Dec-2024 Download Free Latest Exam JN0-664 Certified Sample Questions
Prepare for your exam certification with our JN0-664 Certified Juniper
The JN0-664 exam is designed for network engineers who have at least three to five years of experience working in a service provider environment. Candidates who pass the JN0-664 exam are expected to have a deep understanding of service provider routing and switching technologies and be able to troubleshoot complex network issues. They should also be proficient in configuring and managing Juniper Networks' service provider routing and switching platforms.
NEW QUESTION # 17
Exhibit
You are running a service provider network and must transport a customer's IPv6 traffic across your IPv4-based MPLS network using BGP You have already configured mpis ipv6-tunneling on your PE routers.
Which two statements are correct about the BGP configuration in this scenario? (Choose two.)
- A. You must configure family inet6 add-path between PE and CE routers.
- B. You must configure family inet6 unicaat between PE and CE routers.
- C. You must configure family inet6 labcled-unicast between PE routers.
- D. You must configure family inet6 unicast between PE routers
Answer: B,C
Explanation:
To transport IPv6 traffic over an IPv4-based MPLS network using BGP, you need to configure two address families: family inet6 labeled-unicast and family inet6 unicast. The former is used to exchange IPv6 routes with MPLS labels between PE routers, and the latter is used to exchange IPv6 routes without labels between PE and CE routers. The mpis ipv6-tunneling command enables the PE routers to encapsulate the IPv6 packets with an MPLS label stack and an IPv4 header before sending them over the MPLS network.
NEW QUESTION # 18
You are asked to protect your company's customers from amplification attacks. In this scenario, what is Juniper's recommended protection method?
- A. ASN prepending
- B. unicast Reverse Path Forwarding
- C. destination-based Remote Triggered Black Hole
- D. BGP FlowSpec
Answer: C
Explanation:
Explanation
amplification attacks are a type of distributed denial-of-service (DDoS) attack that exploit the characteristics of certain protocols to amplify the traffic sent to a victim. For example, an attacker can send a small DNS query with a spoofed source IP address to a DNS server, which will reply with a much larger response to the victim. This way, the attacker can generate a large amount of traffic with minimal resources.
One of the methods to protect against amplification attacks is destination-based Remote Triggered Black Hole (RTBH) filtering. This technique allows a network operator to drop traffic destined to a specific IP address or prefix at the edge of the network, thus preventing it from reaching the victim and consuming bandwidth and resources. RTBH filtering can be implemented using BGP to propagate a special route with a next hop of
192.0.2.1 (a reserved address) to the edge routers. Any traffic matching this route will be discarded by the edge routers.
NEW QUESTION # 19
Exhibit.
Referring to the exhib.t, what must be changed to establish a Level 1 adjacency between routers R1 and R2?
- A. Change the level 1 disable parameter under the R2 protocols isis interface ge-1/2/3 .0 hierarchy to the level 2 disable parameter
- B. Change the level l disable parameter under the R1 protocols isis interface lo0.0 hierarchy to the level 2 disable parameter.
- C. Remove the level i disable parameter under the R2 protocols isis interface loo . 0 configuration hierarchy.
- D. Add IP addresses to the interface ge-l/2/3 unit 0 family iso hierarchy on both R1 and R2.
Answer: C
Explanation:
IS-IS routers can form Level 1 or Level 2 adjacencies depending on their configuration and network topology.
Level 1 routers are intra-area routers that share the same area address with their neighbors. Level 2 routers are inter-area routers that can connect different areas. Level 1-2 routers are both intra-area and inter-area routers that can form adjacencies with any other router.
In the exhibit, R1 and R2 are in different areas (49.0001 and 49.0002), so they cannot form a Level 1 adjacency. However, they can form a Level 2 adjacency if they are both configured as Level 1-2 routers. R1 is already configured as a Level 1-2 router, but R2 is configured as a Level 1 router only, because of the level 1 disable command under the lo0.0 interface. This command disables Level 2 routing on the loopback interface, which is used as the router ID for IS-IS.
Therefore, to establish a Level 1 adjacency between R1 and R2, the level 1 disable command under the R2 protocols isis interface lo0.0 hierarchy must be removed. This will enable Level 2 routing on R2 and allow it to form a Level 2 adjacency with R1.
NEW QUESTION # 20
A packet is received on an interface configured with transmission scheduling. One of the configured queues In this scenario, which two actions will be taken by default on a Junos device? (Choose two.)
- A. The exceeding queue will be considered to have positive bandwidth credit
- B. The exceeding queue will be considered to have negative bandwidth credit.
- C. The excess traffic will use bandwidth available from other queueses
- D. The excess traffic will be discarded
Answer: B,D
Explanation:
Explanation
Transmission scheduling is a CoS feature that allows you to allocate bandwidth among different queues on an interface. Each queue has a configured bandwidth percentage that determines how much of the available bandwidth it can use. If a queue exceeds its allocated bandwidth, it is considered to have negative bandwidth credit and its excess traffic will be discarded by default. If a queue does not use all of its allocated bandwidth, it is considered to have positive bandwidth credit and its unused bandwidth can be shared by other queues.
NEW QUESTION # 21
After a recent power outage, your manager asks you to investigate ways to automatically reduce the impact caused by suboptimal routing in your OSPF and OSPFv3 network after devices reboot.
Which three configuration statements accomplish this task? (Choose three.)
- A. set protocols ospf overload timeout 900
- B. set protocols ospf3 realm ipv4-unicast overload timeout 900
- C. set protocols ospf overload
- D. set protocols ospf3 overload timeout 900
- E. set protocols ospf3 overload
Answer: A,B,D
Explanation:
To reduce the impact of suboptimal routing in OSPF and OSPFv3 after devices reboot, you can use the overload feature to prevent a router from being used as a transit router for a specified period of time. This allows the router to stabilize its routing table before forwarding traffic for other routers. To enable the overload feature, you need to do the following:
For OSPF, configure the overload statement under [edit protocols ospf] hierarchy level. You can also specify a timeout value in seconds to indicate how long the router should remain in overload state after it boots up. For example, set protocols ospf overload timeout 900 means that the router will be in overload state for 15 minutes after it boots up.
For OSPFv3, configure the overload statement under [edit protocols ospf3] hierarchy level. You can also specify a realm (ipv4-unicast or ipv6-unicast) and a timeout value in seconds to indicate how long the router should remain in overload state after it boots up for each realm. For example, set protocols ospf3 realm ipv4-unicast overload timeout 900 means that the router will be in overload state for 15 minutes after it boots up for IPv4 unicast routing.
NEW QUESTION # 22
Referring to the exhibit, which path would traffic passing through R1 take to get to R4?
- A. R1 -> R2 -> R4
- B. R1 -> R4
- C. R1 -> R3 -> R4
- D. R1 -> R2 -> R3 -> R4
Answer: A
NEW QUESTION # 23 
Click the Exhibit button.
Referring to the exhibit, the PE-to-CE protocol being used is OSPF for the L3VPN. Also, there is an OSPF neighborship between CE-1 and CE-2.
Which statement is correct in this situation?
- A. Hosts at Site-1 will reach hosts at Site-2 through the L3VPN by default.
- B. Hosts at Site-1 will reach hosts at Site-2 through the CE-1 and CE-2 link by default.
- C. You must set a high metric on the CE-1 to CE-2 link for hosts at Site-1 to use the L3VPN to reach hosts at Site-2.
- D. You must set a high metric on the CE-1 to PE-1 link for hosts at Site-1 to use the CE-1 to CE-2 link to reach hosts at Site-2.
Answer: B
Explanation:
In the exhibit, the PE-to-CE protocol used is OSPF, and there is an OSPF neighborship between CE-1 and CE-2 within the same Area 0. Let's analyze the default OSPF routing behavior in this setup to determine the correct statement.
1. **OSPF Neighborship**:
- CE-1 and CE-2 have an OSPF neighborship directly within Area 0.
- OSPF prefers intra-area routes over inter-area and external routes.
2. **Default Routing Behavior**:
- Since CE-1 and CE-2 are directly connected through an OSPF link within the same area, OSPF will prefer this direct intra-area path over any other paths learned via the PE routers and the L3VPN.
- This is because intra-area routes have a lower metric compared to inter-area or external routes.
3. **Metric Considerations**:
- By default, OSPF will route traffic between Site-1 and Site-2 through the direct link between CE-1 and CE-2, unless the link's metric is artificially increased to make it less preferable.
- There is no need to adjust metrics for the CE-1 to PE-1 link to prefer the CE-1 to CE-2 path, as OSPF already prefers direct intra-area paths.
**Conclusion**:
Given the default behavior of OSPF and the topology shown in the exhibit, the correct statement is:
**B. Hosts at Site-1 will reach hosts at Site-2 through the CE-1 and CE-2 link by default.**
**References**:
- OSPF Design Guide: [Juniper Networks OSPF Design
Guide](https://www.juniper.net/documentation/en_US/junos/topics/concept/ospf-design-overview.html)
- Juniper Networks Technical Documentation on OSPF: [Junos OS OSPF Configuration Guide](https://www.juniper.net/documentation/en_US/junos/topics/concept/ospf-routing-overview.html)
NEW QUESTION # 24
Exhibit
R1 and R8 are not receiving each other's routes
Referring to the exhibit, what are three configuration commands that would solve this problem? (Choose three.)
- A. Configure loops on routers in AS 65412 and advertise-peer-as on routers in AS 64498.
- B. Configure remove-private on advertisements from AS 64497 toward AS 64498
- C. Configure remove-private on advertisements from AS 64500 toward AS 64499
- D. Configure as-override on advertisement from AS 64500 toward AS 64512.
- E. Configure loops and advertise-peer-as on routers in AS 64497 and AS 64450.
Answer: A,B,C
Explanation:
Explanation
The problem in this scenario is that R1 and R8 are not receiving each other's routes because of private AS numbers in the AS path. Private AS numbers are not globally unique and are not advertised to external BGP peers. To solve this problem, you need to do the following:
* Configure loops on routers in AS 65412 and advertise-peer-as on routers in AS 64498. This allows R5 and R6 to advertise their own AS number (65412) instead of their peer's AS number (64498) when sending updates to R7 and R8. This prevents a loop detection issue that would cause R7 and R8 to reject the routes from R5 and R62.
* Configure remove-private on advertisements from AS 64497 toward AS 64498 and from AS 64500 toward AS 64499. This removes any private AS numbers from the AS path before sending updates to external BGP peers. This allows R2 and R3 to receive the routes from R1 and R4, respectively3.
NEW QUESTION # 25
Exhibit
Referring to the exhibit, which statement is correct?
- A. The vrf-target configuration will allow routes to be shared between CE-1 and CE-2.
- B. The vrf-target configuration will stop routes from being shared between CE-1 and CE-2.
- C. The route-distinguisher configuration will allow overlapping routes to be shared between CE-1 and CE-2.
- D. The route-diatinguisher configuration will stop routes from being shared between CE-1 and CE-2.
Answer: C
Explanation:
Explanation
The route distinguisher (RD) is a BGP attribute that is used to create unique VPN IPv4 prefixes for each VPN in an MPLS network. The RD is a 64-bit value that consists of two parts: an administrator field and an assigned number field. The administrator field can be an AS number or an IP address, and the assigned number field can be any arbitrary value chosen by the administrator. The RD is prepended to the IPv4 prefix to create a VPN IPv4 prefix that can be advertised across the MPLS network without causing any overlap or conflict with other VPNs. In this question, we have two PE routers (PE-1 and PE-2) that are connected to two CE devices (CE-1 and CE-2) respectively. PE-1 and PE-2 are configured with VRFs named Customer-A and Customer-B respectively.
NEW QUESTION # 26
Exhibit
Referring to the exhibit, which three statements are correct about route 10 0 0.0/16 when using the default BGP advertisement rules'? (Choose three.)
- A. R1 will prepend AS 65531 when advertising 10 0.0 0/16 to R2.
- B. R2 will advertise 10.0.0.0/16 to R3 with 192.168.1 1 as the next hop
- C. R2 will advertise 10.0.0.0/16 to R4 with 172.16.1.1 as the next hop
- D. R4 will advertise 10 0.0 0/16 to R6 with 172.16 1 1 as the next hop
- E. R1 will advertise 10.0.0.0/16 to R2 with 192 168 1 1 as the next hop.
Answer: A,B,C
NEW QUESTION # 27
Which two statements describe PIM-SM? (Choose two)
- A. Traffic is only forwarded to routers that request to join the distribution tree.
- B. Traffic is initially flooded to all routers and an S,G is maintained for each group
- C. Routers with receivers send join messages to their upstream neighbors.
- D. Routers without receivers must periodically prune themselves from the SPT.
Answer: A,C
Explanation:
Explanation
PIM sparse mode (PIM-SM) is a multicast routing protocol that uses a pull model to deliver multicast traffic.
In PIM-SM, routers with receivers send join messages to their upstream neighbors toward a rendezvous point (RP) or a source-specific tree (SPT). The RP or SPT acts as the root of a shared distribution tree for a multicast group. Traffic is only forwarded to routers that request to join the distribution tree by sending join messages.
PIM-SM does not flood traffic to all routers or prune routers without receivers, as PIM dense mode does.
NEW QUESTION # 28
Exhibit
CE-1 and CE-2 are part of a VPLS called Customer1 No connectivity exists between CE-1 and CE-2. In the process of troubleshooting, you notice PE-1 is not learning any routes for this VPLS from PE-2, and PE-2 is not learning any routes for this VPLS from PE-1.
- A. The no-tunnel-services statement should be deleted on both PEs.
- B. The route distinguisher must match on PE-1 and PE-2.
- C. The instance type should be changed to I2vpn.
- D. The route target must match on PE-1 and PE-2.
Answer: D
Explanation:
VPLS is a technology that provides Layer 2 VPN services over an MPLS network. VPLS uses BGP as its control protocol to exchange VPN membership information between PE routers. The route target is a BGP extended community attribute that identifies which VPN a route belongs to. The route target must match on PE routers that participate in the same VPLS instance, otherwise they will not accept or advertise routes for that VPLS.
NEW QUESTION # 29
Which statement is correct about IS-IS when it performs the Dijkstra algorithm?
- A. Tuples with the lowest cost are moved from the tree database to the LSDB.
- B. The algorithm will stop processing once the tree database is empty.
- C. The local router moves its own local tuples into the candidate database
- D. When a new neighbor ID in the tree database matches a router ID in the LSDB, the neighbor ID is moved to the candidate database
Answer: C
Explanation:
IS-IS is a link-state routing protocol that uses the Dijkstra algorithm to compute the shortest paths between nodes in a network. The Dijkstra algorithm maintains three data structures: a tree database, a candidate database, and a link-state database (LSDB). The tree database contains the nodes that have been visited and their shortest distances from the source node. The candidate database contains the nodes that have not been visited yet and their tentative distances from the source node. The LSDB contains the topology information of the network, such as the links and their costs.
The Dijkstra algorithm works as follows:
The local router moves its own local tuples into the tree database. A tuple consists of a node ID, a distance, and a parent node ID. The local router's tuple has a distance of zero and no parent node.
The local router moves its neighbors' tuples into the candidate database. The neighbors' tuples have distances equal to the costs of the links to them and parent node IDs equal to the local router's node ID.
The local router selects the tuple with the lowest distance from the candidate database and moves it to the tree database. This tuple becomes the current node.
The local router updates the distances of the current node's neighbors in the candidate database by adding the current node's distance to the link costs. If a shorter distance is found, the parent node ID is also updated.
The algorithm repeats steps 3 and 4 until either the destination node is reached or the candidate database is empty.
NEW QUESTION # 30
Exhibit
You are attempting to summarize routes from the 203.0.113.128/25 IP block on R8 to AS 64500. You implement the export policy shown in the exhibit and all routes from the routing table stop being advertised.
In this scenario, which two steps would you take to summarize the route in BGP? (Choose two.)
- A. Add the set protocols bgp family inet unicast add-path command to allow additional routes to the RIB tables. -
- B. Remove the from protocol bgp command from the export policy.
- C. Add the set routing-options static route 203.0.113.123/25 discard command.
- D. Replace exact in the export policy with orlonger.
Answer: C,D
Explanation:
To summarize routes from the 203.0.113.128/25 IP block on R8 to AS 64500, you need to do the following:
* Add the set routing-options static route 203.0.113.128/25 discard command. This creates a static route for the summary prefix and discards any traffic destined to it. This is necessary because BGP can only advertise routes that are present in the routing table.
* Replace exact in the export policy with orlonger. This allows R8 to match and advertise any route that is equal or more specific than the summary prefix. The exact term only matches routes that are exactly equal to the summary prefix, which is not present in the routing table.
NEW QUESTION # 31
Exhibit
CE-1 and CE-2 are part of a VPLS called Customer1 No connectivity exists between CE-1 and CE-2. In the process of troubleshooting, you notice PE-1 is not learning any routes for this VPLS from PE-2, and PE-2 is not learning any routes for this VPLS from PE-1.
- A. The no-tunnel-services statement should be deleted on both PEs.
- B. The route distinguisher must match on PE-1 and PE-2.
- C. The instance type should be changed to I2vpn.
- D. The route target must match on PE-1 and PE-2.
Answer: D
Explanation:
Explanation
VPLS is a technology that provides Layer 2 VPN services over an MPLS network. VPLS uses BGP as its control protocol to exchange VPN membership information between PE routers. The route target is a BGP extended community attribute that identifies which VPN a route belongs to. The route target must match on PE routers that participate in the same VPLS instance, otherwise they will not accept or advertise routes for that VPLS.
NEW QUESTION # 32
Which two statements are correct about a sham link? (Choose two.)
- A. The PEs exchange Type 3 OSPF LSAs instead of Type 1 OSPF LSAs for the L3VPN routes.
- B. It creates a BGP multihop neighborship between two PE routers.
- C. It creates an OSPF multihop neighborship between two PE routers.
- D. The PEs exchange Type 1 OSPF LSAs instead of Type 3 OSPF LSAs for the L3VPN routes
Answer: C,D
NEW QUESTION # 33
......
Free Juniper JN0-664 Exam 2024 Practice Materials Collection: https://actual4test.exam4labs.com/JN0-664-practice-torrent.html