2024年juniper认证笔试历年真题荟萃含答案

2024年juniper认证笔试历年真题荟萃含答案（图片大小可自由调整）答案解析附后卷I一.参考题库(共25题)1.Whichtwoprefixeswouldsummarizethenetworksshownbelow?（） A、/23B、/22C、/24D、/212.YourRouted1483networkisgroupingATMPVCsintoalargesubnetandhasstatichostroutesconfigured.Forwhichpurposedoesthestaticroutetothecustomerrouterprovide？（）A、ItallowsformanagementoftheDSLrouters.B、Itisrequiredforforwardingtothecustomernetworks.C、ItallowstheenduserstoforwardtraffictotheInternet.D、ItisrequiredfortheDSLroutertoARPtheproviderrouter.3.WhichmulticastaddressdoesRIPv2useforrouteupdatesbydefault?（）A、B、C、D、554.Which represents a correct PE-PE BGP configuration for an L3 VPN？（） A、AB、BC、CD、D5.Which action occurs when the policy main-policy evaluates the BGP route /32？（） [edit policy-options]  policy-statement test { from {  route-filter16/orlongeraccept；  route-filter/24orlangerreject；  route-filter/8orlanger；  }  then {  metric10；  community add no-advertise；  accept；  }  }  policy-statement main-policy {  term only-want-certain-routes {  from {  policytest；  }  then {  communityadd harry-402；  accept；  }  }  }  communityno advertise members no-advertise；  communityharry-402 members 666：402；  [edit protocols]  bgp {  exportmain-policy； }A、The route is not advertised into BGPB、The route is advertised into BGP with community harry-402.C、The route is advertised into BGP with community no-advertise.D、The route is advertised into BGP with community harry-402 and no-advertise.6.Youwanttologintotherouterandmakeaconfigurationchange.Afterlogginginastherootuser,whatisthenextcommandyoumustenter?（）A、enableB、configureC、editD、cli7.Anetworkadministratorreceivescomplaintsfromtheengineeringgroupthatanapplicationononeserverisnotworkingproperly.Afterfurtherinvestigation,theadministratordeterminesthatsourceNATtranslationisusingadifferentsourceaddressafterarandomnumberofflows. Whichtwoactionscantheadministratortaketoforcetheservertouseoneaddress?（）(Choosetwo.)A、Usethecustomapplicationfeature.B、ConfigurestaticNATforthehost.C、Useportaddresstranslation(PAT).D、Usetheaddress-persistentoption.8.Youwanttocreateanout-of-bandmanagementzoneandassignthege-0/0/0.0interfacetothatzone.Fromthe[edit]hierarchy,whichcommanddoyouusetoconfigurethisassignment?（）A、setsecurityzonesmanagementinterfacesge-0/0/0.0B、setzonesfunctional-zonemanagementinterfacesge-0/0/0.0C、setsecurityzonesfunctional-zonemanagementinterfacesge-0/0/0.0D、setsecurityzonesfunctional-zoneout-of-bandinterfacesge-0/0/0.09.What are commands that can be used to configure MBGP for multicast？（）A、Under the BGP group， configure family inet anyB、Use the set protocol MBGP command to enable MBGPC、Under the BGP group， configure family inet multicastD、Use the set rib-group command to copy the multicast routes into inet.110.InJUNOSsoftware,whichwouldpreventanOSPFrouterfromimportingthe/30summaryroute?（）A、Importpoliciesarenotallowedforinternalroutes,sothisisnotpossible.B、Exportpoliciesarenotallowed,sothisisnotpossible.C、Applyafirewallfiltermatching10.0.0/4/30andrejecttheroute.D、Applyanimportpolicymatching/30andrejecttheroute.11.What is the optimize timer on an RSVP-signaled Label-Switched Path （LSP）？（）A、the time it takes to identify the optimal path for the LSPB、the interval at which the ingress router recalculates the LSP’s pathC、the time the ingress router takes to establish the primary pathD、the maximum number of times the ingress router tries to establish the primary path12.Assume the default-policy has not been configured.Given the configuration shown in the exhibit， which two statements about traffic from host_a inthe HR zone to host_b in the trust zone are true？（） [edit security policies from-zone HR to-zone trust] user@host# show policy one { match { source-address any； destination-address any； application [ junos-http junos-ftp ]； } then { permit； } } policy two { match { source-address host_a； destination-address host_b； application [ junos-http junos-smtp ]； } then { deny； } }A、DNS traffic is denied.B、HTTP traffic is denied.C、FTP traffic is permitted.D、SMTP traffic is permitted.13.Which two statements are true when configuring a domain-id？（）A、The default OSPF domain-id is .B、It most cases， a domain-id must be configured.C、It most cases， you do not need to configure a domain-id.D、For a layer 3 VPN connecting multiple OSPF domains， configuring a domain-id can help control LSA translations.14.FromtheDXWebUIDashboard,whichstepsareusedforcreatinganewadminuser?（）A、ClickAdmin>Users.Enterusername,password,role,accountstatus,andemail.B、ClickAdmin>Users.Enterusername,password,role,accountstatus,anduserclass.C、ClickUsers>ManageUsers.Enterusername,password,role,accountstatus,anduserclass.D、ClickUsers>ManageUsers.Enterusername,password,ActiveDirectorydomain,accountstatus,androle.15.Youhavebeenaskedtousea23-bitnetworkmasktosegmentthenetworkblock.Howmanyusablehostaddresseswilltherebepersubnet?（）A、510B、1022C、2046D、819016.Whatistheprimarypurposefortheclassificationoftrafficinarouter?（）A、tousetheclassificationtoroutetrafficB、tousetheclassificationtoreorderpacketsfromvarioussourcesC、tousetheclassificationtodiscardmalformedpacketsD、tousetheclassificationtoprovidetheconfiguredservicelevel17.What are three benefits of using chassis clustering？（）A、Provides stateful session failover for sessions.B、Increases security capabilities for IPsec sessions.C、Provides active-passive control and data plane redundancy.D、Enables automated fast-reroute capabilities.E、Synchronizes configuration files and session state18.AlogfilteroflogseverityDEBUGpppPacketATM4/3.66isconfiguredwithinthecategoryofpppPacket. Whichconfigurationcommandremovesthisspecificlogfilter?（） A、AB、BC、CD、D19.YouareconfiguringanATMPVCtosupportaBridged1483network.Whatshouldbeappliedtotheatmpvccommandtoaccomplishthisgoal?（）A、aal5muxB、aal5snapC、aal5routeD、aal5bridge20.Whichtwopolicyactionsareconsideredflowcontrolactions?（）A、rejectB、communityaddC、nexttermD、nextpolicy21.WiththeCLIcommandprofileatm1483bulk-config-nametestatm-pppoe,whichthreestatementsdescribeitspurposeandimplementation?（）A、Profileatm1483mustbeappliedtotheatmmajorinterface.B、Thebulk-config-nameusedistestatm-pppoe.C、Thebulk-config-nameusedistest.D、Atm-pppoeistheatmbaseprofile.E、Atm-pppoeistheatmlevelinterfacedescription.22.WhatisoneoftheusesofMBGProutes?（）A、DVMRPhold-timeperiodB、RendezvouspointelectionC、reversepathforwardingchecksD、interdomainmulticastnexthops23.What is the interface connecting the routing engine to the packet forwarding engine called？（）A、Loopback 0B、managementC、internal（fxp1）D、control interface24.Which two mechanisms control route distribution between PE routers in a 2547bis VPN？（）A、Site IDB、PoliciesC、Circuit IDD、Extended communities25.WhichcommanddisplaystheresultsofaloopbacktestyouexecutedonaCT3linemoduleinslot5,port0,t1number4?（） A、AB、BC、CD、D卷II一.参考题库(共25题)1.Which method of dynamic RP election is non-proprietary？（）A、Auto-RPB、Static RPC、Bootstrap ProtocolD、Pim Sparse-Dense mode2.WhataretwofeaturesofPacketFlowAcceleration?（）(Choosetwo.)A、Policy-BasedMultipathB、TCPAcceleration(AFP)C、ForwardErrorCorrectionD、MolecularSequenceReduction3.For which two functions is the Routing Engine responsible？（）A、packet forwardingB、queuing functionsC、routing protocol controlD、JUNOS software operation4.Whichstatementdescribesanadvantageofdynamicrouting?（）A、Dynamicroutingistypicallymorescalablewhencomparedtostaticrouting.B、Unlikestaticrouting,dynamicroutingrequiresnoinitialuserconfiguration.C、Unlikestaticrouting,dynamicroutingprovidesredundantIPaddressesforend-userdevices.D、DynamicroutingprovidesDNSservicesalongwithIPconnectivity,whereasstaticroutingdoesnot.5.Which two statements are true regarding firewall user authentication？（）A、When configured for pass-through firewall user authentication， the user must first open a connection tothe JUNOS security platform before connecting to a remote network resource.B、When configured for Web firewall user authentication only， the user must first open a connection to theJUNOS security platform before connecting to a remote network resource.C、If a JUNOS security device is configured for pass-through firewall user authentication， new sessions areautomatically intercepted to perform authentication.D、If a JUNOS security device is configured for Web firewall user authentication， new sessions areautomatically intercepted to perform authentication.6.WhichtwofunctionscanbeconfiguredontheERXEdgeRoutertosupportMBGP?（）(Choosetwo.)A、address-familyipv4unicastB、address-familyvpnv4unicastC、address-familyipv4multicastD、address-familyvpnv4multicast7.WhichtwoexternalauthenticationmethodsaresupportedbytheJunosOSforuserauthentication?（）A、RADIUSB、KERBEROSC、LDAPD、TACACS+8.WhichtwostatementsregardingtracerouteonJUNOSdevicesarecorrect?（）A、TraceroutetransmitsICMPecho-requestpackets.B、TraceroutetransmitsUDPpackets.C、TraceroutereceivesICMPecho-replypackets.D、TraceroutereceivesICMPport-unreachablepackets.9.WhichroutingtablestoresIPv4unicastroutesandisusedbymulticastroutingprotocolstopreventloops?（）A、inet.0B、inet.1C、inet.2D、inet.310.Whatisthemaximumsuppresstimeforadampenedroute,bydefault?（）A、5minutesB、30minutesC、60minutesD、90minutes11.WhatisthecorrectvirtuallinkconfigurationonanOSPFrouter?（）A、B、C、D、12.WhichtwoexternalauthenticationserversaresupportedforadministrativeaccesstoaJunosdevice?（）A、RADIUSB、LDAPC、ACED、TACACS+13.WhichconfigurationiscorrectforaDHCPRelayProxy?（）A、setdhcprelaysetdhcprelaysetdhcprelayB、setdhcprelayproxysetdhcprelaysetdhcprelayC、setdhcprelayproxysetdhcprelayD、setdhcprelaysetdhcprelayproxy14.ClicktheExhibitbutton. Intheexhibit,whatisthepriorityforRouterBinVRRPgroup100?（）A、1B、100C、110D、25515.Whichtwostatementsaccuratelydescribeabroadcastdomain?（）A、Broadcastdomainsrequirethattheparticipatingdevicesconnecttocommonswitchesorhubs.B、BroadcastdomainsconsistofdevicesreachablebyframesaddressedtotheLayer2broadcastaddress.C、Broadcastdomainsrequireagatewaydevicesuchasarouter.D、BroadcastdomainsconsistofdevicesthatresideonthesameVLAN.16.WhichthreeNLRIscanMBGPcarry?（）A、LDProutesB、IPv6routesC、RSVProutesD、Layer2VPNroutesE、Layer3VPNroutes17.OnwhichdestinationportintheLayer4headerdoesBGPlisten?（）A、UDPport169B、TCPport169C、UDPport179D、TCPport17918.HowisthecostofavirtuallinkinOSPFcalculated?（）A、Takesthemetricoftheoutgoinginterface.B、Usesthemetricthatisassignedduringconfiguration.C、Usesthepathmetrictoreachthevirtuallinkneighbor.D、Usesadefaultofzerounlessotherwisespecified.19.WhatmustbeenabledtoviewtheWANperformancereports?（）A、Monitor>WAN>WANThroughputB、Monitor>WAN>WANPerformanceC、DeviceSetup>Applications>MonitoringD、DeviceSetup>Advanced>WANPerformanceMonitor20.WhichtwometricsdoestheExecutivereportsummarize?（）(Choosetwo.)A、QoSstatisticsB、WANperformanceC、accelerationstatisticsD、compressionstatistics21.WhatisaHostEnforcerpolicy?（）A、Apolicythatisdefinedontheendpointthatpermitsordeniesinboundoroutboundtraffic.B、Apolicythatissenttotheendpointthatpermitsordeniesinboundoroutboundtraffic.C、Apolicythatissenttotheprotectedresourcethatpermitsordeniesinboundoroutboundtraffic.D、Apolicythatisdefinedontheprotectedresourcethatpermitsordeniesinboundoroutboundtraffic.22.WhataretworequirementswhenusingAppFlow?（）(Choosetwo.)A、Qualityofservicemustbeenabled.B、NSCcompressionmustbeenabled.C、PFA'sTCPAcceleration(AFP)mustbeenabled.D、AppFlowmustbeconfiguredontheclient-sidedevicefirst.23.WhichdeviceisresponsibleforassigninglabelvaluesinanMPLSnetwork?（）A、upstreamnodeB、originatingnodeC、destinationnodeD、downstreamnode24.WhichthreesettingsareaccessiblefromtheserialconsolemenuonaMAGSeriesdevice?（）A、ThepingcommandB、FactorydefaultresetC、PersonalityimageD、LicenseimportsE、Adminlogincredentials25.WhichcommandisusedonthelocalroutertoinvokealoopbackmodeonaremoteERXEdgeRouter?（） A、AB、BC、CD、D卷III一.参考题库(共25题)1.Which two firewall user authentication objects can be referenced in a security policy？（）A、access profileB、client groupC、clientD、default profile2.ForwhichtwofunctionsistheRoutingEngineresponsible?（）A、packetforwardingB、queuingfunctionsC、routingprotocolcontrolD、JUNOSsoftwareoperation3.InaPPPoverATMserviceoffering,whatisavalidmethodforassigninganaddresstotheERXEdgeRouter?（）A、DHCPassignedaddressesB、RADIUSassignedaddressesC、IPnumberedwithaloopbackreferenceD、IPunnumberedwithaloopbackreference4.Whichoperationalcommandwouldyouusetoquicklyverifythestateofallinterfaces?（）A、showinterfacesterseB、showinterfacesC、showconfigurationinterfacesD、showinterfacestatus5.WhichtwostatementsabouttheuseofSCREENoptionsarecorrect?（）(Choosetwo.)A、SCREENoptionsofferprotectionagainstvariousattacksB、SCREENoptionsaredeployedpriortorouteandpolicyprocessinginfirstpathpacketprocessingC、SCREENoptionsaredeployedattheingressandegresssidesofapacketflowD、SCREENoptions,youmusttakespecialcaretoprotectOSPF6.Whataretheusablehostsonthe4/26network?（）A、.65through.126B、.64through.127C、.66through.128D、.65through.1277.WhichthreeapplicationsorprotocolsareacceleratedbyAppFlow?（）(Choosethree.)A、UNIXNFSprotocolB、Web-basede-mailC、SecureSocketsLayerD、Microsoft'sCommonInternetFileSystemE、Microsoft'sMessagingApplicationProgrammingInterface8.In a Routed 1483 network what method of routing is typically employed on the DSL router？（）A、staticB、OSPFC、RIPv1D、RIPv29.Firewall filter policers can perform which two actions？（）A、Set the next hop.B、Discard packets.C、Set the loss priority.D、Sample the packet content.10.Within a BGP confederation， how are routing loops avoided？（）A、Split horizon.B、AS confederation sequence.C、The BFP cluster ID attribute.D、The BGP originator ID attribute.11.WhichthreefunctionsareprovidedbytheJunosOSforsecurityplatforms?（）(Choosethree.)A、VPNestablishmentB、statefulARPlookupsC、DynamicARPinspectionD、NetworkAddressTranslationE、inspectionofpacketsathigherlevels(Layer4andabove)12.WhichtwostatementsaboutMPLSlabel-switchedpaths(LSPs)aretrue?（）A、LSPsarebidirectional.B、LSPsareunidirectional.C、LSPsmustfollowtheIGP'sshortestpath.D、LSPscanfollowpathsotherthantheIGP'sshortestpath.13.AnetworkadministratorwantstopermitTelnettrafficinitiatedfromtheaddressbookentrythe10netinazonecalledUNTRUSTtotheaddressbookentryServerinazonecalledTRUST. However,theadministratordoesnotwanttheservertobeabletoinitiateanytypeoftrafficfromtheTRUSTzonetotheUNTRUSTzone. Whichconfigurationstatementwouldcorrectlyaccomplishthistask?（）A、from-zoneUNTRUSTto-zoneTRUST{policyDenyServer{match{source-addressany;destination-addressany;applicationany;}then{deny;}}}from-zoneTRUSTto-zoneUNTRUST{policyAllowTelnetin{match{source-addressthe10net;destination-addressServer;applicationjunos-telnet;}then{permit;}}}B、from-zoneTRUSTto-zoneUNTRUST{policyDenyServer{match{source-addressServer;destination-addressany;applicationany;}then{deny;}}}from-zoneUNTRUSTto-zoneTRUST{policyAllowTelnetin{match{source-addressthe10net;destination-addressServer;applicationjunos-telnet;}then{permit;}}}C、from-zoneUNTRUSTto-zoneTRUST{policyAllowTelnetin{match{source-addressthe10net;destination-addressServer;applicationjunos-ftp;}then{permit;}}}D、from-zoneTRUSTto-zoneUNTRUST{policyDenyServer{match{source-addressServer;destination-addressany;applicationany;}then{permit;}}}from-zoneUNTRUSTto-zoneTRUST{policyAllowTelnetin{match{source-addressthe10net;destination-addressServer;applicationjunos-telnet;}then{permit;}}}14.InJUNOSsoftware,whichtypeofVPNsupportsIPXandAppletalk?（）A、MartinibasedVPNsB、2547bisbasedVPNsC、ShamlinkbasedVPNsD、VirtualRouterbasedVPNs15.WhentroubleshootingapossiblemisconfigurationbetweentheLACandLNS,whataretwotoolsusedtocomparethem?（）(Choosetwo.)A、showaaa-domainmapontheLACB、showaaa-domainmapontheLNSC、showl2tpdestinationprofileontheLACD、showl2tpdestinationprofileontheLNS16.WhatisafunctionoftheOSPFType7LSA?（）A、Itdescribesthereachabilityofroutesinstubareas.B、Itdescribesthereachabilityofroutesintotally-stubbyareas.C、Itdescribesthereachabilityofroutesinnot-so-stubbyareas.D、Itdescribesthereachabilityofroutesinpartially-stubbyareas.17.Onwhichthreetraffictypesdoesfirewallpass-throughauthenticationwork?（）(Choosethree.)A、pingB、FTPC、TelnetD、HTTPE、HTTPS18.WhichconfigurationcommandallowstheERXEdgeRoutertoadvertisecustomernetworksintotheprovider’sIGP？（）A、redistributedirectB、redistributestaticC、redistributeconnectedD、redistributeaccess-internal19.Whichstatementistrueaboutimportandexportroutingpolicies?（）A、Importpoliciesconcernroutesreceivedanddeterminewhichroutesgetputintotheroutingtable.B、Exportpoliciesconcernroutesreceivedanddeterminewhichroutesgetputintotheroutingtable.C、Exportpoliciesareappliedbeforetheroutingtable.D、Importpolicesareappliedaftertheroutingtable.20.Whichthreestatementsaretrueaboutaregistrationserverinacommunity?（）(Choosethree.)A、Itisahubdeviceinstalledinthecommunity.B、Acommunitycanhaveoneormoreregistrationservers.C、Itshowstheserialnumbersofalldevicesinthecommunity.D、Itstoresnetworkandcommunityinformationforeachdevice.E、ItisrequiredfortunnelformationbetweendifferentWXdevicesinthesamecommunity.21.YouwanttoallowyourdevicetoestablishOSPFadjacencieswithaneighboringdeviceconnectedtointerfacege-0/0/3.0.Interfacege-0/0/3.0isamemberoftheHRzone.UnderwhichconfigurationhierarchymustyoupermitOSPFtraffic?（）A、[editsecuritypoliciesfrom-zoneHRto-zoneHR]B、[editsecurityzonesfunctional-zonemanagementprotocols]C、[editsecurityzonesprotocol-zoneHRhost-inbound-traffic]D、[editsecurityzonessecurity-zoneHRhost-inbound-trafficprotocols]22.InaBridged1483network,whatLayer2encapsulationsarepassedbetweentheDSLbridgeandtheERX?（）A、singleATMheaderB、singleEthernetheaderC、ATMheaderfollowedbyaPPPheaderD、ATMheaderfollowedbyanEthernetheader23.Usingapolicywiththepolicy-rematchflagenabled,whathappenstotheexistingandnewsessionswhenyou