Which JUNOS software feature allows a user to define specific next-hop values for IP packets based on the source IP address of that packet？（）A、MPLSB、Load BalancingC、Class Based ForwardingD、Filter Based Forwarding

第1题：

第2题：

If an edge Label Switch Router （LSR） is properly configured，which three combinations are possible？（）

• A、A received IP packet is forwarded based on the IP destination address and the packet is sent as an IP packet.
• B、An IP destination exists in the IP forwarding table. A received labeled packet is dropped because the label is not found in the LFIB table.
• C、There is an MPLS label-switched path toward the destination. A received IP packet is dropped because the destination is not found in the IP forwarding table.
• D、A received IP packet is forwarded based on the IP destination address and the packet is sent as a labeled packet.
• E、A received labeled IP packet is forwarded based upon both the label and the IP address.
• F、A received labeled packet is forwarded based on the label. After the label is swapped，the newly labeled packet is sent.

第3题：

Which remote access VPN addressing technique supports a static IP address to support a specific application？（）

• A、 Use a static ip addresses based on incoming user policies.
• B、 Use DHCP to assign addresses based on incoming user policies.
• C、 Deploy a clientless model to assign a unique address to the user.
• D、 Deploy RADIUS or LDAP to assign the address to the user.

第4题：

Which three methods of source NAT does the Junos OS support?（） (Choose three.)

• A、interface-based source NAT
• B、source NAT with address shifting
• C、source NAT using static source pool
• D、interface-based source NAT without PAT
• E、source NAT with address shifting and PAT

第5题：

Which two statements describe the difference between JUNOS Software for securityplatforms and a traditional router？（）

• A、JUNOS Software for security platforms supports NAT and PAT； a traditional router does not support NAT or PAT.
• B、JUNOS Software for security platforms does not forward traffic by default； a traditional router forwards traffic by default.
• C、JUNOS Software for security platforms uses session-based forwarding； a traditional router uses packet-based forwarding.
• D、JUNOS Software for security platforms performs route lookup for every packet； a traditional router performs route lookup only for the first packet.

第6题：

Server load balancing （SLB） is the process of deciding to which server a load-balancing device should send a client request for service. Which predictors are supported on ACE in order to select the best server to fulfill a client request？ （）

• A、 Hash address： Selects the server by using a hash value based on either the source or destination IP address， or both
• B、 Hash URL： Selects the server by using a hash value based on the requested URL
• C、 Hash MAC.Selects the server by using a hash value based on either the source or destination MAC address， or both
• D、 Hash header： Selects the server by using a hash value based on the HTTP header name
• E、 Hash IP： Selects the server using a hash value based on the IP address

第7题：

Which three statements are true about DAI？（）

• A、DAI intercept all ARP packets on untrusted ports
• B、DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the DHCP Snooping database.
• C、DAI is used to prevent against a DHCP Snooping attack.
• D、DAI forwards all ARP packets received on a trusted interface without any checks.
• E、DAI forwards all ARP packets on untrusted ports.
• F、DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the CAM table.

第8题：

Firewall filters can be used to accept, discard, or reject packets based on （）

• A、protocol type
• B、MAC address
• C、TCP or UDP port
• D、source and destination IP address

第9题：

When an SRX series device receives an ESP packet, what happens?（）

• A、If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, it will
• B、If the destination IP address in the outer IP header of ESP does not match the IP address of the ingress interface, it will
• C、If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based packet.
• D、If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based of inner header, it will decrypt the packet.

第10题：

第11题：

第12题：

第13题：

第14题：

What is the result of entering the command port-channel load-balance src-dst-ip on an EtherChannel link？ （）

• A、Packets are distributed across the ports in the channel based on both the source and destination MAC addresses.
• B、Packets are distributed across the ports in the channel based on both the source and destination IP addresses.
• C、Packets are balanced across the ports in the channel based first on the source MAC address， then on the destination MAC address， then on the IP address.
• D、Packets are distributed across the access ports in the channel based first on the source IP address and then the destination IP addresses.

第15题：

Which routing instance type is used to facilitate filter-based forwarding?（）

• A、VRF
• B、FBF
• C、forwarding
• D、no-forwarding

第16题：

Which three methods of source NAT does JUNOS Software support？（）

• A、interface-based source NAT
• B、source NAT with address shifting
• C、source NAT using static source pool
• D、interface-based source NAT without PAT
• E、source NAT with address shifting and PAT

第17题：

A system administrator wants to configure 802.1X on an Ethernet switch to enable access to specific parts of the network based on group memberships.How can the administrator accomplish this goal?（）

• A、Configure roles based on departments and assign access based on source IP address.
• B、Configure roles based on the user's manager and assign access based on the user's MAC address
• C、Configure roles based on group memberships and assign a specific VLAN to the role.
• D、Configure roles based on RADIUS request attribute and assign a specific VLAN to the role.

第18题：

The OSPF RFC 3623 Graceful Restart feature allows you to configure IETF NSF in ultivendor networks. When using OSPF Graceful Restart，which mechanism is used tocontinue forwarding packets during a switchover？（）

• A、Reverse Path Forwarding
• B、Hardware-based forwarding
• C、UDP forwarding
• D、Layer 2 Forwarding

第19题：

In JUNOS software, unclassified packets are associated with which forwarding class?（）

• A、network control
• B、best effort
• C、assured forwarding
• D、expedited forwarding

第20题：

Which statement accurately describes firewall user authentication？（）

• A、Firewall user authentication provides another layer of security in a network.
• B、Firewall user authentication provides a means for accessing a JUNOS Software-based security device.
• C、Firewall user authentication enables session-based forwarding.
• D、Firewall user authentication is used as a last resort security method in a network.

第21题：

第22题：

第23题：