[Free] Download New Latest (November) Juniper JN0-350 Actual Tests Topic 1 part 03

Ensurepass

QUESTION 95  (Topic 1)

 

Your router is under a denial-of-service attack, you apply a firewall filter to lo0 to silently drop the packets. Which firewall filter action enables you to achieve this?

 

A.

deny

B.

reject

C.

discard

D.

blackhole

 

Answer: C

 

 

 

 

 

QUESTION 96  (Topic 1)

 

You need to transport sensitive financial data between a branch office and headquarters. Which connectivity option provides optimum security?

 

A.

GRE tunnel

B.

IPSec tunnel

C.

Frame Relay

D.

MPLS Layer 2 VPN

 

Answer: B

 

 

QUESTION 97  (Topic 1)

 

You are using an ISP provided Layer 3 MPLS VPN solution for remote connectivity. Which BA classification options do you use for traffic coming from the provider? (Choose two.)

 

A.

EXP bits

B.

DSCP bits

C.

source IP address

D.

IP precedence bits

 

Answer: BD

 

 

QUESTION 98  (Topic 1)

 

Click the Exhibit button.

 

In the exhibit, what is the correct internal BGP configuration for router 192.168.1.6 in order to peer with 192.168.1.3 using loopback addresses?

 

 

 

 

 

clip_image002

 

A.

[edit protocols]

User@Router6#show

bgp {

group internal-peers {

type internal;

peer-as 65000;

neighbor 192.168.1.3;

}

B.

[edit protocols]

User@Router6#show

bgp {

group internal-peers {

type internal;

local-address 192.168.1.6;

neighbor 192.168.1.3 {

multihop {

ttl 2;

}

C.

[edit protocols]

User@Router6#show

bgp {

group internal-peers {

type internal;

local-address 192.168.1.6;

neighbor 192.168.1.3;

}

D.

[edit protocols]

User@Router6#show

bgp {

group internal-peers {

local-address 192.168.1.6;

neighbor 192.168.1.3;

 

 

 

 

}

 

Answer: C

 

 

QUESTION 99  (Topic 1)

 

How can you perform a debug on a Juniper enterprise router?

 

A.

Use traceoptions.

B.

Use the debug command.

C.

Use the show debug information.

D.

JUNOS does not have a debug command.

 

Answer: A

 

 

QUESTION 100  (Topic 1)

 

You have enabled traceoptions for IKE using the configuration command set services ipsec-vpn traceoptions flag ike. Which command will display the resulting IKE logs?

 

A.

show log ike

B.

show log kmd

C.

show log messages

D.

show log ipsec-vpn

 

Answer: B

 

 

QUESTION 101  (Topic 1)

 

When you contact JTAC for a troubleshooting problem, which two commands will provide important information about the router’s hardware and software? (Choose two.)

 

A.

show version

B.

show system coredump

C.

show chassis hardware

D.

show system statistics

 

Answer: AC

 

 

 

 

 

QUESTION 102  (Topic 1)

 

Which statement is true about next-hop-style and interface-style service sets for IPSec VPNs?

 

A.

For data encryption you must use interface-style sets.

B.

Both sets support routing protocols directly over IPSec.

C.

Only interface-style supports multicast traffic directly over IPSec.

D.

Only interface-style supports IPSec-over-GRE with the same tunnel endpoints.

 

Answer: D

 

 

QUESTION 103  (Topic 1)

 

You are troubleshooting a CoS problem for packets transitioning the router. What are two useful actions? (Choose two.)

 

A.

Use show interfaces queue to look for policed traffic.

B.

Use show interfaces queue to look for dropped traffic.

C.

Use monitor traffic to look for BA markings in the header of outgoing packets.

D.

Use a firewall filter to check the IP precedence of incoming packets and the rewrite results for outgoing packets.

 

Answer: BD

 

 

QUESTION 104  (Topic 1)

 

What is the primary reason for configuring a multi area OSPF network?

 

A.

to reduce the possibility of creating a routing loop

B.

to reduce the number of routers in the backbone area

C.

to allow external OSPF routes to be advertised to all areas

D.

to allow scalability by reducing the size of the OSPF database

 

Answer: D

 

Free VCE & PDF File for Juniper JN0-350 Actual Tests

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

This entry was posted in JN0-350 Actual Tests (November) and tagged , , , , , , . Bookmark the permalink.