Sample Questions of JN0-351 Dumps With 100% Exam Passing Guarantee
Pass Key features of JN0-351 Course with Updated 109 Questions
Juniper JN0-351 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION # 63
What are two interarea OSPF LSA types? (Choose two.)
- A. Type 1 router LSAs
- B. Type 2 network LSAs
- C. Type 3 summary LSAs
- D. Type 4 ASBR summary LSAs
Answer: C,D
NEW QUESTION # 64
What are two reasons for creating multiple areas in OSPF? (Choose two.)
- A. to reduce LSA flooding across the network
- B. to increase the number of adjacencies in the backbone
- C. to reduce the convergence time
- D. to increase the size of the LSDB
Answer: A,C
Explanation:
Explanation
Option A is correct. Creating multiple areas in OSPF can help to reduce the convergence time . This is because changes in one area do not affect other areas, so fewer routers need to run the SPF algorithm in response to a change.
Option D is correct. Creating multiple areas in OSPF can help to reduce Link State Advertisement (LSA) flooding across the network. This is because LSAs are not flooded out of their area of origin.
NEW QUESTION # 65
Referring to the exhibit, which router will become the OSPF BDR if all routers are powered on at the same time?
- A. R1
- B. R2
- C. R4
- D. R3
Answer: D
Explanation:
Priority set to 0 will never become DR or BDR so R1 is excluded.
Higher priority is better in OSPF so R2 is lowest than both R3 and R4.
R3 and R4 has the same priority so RID will decide.
R4 has the highest RID so it will become DR and R3 will then become BDR.
NEW QUESTION # 66
Which two statements are correct about IS-IS? (Choose two.)
- A. IS-IS only allows you to configure two areas.
- B. IS-IS has two metric types and Junos sends both by default.
- C. IS-IS uses IPv6 as its transport protocol in the Junos OS Implementation.
- D. IS-IS sends a maximum metric value of 63 by default.
Answer: B,C
NEW QUESTION # 67
Which two statements about redundant trunk groups on EX Series switches are correct? (Choose two.)
- A. Redundant trunk groups must be connected to the same aggregation switch.
- B. Redundant trunk groups load-balance traffic across two designated uplink interfaces.
- C. If the active link fails, then the secondary link automatically takes over.
- D. Layer 2 control traffic is permitted on the secondary link
Answer: A,C
Explanation:
Redundant Trunk Groups (RTGs) on EX Series switches provide a simple solution for network recovery when a trunk port on a switch goes down 1 . They are configured on the access switch and contain two links:
a primary or active link, and a secondary link 1 . Therefore, option B is correct because if the active link fails, the secondary link automatically starts forwarding data traffic without waiting for normal spanning-tree protocol convergence 1 .
Option D is also correct. In a typical enterprise network composed of distribution and access layers, RTGs are used where one Access switch is connected to two different uplink switches 2 . This implies that RTGs must be connected to the same aggregation switch 2 .
NEW QUESTION # 68
You are troubleshooting an issue where traffic to 192.168.10.0/24 is being sent to R1 instead of your desired path through R2.
Referring to the exhibit, what is the reason for the problem?
- A. R2's route is not the best path due to loop prevention.
- B. R1's route is the best path due to the shorter AS path.
- C. R1's route is the best path due to a higher local preference
- D. R2's route is not the best path due to a lower origin code.
Answer: C
Explanation:
The exhibit shows the output of the command show ip bgp, which displays information about the BGP routes in the routing table. The output shows two routes for the destination 192.168.10.0/24, one from R1 and one from R2.
The route from R1 has a local preference of 200, while the route from R2 has a local preference of 100. Local preference is a BGP attribute that indicates the degree of preference for a route within an autonomous system (AS). A higher local preference means a more preferred route.
BGP uses a best path selection algorithm to choose the best route for each destination among multiple paths. The algorithm compares different attributes of the routes in a specific order of precedence. The first attribute that is compared is weight, which is a Cisco-specific attribute that is local to the router. If the weight is equal or not set, the next attribute that is compared is local preference.
In this case, both routes have the same weight of 0, which means that they are learned from external BGP (eBGP) peers. Therefore, the next attribute that is compared is local preference.
Since R1's route has a higher local preference than R2's route, it is chosen as the best path and installed in the routing table. The other attributes, such as origin code and AS path, are not considered in this case.
NEW QUESTION # 69
You deployed a new EX Series switch with DHCP snooping enabled and you do not see any entries in the snooping databases for an interface. Which two Juniper configurations for that interface caused this issue? (Choose two.)
- A. MAC limiting is enabled on the interface.
- B. The interface is configured as a trunk port.
- C. The interface is configured as a disabled port.
- D. Dynamic ARP inspection is enabled on the interface.
Answer: B,C
Explanation:
A is correct because the interface is configured as a disabled port. A disabled port does not forward any traffic, including DHCP packets. Therefore, DHCP snooping cannot learn any MAC addresses or lease information from a disabled port.
C is correct because the interface is configured as a trunk port. By default, all trunk ports on the switch are trusted for DHCP snooping. This means that DHCP snooping does not inspect or filter any DHCP packets received on a trunk port. Therefore, DHCP snooping does not add any entries to the snooping database for a trunk port.
NEW QUESTION # 70
Exhibit.
What is the management IP address of the device shown in the exhibit?
- A. 10.210.20.233
- B. 172.23.12.100
- C. 128.0.0.1
- D. 172.23.11.10
Answer: B
Explanation:
Explanation
The management IP address of a device is the IP address that is used to access the device for configuration and monitoring purposes. It is usually assigned to a dedicatedmanagement interface that is separate from the data interfaces. The management interface can be accessed via SSH, Telnet, HTTP, or other protocols.
In the exhibit, the list of interfaces and their statuses shows that the management interface isme0. This interface has an admin status ofup, a protocol status ofinet, a local address of172.23.12.100/24, and a remote address ofunspecified. This means that the me0 interface is active, has an IPv4 address assigned, and is not connected to another device.
Therefore, the management IP address of the device shown in the exhibit is172.23.12.100.
References:
[Management Interfaces Overview] : [Displaying Interface Status Information]
NEW QUESTION # 71
You are using tunnels in your network. It is important that the routes be specific enough to ensure that the tunnels are established. You need to prevent a route that is new to the network from being used.
In this scenario, which type of route should be used?
- A. anycast
- B. aggregate
- C. static
- D. multicast
Answer: C
NEW QUESTION # 72
Which two types of tunnels are able to be created on all Junos devices? (Choose two.)
- A. IP-IP
- B. STP
- C. IPsec
- D. GRE
Answer: A,D
Explanation:
GRE tunnels can be created on all Junos devices. GRE is a tunneling protocol that encapsulates a wide variety of network layer protocols inside virtual point-to-point links.
IP-IP tunnels can also be created on all Junos devices. IP-IP tunneling is used to encapsulate IP packets within IP packets, providing a simple way to tunnel IP traffic.
NEW QUESTION # 73
Which statement is correct about the storm control feature?
- A. The storm control feature is not supported on aggregate Ethernet interfaces.
- B. The storm control feature requires a special license on EX Series switches.
- C. The storm control configuration only applies to traffic being sent between the forwarding and control plane.
- D. The storm control feature is enabled in the factory-default configuration on EX Series switches.
Answer: D
Explanation:
Option A is correct. The storm control feature is enabled in the factory-default configuration on EX Series switches12. On EX2200, EX3200, EX3300, EX4200, and EX6200 switches, the factory default configuration enables storm control for broadcast and unknown unicast traffic on all switch interfaces2. On EX4300 switches, the factory default configuration enables storm control on all Layer 2 switch interfaces1.
Option B is incorrect. The storm control feature does not require a special license on EX Series switches34.
Option C is incorrect. There's no information available that suggests the storm control feature is not supported on aggregate Ethernet interfaces.
Option D is incorrect. The storm control configuration applies to traffic at the ingress of an interface5, not just between the forwarding and control plane.
NEW QUESTION # 74
Which three protocols support BFD? (Choose three.)
- A. FTP
- B. LACP
- C. OSPF
- D. BGP
- E. RSTP
Answer: B,C,D
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/high-availability/topics/topic-map/bfd- configuring.html
NEW QUESTION # 75
You are asked to explore adding BGP route reflectors to allow for increased scale in your core network. Which statement is correct in this scenario?
- A. The cluster ID is not required to use route reflectors.
- B. Route reflectors are required whenever internal BGP (IBGP) sessions are needed.
- C. The cluster ID is required to prevent routing loops.
- D. Route reflectors require that the network is connected in a physical full mesh.
Answer: C
NEW QUESTION # 76
Refer to the exhibit.
Referring to the output shown in the exhibit, which statement is correct?
- A. An MTU mismatch exists between the OSPF neighbors.
- B. The state is normal for a DRother neighbor
- C. The state is normal for a DR neighbor.
- D. An area ID mismatch exists between the OSPF neighbors
Answer: B
Explanation:
Explanation
In OSPF, the state of the neighbor relationship is determined by the exchange of OSPF packets between routers1. The state "2Way" as shown in the exhibit indicates that bi-directional communication has been established between the two OSPF routers1. This is the normal state for a neighbor that is not the Designated Router (DR) or Backup Designated Router (BDR) on a broadcast, non-broadcast multi-access (NBMA), or point-to-multipoint network1. These neighbors are often referred to as "DRothers"1. Therefore, option B is correct.
NEW QUESTION # 77
Which two statements are correct about tunnels? (Choose two.)
- A. Tunnels add additional overhead to packet size.
- B. BFD cannot be used to monitor tunnels.
- C. IP-IP tunnels are stateful.
- D. Tunnel endpoints must have a valid route to the remote tunnel endpoint.
Answer: A,D
Explanation:
Explanation
A tunnel is a connection between two computer networks, in which data is sent from one network to another through an encrypted link. Tunnels are commonly used to secure data communications between two networks or to connect two networks that use different protocols.
Option B is correct, because tunnel endpoints must have a valid route to the remote tunnel endpoint. A tunnel endpoint is the device that initiates or terminates a tunnel connection. For a tunnel to be established, both endpoints must be able to reach each other over the underlying network. This means that they must have a valid route to the IP address of the remote endpoint1.
Option D is correct, because tunnels add additional overhead to packet size. Tunnels work by encapsulating packets: wrapping packets inside of other packets. This means that the original packet becomes the payload of the surrounding packet, and the surrounding packet has its own header and trailer. The header and trailer of the surrounding packet add extra bytes to the packet size, which is called overhead. Overhead can reduce the efficiency and performance of a network, as it consumes more bandwidth and processing power2.
Option A is incorrect, because BFD can be used to monitor tunnels. BFD is a protocol that can be used to quickly detect failures in the forwarding path between two adjacent routers or switches. BFD can be integrated with various routing protocols and link aggregation protocols to provide faster convergence and fault recovery.
BFD can also be used to monitor the connectivity of tunnels, such as GRE, IPsec, or MPLS.
Option C is incorrect, because IP-IP tunnels are stateless. IP-IP tunnels are a type of tunnels that use IP as both the encapsulating and encapsulated protocol. IP-IP tunnels are simple and easy to configure, but they do not provide any security or authentication features. IP-IP tunnels are stateless, which means that they do not keep track of the state or status of the tunnel connection. Stateless tunnels do not require any signaling or negotiation between the endpoints, but they also do not provide any error detection or recovery mechanisms.
References:
1: What is Tunneling? | Tunneling in Networking 2: What Is Tunnel In Networking, Its Types, And Its Benefits? : [Configuring Bidirectional Forwarding Detection] : [IP-IP Tunneling]
NEW QUESTION # 78
You want to redistribute the static routes into BGP, but they do not show as BGP routes.
What causes this result to occur?
- A. A community string must be configured.
- B. The as-pathparameter must be specified.
- C. The static routes do not have a valid next hop.
- D. The no-readvertisefeature is specified.
Answer: C
NEW QUESTION # 79
You are attempting to configure the initial two aggregated Ethernet interfaces on a router but there are no aggregated Ethernet interfaces available.
In this scenario, which configuration will enable these interfaces on this router?
- A.
- B.
- C.
- D.
Answer: A
Explanation:
The correct answer to your question is C. Option C . Here is why:
* Option C shows the configuration of the chassis statement, which defines the properties of the router chassis, such as the number of aggregated Ethernet interfaces, the number of FPCs, and the number of PICs 1 .
* To enable aggregated Ethernet interfaces on a router, you need to specify the aggregated-devices statement under the chassis statement and set the ethernet parameter to the desired number of interfaces 2 . For example, to enable two aggregated Ethernet interfaces, you can use the following configuration:
chassis { aggregated-devices { ethernet { device-count 2; } } }
* Option C shows this configuration with the device-count set to 2, which will enable two aggregated Ethernet interfaces on the router. The other options do not show this configuration and will not enable any aggregated Ethernet interfaces on the router.
* Therefore, option C is the correct answer to your question.
NEW QUESTION # 80
Referring to the exhibit, which policy will export routes to IBGP peers?
- A. static-2
- B. static-3
- C. static-4
- D. static-1
Answer: C
NEW QUESTION # 81
Click the Exhibit button.
Which two statements about the firewall filter terms shown in the exhibit are true? (Choose two.)
- A. All traffic not matching the from statement in term one is accepted by term two.
- B. Traffic that matches the from statement in term one is accepted.
- C. Traffic matching the from statement in term two is logged.
- D. Traffic that matches the from statement in term one is discarded.
Answer: A,B
Explanation:
A firewall filter is a Junos security solution to filter or control traffic at the data plane as they enter or exit an interface 1 . A firewall filter consists of one or more terms, each with a set of conditions and actions 2 . The device evaluates every packet against the firewall filter terms in the order they are defined, and performs the actions specified in the first term that matches the packet 3 . If no term matches the packet, the device discards the packet by default 3 .
In the exhibit, the firewall filter mac-address is applied to the family ethernet-switching and involves filtering MAC addresses. There are two terms, term one and term two , each with different conditions and actions. The from statement specifies the match conditions, and the then statement specifies the actions. If the from statement is omitted, all packets are considered to match and the actions in the then statement are taken 2 . If the then statement is omitted, the packets that match the conditions in the from statement are accepted by default 2 .
* Term one logs traffic from a specific source MAC address 88:05:00:29:3c:de/48 . The log action is a nonterminating action, which means that the device continues to evaluate the packet against the remaining terms in the filter 2 . Therefore, traffic that matches the from statement in term one is not discarded, and option A is incorrect.
* Term two accepts all other traffic not specified in term one. The then accept action is a terminating action, which means that the device stops evaluating the packet against the filter and forwards the packet 2 . Therefore, all traffic not matching the from statement in term one is accepted by term two, and option D is correct.
* Term two does not have a from statement, which means that all packets are considered to match this term. Therefore, traffic matching the from statement in term two is not logged, and option B is incorrect.
* Term one does not have a then statement other than the log action, which means that the packets that match the from statement are accepted by default. Therefore, traffic that matches the from statement in term one is accepted, and option C is correct.
References:
2 : term (Firewall Filter)
3 : Firewall Filters Overview
1 : Juniper Firewall Filter Configuration Example
NEW QUESTION # 82
Exhibit.
You are using OSPF to advertise the subnets that are used by the Denver and Dallas offices. The routers that are directly connected to the Dallas and Denver subnets are not advertising the connected subnets.
Referring to the exhibit, which two statements are correct? (Choose two.)
- A. Enable the passive option on the OSPF interfaces that are connected to the Dallas and Denver subnets.
- B. Create static routes on the switches using the local vMX router's loopback interface for the next hop.
- C. Configure and apply a routing policy that redistributes the connected Dallas and Denver subnets.
- D. Configure and apply a routing policy that redistributes the Dallas and Denver subnets using Type 5 LSAs.
Answer: A,C
Explanation:
Explanation
The routers that are directly connected to the Dallas and Denver subnets are not advertising the connected subnets. This can be resolved by redistributing the connected subnets into OSPF1.
Option C suggests to configure and apply a routing policy that redistributes the connected Dallas and Denver subnets. This is correct because redistribution allows routes from one routing protocol to be communicated to another, and in this case, it allows the connected subnets to be advertised through OSPF1.
Option D suggests enabling the passive option on the OSPF interfaces that are connected to the Dallas and Denver subnets. This is also correct because in OSPF, a passive interface is an interface that belongs to the OSPF router, but does not send OSPF Hello packets1. It's typically used on an interface that you don't want to use for OSPF adjacencies, but you still want to advertise its IP address1. Therefore, enabling passive interface can help in advertising the Dallas and Denver subnets.
NEW QUESTION # 83
What are two characteristics of RSTP alternate ports? (Choose two.)
- A. RSTP alternate ports block traffic while receiving superior BPDUs from a neighboring switch.
- B. RSTP alternate ports provide an alternate higher cost path to the root bridge.
- C. RSTP alternate ports provide an alternate lower cost path to the root bridge.
- D. RSTP alternate ports are active ports used to forward frames toward the root bridge.
Answer: A,B
Explanation:
A is correct because RSTP alternate ports block traffic while receiving superior BPDUs from a neighboring switch. An alternate port is a backup port for a root port, which means it receives better BPDUs from another bridge than the current root port1. However, an alternate port does not forward any traffic, as it is in a discarding state2. It only listens to BPDUs and waits for the root port to fail. If the root port fails, the alternate port can immediately transition to a forwarding state and become the new root port1.
C is correct because RSTP alternate ports provide an alternate higher cost path to the root bridge. An alternate port is selected based on the same criteria as the root port, which are the lowest bridge ID, the lowest path cost, the lowest sender port ID, and the lowest receiver port ID3. However, an alternate port receives a higher cost BPDU than the root port, otherwise it would be the root port itself1. Therefore, an alternate port provides an alternate higher cost path to the root bridge than the root port.
NEW QUESTION # 84
Exhibit
Which command displays the output shown in the exhibit?
- A. show route forwarding-table family ethernet-switching
- B. show ethernet-switching table
- C. show route forwarding-table
- D. show ethernet-switching table extensive
Answer: B
Explanation:
The output shown in the exhibit is a brief display of the Ethernet switching table, which shows the learned Layer 2 MAC addresses for each VLAN and interface1.
The command show ethernet-switching table displays the Ethernet switching table with brief information, such as the destination MAC address, the VLAN name, the forwarding state, and the interface name1.
The command show route forwarding-table displays the routing table information for each protocol family, such as inet, inet6, mpls, iso, and so on2. It does not show the Ethernet switching table or the MAC addresses.
The command show ethernet-switching table extensive displays the Ethernet switching table with extensive information, such as the destination MAC address, the VLAN name, the forwarding state, the interface name, the VLAN index, and the tag type1. It shows more details than the brief output shown in the exhibit.
The command show route forwarding-table family ethernet-switching displays the routing table information for the ethernet-switching protocol family, whichshows the destination MAC address, the next-hop MAC address, and the interface name3. It does not show the VLAN name or the forwarding state.
NEW QUESTION # 85
What is the maximum allowable MTU size for a default GRE tunnel without IPv4 traffic fragmentation?
- A. 1496 bytes
- B. 1480 bytes
- C. 1500 bytes
- D. 1476 bytes
Answer: D
Explanation:
Explanation
The maximum allowable MTU size for a default GRE tunnel without IPv4 traffic fragmentation is 1476 bytes1. This is because GRE packets are formed by the addition of the original packets and the required GRE headers1. These headers are 24-bytes in length and since these headers are added to the original frame, depending on the original size of the packet we may run into IP MTU problems1. The most common IP MTU is 1500-bytes in length (Ethernet)1. When the tunnel is created, it deducts the 24-bytes it needs to encapsulate the passenger protocols and that is the IP MTU it will use1. For example, if we are forming a tunnel over FastEthernet (IP MTU 1500)the IOS calculates the IP MTU on the tunnel as: 1500-bytes from Ethernet -
24-bytes for the GRE encapsulation = 1476-Bytes1.
NEW QUESTION # 86
......
JN0-351 Sample Practice Exam Questions 2026 Updated Verified: https://www.getvalidtest.com/JN0-351-exam.html
Exam Study Guide Free Practice Test LAST UPDATED : https://drive.google.com/open?id=1carpCgHwwnc3A-s4l7sxn8fEjqah8doy