explanation:
Explanation
The Graceful Routing Engine Switchover (GRES) feature in Junos OS enables a router with redundant Routing Engines to continue forwarding packets, even if one Routing Engine fails1. GRES preserves interface and kernel information, ensuring that traffic is not interrupted1. However, GRES does not preserve the control plane1.
To preserve routing during a switchover, GRES must be combined with either Graceful Restart protocol extensions or Nonstop Active Routing (NSR)1. When GRES is combined with NSR, nearly 75 percent of line rate worth of traffic per Packet Forwarding Engine remains uninterrupted during GRES1. Any updates to the primary Routing Engine are replicated to the backup Routing Engine as soon as they occur1.
Therefore, when GRES is combined with NSR, routing is preserved and the new master RE does not restart rpd1.
NEW QUESTION # 72
Referring to the exhibit, which statement is correct?
- A. The local device is using a bridge priority of 4k.
- B. The root bridge has not been elected for this RSTP topology.
- C. The local device is the root bridge for this RSTP topology.
- D. The root bridge is using a bridge priority of 4k.
Answer: D
Explanation:
The "Root ID" shows 4096.00:19:e2:55:36:1e. The first part of this ID, 4096, is the bridge priority of the root bridge.
The local bridge ID is shown as 32768.00:19:e2:55:1d:30, indicating that the local device has a default bridge priority of 32768, which is higher (and thus less preferred) than 4096.
Thus, the root bridge has a priority of 4096, and the local device is not the root bridge. The local device is participating in the RSTP topology and has identified another bridge as the root.
NEW QUESTION # 73
Which two actions are performed by the firewall filter shown in the exhibit? (Choose two.)
- A. All traffic is permitted.
- B. Frames without the 88:05:00:29:3c:de source MAC address are discarded and logged.
- C. Term two requires a from statement.
- D. Frames with the 88:05:00:29:3c:de source MAC address are accepted and logged.
Answer: A,D
Explanation:
References:
* Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks
* Enterprise Routing and Switching, Specialist (JNCIS-ENT) - Juniper Networks
* Juniper Networks Certified Specialist, Enterprise Routing & Switching ...
* Juniper Networks Certified Specialist, Enterprise Routing & Switching ...
* [Configuring Layer 2 Firewall Filters - TechLibrary - Juniper Networks]
* [Understanding Firewall Filter Terms - TechLibrary - Juniper Networks]
NEW QUESTION # 74
Which statement is correct about the IS-IS ISO NET address?
- A. An ISO NET address defined with a system ID of 0000.0000.0000 must be selected as the DIS.
- B. You can only define a single ISO NET address per device.
- C. An ISO NET address must be unique for each device in the network.
- D. The Area ID must match on all devices within a L2 area.
Answer: C
Explanation:
An ISO NET address is a type of network address used by the IS-IS routing protocol. It identifies a point of connection to the network, such as a router interface, and is also called a Network Service Access Point (NSAP).
An ISO NET address consists of three parts: an area ID, a system ID, and a selector. The area ID identifies the IS-IS area to which the device belongs. The system ID uniquely identifies the device within the area. The selector identifies a specific service or function on the device, such as routing or management.
An ISO NET address must be unique for each device in the network, because it is used by IS-IS to establish adjacencies, exchange routing information, and compute shortest paths. If two devices have the same ISO NET address, they will not be able to communicate with each other or with other devices in the network. Therefore, it is important to assign different ISO NET addresses to each device in the network.
NEW QUESTION # 75
R1 was started at 4:00 PM. R2 and R3 were started at 6:00 PM. R4 was started at 10:00 PM. All routers are in Area 0 and there are no point-to-point links.
Referring to the exhibit, which router is the designated router?
- A. R1
- B. R3
- C. R2
- D. R4
Answer: A
NEW QUESTION # 76
Which two statements are correct about tunnels? (Choose two.)
- A. IP-IP tunnels are stateful.
- B. Tunnel endpoints must have a valid route to the remote tunnel endpoint.
- C. BFD cannot be used to monitor tunnels.
- D. Tunnels add additional overhead to packet size.
Answer: B,D
Explanation:
Explanation
A tunnel is a connection between two computer networks, in which data is sent from one network to another through an encrypted link. Tunnels are commonly used to secure data communications between two networks or to connect two networks that use different protocols.
Option B is correct, because tunnel endpoints must have a valid route to the remote tunnel endpoint. A tunnel endpoint is the device that initiates or terminates a tunnel connection. For a tunnel to be established, both endpoints must be able to reach each other over the underlying network. This means that they must have a valid route to the IP address of the remote endpoint1.
Option D is correct, because tunnels add additional overhead to packet size. Tunnels work by encapsulating packets: wrapping packets inside of other packets. This means that the original packet becomes the payload of the surrounding packet, and the surrounding packet has its own header and trailer. The header and trailer of the surrounding packet add extra bytes to the packet size, which is called overhead. Overhead can reduce the efficiency and performance of a network, as it consumes more bandwidth and processing power2.
Option A is incorrect, because BFD can be used to monitor tunnels. BFD is a protocol that can be used to quickly detect failures in the forwarding path between two adjacent routers or switches. BFD can be integrated with various routing protocols and link aggregation protocols to provide faster convergence and fault recovery.
BFD can also be used to monitor the connectivity of tunnels, such as GRE, IPsec, or MPLS.
Option C is incorrect, because IP-IP tunnels are stateless. IP-IP tunnels are a type of tunnels that use IP as both the encapsulating and encapsulated protocol. IP-IP tunnels are simple and easy to configure, but they do not provide any security or authentication features. IP-IP tunnels are stateless, which means that they do not keep track of the state or status of the tunnel connection. Stateless tunnels do not require any signaling or negotiation between the endpoints, but they also do not provide any error detection or recovery mechanisms.
References:
1: What is Tunneling? | Tunneling in Networking 2: What Is Tunnel In Networking, Its Types, And Its Benefits? : [Configuring Bidirectional Forwarding Detection] : [IP-IP Tunneling]
NEW QUESTION # 77
Which two statements are correct about using firewall filters on EX Series switches? (Choose two.)
- A. You can deploy both stateless and stateful firewall filters on an EX Series switch.
- B. You can deploy only stateless firewall filters on an EX Series switch.
- C. You can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch.
- D. You can only apply firewall filters to Layer 2 traffic on an EX Series switch.
Answer: B,C
Explanation:
A is correct because you can deploy only stateless firewall filters on an EX Series switch. A stateless firewall filter is a filter that evaluates each packet individually based on the header information, such as source and destination addresses, protocol, and port numbers. A stateless firewall filter does not keep track of the state or context of a packet flow, such as the sequence number, flags, or session information. EX Series switches support only stateless firewall filters, which are also called access control lists (ACLs) or packet filters.
C is correct because you can apply firewall filters to both Layer 2 and Layer 3 traffic on an EX Series switch. Layer 2 traffic is traffic that is switched within a VLAN or a bridge domain, while Layer 3 traffic is traffic that is routed between VLANs or networks. EX Series switches support three types of firewall filters: port (Layer 2) firewall filters, VLAN firewall filters, and router (Layer
3) firewall filters. You can apply these filters to different interfaces and directions to control the traffic entering or exiting the switch.
NEW QUESTION # 78
The ISP1.inet.0 route table has currently no routes in it.
What will happen when you commit the configuration shown on the exhibit?
- A. The ISP1.inet.0 route table will be completely overwritten by the inet.0 route table.
- B. The inet.0 route table will be completely overwritten by the ISP1.inet.0 route table.
- C. The ISP1.inet.0 route table will be imported into the inet.0 route table.
- D. The inet.0 route table will be imported into the ISP1.inet.0 route table.
Answer: D
Explanation:
The configuration shown in the exhibit is an example of a routing instance of type virtual-router. A routing instance is a collection of routing tables, interfaces, and routing protocol parameters that create a separate routing domain on a Juniper device. A virtual-router routing instance allows administrators to divide a device into multiple independent virtual routers, each with its own routing table.
The configuration also includes a rib-group statement, which is used to import routes from one routing table to another. A rib-group consists of an import-rib statement, which specifies the source routing table, and an export-rib statement, which specifies the destination routing table. In this case, the rib-group name is inet-to-ispi, and the import-rib statement specifies inet.0 as the source routing table. The export-rib statement specifies ispi.inet.0 as the destination routing table.
This means that the routes from inet.0 will be imported into ispi.inet.0.
NEW QUESTION # 79
You are receiving the BGP route shown in the exhibit from four different upstream ISPs.
Referring to the exhibit, which ISP will be selected as the active path?
- A. ISP 3
- B. ISP 4
- C. ISP 1
- D. ISP 2
Answer: B
Explanation:
In BGP, the path selection process is based on a set of attributes. The process starts by preferring the path with the highest weight, then the highest local preference, then the locally originated routes, and so on. If all these attributes are the same, then it prefers the path with the shortest AS path.
Referring to the exhibit, all four ISPs have the same weight, local preference, and origin.
However, ISP 4 has the shortest AS path. Therefore, ISP 4 will be selected as the active path.
So, option C is correct.
NEW QUESTION # 80
Exhibit
Your BGP neighbors, one in the USA and one in France, are not establishing a connection with each other.
Referring to the exhibit, which statement is correct?
- A. The BFD liveness is set too high.
- B. The BFD liveness must be configured on the BGP neighbor.
- C. The BFD liveness must be configured on the BGP group.
- D. The BFD liveness is set too low.
Answer: B
Explanation:
* The exhibit shows the configuration of BFD liveness detection for BGP at the global level, which applies to all BGP neighbors by default 1 . However, this configuration does not specify the session mode, which determines whether BFD uses single-hop or multihop mode to communicate with a neighbor 2 .
* For single-hop BGP neighbors, which are directly connected on the same subnet, the session mode can be either automatic or single-hop. For multihop BGP neighbors, which are not directly connected and require multiple hops to reach, the session mode must be multihop 2 .
* Since your BGP neighbors are in different countries, they are likely to be multihop neighbors. Therefore, you need to configure the session mode as multihop for each neighbor individually at the [edit protocols bgp group group-name neighbor address bfd-liveness-detection] hierarchy level 2 . For example:
protocols { bgp { group usa { neighbor 192.0.2.1 { bfd-liveness-detection { session-mode multihop; } } } group france { neighbor 198.51.100.1 { bfd-liveness-detection { session-mode multihop; } } } } }
* If you do not configure the session mode for multihop neighbors, BFD will use the default mode of automatic, which will try to use single-hop mode and fail to establish a BFD session with the remote neighbor 2 . This will prevent BGP from using BFD to detect liveliness and failover.
* Therefore, the answer B is correct, as you need to configure the BFD liveness detection on the BGP neighbor level with the appropriate session mode for multihop neighbors.
NEW QUESTION # 81
Which two statements about redundant trunk groups on EX Series switches are correct? (Choose two.)
- A. Redundant trunk groups load balance traffic across two designated uplink interfaces.
- B. Redundant trunk groups use spanning tree to provide loop-free redundant uplinks.
- C. If the active link fails, then the secondary link automatically takes over.
- D. Layer 2 control traffic is permitted on the secondary link.
Answer: C,D
Explanation:
Redundant trunk groups are designed to provide link redundancy. If the primary link fails, the secondary link will automatically take over to ensure continued connectivity.
In redundant trunk groups, while regular data traffic is sent over the primary link, Layer 2 control traffic (such as STP, LACP, etc.) is allowed on the secondary link to maintain network stability and protocol operations.
https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic- map/redundant-trunk-groups.html
NEW QUESTION # 82
Which two statements are correct about link aggregation? (Choose two.)
- A. IP traffic is hashed using source and destination MAC addresses.
- B. LAGs provide physical layer redundancy.
- C. Member links must use the same MTU.
- D. All RE-generated traffic traverses the lowest member link.
Answer: B,C
NEW QUESTION # 83
Exhibit
Your BGP neighbors, one in the USA and one in France, are not establishing a connection with each other.
Referring to the exhibit, which statement is correct?
- A. The BFD liveness is set too high.
- B. The BFD liveness must be configured on the BGP neighbor.
- C. The BFD liveness must be configured on the BGP group.
- D. The BFD liveness is set too low.
Answer: B
Explanation:
Explanation
The exhibit shows the configuration of BFD liveness detection for BGP at the global level, which applies to all BGP neighbors by default1. However, this configuration does not specify the session mode, which determines whether BFD uses single-hop or multihop mode to communicate with a neighbor2.
For single-hop BGP neighbors, which are directly connected on the same subnet, the session mode can be either automatic or single-hop. For multihop BGPneighbors, which are not directly connected and require multiple hops to reach, the session mode must be multihop2.
Since your BGP neighbors are in different countries, they are likely to be multihop neighbors. Therefore, you need to configure the session mode as multihop for each neighbor individually at the [edit protocols bgp group group-name neighbor address bfd-liveness-detection] hierarchy level2. For example:
protocols { bgp { group usa { neighbor 192.0.2.1 { bfd-liveness-detection { session-mode multihop; } } } group france { neighbor 198.51.100.1 { bfd-liveness-detection { session-mode multihop; } } } } } If you do not configure the session mode for multihop neighbors, BFD will use the default mode of automatic, which will try to use single-hop mode and fail to establish a BFD session with the remote neighbor2. This will prevent BGP from using BFD to detect liveliness and failover.
Therefore, the answer B is correct, as you need to configure the BFD liveness detection on the BGP neighbor level with the appropriate session mode for multihop neighbors.
NEW QUESTION # 84
Which two statements about BGP facilitate the prevention of routing loops between two autonomous systems?
(Choose two.)
- A. EBGP routers will drop routes that contain their own AS number in the AS_PATH
- B. EBGP routers will append their AS number when advertising routes to their neighbors.
- C. EBGP routers will only accept routes that contain their own AS number in the AS_PATH.
- D. EBGP routers will prepend their AS number when advertising routes to their neighbors
Answer: A,B
Explanation:
Explanation
BGP (Border Gateway Protocol) is a protocol designed to exchange routing and reachability information among autonomous systems (AS) on the internet1.
Option A is correct. When an EBGP router advertises routes to its neighbors, it appends its AS number to the AS_PATH attribute1. This is a key mechanism in BGP to prevent routing loops1.
Option C is correct. BGP has a built-in loop prevention mechanism whereby if a BGP router detects its own AS in the AS_PATH attribute, it will drop the prefix and will not continue to advertise it2. This helps to prevent routing loops2.
Option B is incorrect. EBGP routers do not accept routes that contain their own AS number in the AS_PATH2. Instead, they drop such routes as part of the loop prevention mechanism2.
Option D is incorrect. While it's true that EBGP routers append their AS number when advertising routes, they do not prepend their AS number1. The term "prepend" in BGP usually refers to a technique used to influence path selection by artificially lengthening the AS_PATH3.
NEW QUESTION # 85
Exhibit
You are troubleshooting an issue where traffic to 192.168.10.0/24 is being sent to R1 instead of your desired path through R2.
Referring to the exhibit, what is the reason for the problem?
- A. R2's route is not the best path due to a lower origin code.
- B. R2's route is not the best path due to loop prevention.
- C. R1's route is the best path due to a higher local preference
- D. R1's route is the best path due to the shorter AS path.
Answer: C
Explanation:
The exhibit shows the output of the command show ip bgp, which displays information about the BGP routes in the routing table1. The output shows two routes for the destination 192.168.10.0/24, one from R1 and one from R2.
The route from R1 has a local preference of 200, while the route from R2 has a local preference of
100. Local preference is a BGP attribute that indicates the degree of preference for a route within an autonomous system (AS)2. A higher local preference means a more preferred route2.
BGP uses a best path selection algorithm to choose the best route for each destination among multiple paths. The algorithm compares different attributes of the routes in a specific order of precedence3. The first attribute that is compared is weight, which is a Cisco-specific attribute that is local to the router3. If the weight is equal or not set, the next attribute that is compared is local preference3.
In this case, both routes have the same weight of 0, which means that they are learned from external BGP (eBGP) peers3. Therefore, the next attribute that is compared is local preference. Since R1's route has a higher local preference than R2's route, it is chosen as the best path and installed in the routing table3. The other attributes, such as origin code and AS path, are not considered in this case.
NEW QUESTION # 86
An update to your organization's network security requirements document requires management traffic to be isolated in a non-default routing-instance. You want to implement this requirement on your Junos-based devices.
Which two commands enable this behavior? (Choose two.)
- A. set system management--instance
- B. set routing--instances mgmt_junos
- C. set routing--instances mgmtjunoa interface ge-0/0/0.0
- D. set routing--instances mgmt_junos interface em1
Answer: A,B
Explanation:
To isolate management traffic in a non-default routing-instance on Junos-based devices, you can use the set system management-instance and set routing-instances mgmt_junos commands. set system management-instance: This command associates the management interface (usually named fxp0 or em0 for Junos OS, or re0:mgmt-* or re1:mgmt-* for Junos OS Evolved) with the non- default virtual routing and forwarding (VRF) instance. After you configure the non-default management VRF instance, management traffic no longer has to share a routing table with other control traffic or protocol traffic.
set routing-instances mgmt_junos: This command creates a new routing instance named mgmt_junos. The name of the dedicated management VRF instance is reserved and hardcoded as mgmt_junos; you cannot configure any other routing instance by the name mgmt_junos.
Therefore, options C and D are correct. Options A and B are not correct because they attempt to assign an interface to the mgmt_junos routing instance, which is not necessary for isolating management traffic.
NEW QUESTION # 87
Exhibit.
What is the management IP address of the device shown in the exhibit?
- A. 128.0.0.1
- B. 10.210.20.233
- C. 172.23.11.10
- D. 172.23.12.100
Answer: B
NEW QUESTION # 88
You are configuring an IS-IS IGP network and do not see the IS-IS adjacencies established. In this scenario, what are two reasons for this problem? (Choose two.)
- A. MTU is not at least 1492 bytes.
- B. The Level 2 routers have mismatched areas.
- C. IP subnets are not a /30 address.
- D. The lo0 interface is not included as an IS-IS interface.
Answer: A,D
Explanation:
Option A suggests that the MTU is not at least 1492 bytes. This is correct because IS-IS requires a minimum MTU of 1492 bytes to establish adjacencies. If the MTU is less than this, IS-IS adjacencies will not be established.
Option D suggests that the lo0 interface is not included as an IS-IS interface. This is also correct because the loopback interface (lo0) is typically used as the router ID in IS-IS. If the loopback interface is not included in IS-IS, it could prevent IS-IS adjacencies from being established.
NEW QUESTION # 89
......
Juniper JN0-351 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
Prepare for the Actual JNCIS-ENT JN0-351 Exam Practice Materials Collection: https://testking.itexamsimulator.com/JN0-351-brain-dumps.html
