McAfee-Secured Website

Exam Code: JN0-650

Exam Name: Enterprise Routing and Switching, Professional (JNCIP-ENT)

Certification Provider: Juniper

Corresponding Certification: JNCIP-ENT

Questions & Answers

100% Juniper JN0-650 Guaranteed Success With Testking Training Materials

Get Real JN0-650 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

Questions & Answers

107 Questions & Answers with Testing Engine

"Enterprise Routing and Switching, Professional (JNCIP-ENT) Exam", also known as JN0-650 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-650 Exam Engine. Your JN0-650 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-650 Practice Test 23

Question 220

An enterprise network designer recommends: Match the community in an import policy and set the desired local-preference action. Which situation most clearly calls for this action?

  1. A team intends to export only a single /24 and accidentally permits longer more-specific prefixes with an overly broad rule.
  2. A peer inadvertently sends unauthorized more-specific routes and the enterprise must reject them at BGP import.
  3. Routes bearing a particular BGP community should receive a lower local preference when they arrive.
  4. A peering router has approved contributing routes but lacks the planned aggregate route to export.

Explanation

Correct Answer

C:

This case requires the Community import matching action. Tagged paths receive the policy-selected ranking inside the local AS.

Incorrect Answers

A:

This other case would be better matched to Use a route-filter match type that selects only the intended exact /24 prefix. The policy can exclude nested more-specific routes that should not be announced.

B:

This other case would be better matched to Apply a BGP import policy with a precise route-filter reject for the unwanted prefixes. The rejected BGP paths are not accepted into the intended local routing information base.

D:

This other case would be better matched to Create the required aggregate route and match it in the BGP export policy. The selected aggregate can be eligible for advertisement instead of leaking components.

Question 221

A border router has private lab routes that must never be propagated to an external BGP neighbor. Which Junos networking action or protocol decision best addresses this requirement?

  1. Place the critical reject policy before the permissive acceptance rule or refactor matching.
  2. Apply the correct policy to the intended BGP group or neighbor export statement.
  3. Configure an export policy that explicitly accepts the approved aggregate and rejects all other routes.
  4. Add an explicit export reject for the prohibited internal prefix range before a broad allow rule.

Explanation

Correct Answer

D:

This action addresses BGP route leak prevention. The external peer does not receive the prohibited internal networks from that policy.

Incorrect Answers

A:

That action targets BGP policy-chain order: Evaluation reaches the security restriction before a terminating accept action. It does not directly resolve the stated BGP route leak prevention requirement.

B:

That action targets BGP policy placement: The BGP advertisement decision begins using the configured routing policy. It does not directly resolve the stated BGP route leak prevention requirement.

C:

That action targets Selective BGP export: BGP advertisements to the ISP are constrained to the permitted external prefix. It does not directly resolve the stated BGP route leak prevention requirement.

Question 222

A Junos network engineer takes this step: Add an explicit export reject for the prohibited internal prefix range before a broad allow rule. Which outcome most directly follows?

  1. The external peer does not receive the prohibited internal networks from that policy.
  2. The BGP advertisement decision begins using the configured routing policy.
  3. Evaluation reaches the security restriction before a terminating accept action.
  4. BGP advertisements to the ISP are constrained to the permitted external prefix.

Explanation

Correct Answer

A:

This is the direct result of the BGP route leak prevention decision: The external peer does not receive the prohibited internal networks from that policy.

Incorrect Answers

B:

This outcome is associated with BGP policy placement (Apply the correct policy to the intended BGP group or neighbor export statement.), not the specified action.

C:

This outcome is associated with BGP policy-chain order (Place the critical reject policy before the permissive acceptance rule or refactor matching.), not the specified action.

D:

This outcome is associated with Selective BGP export (Configure an export policy that explicitly accepts the approved aggregate and rejects all other routes.), not the specified action.

Question 223

A border router has private lab routes that must never be propagated to an external BGP neighbor. A colleague instead suggests: Place the critical reject policy before the permissive acceptance rule or refactor matching. Which corrective approach most directly addresses the original issue?

  1. Place the critical reject policy before the permissive acceptance rule or refactor matching.
  2. Add an explicit export reject for the prohibited internal prefix range before a broad allow rule.
  3. Apply the correct policy to the intended BGP group or neighbor export statement.
  4. Configure an export policy that explicitly accepts the approved aggregate and rejects all other routes.

Explanation

Correct Answer

B:

This corrective choice addresses BGP route leak prevention. The external peer does not receive the prohibited internal networks from that policy.

Incorrect Answers

A:

That alternative applies to BGP policy-chain order instead. Evaluation reaches the security restriction before a terminating accept action.

C:

That alternative applies to BGP policy placement instead. The BGP advertisement decision begins using the configured routing policy.

D:

That alternative applies to Selective BGP export instead. BGP advertisements to the ISP are constrained to the permitted external prefix.

Question 224

An enterprise network designer recommends: Add an explicit export reject for the prohibited internal prefix range before a broad allow rule. Which situation most clearly calls for this action?

  1. Only a specified enterprise public aggregate should be advertised to the ISP, not internal interface or lab prefixes.
  2. Two BGP export policies are chained, but an early accept stops evaluation before the intended security reject.
  3. A border router has private lab routes that must never be propagated to an external BGP neighbor.
  4. An export policy is defined under policy-options but no BGP group or neighbor references it.

Explanation

Correct Answer

C:

This case requires the BGP route leak prevention action. The external peer does not receive the prohibited internal networks from that policy.

Incorrect Answers

A:

This other case would be better matched to Configure an export policy that explicitly accepts the approved aggregate and rejects all other routes. BGP advertisements to the ISP are constrained to the permitted external prefix.

B:

This other case would be better matched to Place the critical reject policy before the permissive acceptance rule or refactor matching. Evaluation reaches the security restriction before a terminating accept action.

D:

This other case would be better matched to Apply the correct policy to the intended BGP group or neighbor export statement. The BGP advertisement decision begins using the configured routing policy.

Question 225

A team intends to export only a single /24 and accidentally permits longer more-specific prefixes with an overly broad rule. Which Junos networking action or protocol decision best addresses this requirement?

  1. Apply a BGP import policy with a precise route-filter reject for the unwanted prefixes.
  2. Use a route-filter match type that selects only the intended exact /24 prefix.
  3. Create the required aggregate route and match it in the BGP export policy.
  4. Match the community in an import policy and set the desired local-preference action.

Explanation

Correct Answer

B:

This action addresses BGP exact prefix match. The policy can exclude nested more-specific routes that should not be announced.

Incorrect Answers

A:

That action targets BGP import prefix filter: The rejected BGP paths are not accepted into the intended local routing information base. It does not directly resolve the stated BGP exact prefix match requirement.

C:

That action targets BGP aggregate origination: The selected aggregate can be eligible for advertisement instead of leaking components. It does not directly resolve the stated BGP exact prefix match requirement.

D:

That action targets Community import matching: Tagged paths receive the policy-selected ranking inside the local AS. It does not directly resolve the stated BGP exact prefix match requirement.

Question 226

A Junos network engineer takes this step: Use a route-filter match type that selects only the intended exact /24 prefix. Which outcome most directly follows?

  1. The rejected BGP paths are not accepted into the intended local routing information base.
  2. The selected aggregate can be eligible for advertisement instead of leaking components.
  3. The policy can exclude nested more-specific routes that should not be announced.
  4. Tagged paths receive the policy-selected ranking inside the local AS.

Explanation

Correct Answer

C:

This is the direct result of the BGP exact prefix match decision: The policy can exclude nested more-specific routes that should not be announced.

Incorrect Answers

A:

This outcome is associated with BGP import prefix filter (Apply a BGP import policy with a precise route-filter reject for the unwanted prefixes.), not the specified action.

B:

This outcome is associated with BGP aggregate origination (Create the required aggregate route and match it in the BGP export policy.), not the specified action.

D:

This outcome is associated with Community import matching (Match the community in an import policy and set the desired local-preference action.), not the specified action.

Question 227

A team intends to export only a single /24 and accidentally permits longer more-specific prefixes with an overly broad rule. A colleague instead suggests: Create the required aggregate route and match it in the BGP export policy. Which corrective approach most directly addresses the original issue?

  1. Create the required aggregate route and match it in the BGP export policy.
  2. Apply a BGP import policy with a precise route-filter reject for the unwanted prefixes.
  3. Match the community in an import policy and set the desired local-preference action.
  4. Use a route-filter match type that selects only the intended exact /24 prefix.

Explanation

Correct Answer

D:

This corrective choice addresses BGP exact prefix match. The policy can exclude nested more-specific routes that should not be announced.

Incorrect Answers

A:

That alternative applies to BGP aggregate origination instead. The selected aggregate can be eligible for advertisement instead of leaking components.

B:

That alternative applies to BGP import prefix filter instead. The rejected BGP paths are not accepted into the intended local routing information base.

C:

That alternative applies to Community import matching instead. Tagged paths receive the policy-selected ranking inside the local AS.

Question 228

An enterprise network designer recommends: Use a route-filter match type that selects only the intended exact /24 prefix. Which situation most clearly calls for this action?

  1. A team intends to export only a single /24 and accidentally permits longer more-specific prefixes with an overly broad rule.
  2. Routes bearing a particular BGP community should receive a lower local preference when they arrive.
  3. A peer inadvertently sends unauthorized more-specific routes and the enterprise must reject them at BGP import.
  4. A peering router has approved contributing routes but lacks the planned aggregate route to export.

Explanation

Correct Answer

A:

This case requires the BGP exact prefix match action. The policy can exclude nested more-specific routes that should not be announced.

Incorrect Answers

B:

This other case would be better matched to Match the community in an import policy and set the desired local-preference action. Tagged paths receive the policy-selected ranking inside the local AS.

C:

This other case would be better matched to Apply a BGP import policy with a precise route-filter reject for the unwanted prefixes. The rejected BGP paths are not accepted into the intended local routing information base.

D:

This other case would be better matched to Create the required aggregate route and match it in the BGP export policy. The selected aggregate can be eligible for advertisement instead of leaking components.

Question 229

Two BGP export policies are chained, but an early accept stops evaluation before the intended security reject. Which Junos networking action or protocol decision best addresses this requirement?

  1. Configure an export policy that explicitly accepts the approved aggregate and rejects all other routes.
  2. Place the critical reject policy before the permissive acceptance rule or refactor matching.
  3. Apply the correct policy to the intended BGP group or neighbor export statement.
  4. Add an explicit export reject for the prohibited internal prefix range before a broad allow rule.

Explanation

Correct Answer

B:

This action addresses BGP policy-chain order. Evaluation reaches the security restriction before a terminating accept action.

Incorrect Answers

A:

That action targets Selective BGP export: BGP advertisements to the ISP are constrained to the permitted external prefix. It does not directly resolve the stated BGP policy-chain order requirement.

C:

That action targets BGP policy placement: The BGP advertisement decision begins using the configured routing policy. It does not directly resolve the stated BGP policy-chain order requirement.

D:

That action targets BGP route leak prevention: The external peer does not receive the prohibited internal networks from that policy. It does not directly resolve the stated BGP policy-chain order requirement.

Question 230

A Junos network engineer takes this step: Place the critical reject policy before the permissive acceptance rule or refactor matching. Which outcome most directly follows?

  1. The BGP advertisement decision begins using the configured routing policy.
  2. The external peer does not receive the prohibited internal networks from that policy.
  3. Evaluation reaches the security restriction before a terminating accept action.
  4. BGP advertisements to the ISP are constrained to the permitted external prefix.

Explanation

Correct Answer

C:

This is the direct result of the BGP policy-chain order decision: Evaluation reaches the security restriction before a terminating accept action.

Incorrect Answers

A:

This outcome is associated with BGP policy placement (Apply the correct policy to the intended BGP group or neighbor export statement.), not the specified action.

B:

This outcome is associated with BGP route leak prevention (Add an explicit export reject for the prohibited internal prefix range before a broad allow rule.), not the specified action.

D:

This outcome is associated with Selective BGP export (Configure an export policy that explicitly accepts the approved aggregate and rejects all other routes.), not the specified action.

Enterprise Routing and Switching, Professional (JNCIP-ENT) (JN0-650) Practice Tests