Valid JN0-650 Exam Dumps Ensure you a HIGH SCORE (2026)
Pass JN0-650 Exam with Latest Questions
Juniper JN0-650 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION # 34
You ate deploying P|M source-specific multicast (SSM) for a new multicast messaging service You have configured the multicast source to use 236.44.123.100 as the multicast address. You are not able to join the PIM SSM multicast teed.
Which two solutions would resolve this problem? (Choose two )
- A. Reconfigure the multicast source to use an address in the range of 224.0.0 0 through 224.255.255.255
- B. Reconfigure the multicast source to use an address in the range of 232 0.0 0 through 232.255.255.255
- C. Add the multicast address to the (edit routing-options multicast ssm-map) stanza
- D. Add the multicast address to the [edit routing-options multicast ssm-groups] stanza
Answer: B,C
NEW QUESTION # 35
Exhibit
You are asked to configure VLAN load balancing on your network using MSTP. Referring to the exhibit, which two statements are correct? (Choose two.)
- A. Switch1 will be the root bridge for msti 2.
- B. Switch1 will assume the role of root bridge for both mstil and msti2 if Switch2 goes down.
- C. Switch1 will be the root bridge for msti 1.
- D. Switch 1 will not assume the role of root bridge for both mstil and msti2 if Switch2 goes down.
Answer: A,B
Explanation:
The exhibit shows the MSTP configuration for two switches,switch1andswitch2. MSTP allows you to group multiple VLANs into a single Multiple Spanning Tree Instance (MSTI), enabling different root bridges and topologies for different sets of VLANs.
* Root Bridge Election (Option B):For any Spanning Tree instance, the switch with thelowest bridge priorityis elected as the root bridge.
* Formsti 2, switch1 has a priority of4k(4096), while switch2 has a priority of8k(8192).
* Since 4096 < 8192,switch1 is elected the root bridge for msti 2.
* Failover Behavior (Option D):Spanning Tree is designed for redundancy. If a primary root bridge fails, the remaining switches in the network re-elect a new root based on the next lowest priority.
* Ifswitch2goes down, switch1 becomes the only switch in the region.
* Regardless of its original priority (4k or 8k), switch1 will take over as theroot bridge for both msti 1 and msti 2because there are no other contenders with a better (lower) priority.
* Incorrect Statements:Option Ais incorrect because for msti 1, switch2 has the lower priority (4k vs.
8k), making switch2 the root bridge.Option Cis incorrect because it contradicts the fundamental high- availability nature of Spanning Tree.
NEW QUESTION # 36
Which three statements are correct about EVPN route types? (Choose three.)
- A. Type 3 routes carry replication information.
- B. Type 1 routes carry endpoint MAC address information.
- C. Type 5 routes carry replication information.
- D. Type 2 routes carry endpoint IP address information.
- E. Type 2 routes carry endpoint MAC address information.
Answer: A,D,E
NEW QUESTION # 37
You are securing the network by using access control on the access switch. Some devices in the network do not support 802.1x authentication, so a combination of 802.1x and MAC RADIUS will be used.
Which two statements are true? (Choose two.)
- A. A port can support 802.1x or MAC RADIUS, but not both.
- B. 802.1x is checked before MAC RADIUS.
- C. MAC RADIUS is checked before 802.1x.
- D. A port can support 802.1x and MAC RADIUS simultaneously.
Answer: B,D
NEW QUESTION # 38
You run a multivendor switching environment where you have configured VSTP. You have 450 VLANs and notice that some of your VLANs do not function properly. How should you change the configuration to get all
450 VLANs working?
- A. Include the force-version stp; statement in your configuration
- B. Increase the bridge priority on all VLANs to at least 16k.
- C. Set the VLAN max-age to 3600 or more.
- D. Enable RSTP to handle additional VLANs.
Answer: D
Explanation:
VSTP (VLAN Spanning Tree Protocol) is Juniper ' s implementation that provides a separate spanning tree instance for each VLAN, ensuring compatibility with Cisco ' s PVST+. However, it has significant scaling limitations:
Instance Limits: On many Juniper EX and QFX series switches, VSTP is restricted to a maximum of 253 or
510 VLAN instances depending on the software version (ELS vs. non-ELS). In your scenario, having 450 VLANs exceeds the standard 253-instance limit found on many platforms.
The Solution (Option B): When the number of VLANs exceeds the VSTP capacity, the recommended best practice is to enable RSTP (Rapid Spanning Tree Protocol). Unlike VSTP, RSTP runs a single spanning tree instance for the entire switch, regardless of how many VLANs are configured. This ensures that all 450 VLANs are protected from loops without hitting the hardware ' s instance-count limit.
Other Options: Option A (force-version) only affects the BPDU format for compatibility but doesn ' t solve the instance limit. Option C and Option D are parameter tuning actions that do not address the architectural limitation of the number of running instances.
NEW QUESTION # 39
Exhibit.
Referring to the exhibit. Ieaf2 is elected the designated forwarder
Which two statements are correct if server2 generates a broadcast frame*? (Choose two.)
- A. Only Ieaf2 will forward the broadcast frame to server1
- B. The broadcast frame will be forwarded to leaf1 and Ieaf2.
- C. The broadcast frame will not be forwarded to leaf1.
- D. Only leaf1 will forward the broadcast frame to server1.
Answer: A,B
Explanation:
The exhibit illustrates an EVPN-VXLAN fabric using multi-homing. Server1 is dual-homed to Leaf1 and Leaf2 using an Ethernet Segment Identifier (ESI) in an active-active or active-standby configuration.
Server2 is single-homed to Leaf3.
In EVPN environments, specific mechanisms are used to prevent loops and duplicate traffic when dealing with Broadcast, Unknown Unicast, and Multicast (BUM) traffic:
* Broadcast Propagation (Option A): When Server2 (connected to Leaf3) generates a broadcast frame, Leaf3 encapsulates this traffic into a VXLAN tunnel and forwards it to all other VTEPs (Virtual Tunnel End Points) that participate in that specific Virtual Network Instance (VNI). Therefore, both Leaf1 and Leaf2 will receive the broadcast frame from the core fabric.
* Designated Forwarder (DF) Election (Option C): To prevent a multi-homed device (like Server1) from receiving duplicate copies of the same broadcast frame from multiple leaf switches, EVPN utilizes a Designated Forwarder (DF). For a given ESI, only one leaf switch is elected as the DF.
* The exhibit explicitly states that Leaf2 is the Designated Forwarder.
* According to the Junos EVPN implementation, only the DF is responsible for decapsulating BUM traffic received from the core and forwarding it to the local access segment.
* While Leaf1 receives the frame (Option A), it will see that it is not the DF for that segment and will drop the frame rather than forwarding it to Server1. This ensures Server1 receives exactly one copy of the broadcast, delivered by Leaf2.
* Option B is incorrect because in a standard ingress replication or multicast-based underlay, all VTEPs in the VNI receive the broadcast.
* Option D is incorrect because Leaf1 is the non-designated forwarder (non-DF) for this segment and is prohibited from forwarding BUM traffic to the ESI.
NEW QUESTION # 40
You have configured DHCP snooping on a Juniper switch.
Which statement is true?
- A. All ports are untrusted by default.
- B. All access ports are trusted by default.
- C. All ports are trusted by default.
- D. All access ports are untrusted by default.
Answer: D
NEW QUESTION # 41
Exhibit:
You have deployed sparse-mode multicast in your network using the IGP metrics shown in the exhibit. Which path will (*, G) traffic follow form the source to the receiver before the (S, G) state is registered?
- A. Source, R1, R4, R5, R6, Receiver
- B. Source, R1, R2, R5, R2, R3, R6 Receiver
- C. Source, R1, R2, R3, R6, Receiver
- D. Source, R1, R2, R5, R6, Receiver
Answer: B
NEW QUESTION # 42
Which protocol is primarily used to establish a multicast routing table in Junos?
- A. RIP
- B. PIM
- C. BGP
- D. IS-IS
Answer: B
NEW QUESTION # 43
Which two options are MAC limit actions? (Choose two.)
- A. drop
- B. tcp-reset
- C. log
- D. forwarding-class
Answer: A,C
NEW QUESTION # 44
Exhibit:
Mar 16 19:12:58.291474 BGP RECV 172.14.10.2+51230 -> 172.14.10.1+179
Mar 16 19:12:58.291624 BGP RECV message type 1 (Open) length 59
Mar 16 19:12:58.291688 BGP RECV version 4 as 2 holdtime 90 id 192.168.2.1 parmlen 30 Mar 16 19:12:58.291752 BGP RECV MP capability AFI=1, SAFI=1 Mar 16 19:12:58.291802 BGP RECV Refresh capability, code=128 Mar 16 19:12:58.291850 BGP RECV Refresh capability, code=2 Mar 16 19:12:58.291915 BGP RECV Restart capability, code=64, time=120, flags= Mar 16 19:12:58.291969 BGP RECV 4 Byte AS-Path capability (65), as_num 2 Mar 16 19:12:58.292385 advertising receiving-speaker only capabilty to neighbor 172.14.10.2 (External AS 2) Mar 16 19:12:58.292452 bgp_senD. sending 59 bytes to 172.14.10.2 (External AS 2) Mar 16 19:12:58.292522 Mar 16 19:12:58.292522 BGP SEND 172.14.10.1+179 -> 172.14.10.2+51230 Mar 16 19:12:58.292601 BGP SEND message type 1 (Open) length 59 Mar 16 19:12:58.293053 BGP SEND version 4 as 1 holdtime 90 id 192.168.2.1 parmlen 30 Mar 16 19:12:58.293124 BGP SEND MP capability AFI=1, SAFI=1 Mar 16 19:12:58.293173 BGP SEND Refresh capability, code=128 Mar 16 19:12:58.293221 BGP SEND Refresh capability, code=2 Mar 16 19:12:58.293284 BGP SEND Restart capability, code=64, time=120, flags= Mar 16 19:12:58.293336 BGP SEND 4 Byte AS-Path capability (65), as_num 1 Mar 16 19:12:58.293517 bgp_senD. sending 19 bytes to 172.14.10.2 (External AS 2) Mar 16 19:12:58.293573 Mar 16 19:12:58.293573 BGP SEND 172.14.10.1+179 -> 172.14.10.2+51230 Mar 16 19:12:58.293665 BGP SEND message type 4 (KeepAlive) length 19 Mar 16 19:12:58.296781 Mar 16 19:12:58.296781 BGP RECV 172.14.10.2+51230 -> 172.14.10.1+179 Mar 1619:12:58.296897 BGP RECV messaae tvoe 4 (KeeDAlivel lenath 19 Mar 16 19:12:58.297451 bgp_senD. sending 19 bytes to 172.14.10.2 (External AS 2) Mar 16 19:12:58.297528 Mar 16 19:12:58.297528 BGP SEND 172.14.10.1+179 -> 172.14.10.2+51230 Mar 16 19:12:58.297600 BGP SEND message type 4 (KeepAlive) length 19 Mar 16 19:12:58.298102 bgp_senD. sending 23 bytes to 172.14.10.2 (External AS 2) Mar 16 19:12:58.298185 Mar 16 19:12:58.298185 BGP SEND 172.14A0.1+179 -> 172.14.10.2+51230 Mar 16 19:12:58.298273 BGP SEND message type 2 (Update) length 23 Mar 16 19:12:58.298322 BGP SEND End of RIB. AFI 1 SAFI 1 Mar 16 19:12:58.301834 Mar 16 19:12:58.301834 BGP RECV 172.14.10.2+51230 -> 172.14.10.1+179 Mar 16 19:12:58.301957 BGP RECV message type 4 (KeepAlive) length 19 Mar 16 19:12:58.302034 bgp_read v4_messagE. done with 172.14.10.2 (External AS 2) received 19 octets 0 updates 0 routes Mar 16 19:12:58.304594 Mar 16 19:12:58.304594 BGP RECV 172.14.10.2+51230 -> 172.14.10.1+179 Mar 16 19:12:58.304702 BGP RECV message type 2 (Update) length 23 Mar 16 19:12:58.304765 BGP RECV End of RIB. AFI 1 SAFI 1 Mar 16 19:12:58.304848 bgp_read v4_messagE. done with 172.14.10.2 (External AS 2) received 23 octets 1 update 0 routes Mar 16 19:13:22.968415 bgp_senD. sending 19 bytes to 172.14.10.2 (External AS 2) Mar 16 19:13:22.968586 Mar 16 19:13:22.968586 BGP SEND 172.14.10.1+179 -> 172.14.10.2+51230 Mar 16 19:13:22.968675 BGP SEND message type 4 (KeepAlive) length 19 Mar 16 19:13:26.901339 Mar 16 19:13:26.901339 BGP RECV 172.14.10.2+51230 -> 172.14.10.1+179 Mar 16 19:13:26.901464 BGP RECV message type 4 (KeepAlive) length 19 Mar 16 19:13:26.901543 bgp_read v4_messagE. done with 172.14.10.2 (External AS 2) received 19 octets 0 updates 0 routes Mar 16 19:13:51.335927 bgp_senD. sending 19 bytes to 172.14.10.2 (External AS 2) Mar 16 19:13:51.348180 Mar 16 19:13:51.348180 BGP SEND 172.14.10.1+179 -> 172.14.10.2+51230 Mar 16 19:13:51.348296 BGP SEND message type 4 (KeepAlive) length 19 Mar 16 19:13:53.844160 Mar 16 19:13:53.844160 BGP RECV 172.14.10.2+51230 -> 172.14.10.1+179 Mar 16 19:13:53.844329 BGP RECV message type 4 (KeepAlive) length 19 Mar 16 19:13:53.844392 bgp_read_v4_messagE. done with 172.14.10.2 (External AS 2) received 19 octets 0 updates 0 routes Looking at the trace options output, what is the current keepalive timer set for in BGP?
- A. 30 seconds
- B. 1 second
- C. 10 seconds
- D. 90 seconds
Answer: A
NEW QUESTION # 45
Which two statements are correct about a functional ESI LAG interface? (Choose two.)
- A. The LACP system ID must be the same.
- B. The ESI values must be the same.
- C. The LACP system ID must be different.
- D. The ESI values must be different.
Answer: A,B
NEW QUESTION # 46
Which two statements are true regarding OSPF LSAs? (Choose two.)
- A. Type 1 LSAs have an area scope.
- B. Type 3 LSAs have an area scope.
- C. Type 1 LSAs have a link scope.
- D. Type 3 LSAs have a domain scope.
Answer: A,B
NEW QUESTION # 47
Exhibit:
You are investigating reports of increased latency and discover that some routes cause customer traffic to traverse a route reflector instead of the optimal path. Referring to the exhibit, which configuration statement would solve the problem?
- A. set protocols bgp group BGP-MESH import NHS
- B. set policy-options policy-statement NHS term BGP_ROUTES from external
- C. delete protocols bgp group BGP-MESH export NHS
- D. delete protocols bgp group BGP-MESH peer-as
Answer: B
NEW QUESTION # 48
Your router is discarding an EBGP route because the next hop is not directly connected. Which BGP configuration would you use to override this behavior?
- A. advertise-inactive
- B. multihop
- C. multipath
- D. accept-remote-nexthop
Answer: B
Explanation:
In External BGP (EBGP), there is a default safety mechanism that requires the peer's next hop to be on a directly connected network.
TTL Constraint: By default, EBGP packets are sent with a Time-to-Live (TTL) value of 1. If the next hop is not directly connected (e.g., when peering via loopback interfaces or across a multi-hop path), the packet will expire before reaching the destination, causing the route to be discarded or the session to fail.
The Multihop Solution (Option B): To override this behavior, you must configure the multihop statement under the BGP neighbor or group hierarchy. This allows the BGP session to establish by increasing the TTL (typically to 64 or a user-defined value) and bypasses the "directly connected" check.
Incorrect Options: Option A (accept-remote-nexthop) is used in internal BGP or specific routing-instance scenarios to resolve next hops that aren't in the local routing table, but it doesn't solve the EBGP TTL/direct- connection requirement. Option C (advertise-inactive) allows BGP to advertise routes that are not the best path in the routing table, which is irrelevant to next-hop reachability. Option D (multipath) is used for load- sharing across multiple paths.
NEW QUESTION # 49
Which BGP attribute is used to ensure loop-free interdomain routing?
- A. Weight
- B. MED
- C. AS Path
- D. Local Preference
Answer: C
NEW QUESTION # 50
You have created a private community VLAN called RND The private community VLAN works fine within switch S1, but traffic in the private RND community VLAN does not reach VLAN members connected to switch S2.
Which statement is correct in this scenario?
- A. The RND Community VLAN needs to be stripped of all 802.1Q tags.
- B. The RND Community VLAN needs to have the same 802.1Q tag as its parent VLAN
- C. The RND community VLAN needs to have an associated 802.1Q tag associated with it.
- D. The RND community VLAN needs to be defined as an isolated VLAN.
Answer: C
Explanation:
Private VLANs (PVLANs) allow for granular port isolation within a single broadcast domain. When extending a PVLAN across multiple switches (S1 to S2), the secondary VLANs (Community or Isolated) must be preserved across the trunk links.
* 802.1Q Tagging (Option B):For traffic from aCommunity VLAN (RND)to reach members on a different switch, the Community VLAN must have its own802.1Q VLAN tag (VLAN ID)associated with it. When a frame from a community port on S1 traverses the trunk to S2, it is tagged with this specific secondary VLAN ID. S2 receives the tagged frame, identifies it as belonging to the RND community, and forwards it to the appropriate community or promiscuous ports.
* Why it fails without a tag:If the RND community is only defined locally on S1 without a global VLAN ID, the trunk port will not know how to distinguish that traffic from the Primary VLAN or other communities.
* Incorrect Options:Option Ais incorrect because the community VLANmusthave a different tag than the parent (Primary) VLAN to maintain the internal PVLAN logic.Option Cis incorrect because stripping tags would lead to the traffic being merged into the native VLAN or dropped.Option Dis incorrect because RND is a community VLAN; changing it to an isolated VLAN would change its behavior (preventing communication between members of that same group).
NEW QUESTION # 51
Which statement accurately describes the operation of OSPF within the Junos OS?
- A. OSPF calculates routes using a distance vector algorithm.
- B. OSPF is used for routing information and neighbor discovery within a single autonomous system (AS).
- C. OSPF does not automatically advertise directly connected routes.
- D. OSPF is used for routing information and neighbor discovery between multiple autonomous systems.
Answer: B
Explanation:
OSPF (Open Shortest Path First) is a standards-based Link-State Interior Gateway Protocol (IGP) implemented within Junos OS 24.4:
Intra-AS Routing: OSPF is designed to distribute routing information and perform neighbor discovery within a single Autonomous System (AS). It divides the AS into areas to localize Link-State Advertisements (LSAs) and reduce the size of the Link-State Database (LSDB) on each router. (Option B) Algorithm: OSPF uses the Shortest Path First (SPF) or Dijkstra algorithm, not a distance vector algorithm (which would be RIP or BGP). This makes Option A incorrect.
Directly Connected Routes: In Junos OS, you must explicitly configure an interface under the [edit protocols ospf] hierarchy to include it in the OSPF process. Once an interface is added, its prefix is automatically advertised to neighbors via Router (Type 1) LSAs. This makes Option C technically inaccurate in the context of interfaces participating in the protocol.
Scope: Protocols used between multiple autonomous systems are External Gateway Protocols (EGPs), such as BGP. This makes Option D incorrect.
NEW QUESTION # 52
Exhibit
Referring to the exhibit. R2 receives a packet from the multicast source on its ge-0/0/4 0 interface.
Which two statements are correct in this scenario? (Choose two.)
- A. All interfaces other than ge-0/0/4.0 will be on the outgoing interface list.
- B. R2 verifies the existing unicast routing table and determines that this interface is not on the reverse path back to the source
- C. R2 determines that the packet is coming in on an interface that is on the reverse path back to the source.
- D. The packet is discarded
Answer: B,D
Explanation:
The exhibit illustrates a PIM multicast environment where router R2 has received a multicast packet from Source 1 (192.168.100.10) on its ge-0/0/4.0 interface. To prevent loops, PIM-SM uses a mechanism called Reverse Path Forwarding (RPF).
RPF Check Process (Option A): When a multicast packet arrives, the router performs an RPF check by looking up the source ' s IP address in its unicast routing table (typically inet.0).
The exhibit ' s command output, show multicast rpf 192.168.100.10, explicitly shows that for the source network $192.168.100.0/24$, the RPF interface is ge-0/0/1.0.
Because the packet actually arrived on ge-0/0/4.0 instead of the expected ge-0/0/1.0 interface, the RPF check fails.
Packet Discard (Option C): According to standard PIM-SM operation in Junos OS 24.4, if a multicast packet fails the RPF check-meaning it arrived on an interface that the router does not use to reach the source via unicast-the packet is discarded. This is a fundamental loop-prevention mechanism that ensures multicast traffic is only accepted from the shortest path toward the source.
Option B is incorrect because the router will not add any interfaces to the Outgoing Interface List (OIL) for a packet that fails the initial RPF check.
Option D is incorrect because the exhibit clearly shows the interface in the RPF table (ge-0/0/1.0) is different from the interface where the packet was received (ge-0/0/4.0).
NEW QUESTION # 53
Which two statements are true about IGMPv3? (Choose two.)
- A. It does not have a querier election process.
- B. It supports source-specific multicast.
- C. Hosts silently leave a multicast group.
- D. Hosts actively leave a multicast group.
Answer: B,D
NEW QUESTION # 54
......
JN0-650 Exam Practice Questions prepared by Juniper Professionals: https://testking.practicedump.com/JN0-650-exam-questions.html