Deck 8: Security, Specialist

Question 1

Click the Exhibit button. Referring to the exhibit, which statement is true?

A) The router will attempt to signal the LSP along the IGP shortest path to 192.168.100.1
B) The router will prune links with insufficient bandwidth from the path before beginning the signaling process
C) The router will analyze the traffic engineering database to determine the best path through the network
D) The router will precalculate a valid path through the network for LSP r1-to-r3

Answer 1

The router will prune links with insufficient bandwidth from the path before beginning the signaling process

Question 2

Click the Exhibit button. Referring to the exhibit, which statement is correct?

A) Routes from 10.1.1.1 are more preferred than routes from 10.2.2.2
B) Routes from 10.2.2.2 are less preferred than the default local preference
C) Routes from 10.3.3.3 are more preferred than the default local preference
D) Routes from 10.2.2.2 are less preferred than routes from 10.3.3.3

Answer 2

Routes from 10.3.3.3 are more preferred than the default local preference

Question 3

Click the Exhibit button. You are troubleshooting a new BGP peering session which is not establishing. Referring to the exhibit, which statement is true?

A) The update messages contain an unsupported option
B) The neighbor does not support IPv6
C) The peer's AS number is misconfigured
D) The TCP session is not establishing

Answer 3

The peer's AS number is misconfigured

Question 4

Click the Exhibit button. Referring to the exhibit, the GRE tunnel between R-1 and R-2 allows connectivity between User-1 and Server-1. When User-1 communicates with Server-2 with packets that are 1472 bytes in size, no packet fragmentation occurs. User-1 can communicate with Server-1 with packets that are up to 1448 bytes in size with no packet fragmentation. However, if the packet size is larger than 1448 bytes, packet fragmentation occurs. Why is the packet fragmentation occurring between User-1 and Server-1 in this scenario?

A) The GRE header adds 20 bytes to the packet
B) The GRE header adds 24 bytes to the packet
C) The IP header adds 20 bytes to the packet
D) The IP header adds 24 bytes to the packet

Question 5

Which two statements are true about IP and GRE tunnels? (Choose two.)

A) The protocol field is changed in the inner IP packet header
B) Tunnel traffic is encrypted
C) The TTL field is changed in the inner IP packet header
D) Tunnel endpoints need a valid route to the remote endpoint

Question 6

Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)

A) The OSPF neighbor will be declared down if BFD hello packets are not received for 1.5 seconds
B) The OSPF neighbor will be declared down if BFD hello packets are not received for 5 seconds
C) The OSPF neighbor will be declared down if 500 BFD hello packets are missed
D) The OSPF neighbor will be declared down if three BFD hello packets are missed

Question 7

Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)

A) The configuration is for an external BGP session
B) The local-address statement is required for the BGP session to establish correctly The local-address statement is required for the BGP session to establish correctly
C) The multi-hop statement is required for the BGP session to establish correctly multi-hop
D) The configuration is for an internal BGP session

Question 8

Click the Exhibit button. You must create a static route on Router-A to the 10.10.5.0/24 network using 10.10.3.2 as the next hop. Referring to the exhibit, which configuration accomplishes this task?

A)
B)
C)
D)

Question 9

Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)

A) The BGP peering between R1 and R4 should use loopback interface addresses
B) The BGP peering between R1 and R4 should use physical interface addresses
C) The BGP peerings between R1, R2, and R3 should use loopback interface addresses
D) The BGP peerings between R1, R2, and R3 should use physical interface addresses

Question 10

The IPv6 Neighbor Discovery Protocol (NDP) performs the same function as which two IPv4 protocols? (Choose two.)

A) ICMP
B) ARP
C) DNS
D) DHCP

Question 11

Which MPLS feature works with Constrained Shortest Path First (CSPF) to protect against the primary and secondary paths using the same link?

A) fate-sharing
B) explicit null configuration
C) policy control over LSP selection
D) LSP metrics

Question 12

Click the Exhibit button. Referring to the exhibit, which statement is correct?

A) Interface xe-0/0/0.0 has a default metric of 10
B) Interface ge-3/0/0.0 has a default metric of 10
C) Interface ge-1/0/0.0 can only form a single adjacency
D) Interface xe-0/0/0.0 can only form a single adjacency

Question 13

Click the Exhibit button. Referring to the exhibit, which statement about the IS-IS interface is true?

A) The ge-0/0/0.0 interface will act as an L1/L2 interface
B) The ge-0/0/0.0 interface will act as an L2 interface only
C) The ge-0/0/0.0 interface will act as an L1 interface only
D) The ge-0/0/0.0 interface will not be assigned to a level

Question 14

Which three attributes are well-known mandatory BGP attributes? (Choose three.)

A) next-hop
B) AS path
C) local preference
D) MED
E) origin

Question 15

Which two statements are correct about the BGP MED attribute? (Choose two.)

A) BGP uses the MED value when peering to two or more connections to the same upstream AS
B) BGP routes require the MED attribute be defined
C) BGP uses the MED value when peering to two different upstream ASs
D) BGP assumes the MED value to be 0, if not already defined

Question 16

Click the Exhibit button. Referring to the exhibit, which statement is correct?

A) Interface ge-3/0/0.0 has a default metric of 10
B) Interface xe-0/0/0.0 can only form a single adjacency
C) Interface xe-0/0/0.0 has a default metric of 10
D) Interface ge-1/0/0.0 can only form a single adjacency

Question 17

Click the Exhibit button. You are configuring an IBGP group. When you commit your configuration, you receive the error shown in the exhibit. Which additional configuration parameter must you add to your configuration?

A) multipath
B) type external
C) type internal
D) export

Question 18

Click the Exhibit button. Both configuration hierarchies shown in the exhibit have been committed to your MX Series device. Which two statements are true in this scenario? (Choose two.)

A) Traffic destined to 10.3.0.1 will use the R1-to-R6 LSP as a next hop Traffic destined to 10.3.0.1 will use the R1-to-R6 LSP as a next hop
B) Traffic destined to 10.3.0.1 will not use the R1-to-R6 LSP as a next hop Traffic destined to 10.3.0.1 will not use the
C) The active 10.3.0.0/24 prefix installed in the route table will have a route preference of 5
D) The active 10.3.0.0/24 prefix installed in the route table will have a route preference of 7

Question 19

Which two statements describe operations performed by the encapsulating tunnel endpoint in an IP-IP tunnel? (Choose two.)

A) It decrements the time-to-live (TTL) counter by one in the inner IP header
B) It modifies the source and destination addresses in the inner IP header
C) It adds an outer IP header with the destination address of the remote tunnel endpoint
D) It creates and adds a new inner IP header with the remote destination device's IP address

Question 20

Which two IP addresses are considered Martian addresses? (Choose two.)

A) 0.0.0.0/8
B) 192.168.0.0/8
C) 240.0.0.0/4
D) 169.254.0.0/16

Question 21

You must establish an MPLS LSP between two locations. You are required to ensure that the LSP traverses specific routers within the network. Which solution is correct in this scenario?

A) Enable traffic engineering within RSVP and enable the Fast Reroute feature
B) Implement RSVP and define the explicit route the LSP must follow
C) Implement LDP and define the explicit route the LSP must follow
D) Enable traffic engineering within LDP and define the explicit route the LSP must follow

Question 22

You are deploying an RSVP-based MPLS network in your core. You must ensure that your LSPs are continually analyzing the usage levels and recalculating the best LSP. You also want to ensure that a minimal amount of traffic is lost when an LSP is re-signaled without user intervention. Which two features must be enabled in this scenario? (Choose two.)

A) adaptive
B) MPLS fast reroute
C) class of service
D) auto-bandwidth

Question 23

Click the Exhibit button. In the network shown in the exhibit, all switches are configured with the default STP root bridge priority, and Switch A has been selected as root. You recently added the older Switch D into the network as an access switch, and notice it has taken over as root. Which configuration would solve this problem?

A)
B)
C)
D)

Question 24

Which RSVP object allows LSRs to influence path selection?

A) record route object
B) explicit route object
C) hop object
D) session object

Question 25

Which statement about a virtual-router type of routing instance is correct?

A) It is used to separate large networks into smaller administrative entities
B) It is the only routing instance type supported on Junos devices
C) It is used in Layer 3 VPN implementations
D) It is used to create and maintain separate routing and forwarding tables

Question 26

Click the Exhibit button. Your co-worker configures the ge-0/0/0 interface with an IPv6 address of 2001:db8:0:9::/64. After committing the configuration, your co-worker executes the command shown in the exhibit. What is the fe80::206:aff:fe0e:e01/64 address in this scenario?

A) the loopback address
B) the multicast address
C) the statically assigned address
D) the link-local address

Question 27

According to Juniper Networks, what are two reasons to peer using loopback addresses when configuring BGP? (Choose two.)

A) When establishing an IBGP connection
B) When routers are not in the same autonomous system
C) When routers are not directly connected
D) When establishing a single-link EBGP connection

Question 28

Click the Exhibit button. Referring to the exhibit what are two reasons for the configuration stanza? (Choose two.)

A) to reduce the risk of forwarding traffic through a stateless tunnel
B) to mark the tunnel down after the hold-time expires
C) to remove the tunnel interface from inet.0 after the hold-time expires
D) to mark the tunnel up after the hold-time expires

Question 29

To which multicast address is a VRRP advertisement packet sent?

A) 224.0.0.6
B) 224.0.0.18
C) 224.0.0.22
D) 224.0.0.13

Question 30

Which two characteristics describe IS-IS? (Choose two.)

A) A collection of Level 1 routers serves as the IS-IS backbone
B) Level 2 routers connect areas in an IS-IS autonomous system
C) A collection of Level 2 routers serve as the IS-IS backbone
D) A Level 1 IS routes between areas and toward other autonomous systems

Question 31

You have two MX Series devices connected together and configured for Layer 2 operations. The interface that connects the two routers must carry tagged and untagged traffic. Which approach would meet this objective?

A) Configure the interfaces as access ports with the native VLAN option
B) Configure the interfaces as trunk ports with the native VLAN option
C) Configure the interfaces as access ports with the voice VLAN option
D) Configure the interfaces as trunk ports with the voice VLAN option

Question 32

Which two statements are true about IBGP on MX Series devices? (Choose two.)

A) Neighbors can be located anywhere within the AS
B) Interface Lo0 must be used for peering
C) It does not support multihop
D) It is loop free by default

Question 33

What is the purpose of STP BPDUs?

A) to exchange MAC addresses
B) to determine the least cost path
C) to determine the root-alternate port
D) to determine the root bridge

Question 34

You want to disable MAC learning only for interface ge-0/0/0.0 on an MX Series device. Which syntax will accomplish this task?

A)
B)
C)
D)

Question 35

Click the Exhibit button. Referring to the exhibit, which statement is correct?

A) Routes from 10.1.1.1 are less preferred than the default local preference
B) Routes from 10.2.2.2 are less preferred than routes from 10.1.1.1
C) Routes from 10.3.3.3 are less preferred than the default local preference
D) Routes from 10.1.1.1 are less preferred than routes from 10.2.2.2

Question 36

Click the Exhibit button. Referring to the exhibit, which statement is correct?

A) R2 will be the designated router
B) R3 will not participate in the election process
C) R1 will not participate in the election process
D) R4 will be the designated router

Question 37

Click the Exhibit button. Referring to the exhibit, how many milliseconds must pass before the interface ge-0/0/1.0 is considered down?

A) 1200 ms
B) 900 ms
C) 1600 ms
D) 2400 ms

Question 38

In which situation would you disable penultimate-hop popping?

A) When you want to bypass a penultimate router that does not support IPv6 tunneling
B) When you want to ensure the penultimate router can perform the destination route lookup
C) When you want to enforce the same class-of-service behavior through the entire LSP
D) When you want to utilize a penultimate router that supports IPv6 tunneling