Juniper JN0-343 問題集

質問 1：
Which three statements are correct about the processing order of firewall filters on a Junos device? (Choose three.)
A. A router-based firewall filter applied to an RVI applies to switched packets in the same VLAN.
B. The ingress processing order is port, VLAN, router.
C. A router-based firewall filter applied to an RVI does not apply to switched packets in the same VLAN.
D. A port-based firewall filter applied to an RVI does not apply to switched packets in the same VLAN.
E. The egress processing order is router, VLAN, port.
正解：B,C,E

質問 2：
What is the default interval for a VRRP advertisement?
A. 10 seconds
B. 2 seconds
C. 1 second
D. 30 seconds
正解：C

質問 3：

An IP tunnel connects two routers over the Internet as shown in the exhibit.
Which two statements are correct? (Choose two.)
A. IP tunnels are subject to the same simple firewall rules as the direct link between the two routers, because the original IP header contents are open for the transit devices to see.
B. Routing protocols will always prefer a tunnel over a physical link because the tunnel is a one-hop link with the lowest cost path.
C. A tunnel interface can serve as a next hop for static routes or participate in the network's IGP.
D. You can ensure the IP tunnel serves as the backup path through administrative settings such as cost and route preference.
正解：C,D

質問 4：
Which command on an EX Series switch allows for the configuration of the duplex setting on multiple interfaces at the same time?
A. interface-range
B. apply-path
C. port-range
D. interface-group
正解：A

質問 5：
-- Exhibit -

-- Exhibit -
Referring to the exhibit, which two elements must be configured to pass both tagged voice and untagged data traffic? (Choose two.)
A. The ge-0/0/1 interface must be configured as an access port.
B. The ge-0/0/1 interface must be configured for the voice VLAN.
C. The ge-0/0/0 interface must be configured for the voice VLAN.
D. The ge-0/0/1 interface must be configured as a trunk port.
正解：A,B

質問 6：
-- Exhibit --
{master:0}[edit]
user@switch# show firewall
family ethernet-switching {
filter block-traffic {
term count {
from {
source-address {
10.100.0.254/32;
}
}
then count blocked-subnet;
}
term reject-traffic {
from {
source-address { 10.100.0.254/32; } } then discard; } term accept-rest { then accept; } } } -- Exhibit -
You have a device that is sending a malicious packet to other devices in your Layer 2 network. You are asked to ensure that packets sent from this device are not allowed to enter your network. You must also keep track of the number of packets that are being received. The device's IP address is 10.100.0.254. You have created and applied the firewall filter shown in the exhibit to the correct port. However, traffic is still being forwarded into the network.
What is causing the problem?
A. The filter family is incorrect for a port based filter.
B. Layer 2 firewall filters do not have visibility to the Layer 3 header information.
C. The reject-traffic term must be placed before the count term.
D. The count term is implicitly accepting the traffic.
正解：D

質問 7：
Which protocol or feature detects and eliminates Layer 2 loops in a network?
A. RTG
B. LACP
C. GVRP
D. STP
正解：D

質問 8：
Which two statements are true regarding the default VLAN in EX Series switches?
(Choose two.)
A. All switch ports not specifically assigned to a user-defined VLAN belong to the default VLAN.
B. An administrator can change the VLAN ID of the default VLAN.
C. The show interface-command shows an asterisk (*) after the interface name if the interface is part of default VLAN.
D. An interface that is part of the default VLAN cannot carry tagged traffic.
正解：A,B