Question No. 1

Exhibit.

You want to enable redundancy for the EBGP peering between the two routers shown in the exhibit. Which three actions will you perform in this scenario? (Choose three.)

AConfigure BGP multihop.

BConfigure loopback interface peering.

CConfigure routes for the peer loopback interface IP addresses.

DConfigure an MD5 peer authentication.

EConfigure a cluster ID.

Show Answer

Correct Answer: A, B, C

Ais correct because you need to configure BGP multihop to enable redundancy for the EBGP peering between the two routers.BGP multihop is a feature that allows BGP peers to establish a session over multiple hops, instead of requiring them to be directly connected1.By default, EBGP peers use a time-to-live (TTL) value of 1 for their packets, which means that they can only reach adjacent neighbors1.However, if you configure BGP multihop with a higher TTL value, you can allow EBGP peers to communicate over multiple routers in between1. This can provide redundancy in case of a link failure or a router failure between the EBGP peers.

Bis correct because you need to configure loopback interface peering to enable redundancy for the EBGP peering between the two routers.Loopback interface peering is a technique that uses loopback interfaces as the source and destination addresses for BGP sessions, instead of physical interfaces2.Loopback interfaces are virtual interfaces that are always up and reachable as long as the router is operational2.By using loopback interface peering, you can avoid the dependency on a single physical interface or link for the BGP session, and use multiple paths to reach the loopback address of the peer2. This can provide redundancy and load balancing for the EBGP peering.

Cis correct because you need to configure routes for the peer loopback interface IP addresses to enable redundancy for the EBGP peering between the two routers.Routes for the peer loopback interface IP addresses are necessary to ensure that the routers can reach each other's loopback addresses over multiple hops2.You can use static routes or dynamic routing protocols to advertise and learn the routes for the peer loopback interface IP addresses2. Without these routes, the routers will not be able to establish or maintain the BGP session using their loopback interfaces.

Question No. 2

Which two types of tunnels are able to be created on all Junos devices? (Choose two.)

ASTP

BGRE

CIP-IP

DIPsec

Show Answer

Correct Answer: B, D

Junos devices support various types of tunnels for different purposes12.

Option B is correct.Generic Routing Encapsulation (GRE) is a tunneling protocol that can encapsulate a wide variety of network layer protocols inside virtual point-to-point links over an Internet Protocol network1.Junos devices support GRE tunnels1.

Option D is correct.IPsec (Internet Protocol Security) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session1.Junos devices support IPsec tunnels1.

Option A is incorrect. Spanning Tree Protocol (STP) is not a type of tunnel.It's a network protocol designed to prevent loops in a bridged Ethernet local area network2.

Option C is incorrect.While Junos devices do support IP-IP (also known as IP tunneling), it's not supported on all Junos devices1.

Question No. 3

You have two OSPF routers forming an adjacency. R1 has a priority of 32 and a router ID of 192.168.1.2. R2 has a priority of 64 and a router ID of 192.168.1.1. The routers were started at the same time and all other OSPF settings are the default settings.

Which statement is correct in this scenario?

AAt least three routers are required for a DR/BDR election

BRouter IDs must match for an adjacency to form.

CR2 will be the BDR.

DR1 will be the BDR.

Show Answer

Correct Answer: D

In OSPF, the Designated Router (DR) and Backup Designated Router (BDR) are elected based on the priority of the routers1.The router with the highest priority becomes the DR, and the router with the second highest priority becomes the BDR1.If there is a tie in priority, then the router with the highest Router ID is chosen1.

In this scenario, R2 has a higher priority (64) than R1 (32), so R2 will become the DR1.Since R1 has the second highest priority, it will become the BDR1. Therefore, option D is correct.

Question No. 4

You are asked to create a new firewall filter to evaluate Layer 3 traffic that is being sent between VLANs. In this scenario, which two statements are correct? (Choose two.)

AYou should create a family Ethernet-switching firewall filter with the appropriate match criteria and actions.

BYou should apply the firewall filter to the appropriate VLAN.

CYou should create a family inet firewall filter with the appropriate match criteria and actions.

DYou should apply the firewall filter to the appropriate IRB interface.

Show Answer

Correct Answer: C, D

A firewall filter is a configuration that defines the rules that determine whether to forward or discard packets at specific processing points in the packet flow. A firewall filter can also modify the attributes of the packets, such as priority, marking, or logging.A firewall filter can be applied to various interfaces, protocols, or routing instances on a Juniper device1.

A firewall filter has a family attribute, which specifies the type of traffic that the filter can evaluate.The family attribute can be one of the following: inet, inet6, mpls, vpls, iso, or ethernet-switching2. The family inet firewall filter is used to evaluate IPv4 traffic, which is the most common type of Layer 3 traffic on a network.

To create a family inet firewall filter, you need to specify the appropriate match criteria and actions for each term in the filter. The match criteria can include various fields in the IPv4 header, such as source address, destination address, protocol, port number, or DSCP value.The actions can include accept, discard, reject, count, log, policer, or next term3.

To apply a firewall filter to Layer 3 traffic that is being sent between VLANs, you need to apply the filter to the appropriate IRB interface. An IRB interface is an integrated routing and bridging interface that provides Layer 3 functionality for a VLAN on a Juniper device. An IRB interface has an IP address that acts as the default gateway for the hosts in the VLAN.An IRB interface can also participate in routing protocols and forward packets to other VLANs or networks4.

Therefore, option C is correct, because you should create a family inet firewall filter with the appropriate match criteria and actions. Option D is correct, because you should apply the firewall filter to the appropriate IRB interface.

Option A is incorrect, because you should not create a family ethernet-switching firewall filter with the appropriate match criteria and actions. A family ethernet-switching firewall filter is used to evaluate Layer 2 traffic on a Juniper device.A family ethernet-switching firewall filter can only match on MAC addresses or VLAN IDs, not on IP addresses or protocols5.

Option B is incorrect, because you should not apply the firewall filter to the appropriate VLAN. A VLAN is a logical grouping of hosts that share the same broadcast domain on a Layer 2 network. A VLAN does not have an IP address or routing capability.A firewall filter cannot be applied directly to a VLAN; it must be applied to an interface that belongs to or connects to the VLAN6.

1:Firewall Filters Overview2:Configuring Firewall Filters3:Configuring Firewall Filter Match Conditions and Actions4:Understanding Integrated Routing and Bridging Interfaces5: Configuring Ethernet-Switching Firewall Filters6: Understanding VLANs

Question No. 5

Which two mechanisms are part of building and maintaining a Layer 2 bridge table? (Choose two.)

Ablocking

Bflooding

Clearning

Dlistening

Show Answer

Correct Answer: B, C

Option B is correct.Flooding is a mechanism used in Layer 2 bridging where the switch sends incoming packets to all its ports except for the port where the packet originated1.This is done when the switch doesn't know the destination MAC address or when the packet is a broadcast or multicast1.