Real of JN0-643 rapidshare materials and forum for Juniper certification for IT candidates, Real Success Guaranteed with Updated JN0-643 pdf dumps vce Materials. 100% PASS Enterprise Routing and Switching, Professional (JNCIP-ENT) exam Today!
2021 Sep JN0-643 free practice exam
Q91. -- Exhibit --
user@SwitchA> show dot1x interface detail ge-0/0/2.0
ge-0/0/2.0
RolE. Authenticator
Administrative statE. Auto
Supplicant modE. Multiple
Number of retries: 3
Quiet perioD. 60 seconds
Transmit perioD. 30 seconds
Mac Radius: Enabled
Mac Radius Restrict: Enabled
Reauthentication: Enabled
Configured Reauthentication interval: 3600 seconds
Supplicant timeout: 30 seconds
Server timeout: 30 seconds
Maximum EAPOL requests: 2
Guest VLAN member: <not configured>
Number of connected supplicants: 2
user@SwitchA>
-- Exhibit --
Click the Exhibit button.
Host 1, Host 2, and Host 3 are connected to Switch A on interface ge-0/0/2. Host 1 and Host 2 do not support 802.1X. They can authenticate and connect to the Internet. Host 3 was added and it supports 802.1X; however, it is unable to authenticate.
Referring to the exhibit, how do you allow Host 3 to authenticate to the network but maintain secure access?
A. Enable fallback authentication for 802.1X.
B. Disable MAC RADIUS Restrict option on ge-0/0/2.
C. Disable MAC RADIUS option on ge-0/0/2.
D. Enable Administrative mode for 802.1X.
Answer: B
Q92. A medium-sized enterprise has some devices that are 802.1X capable and some that are not. Any device that fails authentication must be provided limited access through a VLAN called NONAUTH.
How do you provide this access?
A. Configure NONAUTH VLAN as the guest VLAN.
B. Configure NONAUTH VLAN as the server-reject VLAN.
C. Configure NONAUTH VLAN as the guest VLAN and the server-reject VLAN.
D. Configure a separate VLAN for each type of user: 802.1X and non-802.1X.
Answer: C
Q93. -- Exhibit --
user@router> show interfaces ge-0/0/0 extensive | find "Queue counters"
Queue counters: Queued packets Transmitted packets Dropped packets
0 best-effort 35244 35244 0
1 expedited-fo 258963 59852 199111
2 assured-forw 0 0 0
3 network-cont 1625847 1625847 0
… -- Exhibit --
Click the Exhibit button.
You recently deployed an SRX Series Gateway in your network. It uses the default class of service configuration.
Based on the output in the exhibit, what reason explains the packet drops in Queue 1?
A. Interface ge-0/0/0 should be used only for management network operations.
B. Queue 0 has higher priority than Queue 1.
C. A policer is reclassifying all traffic into Queue 1.
D. No bandwidth reservation exists on Queue 1.
Answer: D
Q94. You have a requirement for a device to provide 20 W of power over Ethernet.
What meets this requirement?
A. Bond two standard PoE ports together to achieve 30.8 W of power.
B. Install an external redundant power supply in the switch to increase the total power load.
C. Select a switch that has PoE+ support.
D. Enable LLDP-MED to transfer power from other switches.
Answer: C
Q95. Click the Exhibit button.
Referring to the exhibit, which type of LSA will be seen on router A for routes originating in Customer A's network?
A. Type 7 LSA
B. Type 2 LSA
C. Type 5 LSA
D. Type 1 LSA
Answer: C
Refresh JN0-643 test questions:
Q96. Click the Exhibit button.
Site A is sending voice traffic marked with DSCP code EF. SRX A has the default CoS classifier.
Into which forwarding class is SRX A classifying traffic?
A. best-effort
B. expedited-forwarding
C. network-control
D. assured-forwarding
Answer: A
Q97. Which protocol reachability is advertised by OSPFv2?
A. IPv4
B. IPv5
C. IPv6
D. ISO
Answer: A
Q98. Which statement is true regarding the SPF algorithm?
A. The SPF algorithm is run on a per-domain basis.
B. If you apply an import policy to OSPF, it keeps LSAs from being flooded, and the SPF calculation can be affected.
C. There are two databases used in the calculation, the link-state database and the tree database.
D. The SPF calculation is run on a per-area basis on each router.
Answer: D
Q99. You want to provide reachability to your data center by advertising its subnet throughout your upstream peer AS. However, you do not want this prefix advertised any further.
Which BGP community value would be used to meet this requirement?
A. no-advertise
B. no-export
C. no-export-subconfed
D. 65512 - 65535
Answer: B
Q100. Click the Exhibit button.
A contractor needs to connect a laptop to your company network, but your company has no wireless access and each office has only a single network port for an employee laptop. You have an IP phone with a data port available and you have access to the switch connected to it. You can also add the contractor's MAC address to the RADIUS server database.
Referring to the exhibit, which three commands will allow access? (Choose three.)
A. set protocols dot1x authenticator authentication-profile-name radius_profile interface ge-0/0/16.0 mac-radius
B. set interfaces ge-0/0/16.0 family ethernet-switching port-mode trunk
C. set interfaces ge-0/0/16.0 family ethernet-switching vlan members contractor
D. set protocols dot1x authenticator authentication-profile-name radius_profile interface ge-0/0/16.0 supplicant multiple
E. set interfaces ge-0/0/16.0 family ethernet-switching vlan members all
Answer: A,C,D