[Jul 13, 2023] Verified JN0-664 dumps and 67 unique questions
JN0-664 Dumps for Pass Guaranteed - Pass JN0-664 Exam 2023
NEW QUESTION # 22
Exhibit
Referring to the exhibit, which two statements are true? (Choose two.)
- A. The device advertising this route into EVPN is 192.168.101.5.
- B. This route is learned through EBGP
- C. The devices advertising this route into EVPN are 10 0 2 12 and 10.0.2.22.
- D. This is an EVPN Type-2 route.
Answer: A,D
Explanation:
Explanation
This is an EVPN Type-2 route, also called a MAC/IP advertisement route, that is used to advertise host IP and MAC address information to other VTEPs in an EVPN network. The route type field in the EVPN NLRI has a value of 2, indicating a Type-2 route. The device advertising this route into EVPN is 192.168.101.5, which is the IP address of the VTEP that learned the host information from the local CE device. This IP address is carried in the MPLS label field of the route as part of the VXLAN encapsulation.
NEW QUESTION # 23
Exhibit
Referring to the exhibit, PE-1 and PE-2 are getting route updates for VPN-B when neither of them service that VPN Which two actions would optimize this process? (Choose two.)
- A. Configure the family route-target statement on the RR
- B. Configure the resolution rib bgp.l3vpn.O resolution-ribs inet. 0 Statement on the RR
- C. Configure the resolution rib bgp . 13vpn . 0 resolution-ribs inet. 0 Statement on the PEs.
- D. Configure the family route-target statement on the PEs.
Answer: A,B
Explanation:
Explanation
BGP route target filtering is a technique that reduces the number of routers that receive VPN routes and route updates, helping to limit the amount of overhead associated with running a VPN. BGP route target filtering is based on the exchange of the route-target address family, which contains information about the VPN membership of each PE device. Based on this information, a PE device can decide whether to accept or reject VPN routes from another PE device.
BGP route target filtering can be configured on PE devices or on route reflectors (RRs). Configuring BGP route target filtering on RRs is more efficient and scalable, as it reduces the number of BGP sessions and updates between PE devices. To configure BGP route target filtering on RRs, the following steps are required:
* Configure the family route-target statement under the BGP group or neighbor configuration on the RRs.
This enables the exchange of the route-target address family between the RRs and their clients (PE devices).
* Configure the resolution rib bgp.l3vpn.0 resolution-ribs inet.0 statement under the routing-options configuration on the RRs. This enables the RRs to resolve next hops for VPN routes using the inet.0 routing table.
* Configure an export policy for BGP route target filtering under the routing-options configuration on the RRs. This policy controls which route targets are advertised to each PE device based on their VPN membership.
NEW QUESTION # 24
Exhibit
R1 and R8 are not receiving each other's routes
Referring to the exhibit, what are three configuration commands that would solve this problem? (Choose three.)
- A. Configure remove-private on advertisements from AS 64500 toward AS 64499
- B. Configure as-override on advertisement from AS 64500 toward AS 64512.
- C. Configure loops and advertise-peer-as on routers in AS 64497 and AS 64450.
- D. Configure remove-private on advertisements from AS 64497 toward AS 64498
- E. Configure loops on routers in AS 65412 and advertise-peer-as on routers in AS 64498.
Answer: A,D,E
Explanation:
Explanation
The problem in this scenario is that R1 and R8 are not receiving each other's routes because of private AS numbers in the AS path. Private AS numbers are not globally unique and are not advertised to external BGP peers. To solve this problem, you need to do the following:
* Configure loops on routers in AS 65412 and advertise-peer-as on routers in AS 64498. This allows R5 and R6 to advertise their own AS number (65412) instead of their peer's AS number (64498) when sending updates to R7 and R8. This prevents a loop detection issue that would cause R7 and R8 to reject the routes from R5 and R62.
* Configure remove-private on advertisements from AS 64497 toward AS 64498 and from AS 64500 toward AS 64499. This removes any private AS numbers from the AS path before sending updates to external BGP peers. This allows R2 and R3 to receive the routes from R1 and R4, respectively3.
NEW QUESTION # 25
Exhibit
R4 is directly connected to both RPs (R2 and R3) R4 is currently sending all ,o,ns upstream to R3 but you want all joins to go to R2 instead Referring to the exhibit, which configuration change will solve this issue?
- A. Change the local address on R2 to be higher than R3.
- B. Change the group-range to be more specific on R2 than R3.
- C. Change the default route in inet.2 on R4 from R3 as the next hop to R2
- D. Change the bootstrap priority on R2 to be higher than R3
Answer: D
Explanation:
Explanation
PIM Bootstrap Router (BSR) is a mechanism that allows PIM routers to discover and announce rendezvous point (RP) information for multicast groups. BSR uses two roles: candidate BSR and candidate RP. Candidate BSR is the router that collects information from all available RPs in the network and advertises it throughout the network. Candidate RP is the router that wants to become the RP and registers itself with the BSR. There can be only one active BSR in the network, which is elected based on the highest priority or highest IP address if the priority is the same. The BSR priority can be configured manually or assigned automatically. The default priority is 0 and the highest priority is 2551. In this question, R4 is directly connected to both RPs (R2 and R3) and is currently sending all joins upstream to R3 but we want all joins to go to R2 instead. To achieve this, we need to change the BSR priority on R2 to be higher than R3 so that R2 becomes the active BSR and advertises its RP information to R4.
NEW QUESTION # 26
Exhibit
Click the Exhibit button-Referring to the exhibit, which two statements are correct about BGP routes on R3 that are learned from the ISP-A neighbor? (Choose two.)
- A. All BGP attribute values must be removed before receiving the routes.
- B. The next-hop value for these routes is changed by ISP-A before being sent to R3.
- C. The BGP local-preference value that is used by ISP-A is not advertised to R3.
- D. By default, the next-hop value for these routes is not changed by ISP-A before being sent to R3.
Answer: C,D
Explanation:
Explanation
BGP is an exterior gateway protocol that uses path vector routing to exchange routing information among autonomous systems. BGP uses various attributes to select the best path to each destination and to propagate routing policies. Some of the common BGP attributes are AS path, next hop, local preference, MED, origin, weight, and community. BGP attributes can be classified into four categories: well-known mandatory, well-known discretionary, optional transitive, and optional nontransitive. Well-known mandatory attributes are attributes that must be present in every BGP update message and must be recognized by every BGP speaker.
Well-known discretionary attributes are attributes that may or may not be present in a BGP update message but must be recognized by every BGP speaker. Optional transitive attributes are attributes that may or may not be present in a BGP update message and may or may not be recognized by a BGP speaker. If an optional transitive attribute is not recognized by a BGP speaker, it is passed along to the next BGP speaker. Optional nontransitive attributes are attributes that may or may not be present in a BGP update message and may or may not be recognized by a BGP speaker. If an optional nontransitive attribute is not recognized by a BGP speaker, it is not passed along to the next BGP speaker. In this question, we have four routers (R1, R2, R3, and R4) that are connected in a full mesh topology and running IBGP. R3 receives the 192.168.0.0/16 route from its EBGP neighbor and advertises it to R1 and R4 with different BGP attribute values. We are asked which statements are correct about the BGP routes on R3 that are learned from the ISP-A neighbor. Based on the information given, we can infer that the correct statements are:
* By default, the next-hop value for these routes is not changed by ISP-A before being sent to R3. This is because the default behavior of EBGP is to preserve the next-hop attribute of the routes received from another EBGP neighbor. The next-hop attribute indicates the IP address of the router that should be used as the next hop to reach the destination network.
* The BGP local-preference value that is used by ISP-A is not advertised to R3. This is because the local-preference attribute is a well-known discretionary attribute that is used to influence the outbound traffic from an autonomous system. The local-preference attribute is only propagated within an autonomous system and is not advertised to external neighbors.
References: : https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13753-25.html :
https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13762-40.html :
https://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/13759-37.html
NEW QUESTION # 27
Which two statements are correct about VPLS tunnels? (Choose two.)
- A. LDP-signaled VPLS tunnels only support control bit 0.
- B. BGP-signaled VPLS tunnels require manual provisioning of sites.
- C. LDP-signaled VPLS tunnels use auto-discovery to provision sites
- D. BGP-signaled VPLS tunnels can use either RSVP or LDP between the PE routers.
Answer: C,D
Explanation:
Explanation
VPLS is a Layer 2 VPN technology that allows multiple sites to connect over a shared IP/MPLS network as if they were on the same LAN. VPLS tunnels can be signaled using either Label Distribution Protocol (LDP) or Border Gateway Protocol (BGP). LDP-signaled VPLS tunnels use auto-discovery to provision sites, meaning that PE routers can automatically discover other PE routers that belong to the same VPLS instance
NEW QUESTION # 28
Exhibit.
Referring to the exhibit; the 10.0.0.0/24 EBGP route is received on R5; however, the route is being hidden.
What are two solutions that will solve this problem? (Choose two.)
- A. Add the internal interface prefix to the BGP routing tables.
- B. Add the external interface prefix to the IGP routing tables
- C. On R4, create a policy to change the BGP next hop to 172.16.1.1 and apply it to IBGP as an export policy
- D. On R4, create a policy to change the BGP next hop to itself and apply it to IBGP as an export policy
Answer: B,D
Explanation:
Explanation
the default behavior for iBGP is to propagate EBGP-learned prefixes without changing the next-hop. This can cause issues if the next-hop is not reachable via the IGP. One solution is to use the next-hop self command on R4, which will change the next-hop attribute to its own loopback address. This way, R5 can reach the next-hop via the IGP and install the route in its routing table.
Another solution is to add the external interface prefix (120.0.4.16/30) to the IGP routing tables of R4 and R5.
This will also make the next-hop reachable via the IGP and allow R5 to use the route. According to 2, this is a possible workaround for a pure IP network, but it may not work well for an MPLS network.
NEW QUESTION # 29
Which three mechanisms are used by Junos platforms to evaluate incoming traffic for CoS purposes? (Choose three )
- A. traffic shapers
- B. fixed classifiers
- C. rewrite rules
- D. behavior aggregate classifiers
- E. multifield classifiers
Answer: B,D,E
Explanation:
Explanation
Junos platforms use different mechanisms to evaluate incoming traffic for CoS purposes, such as:
* Behavior aggregate classifiers: These classifiers use a single field in a packet header to classify traffic into different forwarding classes and loss priorities based on predefined or user-defined values.
* Fixed classifiers: These classifiers use a fixed field in a packet header to classify traffic into different forwarding classes and loss priorities based on predefined values.
* Multifield classifiers: These classifiers use multiple fields in a packet header to classify traffic into different forwarding classes and loss priorities based on user-defined values and filters.
Rewrite rules and traffic shapers are not used to evaluate incoming traffic for CoS purposes, but rather to modify or shape outgoing traffic based on CoS policies.
NEW QUESTION # 30
Exhibit
Referring to the exhibit, what do the brackets [ ] in the AS path identify?
- A. They identify an AS set, which are groups of AS numbers in which the order does not matter
- B. They identify that a BGP confederation is being used to ensure that there are no routing loops.
- C. They identify that the autonomous system number is incomplete and awaiting more information from the BGP protocol.
- D. They identify the local AS number associated with the AS path if configured on the router, or if AS path prepending is configured
Answer: A
Explanation:
Explanation
The brackets [ ] in the AS path identify an AS set, which are groups of AS numbers in which the order does not matter. An AS set is used when BGP aggregates routes from different ASs into a single prefix. For example, if BGP aggregates routes 10.0.0.0/16 and 10.1.0.0/16 from AS 100 and AS 200, respectively, into a single prefix 10.0.0.0/15, then the AS path for this prefix will be [100 200]. An AS set reduces the length of the AS path and prevents routing loops.
NEW QUESTION # 31
In IS-IS, which two statements are correct about the designated intermediate system (DIS) on a multi-access network segment? (Choose two)
- A. A router with a priority of 10 wins the DIS election over a router with a priority of 1.
- B. On the multi-access network, each router forms an adjacency to every other router on the segment
- C. A router with a priority of 1 wins the DIS election over a router with a priority of 10.
- D. On the multi-access network, each router only forms an adjacency to the DIS.
Answer: A,D
Explanation:
Explanation
In IS-IS, a designated intermediate system (DIS) is a router that is elected on a multi-access network segment (such as Ethernet) to perform some functions on behalf of other routers on the same segment. A DIS is responsible for sending network link-state advertisements (LSPs), which describe all the routers attached to the network. These LSPs are flooded throughout a single area. A DIS also generates pseudonode LSPs, which represent the multi-access network as a single node in the link-state database. A DIS election is based on the priority value configured on each router's interface connected to the multi-access network. The priority value ranges from 0 to 127, with higher values indicating higher priority. The router with the highest priority becomes the DIS for the area (Level 1, Level 2, or both). If routers have the same priority, then the router with the highest MAC address is elected as the DIS. By default, routers have a priority value of 64. On a multi-access network, each router only forms an adjacency to the DIS, not to every other router on the segment. This reduces the amount of hello packets and LSP
NEW QUESTION # 32
Exhibit
You must ensure that the VPN backbone is preferred over the back door intra-area link as long as the VPN is available. Referring to the exhibit, which action will accomplish this task?
- A. Create an OSPF sham link between the PE routers.
- B. Enable OSPF traffic-engineering.
- C. Configure an import routing policy on the CE routers that rejects OSPF routes learned on the backup intra-area link.
- D. Configure the OSPF metric on the backup intra-area link that is higher than the L3VPN link.
Answer: A
Explanation:
Explanation
A sham link is a logical link between two PE routers that belong to the same OSPF area but are connected through an L3VPN. A sham link makes the PE routers appear as if they are directly connected, and prevents OSPF from preferring an intra-area back door link over the VPN backbone. To create a sham link, you need to configure the local and remote addresses of the PE routers under the [edit protocols ospf area area-id] hierarchy level1.
NEW QUESTION # 33
Exhibit
Which two statements about the output shown in the exhibit are correct? (Choose two.)
- A. The PE is attached to a single local site.
- B. The PE router has the capability to pop flow labels
- C. There has been a VLAN ID mismatch.
- D. The connection has not flapped since it was initiated.
Answer: A,B
Explanation:
Explanation
According to 1 and 2, BGP Layer 2 VPNs use BGP to distribute endpoint provisioning information and set up pseudowires between PE devices. BGP uses the Layer 2 VPN (L2VPN) Routing Information Base (RIB) to store endpoint provisioning information, which is updated each time any Layer 2 virtual forwarding instance (VFI) is configured. The prefix and path information is stored in the L2VPN database, which allows BGP to make decisions about the best path.
In the output shown in the exhibit, we can see some information about the L2VPN RIB and the pseudowire state. Based on this information, we can infer the following statements:
* The PE is attached to a single local site. This is correct because the output shows only one local site ID (1) under the L2VPN RIB section. A local site ID is a unique identifier for a site within a VPLS domain.
If there were multiple local sites attached to the PE, we would see multiple local site IDs with different prefixes.
* The connection has not flapped since it was initiated. This is correct because the output shows that the uptime of the pseudowire is equal to its total uptime (1w6d). This means that the pseudowire has been up for one week and six days without any interruption or flap.
* There has been a VLAN ID mismatch. This is not correct because the output shows that the remote and local VLAN IDs are both 0 under the pseudowire state section. A VLAN ID mismatch occurs when the remote and local VLAN IDs are different, which can cause traffic loss or misdelivery. If there was a VLAN ID mismatch, we would see different values for the remote and local VLAN IDs.
* The PE router has the capability to pop flow labels. This is correct because the output shows that the flow label pop bit is set under the pseudowire state section. The flow label pop bit indicates that the PE router can pop (remove) the MPLS flow label from the packet before forwarding it to the CE device.
The flow label is an optional MPLS label that can be used for load balancing or traffic engineering purposes.
NEW QUESTION # 34
You want to ensure that L1 IS-IS routers have only the most specific routes available from L2 IS-IS routers.
Which action accomplishes this task?
- A. Configure the ignore-attached-bit parameter on all L2 routers.
- B. Configure all routers to be L1.
- C. Configure the ignore-attached-bit parameter on all L1 routers
- D. Configure all routers to allow wide metrics.
Answer: C
Explanation:
Explanation
The attached bit is a flag in an IS-IS LSP that indicates whether a router is connected to another area or level (L2) of the network. By default, L2 routers set this bit when they advertise their LSPs to L1 routers, and L1 routers use this bit to select a default route to reach other areas or levels through L2 routers. However, this may result in suboptimal routing if there are multiple L2 routers with different paths to other areas or levels.
To ensure that L1 routers have only the most specific routes available from L2 routers, you can configure the ignore-attached-bit parameter on all L1 routers. This makes L1 routers ignore the attached bit and install all interarea routes learned from L2 routers in their routing tables.
NEW QUESTION # 35
You are asked to protect your company's customers from amplification attacks. In this scenario, what is Juniper's recommended protection method?
- A. ASN prepending
- B. destination-based Remote Triggered Black Hole
- C. BGP FlowSpec
- D. unicast Reverse Path Forwarding
Answer: B
Explanation:
Explanation
amplification attacks are a type of distributed denial-of-service (DDoS) attack that exploit the characteristics of certain protocols to amplify the traffic sent to a victim. For example, an attacker can send a small DNS query with a spoofed source IP address to a DNS server, which will reply with a much larger response to the victim. This way, the attacker can generate a large amount of traffic with minimal resources.
One of the methods to protect against amplification attacks is destination-based Remote Triggered Black Hole (RTBH) filtering. This technique allows a network operator to drop traffic destined to a specific IP address or prefix at the edge of the network, thus preventing it from reaching the victim and consuming bandwidth and resources. RTBH filtering can be implemented using BGP to propagate a special route with a next hop of
192.0.2.1 (a reserved address) to the edge routers. Any traffic matching this route will be discarded by the edge routers.
NEW QUESTION # 36
Exhibit
A network is using IS-IS for routing.
In this scenario, why are there two TLVs shown in the exhibit?
- A. Wide metrics have specifically been requested
- B. There are both narrow and wide metric devices in the topology
- C. Both IPv4 and IPv6 are being used in the topology
- D. The interface specified a metric of 100 for L2.
Answer: B
Explanation:
Explanation
TLVs are tuples of (Type, Length, Value) that can be advertised in IS-IS packets. TLVs can carry different kinds of information in the Link State Packets (LSPs). IS-IS supports both narrow and wide metrics for link costs. Narrow metrics use a single octet to encode the link cost, while wide metrics use three octets. Narrow metrics have a maximum value of 63, while wide metrics have a maximum value of 16777215. If there are both narrow and wide metric devices in the topology, IS-IS will advertise two TLVs for each link: one with the narrow metric and one with the wide metric. This allows backward compatibility with older devices that only support narrow metrics12.
NEW QUESTION # 37
Exhibit
user@Rl show configuration interpolated-profile { interpolate {
fill-level [ 50 75 drop-probability [ > }
class-of-service drop-profiles
];
20 60 ];
Which two statements are correct about the class-of-service configuration shown in the exhibit? (Choose two.)
- A. To use this drop profile, you apply it directly to an interface.
- B. To use this drop profile, you reference it in a scheduler.
- C. The drop probability jumps immediately from 20% to 60% when the queue level reaches 75% full.
- D. The drop probability gradually increases from 20% to 60% as the queue level increases from 50% full to
75% full
Answer: B,D
Explanation:
Explanation
class-of-service (CoS) is a feature that allows you to prioritize and manage network traffic based on various criteria, such as application type, user group, or packet loss priority. CoS uses different components to classify, mark, queue, schedule, shape, and drop traffic according to the configured policies.
One of the components of CoS is drop profiles, which define how packets are dropped when a queue is congested. Drop profiles use random early detection (RED) algorithm to drop packets randomly before the queue is full, which helps to avoid global synchronization and improve network performance. Drop profiles can be discrete or interpolated. A discrete drop profile maps a specific fill level of a queue to a specific drop probability. An interpolated drop profile maps a range of fill levels of a queue to a range of drop probabilities and interpolates the values in between.
In the exhibit, we can see that the class-of-service configuration shows an interpolated drop profile with two fill levels (50 and 75) and two drop probabilities (20 and 60). Based on this configuration, we can infer the following statements:
* The drop probability jumps immediately from 20% to 60% when the queue level reaches 75% full. This is not correct because the drop profile is interpolated, not discrete. This means that the drop probability gradually increases from 20% to 60% as the queue level increases from 50% full to 75% full. The drop probability for any fill level between 50% and 75% can be calculated by using linear interpolation formula.
* The drop probability gradually increases from 20% to 60% as the queue level increases from 50% full to
75% full. This is correct because the drop profile is interpolated and uses linear interpolation formula to calculate the drop probability for any fill level between 50% and 75%. For example, if the fill level is
60%, the drop probability is 28%, which is calculated by using the formula: (60 - 50) / (75 - 50) * (60 -
20) + 20 = 28.
* To use this drop profile, you reference it in a scheduler. This is correct because a scheduler is a component of CoS that determines how packets are dequeued from different queues and transmitted on an interface. A scheduler can reference a drop profile by using the random-detect statement under the
[edit class-of-service schedulers] hierarchy level. For example: scheduler test { transmit-rate percent 10; buffer-size percent 10; random-detect test-profile; }
* To use this drop profile, you apply it directly to an interface. This is not correct because a drop profile cannot be applied directly to an interface. A drop profile can only be referenced by a scheduler, which can be applied to an interface by using the scheduler-map statement under the [edit class-of-service interfaces] hierarchy level. For example: interfaces ge-0/0/0 { unit 0 { scheduler-map test-map; } }
NEW QUESTION # 38
Exhibit
Referring to the exhibit, a working L3VPN exists that connects VPN-A sites CoS is configured correctly to match on the MPLS EXP bits of the LSP, but when traffic is sent from Site-1 to Site-2, PE-2 is not classifying the traffic correctly What should you do to solve the problem?
- A. Configure the explicit-null statement on PE-1.
- B. Configure VPN prefix mapping for the PE-1_to_PE-2 LSP
- C. Configure the explicit-null statement on PE-2
- D. Set a static CoS value for the PE-1_to_PE-2 LSP
Answer: A
Explanation:
Explanation
The explicit-null statement enables the PE router to send an MPLS label with a value of 0 (explicit null) instead of an IP header for packets destined to the VPN customer sites. This allows the penultimate hop router (the router before the egress PE router) to preserve the EXP bits of the MPLS label and pass them to the egress PE router. The egress PE router can then use these EXP bits to classify the traffic according to the CoS policy2
. In this example, PE-1 should configure the explicit-null statement under [edit protocols mpls label-switched-path PE-1_to_PE-2] hierarchy level.
NEW QUESTION # 39
......
Latest 100% Passing Guarantee - Brilliant JN0-664 Exam Questions PDF: https://www.prepawayexam.com/Juniper/braindumps.JN0-664.ete.file.html
JN0-664 Exam Dumps - Try Best JN0-664 Exam Questions: https://drive.google.com/open?id=1FsSLXV2_6EQ6-BURNuvyLujn5t7uiPKQ