JN0-643 Online Practice Questions and Answers

What are three types of PVLAN broadcast domains? (Choose three.)

A. primary VLAN

B. dynamic VLAN

C. isolated VLAN

D. community VLAN

E. S-VLAN

-- Exhibit -user@switch> show spanning-tree bridge

STP bridge parameters Context ID : 0 Enabled protocol : MSTP

STP bridge parameters for CIST Root ID : 32768.00:19:e2:55:1a:01 Root cost : 0 Root port : ge-0/0/10.0 CIST regional root : 32768.00:19:e2:55:1a:01 CIST internal root cost : 20000 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Hop count : 19 Message age : 0 Number of topology changes : 2 Time since last topology change : seconds Topology change initiator : ge-0/0/10.0 Topology change last recvd. from : 00:19:e2:55:24:8c Local parameters Bridge ID : 32768.b0:c6:9a:73:27:90

Extended system ID : 0 Internal instance ID : 0

STP bridge parameters for MSTI 1 MSTI regional root : 4097.b0:c6:9a:73:27:90 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Number of topology changes : 2 Time since last topology change : seconds Topology change initiator : ge-0/0/1.0 Topology change last recvd. from : b0:c6:9a:73:39:81 Local parameters Bridge ID : 4097.b0:c6:9a:73:27:90 Extended system ID : 0 Internal instance ID : 1

STP bridge parameters for MSTI 2 MSTI regional root : 4098.b0:c6:9a:73:39:90 Root cost : 20000 Root port : ge-0/0/1.0 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Hop count : 19 Number of topology changes : 2 Time since last topology change : seconds Topology change initiator : ge-0/0/1.0 Topology change last recvd. from : b0:c6:9a:73:39:81 Local parameters Bridge ID : 8194.b0:c6:9a:73:27:90 Extended system ID : 0 Internal instance ID : 2 -- Exhibit -

Click the Exhibit button.

Referring to the exhibit, which two statements are correct about the MSTP configuration? (Choose two.)

A. The local switch is not the root bridge for MSTI 1.

B. The local switch is the root bridge for MSTI 1.

C. The local switch is the root bridge for MSTI 2.

D. The local switch is not the root bridge for MSTI 2.

Voice traffic is coming in on UDP port 17689. This traffic must be classified into the expedited- forwarding forwarding class.

Which type of classifier is needed?

A. code point alias

B. rewrite marker

C. multifield

D. behavior aggregate

A Layer 2 transparent firewall separates two OSPFv3 routers. For the two OSPFv3 routers to form an adjacency, which protocol must be permitted on the firewall?

A. IPv4 protocol 89

B. IPv6 protocol 89

C. TCP port 89

D. UDP port 89

You want to control bursts of HTTP traffic entering your SRX Series Gateway. To support varying requirements, interfaces ge-0/0/0 through ge-0/0/3 should each be rate-limited separately, using the same parameters.

What is the correct way to meet these requirements?

A. Configure a single policer and apply it directly on the appropriate interfaces.

B. Configure four policers and apply each one directly on the appropriate interface.

C. Configure a policer and reference it in a firewall filter that uses the interface-specific option; apply the filter to the appropriate interfaces.

D. Configure four policers and reference them all in a firewall filter; apply the filter to the appropriate interfaces.

-- Exhibit -

user@router> show interfaces ge-0/0/0 extensive | find "Queue counters" Queue counters: Queued packets Transmitted packets Dropped packets 0 best-effort 35244 35244 0 1 expedited-fo 258963 59852 199111 2 assured-forw 0 0 0 3 network-cont 1625847 1625847 0 ... -- Exhibit -Click the Exhibit button.

You recently deployed an SRX Series Gateway in your network. It uses the default class of service configuration. Based on the output in the exhibit, what reason explains the packet drops in Queue 1?

A. Interface ge-0/0/0 should be used only for management network operations.

B. Queue 0 has higher priority than Queue 1.

C. A policer is reclassifying all traffic into Queue 1.

D. No bandwidth reservation exists on Queue 1.

The network administrator wants the ports on an EX series switch to allow both tagged and untagged frames to be forwarded. Tagged frames should be associated with their tagged VLAN, while untagged frames should be associated with a preconfigured VLAN. In this scenario, which statement is true?

A. The interface port mode should be configured as mixed mode to allow both trunk and access port modes, untagged frames will belong to the default VLAN configured on that post.

B. An interface can be configured as an access port or a trunk port, but it cannot accept both tagged and untagged frames.

C. The interface port mode should be configured as an access port with a VLAN ID, frames tflSrenter the port with a VLAN tag already assigned will override the access port vlan id.

D. The interface port mode should be configured as a trunk port, untagged fra^^swill belong to the native Vlan id configured on that port.

Which 802.1x supplicant mode allows multiple supplicants to be connected to a port one requires each device to authenticate separately?

A. single

B. smgle secure

C. MAC RADIUS

D. Multiple

Which two statements is true regarding the next hop attribute? (Choose two)

A. it is not changed when sent across EBGP sessions

B. it is changed to self for IBGP routes learned from EBGP

C. it is not changed for IGBP routes learned from EBGP

D. it is Changed by default when sent across EBGP sessions

A packet enters the router and is subject to ingress's processing. In which order is the packet processed?

A. Policer >BA classifier>multifield classifier>forwarding policy

B. multifield classifier>BA classifier>policer>forwarding policy

C. BA classifier>multifieldclaasssifier>policer>forwarding policy

D. forwarding policy> BA classifier>multifield classifier>policer