Free Access Juniper.JN0-349.v2022-11-12.q90 Practice Test (Page 4)

Question 11

You are attempting to set up VRRP with R1 and R2 being participating members. You want R1 to
be the master router and R2 to be the backup router with the virtual router they create being at
address 172.25.100.1.
The virtual router is not pinging from either User A or User B. Referring to the exhibit, what must
be done to correct the problem?

A.The VRRP group value on R1 and R2 must match.

B.A VRRP authentication type value is needed on R1 and R2.

C.A VRRP policy is needed on R1 and R2.

D.The VRRP priority value on R1 and R2 must match

Question 12

Both the R1 and R2 devices are advertising prefix X into AS 65530 with the BGP attribute shown
in the exhibit.

Which statement is correct in this scenario?

A.R2's version of prefix X will be active because of the AS path attribute.

B.R1's version of prefix X will be active because of the AS path attribute.

C.R1's version of prefix X will be active because of the local preference attribute.

D.R2's version of prefix X will be active because of the local preference attribute.

Question 13

Which two situations would cause dynamic ARP inspection to drop traffic? (Choose two.)

A.If no IP-to-MAC address entry exists in the DHCP snooping database

B.If the IP address in the ARP packet is deemed invalid

C.If the requested MAC address exceeds the configured limit on the port

D.If the ARP packet comes from a port that has been configured as trusted

Comment: *

Name: *

Email: *

Verification: *

Bryan

Dec 16, 2022

https://www.juniper.net/documentation/us/en/software/junos/security-services/topics/topic-map/understanding-and-using-dai.html#id-understanding-arp-spoofing-and-inspection__d55187e63

DAI examines ARP requests and responses on the LAN and validates ARP packets. The switch intercepts ARP packets from an access port and validates them against the DHCP snooping database. If no IP-MAC entry in the database corresponds to the information in the ARP packet, DAI drops the ARP packet and the local ARP cache is not updated with the information in that packet. DAI also drops ARP packets when the IP address in the packet is invalid. ARP probe packets are not subjected to dynamic ARP inspection. The switch always forwards such packets.

Junos OS for EX Series switches and the QFX Series uses DAI for ARP packets received on access ports because these ports are untrusted by default. Trunk ports are trusted by default, and therefore ARP packets bypass DAI on them.

You configure DAI for each VLAN, not for each interface (port). By default, DAI is disabled for all VLANs.

If you set an interface to be a DHCP trusted port, it is also trusted for ARP packets....

Question 14

Which statement is true about IP-IP tunnels?

A.IP-IP tunnels are protocol agnostic.

B.The packet header is replaced before entering the tunnel

C.The time-to-live value of the original packet Is decremented.

D.The packet is encapsulated unchanged before entering the tunnel

Question 15

You have a conference room with an open network port that is used by employees to connect to the network.
You are concerned about rogue switches being connected to this port
Which two features should you enable on your switch to limit access to this port? (Choose two.)

A.802.1X

B.MAC limiting

C.dynamic ARP inspection

D.DHCP snooping

Other Version: 1028Juniper.JN0-349.v2023-10-16.q109; 1445Juniper.JN0-349.v2023-04-25.q110; 810Juniper.JN0-349.v2023-03-07.q41; 2062Juniper.JN0-349.v2022-07-06.q60

Latest Upload: 104OCEG.GRCP.v2025-09-11.q211; 102HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 142Adobe.AD0-E605.v2025-09-05.q50

Question 11

Question 12

Question 13

Question 14

Question 15

Download PDF File