Question 1.
Click the Exhibit button.
A user on port ge-0/0/12 fails an 802.1x authentication attempt.

What is the next action of Switch A?

A. It puts the Authenticator in the HELD status where all EAPOL packets are discarded until the 
    default hold timer expires.
B. It communicates with the RADIUS server to confirm the user's password.
C. It transmits an EAP-Identity-Request packet immediately after it sends out EAP-Failure.
D. It tries to authenticate the user using MAC radius authentication.

Answer: C

Explanation:

Question 2.
Click the Exhibit button.

Based on the configuration in the exhibit, why are you seeing drops in the best-effort queue on the SRX Series platform?

A. The drop-profile fill level is set too low.
B. Packets are dropped by a firewall policy.
C. The best-effort queue is being shaped.
D. The scheduler is not being applied correctly.

Answer: C

Explanation:

Question 3.
Click the Exhibit button.
Based on the output shown in the exhibit, why is VSTP not working for VLAN 100?

A. No interfaces are assigned to VLAN 100.
B. Your MSTI is misconfigured.
C. RSTP is configured in addition to VSTP.
D. No native VLAN is configured.

Answer: A

Explanation:

Question 4.
If your WAN-edge router is multihomed to different ISPs, which two BGP attributes would you modify to affect outbound traffic? (Choose two.)

A. MED
B. origin
C. local preference
D. community

Answer: B, C

Explanation:

Question 5.
When 802.1X, MAC-RADIUS, and Captive Portal are enabled on an interface, which authentication sequence occurs?

A. The authentication sequence is based on the order of the configuration.
B. If MAC-RADIUS is rejected, Captive Portal will start. If Captive portal is timed out, 802.1X will 
    start.
C. If 802.1X times out, then MAC-RADIUS will start. If MAC-RADIUS is timed out by the RADIUS  
    server, then Captive Portal will start.
D. If 802.1X times out, then MAC-RADIUS will start. If MAC-RADIUS is rejected by the RADIUS  
    server, then Captive Portal will start.

Answer: D

Explanation:

Question 6.
A medium-sized enterprise has some devices that are 802.1X capable and some that are not. 

Any device that fails authentication must be provided limited access through a VLAN called NONAUTH. How do you provide this access?

A. Configure NONAUTH VLAN as the guest VLAN.
B. Configure NONAUTH VLAN as the server-reject VLAN.
C. Configure NONAUTH VLAN as the guest VLAN and the server-reject VLAN
D. Configure a separate VLAN for each type of user: 802.1X and non-802.1X.

Answer: C

Explanation:

Question 7.
Click the Exhibit button.
Host 1, Host 2, and Host 3 are connected to Switch A on interface ge-0/0/2. Host 1 and Host 2 have been authenticated through 802.1X, however Host 3 does not have an 802.1X supplicant. 

Referring to the configuration in the exhibit, how can Host 3 be authenticated?

A. secure-authentication option of HTTP or HTTPS must be configured for Captive Portal.
B. MAC RADIUS authentication must be configured for Host 3 instead of Captive Portal.
C. A new authentication-profile must be configured because 802.1X and Captive Portal cannot  
    have the same authentication-profile.
D. The 802.1X server failback feature must be configured for Host 3 to allow non-802.1X clients  
   to authenticate.

Answer: B

Explanation:

Question 8.
A user complains about connectivity problems from their IP address (10.1.1.87) to a server (10.65.1.100).

Which Junos command can help verify connectivity in the network? (Choose two.) 

A. mroute
B. traceoptions
C. ping
D. clear bgp neighbor

Answer: B, C

Explanation:

Question 9.
Click the Exhibit button.
The exhibit shows the output of an OSPF router LSA.

Which interface ID represents the router's loopback address?

A. ID 10.1.1.0
B. ID 10.0.3.4
C. ID 10.0.3.3
D. ID 10.0.2.4

Answer: B

Explanation:

Question 10.
Click the Exhibit button. 
Referring to the output in the exhibit, why does the router prefer the path toward interface ge- 0/0/0.0 for the 20.0.0.0/8 route?

A. The origin is IGP.
B. The origin is unknown.
C. The AS path is longer.
D. Multihop is enabled.

Answer: A

Explanation:

	Web www.certsbraindumps.com