Real Juniper JN0-664 Exam Dumps with Correct 67 Questions and Answers [Q29-Q53]

Q29. Which two statements describe PIM-SM? (Choose two)

Routers with receivers send join messages to their upstream neighbors.

Routers without receivers must periodically prune themselves from the SPT.

Traffic is initially flooded to all routers and an S,G is maintained for each group

Traffic is only forwarded to routers that request to join the distribution tree.

Q30. Exhibit

You want to implement the BGP Generalized TTL Security Mechanism (GTSM) on the network Which three statements are correct in this scenario? (Choose three)

You can implement BGP GTSM between R2, R3, and R4

BGP GTSM requires a firewall filter to discard packets with incorrect TTL.

You can implement BGP GTSM between R2 and R1.

BGP GTSM requires a TTL of 1 to be configured between neighbors.

BGP GTSM requires a TTL of 255 to be configured between neighbors.

Explanation
BGP GTSM is a technique that protects a BGP session by comparing the TTL value in the IP header of incoming BGP packets against a valid TTL range. If the TTL value is within the valid TTL range, the packet is accepted. If not, the packet is discarded. The valid TTL range is from 255 – the configured hop count + 1 to
255. When GTSM is configured, the BGP packets sent by the device have a TTL of 255. GTSM provides best protection for directly connected EBGP sessions, but not for multihop EBGP or IBGP sessions because the TTL of packets might be modified by intermediate devices.
In the exhibit, we can see that R2, R3, and R4 are in the same AS (AS 20) and R1 is in a different AS (AS 10).
Based on this information, we can infer the following statements:
* You can implement BGP GTSM between R2, R3, and R4. This is not correct because R2, R3, and R4 are IBGP peers and GTSM does not provide effective protection for IBGP sessions. The TTL of packets between IBGP peers might be changed by intermediate devices or routing protocols.
* BGP GTSM requires a firewall filter to discard packets with incorrect TTL. This is not correct because BGP GTSM does not require a firewall filter to discard packets with incorrect TTL. BGP GTSM uses TCP option 19 to negotiate GTSM capability between peers and uses TCP option 20 to carry the expected TTL value in each packet. The receiver checks the expected TTL value against the actual TTL value and discards packets with incorrect TTL values.
* You can implement BGP GTSM between R2 and R1. This is correct because R2 and R1 are EBGP peers and GTSM provides effective protection for directly connected EBGP sessions. The TTL of packets between directly connected EBGP peers is not changed by intermediate devices or routing protocols.
* BGP GTSM requires a TTL of 1 to be configured between neighbors. This is not correct because BGP GTSM requires a TTL of 255 to be configured between neighbors. The sender sets the TTL of packets to 255 and the receiver expects the TTL of packets to be 255 minus the configured hop count.
* BGP GTSM requires a TTL of 255 to be configured between neighbors. This is correct because BGP GTSM requires a TTL of 255 to be configured between neighbors. The sender sets the TTL of packets to 255 and the receiver expects the TTL of packets to be 255 minus the configured hop count.

Q31. An interface is configured with a behavior aggregate classifier and a multifield classifier How will the packet be processed when received on this interface?

The packet will be discarded.

The packet will be processed by the BA classifier first, then the MF classifier.

The packet will be forwarded with no classification changes.

The packet will be processed by the MF classifier first, then the BA classifier.

Explanation
behavior aggregate (BA) classifiers and multifield (MF) classifiers are two types of classifiers that are used to assign packets to a forwarding class and a loss priority based on different criteria. The forwarding class determines the output queue for a packet. The loss priority is used by a scheduler to control packet discard during periods of congestion.
A BA classifier maps packets to a forwarding class and a loss priority based on a fixed-length field in the packet header, such as DSCP, IP precedence, MPLS EXP, or IEEE 802.1p CoS bits. A BA classifier is computationally efficient and suitable for core devices that handle high traffic volumes. A BA classifier is useful if the traffic comes from a trusted source and the CoS value in the packet header is trusted.
An MF classifier maps packets to a forwarding class and a loss priority based on multiple fields in the packet header, such as source address, destination address, protocol type, port number, or VLAN ID. An MF classifier is more flexible and granular than a BA classifier and can match packets based on complex filter rules. An MF classifier is suitable for edge devices that need to classify traffic from untrusted sources or rewrite packet headers.
You can configure both a BA classifier and an MF classifier on an interface. If you do this, the BA classification is performed first and then the MF classification. If the two classification results conflict, the MF classification result overrides the BA classification result.
Based on this information, we can infer the following statements:
* The packet will be discarded. This is not correct because the packet will not be discarded by the classifiers unless it matches a filter rule that specifies discard as an action. The classifiers only assign packets to a forwarding class and a loss priority based on their match criteria.
* The packet will be processed by the BA classifier first, then the MF classifier. This is correct because if both a BA classifier and an MF classifier are configured on an interface, the BA classification is performed first and then the MF classification. If they conflict, the MF classification result overrides the BA classification result.
* The packet will be forwarded with no classification changes. This is not correct because the packet will be classified by both the BA classifier and the MF classifier if they are configured on an interface. The final classification result will determine which output queue and which discard policy will be applied to the packet.
* The packet will be processed by the MF classifier first, then the BA classifier. This is not correct because if both a BA classifier and an MF classifier are configured on an interface, the BA classification is performed first and then the MF classification. If they conflict, the MF classification result overrides the BA classification result.

Q32. Which statement is true regarding BGP FlowSpec?

It uses a remote triggered black hole to protect a network from a denial-of-service attack.

It uses dynamically created routing policies to protect a network from denial-of-service attacks

It is used to protect a network from denial-of-service attacks dynamically

It verifies that the source IP of the incoming packet has a resolvable route in the routing table

Q33. Which origin code is preferred by BGP?

Internal

External

Incomplete

Null

Q34. Which two statements are correct about reflecting inet-vpn unicast prefixes in BGP route reflection? (Choose two.)

A BGP peer does not require any configuration changes to become a route reflector client.

Route reflectors do not change any existing BGP attributes by default when advertising routes.

Route reflectors add their cluster ID to the AS path when readvertising client routes.

Clients add their originator ID when advertising routes to their route reflector

Q35. Exhibit

A network designer would like to create a summary route as shown in the exhibit, but the configuration is not working.
Which three configuration changes will create a summary route? (Choose three.)

set policy-options policy-statement leak-v6 term DC-routes then reject

delete policy-options policy-statement leak-v6 term DC-routes from route-filter 2001: db9 :a: fa00 : :/6l longer

set policy-options policy-statement leak-v6 term DC-routes from route-filter 2001:db9:a:faOO::/61 exact

delete protocols isis export summary-v6

set protocols isis import summary-v6

Q36. Which three mechanisms are used by Junos platforms to evaluate incoming traffic for CoS purposes? (Choose three )

rewrite rules

behavior aggregate classifiers

traffic shapers

fixed classifiers

multifield classifiers

Q37. Exhibit

You want Site 1 to access three VLANs that are located in Site 2 and Site 3 The customer-facing interface on the PE-1 router is configured for Ethernet-VLAN encapsulation.
What is the minimum number of L2VPN routing instances to be configured to accomplish this task?

1

3

2

6

Q38. Exhibit

Referring to the exhibit, a working L3VPN exists that connects VPN-A sites CoS is configured correctly to match on the MPLS EXP bits of the LSP, but when traffic is sent from Site-1 to Site-2, PE-2 is not classifying the traffic correctly What should you do to solve the problem?

Configure the explicit-null statement on PE-1.

Configure the explicit-null statement on PE-2

Configure VPN prefix mapping for the PE-1_to_PE-2 LSP

Set a static CoS value for the PE-1_to_PE-2 LSP

Q39. When building an interprovider VPN, you notice on the PE router that you have hidden routes which are received from your BGP peer with family inet labeled-unica3t configured.
Which parameter must you configure to solve this problem?

Under the family inet labeled-unicast hierarchy, add the explicit null parameter.

Under the protocols ospf hierarchy, add the traffic-engineering parameter.

Under the family inet labeled-unicast hierarchy, add the resolve-vpn parameter.

Under the protocols mpls hierarchy, add the traffic-engineering parameter

Q40. You are asked to protect your company’s customers from amplification attacks. In this scenario, what is Juniper’s recommended protection method?

ASN prepending

BGP FlowSpec

destination-based Remote Triggered Black Hole

unicast Reverse Path Forwarding

Q41. You want to ensure that L1 IS-IS routers have only the most specific routes available from L2 IS-IS routers.
Which action accomplishes this task?

Configure the ignore-attached-bit parameter on all L2 routers.

Configure all routers to allow wide metrics.

Configure all routers to be L1.

Configure the ignore-attached-bit parameter on all L1 routers

Q42. By default, which statement is correct about OSPF summary LSAs?

All Type 2 and Type 7 LSAs will be summanzed into a single Type 5 LSA

The area-range command must be installed on all routers.

Type 3 LSAs are advertised for routes in Type 1 LSAs.

The metric associated with a summary route will be equal to the lowest metric associated with an individual contributing route

Q43. Which two statements are correct regarding bootstrap messages that are forwarded within a PIM sparse mode domain? (Choose two.)

Bootstrap messages are forwarded only to routers that explicitly requested the messages within the PIM sparse-mode domain

Bootstrap messages distribute RP information dynamically during an RP election.

Bootstrap messages are used to notify which router is the PIM RP

Bootstrap messages are forwarded to all routers within a PIM sparse-mode domain.

Q44. Exhibit

R4 is directly connected to both RPs (R2 and R3) R4 is currently sending all ,o,ns upstream to R3 but you want all joins to go to R2 instead Referring to the exhibit, which configuration change will solve this issue?

Change the bootstrap priority on R2 to be higher than R3

Change the default route in inet.2 on R4 from R3 as the next hop to R2

Change the local address on R2 to be higher than R3.

Change the group-range to be more specific on R2 than R3.

Q45. Exhibit

You have MAC addresses moving in your EVPN environment
Referring to the exhibit, which two statements are correct about the sequence number? (Choose two)

It identifies MAC addresses that should be discarded.

It resolves conflicting MAC address ownership claims.

It helps the local PE to identify the latest advertisement.

It is advertised using a Type 2 message

Q46. Which two statements are correct about reflecting inet-vpn unicast prefixes in BGP route reflection? (Choose two.)

Route reflectors do not change any existing BGP attributes by default when advertising routes.

A BGP peer does not require any configuration changes to become a route reflector client.

Clients add their originator ID when advertising routes to their route reflector

Route reflectors add their cluster ID to the AS path when readvertising client routes.

Q47. Exhibit.

Referring to the exhibit; the 10.0.0.0/24 EBGP route is received on R5; however, the route is being hidden.
What are two solutions that will solve this problem? (Choose two.)

On R4, create a policy to change the BGP next hop to itself and apply it to IBGP as an export policy

Add the external interface prefix to the IGP routing tables

Add the internal interface prefix to the BGP routing tables.

On R4, create a policy to change the BGP next hop to 172.16.1.1 and apply it to IBGP as an export policy

Q48. Exhibit

Referring to the exhibit, PIM-SM is configured on all routers, and Anycast-RP with Anycast-PIM is used for the discovery mechanism on RP1 and RP2. The interface metric values are shown for the OSPF area.
In this scenario, which two statements are correct about which RP is used? (Choose two.)

Source2 will use RP2 and Received will use RP2 for group 224.2.2.2.

Source2 will use RP1 and Receiver2 will use RP1 for group 224.2.2.2.

Source1 will use RP1 and Receiver1 will use RP1 for group 224.1.1.1.

Source1 will use RP1 and Receiver1 will use RP2 for group 224.1 1 1

Q49. Which two statements are correct about a sham link? (Choose two.)

It creates an OSPF multihop neighborship between two PE routers.

It creates a BGP multihop neighborship between two PE routers.

The PEs exchange Type 1 OSPF LSAs instead of Type 3 OSPF LSAs for the L3VPN routes

The PEs exchange Type 3 OSPF LSAs instead of Type 1 OSPF LSAs for the L3VPN routes.

Q50. You are configuring a BGP signaled Layer 2 VPN across your MPLS enabled core network. In this scenario, which statement is correct?

You must assign a unique site number to each attached site’s configuration.

This type of VPN only supports Ethernet interfaces when connecting to CE devices.

This type of VPN requires the support of the inet-vpn NLRI on all core BGP devices

You must use the same route-distinguiaher value on both PE devices.

Q51. Which two statements about IS-IS are correct? (Choose two.)

PSNPs are flooded periodically.

PSNPs contain only descriptions of LSPs.

CSNPs are flooded periodically

CSNPs contain only descriptions of LSPs.

Q52. Exhibit

A network is using IS-IS for routing.
In this scenario, why are there two TLVs shown in the exhibit?

There are both narrow and wide metric devices in the topology

The interface specified a metric of 100 for L2.

Wide metrics have specifically been requested

Both IPv4 and IPv6 are being used in the topology

Q53. Exhibit

Which two statements are true about the OSPF adjacency displayed in the exhibit? (Choose two.)

There is a mismatch in the hello interval parameter between routers R1 and R2

There is a mismatch in the dead interval parameter between routers R1 and R2.

There is a mismatch in the OSPF hold timer parameter between routers R1 and R2.

There is a mismatch in the poll interval parameter between routers R1 and R2.

Leave a Reply Cancel reply