Juniper JN0-1362 問題集

質問 1：
Your customer is deploying a large number of Juniper WAN edge devices spread across several remote locations. The customer wants to create an isolated out-of-band management network where these devices can be securely accessed and managed using the CLI and, where possible, the WebUI Which two statements will satisfy the customer's requirements'? (Choose two)
A. Enable the SSH and HTTPS services on each WAN edge device
B. Implement a management configuration group on all WAN edge devices.
C. Ensure the devices are running the FIPS version of the Junos OS.
D. Place all management interfaces on a common Layer 2 network
正解：A,C

質問 2：
MPLS services are being delivered from provider edge (PE) routers Each PE is connected to multiple customer edge (CE) routers.
What should you use on the PE to isolate customer routes?
A. access control lists
B. VPN routing and forwarding tables
C. port access control lists
D. external BGP
正解：B

質問 3：
A customer requests that you design their Layer 3 VPN solution so that all site-to-site traffic goes through a central site, in a hub-and-spoke fashion You must choose between using one or two interfaces on the hub WAN link.
In this scenario, which solution would you use?
A. Use two interfaces on the hub WAN link to reserve one interface for higher Priority traffic.
B. Use two interfaces on the hub WAN link to allow traffic to go from the spokes to the hub on one interface and from the hub to the spokes on the other interface.
C. Use one interface on the hub WAN link to ensure simplicity, since only a single route target is required across the entire Layer 3 VPN.
D. Use one interface on the hub WAN link, since both hub and spoke sites will require a second VRF for route-leaking purposes.
正解：C

質問 4：
You are designing a new SDN WAN solution for a large enterprise MPLS backbone. The existing customer network has some LSPs in place that were manually provisioned. The customer requires that the solution provide for complete LSP life cycle management. You are considering the NorthStar Controller as pan of the design.
Which two LSP types would be managed in this scenario? (Choose two )
A. PCE administered
B. PCE controlled
C. PCC administered
D. PCE delegated
正解：B,C

質問 5：
You are responding to an RFP for a services provider that wants to upgrade their MPLS/LDP network to use traffic engineering.
Which two statements are correct in this scenario? (Choose two )
A. RSVP-TE requires a controller for bandwidth reservations.
B. Segment routing requires a controller for bandwidth reservations
C. RSVP-TE creates session states on core routers.
D. Segment routing uses LDP for label adjacency making it backward-compatible with LDP.
正解：B,C

質問 6：
Which three statements are true about class-of-service (CoS) schedulers? (Choose three )
A. Schedulers determine how packets are handled during times of congestion.
B. Schedulers determine the packet transmission rate for each queue.
C. Schedulers determine the size of buffer assigned to each queues.
D. Schedulers determine the packet markings that are used to prioritize traffic.
E. Schedulers determine into which queue a packet should be assigned.
正解：A,B,E

質問 7：
Your customer is deploying a data center with redundant connections for WAN services through ISP-1 and ISP-2. Your customer has decided to deploy an active/passive Internet connection uplink model and pay-per-use for a passive connection associated with ISP-2. The customer wants to ensure limited use of the connection through ISP-2.
Which two actions would you perform to meet the objective? (Choose two )
A. Use Local Preference to direct northbound traffic flows out ISP-1
B. Extend the AS Path length on the prefix advertised to ISP-1 to influence ingress traffic to enter through ISP-1.
C. Extend the AS Path length on the prefix advertised to ISP-2 to influence ingress traffic to enter through ISP-1.
D. Use MED and Origin to direct northbound traffic flows out ISP-1
正解：A,C

質問 8：
Your organization expenenced a man-in-the-middle attack and must protect against future attacks.
In this scenario, what must you do to protect your network?
A. Implement EVPN
B. Implement MACsec.
C. Implement flowspec
D. Implement destination-based RTBH
正解：A