[Oct 22, 2024] Free Juniper JN0-664 Exam Questions and Answer
Verified JN0-664 dumps Q&As Latest JN0-664 Download
NEW QUESTION # 13
Exhibit
Which two statements are true about the OSPF adjacency displayed in the exhibit? (Choose two.)
- A. There is a mismatch in the dead interval parameter between routers R1 and R2.
- B. There is a mismatch in the OSPF hold timer parameter between routers R1 and R2.
- C. There is a mismatch in the poll interval parameter between routers R1 and R2.
- D. There is a mismatch in the hello interval parameter between routers R1 and R2
Answer: A,D
Explanation:
Explanation
The hello interval is the time interval between two consecutive hello packets sent by an OSPF router on an interface. The dead interval is the time interval after which a neighbor is declared down if no hello packets are received from it. These parameters must match between two OSPF routers for them to form an adjacency. In the exhibit, router R1 has a hello interval of 10 seconds and a dead interval of 40 seconds, while router R2 has a hello interval of 30 seconds and a dead interval of 120 seconds. This causes a mismatch and prevents them from becoming neighbors23.
NEW QUESTION # 14
You have an EVI implemented between PE-1, PE-2, and PE-3 to allow communication between CE-1 and CE-2. CE-2 receives unicast traffic from CE-1 on both links to PE-2 and PE-3. When CE-1 sends broadcast traffic. CE-2 receives it on only one of the multihomed links.
Referring to the exhibit, which EVPN route type enables this behavior?
- A. Type 4
- B. Type 1
- C. Type 3
- D. Type 2
Answer: A
NEW QUESTION # 15
Exhibit
Referring to the exhibit, you must provide Internet access for VPN-A using CE-1 as the hub CE.
Which two statements are correct in this situation? (Choose two.)
- A. RIB groups are not needed to leak routes between the inet. 0 and VPN-A. inet. 0 tables,
- B. You must use RIB groups to leak routes between the inet. o and vpn-a. inet. o tables.
- C. Internet traffic from Site 2 takes the path of PE-2 -> PE-1 -> CE-1 -> PE-1 -> GW-1.
- D. Internet traffic from Site 2 takes the path of PE-2 -> PE-1 -> GW-1.
Answer: B,C
Explanation:
To provide Internet access for VPN-A using CE-1 as the hub CE, you need to do the following:
You must use RIB groups to leak routes between the inet.0 and vpn-a.inet.0 tables on PE-1 and CE-1.
RIB groups are routing options that allow you to import routes from one routing table into another routing table based on certain criteria. In this scenario, you need to configure RIB groups on PE-1 and CE-1 to import Internet routes from inet.0 into vpn-a.inet.0 and vice versa.
Internet traffic from Site 2 takes the path of PE-2 -> PE-1 -> CE-1 -> PE-1 -> GW-1. This is because Site 2 does not have direct Internet access and needs to use CE-1 as its default gateway for Internet traffic. Site 2 sends its Internet traffic to PE-2, which forwards it to PE-1 based on VPN-A routes. PE-1 then sends it to CE-1 based on RIB group import policy. CE-1 then sends it back to PE-1 based on its default route pointing to GW-1. PE-1 then forwards it to GW-1 based on RIB group import policy again.
NEW QUESTION # 16 
Click the Exhibit hutton.
You are configuring an interprovider Option C Layer 3 VPN to connect two customer sites.
Referring to the exhibit, which three statements are correct? (Choose three.)
- A. P routers only maintain the internal routes from their own AS.
- B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.
- C. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.
- D. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.
- E. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.
Answer: A,B,C
Explanation:
Interprovider Option C for Layer 3 VPNs involves the use of Autonomous System Boundary Routers (ASBRs) to exchange labeled VPN-IPv4 routes between different Autonomous Systems (AS). This option requires BGP sessions between ASBRs, and the VPN routes are carried end-to-end using MPLS labels. Here's a detailed analysis of the roles of different routers in this scenario:
1. **ASBR Routers**:
- ASBRs are responsible for exchanging VPN-IPv4 routes between different ASes.
- **A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**
- Correct. ASBRs maintain routes to internal destinations within their own AS, and they also need to know the loopback addresses of PEs in the other AS to set up the BGP sessions and MPLS tunnels.
2. **PE Routers**:
- PE routers are responsible for maintaining VPN routes and label information to forward VPN traffic correctly.
- **B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
- Correct. PE routers need to maintain:
- Internal routes within their AS for routing.
- Loopback addresses of other AS PEs for establishing MPLS LSPs.
- L3VPN routes to provide end-to-end VPN connectivity.
3. **P Routers**:
- P routers are the core routers that do not participate in BGP VPN routing but forward labeled packets based on MPLS labels.
- **C. P routers only maintain the internal routes from their own AS.**
- Correct. P routers maintain the internal routing information to forward packets within the AS and use MPLS labels for forwarding VPN packets. They do not maintain VPN routes or routes from other ASes.
4. **Incorrect Statements**:
- **D. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.**
- Incorrect. P routers do not need to maintain the loopback addresses of other AS PEs. They only maintain internal routing and MPLS label information.
- **E. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
- Incorrect. ASBR routers do not maintain L3VPN routes. They exchange labeled VPN-IPv4 routes with other ASBRs and forward them to PE routers.
**Conclusion**:
The correct answers are:
**A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**
**B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**
**C. P routers only maintain the internal routes from their own AS.**
**References**:
- Juniper Networks Documentation on Interprovider VPNs: [Interprovider VPN Configuration](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/mpls-vpn-interprovider.ht
- MPLS and VPN Architectures, CCIP Edition by Ivan Pepelnjak and Jim Guichard
NEW QUESTION # 17
Based on the configuration contents shown in the exhibit, which statement is true?
- A. Joins for group 224.7.7.7 are accepted if the group count is less than 25.
- B. Joins for group 224.7.7.7 are rejected if the source address is 192.168.100.10.
- C. Joins for group 224.7.7.7 are always rejected, regardless of the group count.
- D. Joins for any group are accepted if the group count value is less than 25.
Answer: B
NEW QUESTION # 18
Exhibit
Referring to the exhibit, which three statements are correct about route 10 0 0.0/16 when using the default BGP advertisement rules'? (Choose three.)
- A. R4 will advertise 10 0.0 0/16 to R6 with 172.16 1 1 as the next hop
- B. R1 will prepend AS 65531 when advertising 10 0.0 0/16 to R2.
- C. R1 will advertise 10.0.0.0/16 to R2 with 192 168 1 1 as the next hop.
- D. R2 will advertise 10.0.0.0/16 to R4 with 172.16.1.1 as the next hop
- E. R2 will advertise 10.0.0.0/16 to R3 with 192.168.1 1 as the next hop
Answer: A,C,D
Explanation:
Explanation
The problem in this scenario is that R1 and R8 are not receiving each other's routes because of private AS numbers in the AS path. Private AS numbers are not globally unique and are not advertised to external BGP peers. To solve this problem, you need to do the following:
* Configure loops on routers in AS 65412 and advertise-peer-as on routers in AS 64498. This allows R5 and R6 to advertise their own AS number (65412) instead of their peer's AS number (64498) when sending updates to R7 and R8. This prevents a loop detection issue that would cause R7 and R8 to reject the routes from R5 and R62
* Configure remove-private on advertisements from AS 64497 toward AS 64498 and from AS 64500 toward AS 64499. This removes any private AS numbers from the AS path before sending updates to external BGP peers. This allows R2 and R3 to receive the routes from R1 and R4, respectively3.
NEW QUESTION # 19
Exhibit
Referring to the exhibit, a working L3VPN exists that connects VPN-A sites CoS is configured correctly to match on the MPLS EXP bits of the LSP, but when traffic is sent from Site-1 to Site-2, PE-2 is not classifying the traffic correctly What should you do to solve the problem?
- A. Configure the explicit-null statement on PE-1.
- B. Configure VPN prefix mapping for the PE-1_to_PE-2 LSP
- C. Configure the explicit-null statement on PE-2
- D. Set a static CoS value for the PE-1_to_PE-2 LSP
Answer: A
Explanation:
Explanation
The explicit-null statement enables the PE router to send an MPLS label with a value of 0 (explicit null) instead of an IP header for packets destined to the VPN customer sites. This allows the penultimate hop router (the router before the egress PE router) to preserve the EXP bits of the MPLS label and pass them to the egress PE router. The egress PE router can then use these EXP bits to classify the traffic according to the CoS policy2
. In this example, PE-1 should configure the explicit-null statement under [edit protocols mpls label-switched-path PE-1_to_PE-2] hierarchy level.
NEW QUESTION # 20
Referring to the exhibit, which statement is correct?
- A. The vrf-target configuration will stop routes from being shared between CE-1 and CE-2.
- B. The vrf-target configuration will allow routes to be shared between CE-1 and CE-2.
- C. The route-distinguisher configuration will stop routes from being shared between CE-1 and CE-2.
- D. The route-distinguisher configuration will allow overlapping routes to be shared between CE-1 and CE-2.
Answer: B
NEW QUESTION # 21
Which statement is correct about IS-IS when it performs the Dijkstra algorithm?
- A. Tuples with the lowest cost are moved from the tree database to the LSDB.
- B. The algorithm will stop processing once the tree database is empty.
- C. When a new neighbor ID in the tree database matches a router ID in the LSDthe neighbor ID is moved to the candidate database.
- D. The local router moves its own local tuples into the candidate database.
Answer: B
NEW QUESTION # 22
Referring to the exhibit, a working L3VPN exists that connects VPN-A sites. CoS is configured correctly to match on the MPLS EXP bits of the LSP. but when traffic is sent from Site-1 to Site-2.
PE-2 is not classifying the traffic correctly.
What should you do to solve the problem?
- A. Set a static CoS value for the PE-1_to_PE-2 LSP.
- B. Configure VPN prefix mapping for the PE-1_to_PE-2 LSP.
- C. Configure the explicit-null statement on PE-2.
- D. Configure the explicit-null statement on PE-1.
Answer: C
NEW QUESTION # 23
You are troubleshooting the connection between AS 64496 and AS 64497 and notice that only one of the paths is being used for traffic forwarding.
Referring to the exhibit, which three actions will ensure that R1 is configured properly for load balancing BGP routes? (Choose three.)
- A. Verify that there is a load balancing export policy under routing-options for the received BGP routes on R1.
- B. Verify that an import load balancing policy exists under protocols bgp for the received BGP routes on R1.
- C. Verify that the routing table on R1 has BGP routes for 203.0.113.128/25 with multiple next hops.
- D. Verify that the multipath option is configured under protocols bgp on R1.
- E. Verify that the multipath option is configured under protocols bgp on both R2 and R3.
Answer: A,C,D
NEW QUESTION # 24
Which statement is correct about IS-IS when it performs the Dijkstra algorithm?
- A. Tuples with the lowest cost are moved from the tree database to the LSDB.
- B. The local router moves its own local tuples into the candidate database
- C. The algorithm will stop processing once the tree database is empty.
- D. When a new neighbor ID in the tree database matches a router ID in the LSDB, the neighbor ID is moved to the candidate database
Answer: B
Explanation:
Explanation
IS-IS is a link-state routing protocol that uses the Dijkstra algorithm to compute the shortest paths between nodes in a network. The Dijkstra algorithm maintains three data structures: a tree database, a candidate database, and a link-state database (LSDB). The tree database contains the nodes that have been visited and their shortest distances from the source node. The candidate database contains the nodes that have not been visited yet and their tentative distances from the source node. The LSDB contains the topology information of the network, such as the links and their costs.
The Dijkstra algorithm works as follows:
* The local router moves its own local tuples into the tree database. A tuple consists of a node ID, a distance, and a parent node ID. The local router's tuple has a distance of zero and no parent node.
* The local router moves its neighbors' tuples into the candidate database. The neighbors' tuples have distances equal to the costs of the links to them and parent node IDs equal to the local router's node ID.
* The local router selects the tuple with the lowest distance from the candidate database and moves it to the tree database. This tuple becomes the current node.
* The local router updates the distances of the current node's neighbors in the candidate database by adding the current node's distance to the link costs. If a shorter distance is found, the parent node ID is also updated.
* The algorithm repeats steps 3 and 4 until either the destination node is reached or the candidate database is empty.
NEW QUESTION # 25
Exhibit
The environment is using BGP All devices are in the same AS with reachability redundancy Referring to the exhibit, which statement is correct?
- A. Client1 is peered to Client2 and Client3.
- B. RR1 is peered to Client2 and RR2
- C. RR2 is in an OpenConfirm State until RR1 becomes unreachable.
- D. Peering is dynamically discovered between all devices.
Answer: B
Explanation:
BGP route reflectors are BGP routers that are allowed to ignore the IBGP loop avoidance rule and advertise IBGP learned routes to other IBGP peers under specific conditions. BGP route reflectors can reduce the number of IBGP sessions and updates in a network by eliminating the need for a full mesh of IBGP peers.
BGP route reflectors can have three types of peerings:
* EBGP neighbor: A BGP router that belongs to a different autonomous system (AS) than the route reflector.
* IBGP client neighbor: An IBGP router that receives reflected routes from the route reflector. A client does not need to peer with other clients or non-clients.
* IBGP non-client neighbor: An IBGP router that does not receive reflected routes from the route reflector. A non-client needs to peer with other non-clients and the route reflector.
In the exhibit, we can see that RR1 and RR2 are route reflectors in the same AS with reachability redundancy.
They have two types of peerings: EBGP neighbors (R1 and R4) and IBGP client neighbors (Client1, Client2, and Client3). RR1 and RR2 are also peered with each other as IBGP non-client neighbors.
NEW QUESTION # 26
Which origin code is preferred by BGP?
- A. External
- B. Internal
- C. Incomplete
- D. Null
Answer: C
Explanation:
BGP uses several attributes to select the best path for a destination prefix. One of these attributes is origin, which indicates how BGP learned about a route. The origin attribute can have one of three values: IGP, EGP, or Incomplete. IGP means that the route was originated by a network or aggregate statement within BGP or by redistribution from an IGP into BGP. EGP means that the route was learned from an external BGP peer (this value is obsolete since BGP version 4). Incomplete means that the route was learned by some other means, such as redistribution from a static route into BGP. BGP prefers routes with lower origin values, so Incomplete is preferred over EGP, which is preferred over IGP.
NEW QUESTION # 27
You are responding to an RFP for a new MPLS VPN implementation. The solution must use LDP for signaling and support Layer 2 connectivity without using BGP The solution must be scalable and support multiple VPN connections over a single MPLS LSP The customer wants to maintain all routing for their Private network In this scenario, which solution do you propose?
- A. LDP Layer 2 circuit
- B. circuit cross-connect
- C. translational cross-connect
- D. BGP Layer 2 VPN
Answer: A
Explanation:
Explanation
AToM (Any Transport over MPLS) is a framework that supports various Layer 2 transport types over an MPLS network core. One of the transport types supported by AToM is LDP Layer 2 circuit, which is a point-to-point Layer 2 connection that uses LDP for signaling and MPLS for forwarding. LDP Layer 2 circuit can support Layer 2 connectivity without using BGP and can be scalable and efficient by using a single MPLS LSP for multiple VPN connections. The customer can maintain all routing for their private network by using their own CE switches.
NEW QUESTION # 28
You are asked to protect your company's customers from amplification attacks. In this scenario, what is Juniper's recommended protection method?
- A. ASN prepending
- B. BGP FlowSpec
- C. destination-based Remote Triggered Black Hole
- D. unicast Reverse Path Forwarding
Answer: C
Explanation:
amplification attacks are a type of distributed denial-of-service (DDoS) attack that exploit the characteristics of certain protocols to amplify the traffic sent to a victim. For example, an attacker can send a small DNS query with a spoofed source IP address to a DNS server, which will reply with a much larger response to the victim. This way, the attacker can generate a large amount of traffic with minimal resources.
One of the methods to protect against amplification attacks is destination-based Remote Triggered Black Hole (RTBH) filtering. This technique allows a network operator to drop traffic destined to a specific IP address or prefix at the edge of the network, thus preventing it from reaching the victim and consuming bandwidth and resources. RTBH filtering can be implemented using BGP to propagate a special route with a next hop of
192.0.2.1 (a reserved address) to the edge routers. Any traffic matching this route will be discarded by the edge routers.
NEW QUESTION # 29
Exhibit
You are examining an L3VPN route that includes the information shown in the exhibit Which statement is correct in this scenario?
- A. The information shows a Type 1 route distinguisher.
- B. The information shows a Type 2 route distinguisher.
- C. The information shows a route target
- D. The information shows a Type 0 route distinguisher
Answer: D
Explanation:
Explanation
The information shows a Type 0 route distinguisher, which is one of the three types of route distinguishers defined by RFC 4364. A route distinguisher is a 64-bit value that is prepended to an IPv4 address to create a VPN-IPv4 address, which is unique within a VPN routing and forwarding (VRF) table. A Type 0 route distinguisher has two fields: an administrator subfield (2 bytes) and an assigned number subfield (6 bytes). The administrator subfield can be an AS number or an IP address, and the assigned number subfield can be any value assigned by the administrator. In this example, the administrator subfield is 65530 (an AS number) and the assigned number subfield is 1.
NEW QUESTION # 30
Exhibit
R2 is receiving the same route from R1 and R3. You must ensure that you can load balance traffic for that route.
Referring to the exhibit, which configuration change will allow load balancing?
- A. Configure the multipath multiple-as parameter under the global BGP configuration.
- B. Apply the prepend policy as an import policy under group R1.
- C. Configure the multipath parameter under the global BGP configuration.
- D. Apply the prepend policy as an import policy under group R3.
Answer: A
NEW QUESTION # 31
You are troubleshooting an issue for a customer site that uses 10.10.0.0/24 in AS 65224, but you see another AS in the AS path.
Referring to the exhibit, what is the cause of the problem?
- A. AS 65137 is advertising the 10.10.0.0/24 prefix.
- B. AS 65000 is pre-pending AS 65137 to route advertisements.
- C. The local AS is in the process of withdrawing the route from AS 65137.
- D. The local AS is receiving two equal cost routes to 10.10.0.0/24.
Answer: A
NEW QUESTION # 32
Exhibit
You have MAC addresses moving in your EVPN environment
Referring to the exhibit, which two statements are correct about the sequence number? (Choose two)
- A. It is advertised using a Type 2 message
- B. It resolves conflicting MAC address ownership claims.
- C. It identifies MAC addresses that should be discarded.
- D. It helps the local PE to identify the latest advertisement.
Answer: B,D
Explanation:
The sequence number is a field in the MAC mobility extended community that is used to resolve conflicting MAC address ownership claims and to help the local PE to identify the latest advertisement. The sequence number is incremented by one for every MAC address mobility event, such as when a host moves from one Ethernet segment to another segment in the EVPN network. The PE device that receives multiple MAC advertisements for the same MAC address chooses the one with the highest sequence number as the most recent and valid advertisement.
NEW QUESTION # 33
Which two statements are correct about IS-IS interfaces? (Choose two.)
- A. If a point-to-point interface is in both L1 and L2, separate hello messages are sent for each level.
- B. If a point-to-point interface is in both L1 and L2, one combined hello message is sent for both levels.
- C. If a broadcast interface is in both L1 and L2, separate hello messages are sent for each level
- D. If a broadcast interface is in both L1 and L2, one combined hello message is sent for both levels.
Answer: A,C
Explanation:
Explanation
IS-IS supports two levels of routing: Level 1 (intra-area) and Level 2 (interarea). An IS-IS router can be either Level 1 only, Level 2 only, or both Level 1 and Level 2. A router that is both Level 1 and Level 2 is called a Level 1-2 router. A Level 1-2 router sends separate hello messages for each level on both point-to-point and broadcast interfaces1. A point-to-point interface provides a connection between a single source and a single destination. A broadcast interface behaves as if the router is connected to a LAN.
NEW QUESTION # 34 
Click the Exhibit button.
Referring to the exhibit, which two statements are correct regarding the output shown in the exhibit? (Choose two.)
- A. The multicast group is an SSM group.
- B. The multicast traffic is using the RPT.
- C. The multicast group is an ASM group.
- D. The multicast traffic is using the SPT.
Answer: C,D
Explanation:
In the provided exhibit, the output of the `show pim join extensive 232.1.1.1` command is shown. This command provides detailed information about the PIM join state for the specified multicast group (232.1.1.1) on the router R1. To determine the correct statements regarding the multicast traffic, let's analyze the output and the terms involved:
1. **ASM vs. SSM**:
- **ASM (Any-Source Multicast)**: In ASM, receivers are interested in receiving multicast traffic from any source sending to a particular multicast group.
- **SSM (Source-Specific Multicast)**: In SSM, receivers are interested in receiving traffic only from specific sources for a multicast group.
- **Group Address Range**:
- ASM uses the range 224.0.0.0 to 239.255.255.255.
- SSM uses the range 232.0.0.0 to 232.255.255.255.
Since the group address 232.1.1.1 falls within the SSM range (232.0.0.0/8), there might be confusion.
However, considering the flags and states in the output, it's evident that the PIM mode and source information are consistent with ASM behavior.
2. **Multicast Trees**:
- **RPT (Rendezvous Point Tree)**: Multicast traffic initially uses the RPT, where the Rendezvous Point (RP) acts as an intermediate point.
- **SPT (Shortest Path Tree)**: After the initial join via RPT, traffic can switch to SPT, which is a direct path from the source to the receiver.
3. **Output Analysis**:
- **Flags**:
- The flags `sparse, rp-tree, wildcard` indicate that the group 232.1.1.1 is currently using RPT. This is typical for ASM, where traffic initially goes through the RP.
- The flags `sparse, spt` indicate that for the source 172.16.1.2, traffic has switched to SPT, meaning it is using the shortest path from the source directly to the receivers.
**Conclusion**:
Based on the analysis:
- **A. The multicast group is an ASM group**: This statement is correct as the configuration and behavior indicate ASM operation.
- **B. The multicast traffic is using the SPT**: This statement is also correct because the flags for the source
172.16.1.2 indicate that the traffic is using the SPT.
Thus, the correct answers are:
**A. The multicast group is an ASM group.**
**B. The multicast traffic is using the SPT.**
**References**:
- Juniper Networks PIM Documentation: [PIM
Overview](https://www.juniper.net/documentation/en_US/junos/topics/concept/pim-overview.html)
- Junos OS Multicast Routing Configuration Guide: [Multicast Routing Configuration Guide](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/multicast-routing.html)
NEW QUESTION # 35
......
Use Real Dumps - 100% Free JN0-664 Exam Dumps: https://www.actualtorrent.com/JN0-664-questions-answers.html
Updated 100% Cover Real JN0-664 Exam Questions - 100% Pass Guarantee: https://drive.google.com/open?id=1ePuigf5m17QBt0usWvsk_j788lNQFQqG