Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
Q1. -- Exhibit --firewall {
filter select-telnet {
term 1 {
from {
source-address {
10.0.0.0/8;
}
}
then log;
}
term 2 {
from {
protocoltcp;
port telnet;
}
then {
syslog;
reject;
}
}
term 3 {
from {
source-address {
10.1.1.1/32;
}
protocoltcp;
port telnet;
}
then {
sample;
accept;
}
}
}
}
-- Exhibit --
A Telnet session is initiated from host 10.1.1.1.
What will happen when it is processed by the firewall filter shown in the exhibit?
A. The packet will be accepted and logged.
B. The packet will be discarded and logged.
C. The packet will be rejected and a syslog message generated.
D. The packet will be accepted and sampled.
Answer: A
Q2. Which operational mode command can be used to synchronize the local system time with an NTP server?
A. set ntp time 64.32.129.3
B. set clock ntp 64.32.129.3
C. set time 64.32.129.3
D. set date ntp 64.32.129.3
Answer: D
199. When configuring more than one archival site, which statement is true?
A. The system will first attempt the transfer using the URL configured last.
B. The system will transfer the configuration to each archival site.
C. The system will not transfer to a secondary site unless the previous site fails.
D. The system will transfer using secure copy protocol (SCP) before attempting FTP.
Q3. The IP address 10.1.1.1 belongs to which class of IP address space?
A. Class A
B. Class B
C. Class C
D. Class D
Answer: A
Q4. Which user authentication method is supported by the Junos OS as a last resort alternative?
A. TACACS+
B. RADIUS
C. local user database
D. enable password
Answer: C
Q5. The IP address 192.168.100.1 belongs to which class of IP address space?
A. Class A
B. Class B
C. Class C
D. Class D
Answer: C
Q6. For the interface ge-1/2/3.4, what does the "ge" represent?
A. Gigabit Ethernet
B. SONET/SDH
C. Aggregated Ethernet
D. GRE
Answer: A
Q7. Which command do you issue to upgrade the current software on Junos devices?
A. request system software replace
B. request system software install
C. request system software add
D. request system software upgrade
Answer: C
Q8. What are two default routing policies on Junos devices? (Choose two.)
A. The BGP import policy accepts all BGP routes.
B. The BGP export policy rejects all active BGP routes.
C. The OSPF import policy accepts all OSPF routes.
D. The OSPF export policy accepts all active OSPF routes.
Answer: A,C
Q9. Which two statements are correct about firewall filters in the Junos OS? (Choose two.)
A. Firewall filters are stateless.
B. Firewall filters are used to control routing information that is exchanged between devices.
C. Firewall filters are used to control traffic passing through the device.
D. Firewall filters can only be applied to traffic entering the device.
Answer: A,C
Q10. How can you verify that you have correctly configured SSH access to your Junos device?
A. user@router# show system services
B. user@router> show configuration services
C. user@router# show configuration system services
D. user@router# show system login
Answer: A
Q11. What is the default action for firewall filters?
A. accept
B. reject
C. discard
D. log
Answer: C
Q12. You issue the ping interface t1-1/1/0 1.1.1.1 bypass-routing count 1000 rapid command.
Which statement is correct?
A. The bypass-routing parameter is used to test the density on the T1 line.
B. The bypass-routing parameter cannot be used on a T1 interface.
C. The bypass-routing parameter allows you to ping a host through an interface that has no route through it.
D. The bypass-routing parameter allows you to ping a local WAN interface without generating any outbound traffic.
Answer: C
216. You issue the command telnet interface ge-1/1/0 10.10.10.1 source 192.168.100.1 bypass-routing.
Which statement is correct?
A. The bypass-routing parameter is ignored when using private IP addressing.
B. The telnet session will have the source IP address 10.10.10.1.
C. The telnet session will connect to the neighboring device’s interface ge-1/1/0.
D. Return traffic for the telnet session might not arrive at interface ge-1/1/0.
Q13. Which statement describes the PFE?
A. The PFE controls the RE by providing Layer 2 and Layer 3 forwarding tables.
B. The PFE implements advanced services such as policing, stateless firewall filtering, and class of service.
C. The PFE sends traffic to the RE for systematic packet forwarding.
D. The PFE receives hardware and environmental status messages from the RE.
Answer: B
Q14. Which two commands allow you to return to a previous version of software on the device? (Choose two.)
A. request system software add
B. request system software downgrade
C. request system software replace
D. request system software rollback
Answer: A,D
Q15. Which statement is true about logical units?
A. Logical units are similar to VLANs used by other vendors.
B. A logical unit is required for transit interfaces.
C. Frame Relay encapsulation supports one logical unit.
D. Link speed and duplex are configured in the logical unit properties.
Answer: B