Aug-2023 Pass Your JN0-349 Exam at the First Try with 100% Real Exam
Get Real Exam Questions for JN0-349 with New Questions
The JNCIS-ENT certification is highly valued in the industry and is recognized by many organizations worldwide. It demonstrates the candidate's proficiency in Juniper Networks technology and is a valuable asset for network administrators who work with Juniper Networks equipment. Enterprise Routing and Switching, Specialist (JNCIS-ENT) certification also serves as a prerequisite for higher-level Juniper Networks certifications, such as the Juniper Networks Certified Professional Enterprise Routing and Switching (JNCIP-ENT) and the Juniper Networks Certified Expert Enterprise Routing and Switching (JNCIE-ENT).
NEW QUESTION # 55
Which two OSPF header fields must match to form an adjacency over a broadcast connection?
(Choose two.)
- A. Options
- B. Hello interval
- C. Router priority
- D. neighbor
Answer: A,B
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/ospf/topics/topic-map/ospf-
overview.html
NEW QUESTION # 56
Click the exhibit button.
Switch-1 in the exhibit receives a packet from User A with a destination MAC address of 00:26:88:02:74:47.
Which statement in this scenario is correct?
- A. Switch-1 sends the packet out ge-0/0/7, ge-0/0/8, and ge-0/0/9.
- B. Switch-1 sends the packet out ge-0/0/7 and ge-0/0/8.
- C. Switch-1 sends the packet out ge-0/0/6, ge-0/0/7, ge-0/0/8, and ge-0/0/9.
- D. Switch-1 sends the packet out ge-0/0/7 only.
Answer: D
NEW QUESTION # 57
Which statement is true about IP-IP tunnels?
- A. Intermediate devices must have a route to the destination address of the traffic being tunneled.
- B. Intermediate devices must have a route to the tunnel destination address but do not require a route to the tunnel source address.
- C. Intermediate devices must have a route to both the tunnel source address and the tunnel destination address.
- D. Intermediate devices must have a route to the tunnel source address but do not require a route to the tunnel destination address
Answer: C
Explanation:
Explanation
Routing is based on destination, not source; Only the route for the destination tunnel endpoint is necessary for each packet.If you're thinking about a lab environment with a single intermediary device, it's incidental that it will have a route for both tunnel endpoint IPs. Only the relevant destination will be considered with each packet it processes.
NEW QUESTION # 58
Your network is configured with dynamic ARP inspection (DAI) using the default parameters for all the DHCP and ARP related configurations. You just added a new device connected to a trunk port and configured it to obtain an IP address using DHCP.
Which two statements are correct in this scenario? (Choose two.)
- A. DHCP snooping adds the DHCP assigned IP address for the device to its database.
- B. The SRP request and response packets for the new device will bypass DAI.
- C. DAI validates the ARP packets for the new device against the DHCP snooping database.
- D. The DHCP server assign the IP addressing information to the new device.
Answer: A,D
Explanation:
Explanation
https://www.juniper.net/documentation/en_US/junos/topics/concept/port-security-dhcp-snooping-els.html
NEW QUESTION # 59
You were provided a network diagram that told you to number your network from the
191.255.0.0/16 space. OSPF is enabled and adjacencies are up, but no routers are learning any
routes. What can explain this?
- A. The default OSPF import policy rejects all OSPF routes, so you need to apply import policy
- B. You need to enable OSPF on the lo0 interface to provide a route to the RID of each router in the network
- C. The default OSPF export policies advertise nothing, so you need to apply export policy
- D. You need to modify the martian table with a 191.255.0.0/16 accept statement
Answer: D
NEW QUESTION # 60
You must implement filter-based forwarding. You need to direct traffic from 192.168.1.0/24 through vr1 and traffic from 10.210.0.128/26 through vr2.
Which configuration is correct in this scenario?
- A. firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.1.0/26;
}
}
then {
routing-instance vr2;
}
}
term match-10-subnet {
from {
source-address {
10.210.0.128/26;
}
}
then {
routing-instance vr1;
}
}
}
}
} - B. firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.2.0/26;
}
}
then {
routing-instance vr2;
}
}
term match-10-subnet {
from {
source-address {
10.210.1.128/26;
}
}
then {
routing-instance vr1;
}
}
}
}
} - C. firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.1.0/24;
}
}
then {
routing-instance vr1;
}
}
term match-10-subnet {
from {
source-address {
10.210.0.128/26;
}
}
then {
routing-instance vr2;
}
}
}
}
} - D. firewall {
family inet {
filter fbf-filter1 {
term match-192-subnet {
from {
source-address {
192.168.0.0/24;
}
}
then {
routing-instance vr1;
}
}
term match-10-subnet {
from {
source-address {
10.210.0.128/27;
}
}
then {
routing-instance vr2;
}
}
}
}
}
Answer: C
NEW QUESTION # 61
Referring to the exhibit, which interface is assigned the active VIP?
- A. Router A ge-0/0/1
- B. Router A ge-0/0/2
- C. Router B ge-0/0/2
- D. Router B ge-0/0/1
Answer: D
NEW QUESTION # 62
Click the Exhibit button.
Which statement is true about the configuration shown in the exhibit?
- A. Both the adv-aggregate and next-hop-self export policies will be evaluated when routes are sent to neighbor 172.30.1.1.
- B. Only the next-hop-self export policy will be evaluated when routes are sent to neighbor 172.30.1.1.
- C. Only the adv-custom export policy will be evaluated when routes are sent to neighbor 172.30.2.1.
- D. Both the adv-aggregate and adv-custom export policies will be evaluated when routes are sent to neighbor 172.30.2.1.
Answer: C
NEW QUESTION # 63
Your network is configured with dynamic ARP inspection (DAI) using the default parameters for
all the DHCP and ARP related configurations.
You just added a new device connected to a trunk port and configured it to obtain an IP address
using DHCP.
Which two statements are correct in this scenario? (Choose two.)
- A. DHCP snooping adds the DHCP assigned IP address for the device to its database.
- B. The SRP request and response packets for the new device will bypass DAI.
- C. DAI validates the ARP packets for the new device against the DHCP snooping database.
- D. The DHCP server assign the IP addressing information to the new device.
Answer: A,D
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/concept/port-security-dhcp-snooping-
els.html
NEW QUESTION # 64
Click the Exhibit button.
Based on the output shown in the exhibit, which statement is correct?
- A. The ge-0/0/9 interface is using the default interface priority value.
- B. This switch has a bridge priority of 8k.
- C. This switch is currently blocking all traffic.
- D. The ge-0/0/15 interface is using the default port cost.
Answer: B
NEW QUESTION # 65
Click the Exhibit button.
Referring to the output shown in the exhibit, which two statements are true?
- A. The route is active
- B. The route is an aggregate route
- C. The route is not active
- D. The route is a generate route
Answer: A,D
NEW QUESTION # 66
Your switches are managed using Junos Space Network Director. You want to secure the
switches using a Network Director filter profile.
A filter profile containing one term shown In the exhibit is deployed to ports on managed devices.
Which traffic will be accepted by the filter?
- A. Traffic containing a source MAC of 02:85:05:00:00:00/24 will be accepted.
- B. All traffic will be accepted.
- C. No traffic will be accepted.
- D. Traffic containing a destination MAC of 02:85:05:00:00:00/24 will be accepted.
Answer: A
NEW QUESTION # 67
Which statement is true about IP-IP tunnels?
- A. Intermediate devices must have a route to both the tunnel source address and the tunnel destination address.
- B. Intermediate devices must have a route to the destination address of the traffic being tunneled.
- C. Intermediate devices must have a route to the tunnel source address but do not require a route to the tunnel destination address.
- D. Intermediate devices must have a route to the tunnel destination address but do not require a route to the tunnel source address.
Answer: D
NEW QUESTION # 68
What are two characteristics of OSPF ABRs? (Choose two.)
- A. ABRs link two OSPF areas.
- B. ABRs inject routing information from outside the OSPF domain.
- C. ABRs cannot be part of the backbone and another area at the same time.
- D. ABRs transmit routing information between the backbone and other areas.
Answer: A,D
NEW QUESTION # 69
You must limit access to a printer with a persistent DHCP address of 2001:db8:0000:50::10/64 in VLAN v50 to users assigned to VLAN v50 only.
Which action would satisfy this requirement?
- A. Implement DHCP snooping on VLAN v50 to ensure that 2001:db8:0000:50::10 is allocated properly.
- B. Implement a firewall filter on the IRB interface for VLAN v50, blocking traffic to/from 2001:db8:0000:50::10.
- C. Implement persistent MAC learning to ensure that 2001:db8:0000:50::10 is allocated properly.
- D. Implement a firewall filter on the VLAN v50, blocking traffic to/from 2001:db8:0000:50::10.
Answer: B
NEW QUESTION # 70
......
Updated JN0-349 Certification Exam Sample Questions: https://www.vcedumps.com/JN0-349-examcollection.html
Get Unlimited Access to JN0-349 Certification Exam Cert Guide: https://drive.google.com/open?id=1TjRQbCKhgc5hLqnYU56_JSciFj2vxTQe
