KillTest 质量更高服务更好学习资料半年免费更新服务

Size: px

Start display at page:

Download "KillTest 质量更高服务更好学习资料半年免费更新服务"

欧坡周
4 years ago
Views:

1 KillTest 质量更高服务更好学习资料半年免费更新服务

2 Exam : JN0-350 Title : ER.Specialist(JNCIS-ER) Version : Demo 1 / 13

3 1. Click on the Exhibit button. In the exhibit, what will be the result of a packet sourced from address when the filter is applied? A.The packet will be counted and then accepted. B.The packet will be counted and then discarded. C.The packet will be accepted with no other action. D.The packet will be discarded with no other action. Answer: A 2. You found a log message from your router as follows: Aug 9 19:16:51 radon-re0 chassisd[2622]: CHASSISD_FRU_EVENT: scb_recv_slot_attach: attached FPC 0 Which part of the message code indicates the process that generated the message? A.radon-re0 B.chassisd[2622] C.CHASSISD_FRU_EVENT D.scb_recv_slot_attach Answer: B 3. Which statement is true about external BGP peering sessions? A.You must specify a ttl for each peering session. B.A peer-group must be defined as type external. 2 / 13

4 C.A peer-as must be configured for each peering session. D.You must specify a local-address for each peering session. Answer: C 4. What is the purpose of an ASBR summary LSA? A.to reach networks that are outside of your area B.to summarize all ASBR routes into a single route C.to reach ASBR routers that are outside of your area D.to reach ASBR routers in your area when used in a multi area OSPF network Answer: C 5. Click on the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.) A.The service-set is applied directly to the interface. B.A route pointing to the service interface must be present. C.The "input" match direction for the service-set is from the FTP server towards the "Trusted" network. D.The "input" match direction for the service-set is from the "Trusted" network towards the FTP server. Answer: BD 6. You are examining the output of the stateful firewall session table. 3 / 13

5 Which state indicates that the router is using an application-layer gateway (ALG) to forward traffic? A.NAT B.ALG C.Watch D.Forward Answer: C 7. You have enabled traceoptions for IKE using the configuration command set services ipsec-vpn traceoptions flag ike. Which command will display the resulting IKE logs? A.show log ike B.show log kmd C.show log messages D.show log ipsec-vpn Answer: B 8. Which two statements are true about scheduler maps? (Choose two.) A.A default scheduler map is applied to each interface. B.A scheduler map is only needed on low speed interfaces. C.A scheduler map is applied before a multifield firewall filter. D.A scheduler map controls the resources assigned to a specific queue. Answer: AD 9. Which statement is true when configuring CoS? A.You define the transmit rate and buffer size in the scheduler map. B.Priority and transmission rate define how packets are stored and dropped. C.Buffer size and RED configuration define the priority and transmission rate. D.Buffer size and RED configuration define how packets are stored and dropped. Answer: D 4 / 13

6 10. You have policy-statement my-policy configured at the [edit policy-options] configuration hierarchy. At which two configuration hierarchies could you reference this policy? (Choose two.) A.[edit protocols bgp] B.[edit routing-options forwarding-table] C.[edit interfaces lo0 family inet filter] D.[edit services service-set my-service-set] Answer: AB 11. Click the Exhibit button. In the exhibit, which configuration hierarchy may my-policy be defined? A.[edit firewall] B.[edit access-list] C.[edit policy-options] D.[edit services stateful-firewall] Answer: A 12. You are at the [edit policy-options policy-statement my-policy term one] configuration hierarchy. Which two commands are valid syntax? (Choose two.) A.set from metric 2 B.set then term three C.set then counter four D.set from prefix-list five 5 / 13

7 Answer: AD 13. Click the Exhibit button. In the exhibit, which export policy or policies will be applied to BGP neighbor ? A.local-routes B.customer-filter C.local-routes and block-privates D.customer-filter, local-routes and block-privates Answer: A 14. Click the Exhibit button. 6 / 13

8 In the exhibit, which statement is true of a BGP-learned route to /24 that is evaluated against the BGP export policy chain? A.It is rejected. B.It is accepted and the metric is set to 5. C.It is accepted and the metric is set to 10. D.It is accepted and the metric is not modified. Answer: C 7 / 13

9 15. Which statement is true when applying policies to BGP? A.Neighbor policies override group and global policies. B.Global policies override group and neighbor policies. C.A route must pass through all global, group, and neighbor policies before it can be accepted. D.You must apply a policy directly to a neighbor if you want to filter routes to or from that neighbor. Answer: A 16. Click the Exhibit button. In the exhibit, what would the result be when the prefix /32 is evaluated by the term? A.No match is found. B.The route would be rejected. C.The route would be accepted with no modifications. D.The route would be accepted with the metric set to 10. Answer: D 17. Click on the Exhibit button. 8 / 13

10 In the exhibit, what would the result be when the prefix /18 is evaluated by the term? A.No match is found. B.The route would be rejected. C.The route would be accepted with no modifications. D.The route would be accepted with the metric set to 10. Answer: C 18. Which three actions can be performed in a routing policy? (Choose three.) A.modifying action B.forwarding action C.terminating action D.flow control action E.redistributing action Answer: ACD 19. Which statement is true about route-filters and prefix-lists? A.Prefix-lists are defined within a routing policy. B.Route-filters are defined within a routing policy. C.All routes in a route-filter are evaluated sequentially. D.All prefixes in a prefix-list are evaluated sequentially. Answer: B 9 / 13

11 20. Click the Exhibit button. In the exhibit, you have an external BGP neighbor that is not receiving the route /24 in your BGP updates. You have applied the policy "example" as an export policy to your BGP neighbor. You ran the "test policy" command on the prefix and received the results in the exhibit. Which statement would explain why the route is not being sent to your BGP neighbor? A.The prefix /24 was rejected by a term in the example policy. B.The prefix /24 was accepted by a term in the example policy. C.Policy example should be applied as an import policy, not an export policy. D.The prefix /24 was not accepted or rejected by any terms in the example policy. Answer: D 21. Which two commands will show you the effects of an import policy applied to BGP neighbor ? (Choose two.) A.show route protocol bgp B.show bgp neighbor detail C.show route receive-protocol bgp D.show bgp neighbor received-routes Answer: AC 22. Which statement is true about stateless packet filters? A.One input and one output filter can be applied to each logical interface. B.Multiple input and output filters can be applied to each logical interface. C.A firewall filter applied to a physical port affects all logical ports on that physical port. 10 / 13

12 D.Firewall filters applied to an interface can track session information for statistical analysis. Answer: B 23. Which statement describes where to apply a packet filter to protect the router? A.Apply a firewall filter to the lo0 interface. B.Apply a firewall filter to the fxp1 interface. C.Apply a firewall filter to the fxp0 interface. D.Apply firewall filters to all physical interfaces on the router. Answer: A 24. Which statement is true if a packet does not match any terms in a firewall filter? A.The packet is silently discarded. B.The packet is forwarded and no other action is taken. C.The packet is forwarded and the "no-match" counter is incremented in the firewall statistics. D.The packet is rejected and an "administratively-prohibited" message is sent back to the source. Answer: A 25. Firewall filters are processed by which component in the router? A.The routing protocols. B.The master routing table. C.The Packet Forwarding Engine. D.The Routing Process Daemon (rpd). Answer: C 26. Which three can be used for matching in a stateless firewall filter from statement? (Choose three.) A.port B.next-hop C.source-port D.source-address E.application-set 11 / 13

13 Answer: ACD 27. Click on the Exhibit button. In the exhibit, after applying the firewall filter to the router, the customer notices that some unwanted ICMP traffic is still passing through the router. Which two reasons would be the cause? (Choose two.) A.The filter is performing as configured. B.The filter is not applied to the interface correctly. C.The filter does not specify which protocol to allow. D.The filter does not have a reject or discard at the end. Answer: AC 28. Which statement about stateless firewall filters is true? A.All rejected or discarded packets are sent to the firewall log. B.You must specify the action "then log" for packets to be logged to the firewall log. 12 / 13

14 C.You must specify the action "then log" for the packets to be logged in the syslog file. D.You must specify the action "then syslog" for packets to be logged in the firewall log. Answer: B 29. Your router is under distributed denial-of-service (DDoS) attack, which tool should you use to protect your Routing Engine (RE)? A.a policer applied to the input of fe-0/0/0.0 B.a firewall filter applied to the input of lo0.0 C.a firewall filter applied to the input of fe-0/0/0.0 D.a policy-statement to discard all routes to source addresses of DoS packets Answer: B 30. Your router is under a denial-of-service attack, you apply a firewall filter to lo0 to silently drop the packets. Which firewall filter action enables you to achieve this? A.deny B.reject C.discard D.blackhole Answer: C 13 / 13

KillTest 质量更高服务更好学习资料半年免费更新服务

KillTest 质量更高服务更好学习资料半年免费更新服务 KillTest 质量更高服务更好学习资料 http://www.killtest.cn 半年免费更新服务 Exam : JN0-100 Title : Juniper Networks Certified Internet Associate (JNCIA-JUNOS) Version : Demo 1 / 10 1. Which major J-Web menu should you use

KillTest 质量更高 服务更好 学习资料 半年免费更新服务

KillTest 质量更高服务更好学习资料半年免费更新服务