2023 Updated Juniper JN0-664 Certification Study Guide Pass JN0-664 Fast
JN0-664 Dumps PDF 2023 Program Your Preparation EXAM SUCCESS
Juniper JN0-664 is a certification exam designed for professionals who want to demonstrate their skills and knowledge in service provider routing and switching technologies. This is a professional-level certification exam that tests the candidate's ability to implement, configure, and troubleshoot Junos OS-based service provider routing and switching platforms. The JNCIP-SP certification is intended for individuals who are experienced in the service provider domain and want to advance their career in this field.
The JN0-664 exam is one of the most comprehensive exams offered by Juniper Networks. JN0-664 exam covers a wide range of topics, including protocol-independent routing, BGP, OSPF, ISIS, MPLS, Layer 2 VPNs, Layer 3 VPNs, multicast, and QoS. Candidates must have a deep understanding of these topics to pass the exam.
NEW QUESTION # 31
Which two statements are correct about the customer interface in an LDP-signaled pseudowire? (Choose two)
- A. When the encapsulation is ethemet-ccc, tagged and untagged frames are both accepted in the data plane.
- B. When the encapsulation is ethernet-ccc, only frames without a VLAN tag are accepted in the data plane
- C. When the encapsulation is vLan-ccc or extended-vlan-ccc, the configured VLAN tag is included in the control plane LDP advertisement
- D. When the encapsulation is vlan-ccc or extended-vlan-ccc, the configured VLAN tag is not included in the control plane LDP advertisement
Answer: A,C
Explanation:
Explanation
The customer interface in an LDP-signaled pseudowire is the interface on the PE router that connects to the CE device. An LDP-signaled pseudowire is a type of Layer 2 circuit that uses LDP to establish a point-to-point connection between two PE routers over an MPLS network. The customer interface can have different encapsulation types depending on the type of traffic that is carried over the pseudowire. The encapsulation types are ethernet-ccc, vlan-ccc, extended-vlan-ccc, atm-ccc, frame-relay-ccc, ppp-ccc, cisco-hdlc-ccc, and tcc-ccc. Depending on the encapsulation type, the customer interface can accept or reject tagged or untagged frames in the data plane, and include or exclude VLAN tags in the control plane LDP advertisement. The following table summarizes the behavior of different encapsulation types:
NEW QUESTION # 32
Your organization manages a Layer 3 VPN for multiple customers To support advanced route than one BGP community on advertised VPN routes to remote PE routers.
Which routing-instance configuration parameter would support this requirement?
- A. vrf-target export
- B. vrf-import
- C. vrf-export
- D. vrf-target import
Answer: A
Explanation:
Explanation
The vrf-target export parameter is used to specify one or more BGP extended community attributes that are attached to VPN routes when they are exported from a VRF routing instance to remote PE routers. This parameter allows you to control which VPN routes are accepted by remote PE routers based on their import policies. You can specify more than one vrf-target export value for a VRF routing instance to support advanced route filtering or route leaking scenarios.
NEW QUESTION # 33
Exhibit
You are examining an L3VPN route that includes the information shown in the exhibit Which statement is correct in this scenario?
- A. The information shows a route target
- B. The information shows a Type 1 route distinguisher.
- C. The information shows a Type 2 route distinguisher.
- D. The information shows a Type 0 route distinguisher
Answer: D
Explanation:
Explanation
The information shows a Type 0 route distinguisher, which is one of the three types of route distinguishers defined by RFC 4364. A route distinguisher is a 64-bit value that is prepended to an IPv4 address to create a VPN-IPv4 address, which is unique within a VPN routing and forwarding (VRF) table. A Type 0 route distinguisher has two fields: an administrator subfield (2 bytes) and an assigned number subfield (6 bytes). The administrator subfield can be an AS number or an IP address, and the assigned number subfield can be any value assigned by the administrator. In this example, the administrator subfield is 65530 (an AS number) and the assigned number subfield is 1.
NEW QUESTION # 34
You are configuring a BGP signaled Layer 2 VPN across your MPLS enabled core network. In this scenario, which statement is correct?
- A. This type of VPN requires the support of the inet-vpn NLRI on all core BGP devices
- B. This type of VPN only supports Ethernet interfaces when connecting to CE devices.
- C. You must use the same route-distinguiaher value on both PE devices.
- D. You must assign a unique site number to each attached site's configuration.
Answer: A
Explanation:
Explanation
BGP signaled Layer 2 VPN is a type of VPN that uses BGP to distribute VPN labels and information for Layer 2 connectivity between sites over an MPLS network. BGP signaled Layer 2 VPN requires the support of the l2vpn NLRI on all core BGP devices . The l2vpn NLRI is a new address family that carries Layer 2 VPN information such as the VPN identifier, the attachment circuit identifier, and the route distinguisher. The l2vpn NLRI is used for both auto-discovery and signaling of Layer 2 VPNs . In this scenario, we are configuring a BGP signaled Layer 2 VPN across an MPLS enabled core network. Therefore, we need to ensure that all core BGP devices support the l2vpn NLRI.
References: 1:
https://www.juniper.net/documentation/us/en/software/junos/vpn-l2/topics/concept/vpn-layer-2-overview.html
2:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mp_l2_vpns/configuration/xe-16/mp-l2-vpns-xe-16-book/vpl
NEW QUESTION # 35
Exhibit
Referring to the exhibit, which statement is true?
- A. The 10.101.1.0/24 route will only be shared if BGP is configured in the routing instance
- B. The 10.101.1.0/24 route will be shared if the auto-export parameter is configured
- C. The 10.101.1 0/24 route will be shared if there are other VRFs that use the same route target community
- D. The 10.101.1.0/24 route will be shared if the vrf-table-label parameter is configured.
Answer: B
Explanation:
Explanation
The auto-export parameter is a routing option that allows a routing instance to share routes with other routing instances or the master routing table. The auto-export parameter automatically exports routes from one routing instance to another based on the route target communities attached to the routes. In this scenario, the
10.101.1.0/24 route will be shared if the auto-export parameter is configured under [edit routing-options] hierarchy level.
NEW QUESTION # 36
Exhibit
The environment is using BGP All devices are in the same AS with reachability redundancy Referring to the exhibit, which statement is correct?
- A. Peering is dynamically discovered between all devices.
- B. Client1 is peered to Client2 and Client3.
- C. RR2 is in an OpenConfirm State until RR1 becomes unreachable.
- D. RR1 is peered to Client2 and RR2
Answer: D
Explanation:
Explanation
BGP route reflectors are BGP routers that are allowed to ignore the IBGP loop avoidance rule and advertise IBGP learned routes to other IBGP peers under specific conditions. BGP route reflectors can reduce the number of IBGP sessions and updates in a network by eliminating the need for a full mesh of IBGP peers.
BGP route reflectors can have three types of peerings:
* EBGP neighbor: A BGP router that belongs to a different autonomous system (AS) than the route reflector.
* IBGP client neighbor: An IBGP router that receives reflected routes from the route reflector. A client does not need to peer with other clients or non-clients.
* IBGP non-client neighbor: An IBGP router that does not receive reflected routes from the route reflector. A non-client needs to peer with other non-clients and the route reflector.
In the exhibit, we can see that RR1 and RR2 are route reflectors in the same AS with reachability redundancy.
They have two types of peerings: EBGP neighbors (R1 and R4) and IBGP client neighbors (Client1, Client2, and Client3). RR1 and RR2 are also peered with each other as IBGP non-client neighbors.
NEW QUESTION # 37
When building an interprovider VPN, you notice on the PE router that you have hidden routes which are received from your BGP peer with family inet labeled-unica3t configured.
Which parameter must you configure to solve this problem?
- A. Under the protocols ospf hierarchy, add the traffic-engineering parameter.
- B. Under the family inet labeled-unicast hierarchy, add the explicit null parameter.
- C. Under the protocols mpls hierarchy, add the traffic-engineering parameter
- D. Under the family inet labeled-unicast hierarchy, add the resolve-vpn parameter.
Answer: D
Explanation:
Explanation
The resolve-vpn parameter is a BGP option that allows a router to resolve labeled VPN-IPv4 routes using unlabeled IPv4 routes received from another BGP peer with family inet labeled-unicast configured. This option enables interprovider VPNs without requiring MPLS labels between ASBRs or using VRF tables on ASBRs. In this scenario, you need to configure the resolve-vpn parameter under [edit protocols bgp group external family inet labeled-unicast] hierarchy level on both ASBRs.
NEW QUESTION # 38
Exhibit
Which two statements are true about the OSPF adjacency displayed in the exhibit? (Choose two.)
- A. There is a mismatch in the dead interval parameter between routers R1 and R2.
- B. There is a mismatch in the OSPF hold timer parameter between routers R1 and R2.
- C. There is a mismatch in the poll interval parameter between routers R1 and R2.
- D. There is a mismatch in the hello interval parameter between routers R1 and R2
Answer: A,D
Explanation:
Explanation
The hello interval is the time interval between two consecutive hello packets sent by an OSPF router on an interface. The dead interval is the time interval after which a neighbor is declared down if no hello packets are received from it. These parameters must match between two OSPF routers for them to form an adjacency. In the exhibit, router R1 has a hello interval of 10 seconds and a dead interval of 40 seconds, while router R2 has a hello interval of 30 seconds and a dead interval of 120 seconds. This causes a mismatch and prevents them from becoming neighbors23.
NEW QUESTION # 39
You are configuring a BGP signaled Layer 2 VPN across your MPLS enabled core network. Your PE-2 device connects to two sites within the s VPN In this scenario, which statement is correct?
- A. By default on PE-2, the site's local ID is automatically assigned a value of 0 and must be configured to match the total number of attached sites.
- B. You must create a unique Layer 2 VPN routing instance for each site on the PE-2 device.
- C. By default on PE-2, the remote site IDs are automatically assigned based on the order that you add the interfaces to the site configuration.
- D. You must use separate physical interfaces to connect PE-2 to each site.
Answer: C
Explanation:
Explanation
BGP Layer 2 VPNs use BGP to distribute endpoint provisioning information and set up pseudowires between PE devices. BGP uses the Layer 2 VPN (L2VPN) Routing Information Base (RIB) to store endpoint provisioning information, which is updated each time any Layer 2 virtual forwarding instance (VFI) is configured. The prefix and path information is stored in the L2VPN database, which allows BGP to make decisions about the best path.
In BGP Layer 2 VPNs, each site has a unique site ID that identifies it within a VFI. The site ID can be manually configured or automatically assigned by the PE device. By default, the site ID is automatically assigned based on the order that you add the interfaces to the site configuration. The first interface added to a site configuration has a site ID of 1, the second interface added has a site ID of 2, and so on.
Option D is correct because by default on PE-2, the remote site IDs are automatically assigned based on the order that you add the interfaces to the site configuration. Option A is not correct because by default on PE-2, the site's local ID is automatically assigned a value of 0 and does not need to be configured to match the total number of attached sites. Option B is not correct because you do not need to create a unique Layer 2 VPN routing instance for each site on the PE-2 device. You can create one routing instance for all sites within a VFI. Option C is not correct because you do not need to use separate physical interfaces to connect PE-2 to each site. You can use subinterfaces or service instances on a single physical interface.
NEW QUESTION # 40
Exhibit
You want to use both links between R1 and R2 Because of the bandwidth difference between the two links, you must ensure that the links are used as much as possible.
Which action will accomplish this goal?
- A. Define a policy to tag routes with the appropriate bandwidth community.
- B. Disable multipath.
- C. Ensure that the metric-out parameter on the Gigabit Ethernet interface is higher than the 10 Gigibit Ethernet interface.
- D. Enable per-prefix load balancing.
Answer: D
Explanation:
Explanation
VPLS is a Layer 2 VPN technology that allows multiple sites to connect over a shared IP/MPLS network as if they were on the same LAN. VPLS tunnels can be signaled using either Label Distribution Protocol (LDP) or Border Gateway Protocol (BGP). In this question, we have two links between R1 and R2 with different bandwidths (10 Gbps and 1 Gbps). We want to use both links as much as possible for VPLS traffic. To achieve this, we need to enable per-prefix load balancing on both routers. Per-prefix load balancing is a feature that allows a router to distribute traffic across multiple equal-cost or unequal-cost paths based on the destination prefix of each packet. This improves the utilization of multiple links and provides better load sharing than per-flow load balancing, which distributes traffic based on a hash of source and destination addresses4. Per-prefix load balancing can be enabled globally or per interface using the load-balance per-packet command.
NEW QUESTION # 41
Which two statements are correct about reflecting inet-vpn unicast prefixes in BGP route reflection? (Choose two.)
- A. Clients add their originator ID when advertising routes to their route reflector
- B. Route reflectors do not change any existing BGP attributes by default when advertising routes.
- C. A BGP peer does not require any configuration changes to become a route reflector client.
- D. Route reflectors add their cluster ID to the AS path when readvertising client routes.
Answer: B,C
Explanation:
Explanation
Route reflection is a BGP feature that allows a router to reflect routes learned from one IBGP peer to another IBGP peer, without requiring a full-mesh IBGP topology. Route reflectors do not change any existing BGP attributes by default when advertising routes, unless explicitly configured to do so. A BGP peer does not require any configuration changes to become a route reflector client, only the route reflector needs to be configured with the client parameter under [edit protocols bgp group group-name neighbor neighbor-address] hierarchy level.
NEW QUESTION # 42
Exhibit
Referring to the exhibit, you must provide Internet access for VPN-A using CE-1 as the hub CE.
Which two statements are correct in this situation? (Choose two.)
- A. Internet traffic from Site 2 takes the path of PE-2 -> PE-1 -> GW-1.
- B. Internet traffic from Site 2 takes the path of PE-2 -> PE-1 -> CE-1 -> PE-1 -> GW-1.
- C. You must use RIB groups to leak routes between the inet. o and vpn-a. inet. o tables.
- D. RIB groups are not needed to leak routes between the inet. 0 and VPN-A. inet. 0 tables,
Answer: B,C
Explanation:
Explanation
To provide Internet access for VPN-A using CE-1 as the hub CE, you need to do the following:
* You must use RIB groups to leak routes between the inet.0 and vpn-a.inet.0 tables on PE-1 and CE-1.
RIB groups are routing options that allow you to import routes from one routing table into another routing table based on certain criteria. In this scenario, you need to configure RIB groups on PE-1 and CE-1 to import Internet routes from inet.0 into vpn-a.inet.0 and vice versa.
* Internet traffic from Site 2 takes the path of PE-2 -> PE-1 -> CE-1 -> PE-1 -> GW-1. This is because Site 2 does not have direct Internet access and needs to use CE-1 as its default gateway for Internet traffic. Site 2 sends its Internet traffic to PE-2, which forwards it to PE-1 based on VPN-A routes. PE-1 then sends it to CE-1 based on RIB group import policy. CE-1 then sends it back to PE-1 based on its default route pointing to GW-1. PE-1 then forwards it to GW-1 based on RIB group import policy again.
NEW QUESTION # 43
Exhibit
You must ensure that the VPN backbone is preferred over the back door intra-area link as long as the VPN is available. Referring to the exhibit, which action will accomplish this task?
- A. Configure an import routing policy on the CE routers that rejects OSPF routes learned on the backup intra-area link.
- B. Create an OSPF sham link between the PE routers.
- C. Enable OSPF traffic-engineering.
- D. Configure the OSPF metric on the backup intra-area link that is higher than the L3VPN link.
Answer: B
Explanation:
Explanation
A sham link is a logical link between two PE routers that belong to the same OSPF area but are connected through an L3VPN. A sham link makes the PE routers appear as if they are directly connected, and prevents OSPF from preferring an intra-area back door link over the VPN backbone. To create a sham link, you need to configure the local and remote addresses of the PE routers under the [edit protocols ospf area area-id] hierarchy level1.
NEW QUESTION # 44
Exhibit
The network shown in the exhibit is based on IS-IS
Which statement is correct in this scenario?
- A. The NSEL byte for Area 0001 is 00.
- B. The area address is two bytes.
- C. The routers are using unnumbered interfaces
- D. The system IDofR1_2 is 192.168.16.1
Answer: A
Explanation:
Explanation
IS-IS is an interior gateway protocol that uses link-state routing to exchange routing information among routers within a single autonomous system. IS-IS uses two types of addresses to identify routers and areas:
system ID and area address. The system ID is a unique identifier for each router in an IS-IS domain. The system ID is 6 octets long and can be derived from the MAC address or manually configured. The area address is a variable-length identifier for each area in an IS-IS domain. The area address can be 1 to 13 octets long and is composed of high-order octets of the address. An IS-IS instance may be assigned multiple area addresses, which are considered synonymous. Multiple synonymous area addresses are useful when merging or splitting areas in the domain1. In this question, we have a network based on IS-IS with four routers (R1_1, R1_2, R2_1, and R2_2) belonging to area 0001. The area address for area 0001 is 49.0001. The NSEL byte for area 0001 is the last octet of the address, which is 01. The NSEL byte stands for Network Service Access Point Selector (NSAP Selector) and indicates the type of service requested from the network layer2. Therefore, the correct statement in this scenario is that the NSEL byte for area 0001 is 01.
References: 1:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_isis/configuration/xe-16/irs-xe-16-book/irs-ovrvw-cf.
2:
https://www.juniper.net/documentation/us/en/software/junos/is-is/topics/concept/is-is-routing-overview.html
NEW QUESTION # 45
Exhibit
You have MAC addresses moving in your EVPN environment
Referring to the exhibit, which two statements are correct about the sequence number? (Choose two)
- A. It is advertised using a Type 2 message
- B. It helps the local PE to identify the latest advertisement.
- C. It identifies MAC addresses that should be discarded.
- D. It resolves conflicting MAC address ownership claims.
Answer: B,D
Explanation:
Explanation
The sequence number is a field in the MAC mobility extended community that is used to resolve conflicting MAC address ownership claims and to help the local PE to identify the latest advertisement. The sequence number is incremented by one for every MAC address mobility event, such as when a host moves from one Ethernet segment to another segment in the EVPN network. The PE device that receives multiple MAC advertisements for the same MAC address chooses the one with the highest sequence number as the most recent and valid advertisement.
NEW QUESTION # 46
Which two statements are correct about a sham link? (Choose two.)
- A. The PEs exchange Type 3 OSPF LSAs instead of Type 1 OSPF LSAs for the L3VPN routes.
- B. It creates a BGP multihop neighborship between two PE routers.
- C. The PEs exchange Type 1 OSPF LSAs instead of Type 3 OSPF LSAs for the L3VPN routes
- D. It creates an OSPF multihop neighborship between two PE routers.
Answer: C,D
Explanation:
Explanation
A sham link is a logical link between two PE routers that belong to the same OSPF area but are connected through an L3VPN. A sham link makes the PE routers appear as if they are directly connected, and prevents OSPF from preferring an intra-area back door link over the VPN backbone. A sham link creates an OSPF multihop neighborship between the PE routers using TCP port 646. The PEs exchange Type 1 OSPF LSAs instead of Type 3 OSPF LSAs for the L3VPN routes, which allows OSPF to use the correct metric for route selection1.
NEW QUESTION # 47
Exhibit
Which two statements about the configuration shown in the exhibit are correct? (Choose two.)
- A. This VPN connects customer sites that use the same AS number
- B. A Layer 2 VPN is configured.
- C. This VPN connects customer sites that use different AS numbers.
- D. A Layer 3 VPN is configured.
Answer: C,D
Explanation:
Explanation
The configuration shown in the exhibit is for a Layer 3 VPN that connects customer sites that use different AS numbers. A Layer 3 VPN is a type of VPN that uses MPLS labels to forward packets across a provider network and BGP to exchange routing information between PE routers and CE routers. A Layer 3 VPN allows customers to use different routing protocols and AS numbers at their sites, as long as they can peer with BGP at the PE-CE interface. In this example, CE-1 is using AS 65530 and CE-2 is using AS 65531, but they can still communicate through the VPN because they have BGP sessions with PE-1 and PE-2, respectively.
NEW QUESTION # 48
......
Get Perfect Results with Premium JN0-664 Dumps Updated 67 Questions: https://www.prep4surereview.com/JN0-664-latest-braindumps.html
Free JN0-664 Exam Study Guide for the NEW Dumps Test Engine: https://drive.google.com/open?id=1ftK1sThAsTtTbro4IAMg4LT12IqHqPfp
