お手軽JN0-351問題集PDFのベスト問題集を使おう！高得点目指すならここ [Q10-Q31]

お手軽JN0-351問題集PDFのベスト問題集を使おう！高得点目指すならここ

JNCIS-ENT JN0-351試験と認定テストエンジン

質問 # 10
You are asked to create a new firewall filter to evaluate Layer 3 traffic that is being sent between VLANs. In this scenario, which two statements are correct? (Choose two.)

• A. You should create a family inet firewall filter with the appropriate match criteria and actions.
• B. You should apply the firewall filter to the appropriate IRB interface.
• C. You should apply the firewall filter to the appropriate VLAN.
• D. You should create a family Ethernet-switching firewall filter with the appropriate match criteria and actions.

正解：A、B

解説：
A firewall filter is a configuration that defines the rules that determine whether to forward or discard packets at specific processing points in the packet flow. A firewall filter can also modify the attributes of the packets, such as priority, marking, or logging. A firewall filter can be applied to various interfaces, protocols, or routing instances on a Juniper device. A firewall filter has a family attribute, which specifies the type of traffic that the filter can evaluate. The family attribute can be one of the following: inet, inet6, mpls, vpls, iso, or ethernet- switching. The family inet firewall filter is used to evaluate IPv4 traffic, which is the most common type of Layer 3 traffic on a network.
To create a family inet firewall filter, you need to specify the appropriate match criteria and actions for each term in the filter. The match criteria can include various fields in the IPv4 header, such as source address, destination address, protocol, port number, or DSCP value. The actions can include accept, discard, reject, count, log, policer, or next term. To apply a firewall filter to Layer 3 traffic that is being sent between VLANs, you need to apply the filter to the appropriate IRB interface. An IRB interface is an integrated routing and bridging interface that provides Layer
3 functionality for a VLAN on a Juniper device. An IRB interface has an IP address that acts as the default gateway for the hosts in the VLAN. An IRB interface can also participate in routing protocols and forward packets to other VLANs or networks.
Therefore, option C is correct, because you should create a family inet firewall filter with the appropriate match criteria and actions. Option D is correct, because you should apply the firewall filter to the appropriate IRB interface

質問 # 11
Which statement is true about Layer 2 firewall filters on EX Series switches?

• A. They are stateful and evaluated by the forwarding plane.
• B. They are stateful and evaluated by the control plane.
• C. They are stateless and evaluated by the control plane.
• D. They are stateless and evaluated by the forwarding plane.

正解：D

質問 # 12
Which mechanism is used to share routes between routing tables?

• A. forwarding instances
• B. filter-based forwarding
• C. routing instances
• D. RIB groups

正解：D

質問 # 13
Which two statements are correct about tunnels? (Choose two.)

• A. BFD cannot be used to monitor tunnels.
• B. IP-IP tunnels are stateful.
• C. Tunnel endpoints must have a valid route to the remote tunnel endpoint.
• D. Tunnels add additional overhead to packet size.

正解：C、D

解説：
For a tunnel to be established, the endpoints must have a route to each other. This is essential for the encapsulated packets to reach their destination.
Tunnels encapsulate packets, adding extra headers for the encapsulation protocol, which increases the overall packet size.

質問 # 14
What is the management IP address of the device shown in the exhibit?

• A. 172.23.11.10
• B. 172.23.12.100
• C. 10.210.20.233
• D. 128.0.0.1

正解：C

解説：
The management IP address of the device shown in the exhibit is indicated by the interface
"me0." In the provided output, the "me0" interface is listed with the IP address 10.210.20.233.

質問 # 15
Which statement about the default action of MAC limiting is true when the number of MAC addresses has hit the limit set?

• A. The switch stops learning MAC addresses on the offending port, but floods traffic out of all ports for the offending MAC address.
• B. The switch stops learning MAC addresses on the offending port, and any traffic to or from the offending MAC address will be dropped.
• C. The switch will shut down the offending port for five minutes.
• D. The switch will shut down MAC learning on the offending port for five minutes.

正解：B

質問 # 16
You have two OSPF routers forming an adjacency. R1 has a priority of 32 and a router ID of 192.168.1.2. R2 has a priority of 64 and a router ID of 192.168.1.1. The routers were started at the same time and all other OSPF settings are the default settings.
Which statement is correct in this scenario?

• A. R1 will be the BDR.
• B. R2 will be the BDR.
• C. Router IDs must match for an adjacency to form.
• D. At least three routers are required for a DR/BDR election

正解：A

解説：
Explanation
In OSPF, the Designated Router (DR) and Backup Designated Router (BDR) are elected based on the priority of the routers1. The router with the highest priority becomes the DR, and the router with the second highest priority becomes the BDR1. If there is a tie in priority, then the router with the highest Router ID is chosen1.
In this scenario, R2 has a higher priority (64) than R1 (32), so R2 will become the DR1. Since R1 has the second highest priority, it will become the BDR1. Therefore, option D is correct.

質問 # 17
Which two events cause a router to advertise a connected network to OSPF neighbors? (Choose two.)

• A. When an interface has the OSPF passive option enabled.
• B. When an OSPF adjacency is established.
• C. When a static route to the 224.0.0.6 address is created.
• D. When a static route to the 224.0.0.5 address is created.

正解：B、D

解説：
A is correct because when an OSPF adjacency is established, a router will advertise a connected network to OSPF neighbors. An OSPF adjacency is a logical relationship between two routers that agree to exchange routing information using the OSPF protocol1. To establish an OSPF adjacency, the routers must be in the same area, have compatible parameters, and exchange hello packets1. Once an OSPF adjacency is formed, the routers will exchange database description (DBD) packets, which contain summaries of their link-state databases (LSDBs)1. The LSDBs include information about the connected networks and their costs2. Therefore, when an OSPF adjacency is established, a router will advertise a connected network to OSPF neighbors through DBD packets.
D is correct because when a static route to the 224.0.0.5 address is created, a router will advertise a connected network to OSPF neighbors. The 224.0.0.5 address is the multicast address for all OSPF routers3. A static route to this address can be used to send OSPF hello packets to all OSPF neighbors on a network segment3. This can be useful when the network segment does not support multicast or when the router does not have an IP address on the segment3. When a static route to the 224.0.0.5 address is created, the router will send hello packets to this address and establish OSPF adjacencies with other routers on the segment3. As explained above, once an OSPF adjacency is formed, the router will advertise a connected network to OSPF neighbors through DBD packets.

質問 # 18
You are troubleshooting an issue where traffic to 192.168.10.0/24 is being sent to R1 instead of your desired path through R2.
Referring to the exhibit, what is the reason for the problem?

• A. R1's route is the best path due to a higher local preference
• B. R1's route is the best path due to the shorter AS path.
• C. R2's route is not the best path due to loop prevention.
• D. R2's route is not the best path due to a lower origin code.

正解：A

解説：
The exhibit shows the output of the command show ip bgp, which displays information about the BGP routes in the routing table. The output shows two routes for the destination 192.168.10.0/24, one from R1 and one from R2.
The route from R1 has a local preference of 200, while the route from R2 has a local preference of 100. Local preference is a BGP attribute that indicates the degree of preference for a route within an autonomous system (AS). A higher local preference means a more preferred route.
BGP uses a best path selection algorithm to choose the best route for each destination among multiple paths. The algorithm compares different attributes of the routes in a specific order of precedence. The first attribute that is compared is weight, which is a Cisco-specific attribute that is local to the router. If the weight is equal or not set, the next attribute that is compared is local preference.
In this case, both routes have the same weight of 0, which means that they are learned from external BGP (eBGP) peers. Therefore, the next attribute that is compared is local preference.
Since R1's route has a higher local preference than R2's route, it is chosen as the best path and installed in the routing table. The other attributes, such as origin code and AS path, are not considered in this case.

質問 # 19
Exhibit.

You want to enable redundancy for the EBGP peering between the two routers shown in the exhibit. Which three actions will you perform in this scenario? (Choose three.)

• A. Configure routes for the peer loopback interface IP addresses.
• B. Configure an MD5 peer authentication.
• C. Configure a cluster ID.
• D. Configure loopback interface peering.
• E. Configure BGP multihop.

正解：A、D、E

解説：
A is correct because you need to configure BGP multihop to enable redundancy for the EBGP peering between the two routers. BGP multihop is a feature that allows BGP peers to establish a session over multiple hops, instead of requiring them to be directly connected1. By default, EBGP peers use a time-to-live (TTL) value of 1 for their packets, which means that they can only reach adjacent neighbors1. However, if you configure BGP multihop with a higher TTL value, you can allow EBGP peers to communicate over multiple routers in between1. This can provide redundancy in case of a link failure or a router failure between the EBGP peers.
B is correct because you need to configure loopback interface peering to enable redundancy for the EBGP peering between the two routers. Loopback interface peering is a technique that uses loopback interfaces as the source and destination addresses for BGP sessions, instead of physical interfaces2. Loopback interfaces are virtual interfaces that are always up andreachable as long as the router is operational2. By using loopback interface peering, you can avoid the dependency on a single physical interface or link for the BGP session, and use multiple paths to reach the loopback address of the peer2. This can provide redundancy and load balancing for the EBGP peering.
C is correct because you need to configure routes for the peer loopback interface IP addresses to enable redundancy for the EBGP peering between the two routers. Routes for the peer loopback interface IP addresses are necessary to ensure that the routers can reach each other's loopback addresses over multiple hops2. You can use static routes or dynamic routing protocols to advertise and learn the routes for the peer loopback interface IP addresses2. Without these routes, the routers will not be able to establish or maintain the BGP session using their loopback interfaces.

質問 # 20
You are configuring an IS-IS IGP network and do not see the IS-IS adjacencies established. In this scenario, what are two reasons for this problem? (Choose two.)

• A. MTU is not at least 1492 bytes.
• B. IP subnets are not a /30 address.
• C. The lo0 interface is not included as an IS-IS interface.
• D. The Level 2 routers have mismatched areas.

正解：A、C

解説：
Explanation
Option A suggests that the MTU is not at least 1492 bytes. This is correct because IS-IS requires a minimum MTU of 1492 bytes to establish adjacencies1. If the MTU is less than this, IS-IS adjacencies will not be established1.
Option D suggests that the lo0 interface is not included as an IS-IS interface. This is also correct because the loopback interface (lo0) is typically used as the router ID in IS-IS1. If the loopback interface is not included in IS-IS, it could prevent IS-IS adjacencies from being established1.
Therefore, options A and D are correct.

質問 # 21
Referring to the exhibit, what will be the IS-IS adjacency result of the configurations?

• A. A level 1 and level 2 IS-IS adjacency will form.
• B. No IS-IS adjacencies will form.
• C. A level 2 IS-IS adjacency will form.
• D. A level 1 IS-IS adjacency will form.

正解：B

質問 # 22
You are asked to explore deploying IS-IS in your network. What are two considerations in this scenario? (Choose two.)

• A. TLVs are required to support IPv6 reachability.
• B. TLVs are not required to support IPv6 reachability.
• C. TLVs are not required to support IPv4 reachability.
• D. TLVs are required to support IPv4 reachability.

正解：A、D

質問 # 23
You want to redistribute the static routes into BGP, but they do not show as BGP routes.
What causes this result to occur?

• A. The no-readvertisefeature is specified.
• B. The as-pathparameter must be specified.
• C. The static routes do not have a valid next hop.
• D. A community string must be configured.

正解：C

質問 # 24
Referring to the output shown in the exhibit, which statement is correct?

• A. An area ID mismatch exists between the OSPF neighbors
• B. The state is normal for a DRother neighbor
• C. An MTU mismatch exists between the OSPF neighbors.
• D. The state is normal for a DR neighbor.

正解：B

解説：
In OSPF, the state of the neighbor relationship is determined by the exchange of OSPF packets between routers. The state "2Way" as shown in the exhibit indicates that bi-directional communication has been established between the two OSPF routers. This is the normal state for a neighbor that is not the Designated Router (DR) or Backup Designated Router (BDR) on a broadcast, non-broadcast multi-access (NBMA), or point-to-multipoint network. These neighbors are often referred to as "DRothers". Therefore, option B is correct.

質問 # 25
What are two reasons for creating multiple areas in OSPF? (Choose two.)

• A. to reduce the convergence time
• B. to increase the number of adjacencies in the backbone
• C. to reduce LSA flooding across the network
• D. to increase the size of the LSDB

正解：A、C

解説：
Explanation
Option A is correct. Creating multiple areas in OSPF can help to reduce the convergence time . This is because changes in one area do not affect other areas, so fewer routers need to run the SPF algorithm in response to a change.
Option D is correct. Creating multiple areas in OSPF can help to reduce Link State Advertisement (LSA) flooding across the network. This is because LSAs are not flooded out of their area of origin.

質問 # 26
Which three protocols support BFD? (Choose three.)

• A. RSTP
• B. FTP
• C. OSPF
• D. BGP
• E. LACP

正解：C、D、E

解説：
https://www.juniper.net/documentation/us/en/software/junos/high-availability/topics/topic-map/bfd- configuring.html

質問 # 27
Which two statements are true about the default VLAN on Juniper switches? (Choose two.)

• A. The default VLAN is set to a VLAN ID of 1 by default
• B. The default VLAN ID is not visible.
• C. The default VLAN ID can be changed.
• D. The default VLAN ID is not assigned to any interface.

正解：A、C

解説：
On Juniper switches, the default VLAN is set to a VLAN ID of 1 by default. This means that all interfaces on the switch are members of VLAN until they are specifically assigned to another VLAN. Therefore, option A is correct.
The default VLAN ID can be changed. This allows network administrators to configure the switch to use a different VLAN as the default, if necessary. Therefore, option D is correct.

質問 # 28
You are troubleshooting a BGP routing issue between your network and a customer router and are reviewing the BGP routing policies. Which two statements are correct in this scenario? (Choose two.)

• A. Export policies are applied after the RIB-Local table.
• B. Export policies are applied to routes in the RIB-ln table.
• C. Import policies are applied to routes in the RIB-Local table.
• D. Import policies are applied after the RIB-ln table.

正解：A、D

解説：
Explanation
In BGP, routing policies are used to control the flow of routing information between BGP peers1.
Option C suggests that import policies are applied after the RIB-In table. This is correct because import policies in BGP are applied to routes that are received from a BGP peer, before they are installed in the local BGP Routing Information Base (RIB-In)1. The RIB-In is a database that stores all the routes that are received from all peers1.
Option D suggests that export policies are applied after the RIB-Local table. This is correct because export policies in BGP are applied to routes that are being advertised to a BGP peer, after they have been selected from the local BGP Routing Information Base (RIB-Local)1. The RIB-Local is a database that stores all the routes that the local router is using1.
Therefore, options C and D are correct.

質問 # 29
What are two characteristics of RSTP alternate ports? (Choose two.)

• A. RSTP alternate ports provide an alternate lower cost path to the root bridge.
• B. RSTP alternate ports are active ports used to forward frames toward the root bridge.
• C. RSTP alternate ports block traffic while receiving superior BPDUs from a neighboring switch.
• D. RSTP alternate ports provide an alternate higher cost path to the root bridge.

正解：C、D

解説：
A is correct because RSTP alternate ports block traffic while receiving superior BPDUs from a neighboring switch. An alternate port is a backup port for a root port, which means it receives better BPDUs from another bridge than the current root port1. However, an alternate port does not forward any traffic, as it is in a discarding state2. It only listens to BPDUs and waits for the root port to fail. If the root port fails, the alternate port can immediately transition to a forwarding state and become the new root port1.
C is correct because RSTP alternate ports provide an alternate higher cost path to the root bridge. An alternate port is selected based on the same criteria as the root port, which are the lowest bridge ID, the lowest path cost, the lowest sender port ID, and the lowest receiver port ID3. However, an alternate port receives a higher cost BPDU than the root port, otherwise it would be the root port itself1. Therefore, an alternate port provides an alternate higher cost path to the root bridge than the root port.

質問 # 30
After receiving a BGP route, which two conditions are verified by the receiving router to ensure that the received route is valid? (Choose two)

• A. The loops do not exist.
• B. The local preference is greater than 0.
• C. The next hop is reachable.
• D. The AS-path length is greater than 0.

正解：A、C

解説：
B is correct because the loops do not exist is one of the conditions that are verified by the receiving router to ensure that the received BGP route is valid. A loop in BGP means that a route has been advertised by the same AS more than once, which can cause routing instability and inefficiency. To prevent loops, BGP uses the AS-path attribute, which lists the AS numbers that a route has traversed from the origin to the destination. The receiving router checks the AS-path attribute of the received route and discards it if it finds its own AS number in the list. This way, BGP avoids accepting routes that contain loops.
C is correct because the next hop is reachable is one of the conditions that are verified by the receiving router to ensure that the received BGP route is valid. The next hop is the IP address of the next router that is used to forward packets to the destination network. The receiving router checks the next hop attribute of the received route and verifies that it has a valid route to reach it.
If the next hop is not reachable, the received route is not usable and is rejected by the receiving router. This way, BGP ensures that only feasible routes are accepted.

質問 # 31
......

無料提供中のJN0-351試験問題集で（2026年最新のPDF問題集）信頼度の高いJN0-351テストエンジン：https://www.passtest.jp/Juniper/JN0-351-shiken.html

JN0-351のPDFで最近更新された問題です集試験点数を伸ばそう：https://drive.google.com/open?id=1j8rq_FhMgsjA5WLQeam3uQX3YIDXJPx8