Category Archives: Juniper

JN0-663 Service Provider Routing and Switching, Professional (JNCIP-SP) Exam

January 20, 2021 Lindsay

A great way to start the Juniper Networks Certified Professional Service Provider Routing and Switching (JNCIP-SP) preparation is to begin by properly appreciating the role that syllabus and study guide play in the Juniper JN0-663 certification exam. This study guide is an instrument to get you on the same page with Juniper and understand the nature of the Juniper JNCIP Service Provider exam.

Our team of experts has composed this Juniper JN0-663 exam preparation guide to provide the overview about Juniper Service Provider Routing and Switching Professional exam, study material, sample questions, practice exam and ways to interpret the exam objectives to help you assess your readiness for the Juniper JNCIP-SP exam by identifying prerequisite areas of knowledge. We recommend you to refer the simulation questions and practice test listed in this guide to determine what type of questions will be asked and the level of difficulty that could be tested in the Juniper JNCIP Service Provider certification exam.

Juniper JN0-663 Exam Overview:
Exam Name Service Provider Routing and Switching Professional
Exam Number JN0-663 JNCIP-SP
Duration 120 minutes
Number of Questions 65
Passing Score Pass / Fail (60-70% Approx.)
Recommended Training Advanced Junos Service Provider Routing (AJSPR)
Junos Layer 2 VPNs (JL2V)
Junos Layer 3 VPNs (JL3V)
Exam Registration PEARSON VUE
Practice Exam Juniper Networks Certified Professional Service Provider Routing and Switching Practice Test

Juniper JN0-663 Exam Topics:

Section Objectives
OSPF Describe the concepts, operation, or functionality of OSPFv2 or OSPFv3

OSPF area types and operations
LSA flooding through an OSPF multi-area network
DR/BDR operation
SPF algorithm
Metrics, including external metric types
Summarize and restrict routes
Virtual links
OSPFv2 versus OSPFv3

Given a scenario, demonstrate knowledge of how to configure or monitor single-area or multi-area OSPF
Implement OSPF routing policy

IS-IS Describe the concepts, operation, or functionality of IS-IS
IS-IS areas/levels and operations
LSP flooding through an IS-IS multi-area network
DIS operation
SPF algorithm
Metrics, including wide metrics
Route summarization and route leaking

Given a scenario, demonstrate knowledge of how to configure or monitor single-area or multi-area IS-IS
Implement IS-IS routing policy

BGP Describe the concepts, operation, or functionality of BGP
BGP route selection process
Next hop resolution
BGP attributes: concept and operation
BGP communities
Regular expressions
Multipath
Multihop
Load balancing
Advanced BGP options
BGP route damping
FlowSpec
Multiprotocol BGP

Describe the concepts, operation, or functionality of BGP scaling mechanisms
Route reflection

Given a scenario, demonstrate knowledge of how to configure or monitor BGP
Implement BGP routing policy

Class of Service (CoS) Describe the concepts, operation, or functionality of Junos CoS
CoS processing on Junos devices
CoS header fields
Forwarding classes
Classification
Packet loss priority
Policers
Schedulers
Drop profiles
Rewrite rules

Given a scenario, demonstrate knowledge of how to configure or monitor CoS

IP Multicast Describe the concepts, operation, or functionality of IP multicast
Components of IP multicast, including multicast addressing
IP multicast traffic flow
Any-Source Multicast (ASM) versus Source-Specific Multicast (SSM)
RPF: concept and operation
IGMP
PIM dense-mode and sparse-mode
Rendezvous point (RP): concept, operation, discovery, and election
SSM: requirements, benefits, address ranges
Anycast RP

Given a scenario, demonstrate knowledge of how to configure or monitor IGMP, PIM-DM, or PIM-SM (including SSM)
Implement IP multicast routing policy

Layer 3 VPNs Describe the concepts, operation, or functionality of Layer 3 VPNs
Traffic flow: control and data planes
Full mesh versus hub-and-spoke topology
VPN-IPv4 addressing
Route distinguishers
Route targets
Route distribution
Site of origin
Sham links
vrf-table-label
Next-generation MVPNs
Flow of control and data traffic in an MVPN
Layer 3 VPN scaling
IPv6 Layer 3 VPNs
Layer 3 VPN Internet access options

– Given a scenario, demonstrate knowledge of how to configure or monitor the components of Layer 3 VPNs

– Describe Junos support for carrier-of-carriers or interprovider VPN models

Layer 2 VPNs Describe the concepts, operation, or functionality of BGP Layer 2 VPNs
Traffic flow: control and data planes
Forwarding tables
Connection mapping
Layer 2 VPN NLRI
Route distinguishers
Route targets
Layer 2 VPN scaling

Describe the concepts, operation, or functionality of LDP Layer 2 circuits
Traffic flow: control and data planes
Virtual circuit label
AutoDiscovery
Layer 2 interworking

Describe the concepts, operation, or functionality of VPLS
Traffic flow: control and data planes
BGP VPLS label distribution
LDP VPLS label distribution
Route targets
VPLS Multihoming
Site IDs

Describe the concepts, operation, or functionality of EVPN
Traffic flow: control and data planes
MAC learning and distribution
EVPN Multihoming
BGP EVPN label distribution

Given a scenario, demonstrate knowledge of how to configure, monitor, or troubleshoot Layer 2 VPNs
BGP Layer 2 VPNs
LDP Layer 2 circuits
EVPNs
VPLS

Juniper JNCIP-SP Exam Description:
Designed for experienced networking professionals with advanced knowledge of the Juniper Networks Junos OS, this written exam verifies the candidate’s understanding of advanced routing technologies and related platform configuration and troubleshooting skills.

Actualkey Juniper JN0-663 Exam pdf, Certkingdom Juniper JN0-663 PDF

Best Juniper JN0-663 Certification, Juniper JN0-663 Training at certkingdom.com

Juniper

JN0-362 Service Provider Routing and Switching – Specialist (JNCIS-SP) Exam

January 8, 2021 Lindsay

A great way to start the Juniper Networks Certified Specialist Service Provider Routing and Switching (JNCIS-SP) preparation is to begin by properly appreciating the role that syllabus and study guide play in the Juniper JN0-362 certification exam. This study guide is an instrument to get you on the same page with Juniper and understand the nature of the Juniper JNCIS Service Provider exam.

Our team of experts has composed this Juniper JN0-362 exam preparation guide to provide the overview about Juniper Service Provider Routing and Switching Specialist exam, study material, sample questions, practice exam and ways to interpret the exam objectives to help you assess your readiness for the Juniper JNCIS-SP exam by identifying prerequisite areas of knowledge. We recommend you to refer the simulation questions and practice test listed in this guide to determine what type of questions will be asked and the level of difficulty that could be tested in the Juniper JNCIS Service Provider certification exam.
Juniper JN0-362 Exam Overview:

Exam Name
Service Provider Routing and Switching Specialist
Exam Number JN0-362 JNCIS-SP
Duration 90 minutes
Number of Questions 65
Passing Score Pass / Fail (60-70% Approx.)
Recommended Training Junos Intermediate Routing (JIR)
Junos Service Provider Switching (JSPX)
Junos MPLS Fundamentals (JMF)
Exam Registration PEARSON VUE
Sample Questions Juniper JN0-362 Sample Questions
Practice Exam Juniper Networks Certified Specialist Service Provider Routing and Switching Practice Test

Juniper JN0-362 Exam Topics:
Section Objectives

Protocol-Independent Routing Identify the concepts, operation, or functionality of various protocol-independent routing components
Static, aggregate, and generated routes
Martian addresses
Routing instances, including RIB groups
Load balancing
Filter-based forwarding

Demonstrate knowledge of how to configure, monitor, or troubleshoot various protocol-independent routing components
Static, aggregate, and generated routes
Load balancing
Filter-based forwarding

Open Shortest Path First (OSPF) Identify the concepts, operation, or functionality of OSPF
Link-state database
OSPF packet types
Router ID
Adjacencies and neighbors
Designated router and backup designated router
OSPF area and router types
LSA packet types

Demonstrate knowledge of how to configure, monitor, or troubleshoot OSPF
Areas, interfaces and neighbors
Additional basic options
Routing policy application
Troubleshooting tools

Intermediate System to Intermediate System (IS-IS) Identify the concepts, operation, or functionality of IS-IS
Link-state database
IS-IS PDUs
TLVs
Adjacencies and neighbors
Levels and areas
Designated intermediate system (DIS)
Metrics

Demonstrate knowledge of how to configure, monitor, or troubleshoot IS-IS
Levels, interfaces and adjacencies
Additional basic options
Routing policy application
Troubleshooting tools

Border Gateway Protocol (BGP) Identify the concepts, operation, or functionality of BGP
BGP basic operation
BGP message types
Attributes
Route/path selection process
IBGP and EBGP functionality and interaction

Demonstrate knowledge of how to configure, monitor, or troubleshoot BGP
Groups and peers
Additional basic options
Routing policy application

Layer 2 Bridging or VLANs Identify the concepts, operation, or functionality of Layer 2 bridging for the Junos OS
Service provider switching platforms
Bridging elements and terminology
Frame processing
Virtual Switches
Provider bridging (for example, Q-in-Q Tunneling)

Identify the concepts, benefits, or functionality of VLANs
Port modes
Tagging
MVRP
IRB

Demonstrate knowledge of how to configure, monitor, or troubleshoot Layer 2 bridging or VLANs
Interfaces and ports
VLANs
MVRP
IRB
Provider bridging

Spanning-Tree Protocols Identify the concepts, benefits, operation, or functionality of Spanning Tree Protocol and its variants
STP, RSTP, MSTP and VSTP concepts
Port roles and states
BPDUs
Convergence and reconvergence
Spanning-tree security

Demonstrate knowledge of how to configure, monitor, or troubleshoot STP and its variants
Spanning-tree protocols: STP, RSTP, MSTP, and VSTP
BPDU, loop, and root protection

Multiprotocol Label Switching (MPLS) Identify the concepts, operation, or functionality of MPLS
MPLS terminology
MPLS packet header
End-to-end packet flow and forwarding
Labels and the label information base
MPLS and routing tables
RSVP
LDP

Demonstrate knowledge of how to configure, monitor, or troubleshoot MPLS
MPLS forwarding
RSVP-signaled and LDP-signaled LSPs

IPv6 Identify the concepts, operation, or functionality of IPv6
IPv4 versus IPv6
Address types, notation, and format
Address scopes
Autoconfiguration
Tunneling

Demonstrate knowledge of how to configure, monitor, or troubleshooting IPv6
Interfaces
Static routes
Dynamic routing: OSPFv3, IS-IS, and BGP
IPv6 over IPv4 tunneling

Tunnels Identify the concepts, requirements, or functionality of IP tunneling
Tunneling applications and considerations
GRE
IP-IP

Demonstrate knowledge of how to configure, monitor, or troubleshoot IP tunnels
GRE
IP-IP

High Availability Identify the concepts, benefits, applications, or requirements of high availability
Link aggregation groups (LAG) and multichassis LAGs (MC-LAGs)
Graceful restart (GR)
Graceful Routing Engine switchover (GRES)
Nonstop bridging (NSB)
Nonstop active routing (NSR)
Bidirectional Forwarding Detection (BFD)
Virtual Router Redundancy Protocol (VRRP)
Unified In-Service Software Upgrade (ISSU)

Demonstrate knowledge of how to configure, monitor, or troubleshoot high availability components
LAG, MC-LAG
GR, GRES, NSB, and NSR
VRRP
ISSU

Juniper JNCIS-SP Exam Description:
Designed for experienced networking professionals with beginner to intermediate knowledge of routing and switching implementations in Junos, this written exam verifies the candidate’s basic understanding of routing and switching technologies and related platform configuration and troubleshooting skills.

QUESTION 1
Which statement is true about an OSPF broadcast link?

A. All routers form an adjacency only with the BDR
B. All routers form an adjacency only with the DR
C. All routers form an adjacency with all other routers
D. All routers form an adjacency with both the DR and BDR

Correct Answer: D

QUESTION 2
Which two statements are true for GRE tunneling? (Choose two.)

A. GRE tunnel endpoints must have a valid route to the remote endpoint
B. GRE tunnels support multiple logical units per interface
C. GRE tunnels are stateful by default
D. GRE tunnels support only one logical unit per interface

Correct Answer: AB

QUESTION 3
What happens when a packet matches a static route with the next hop parameter set to reject?

A. The system silently drops the packet
B. An ICMP message is sent to the source and the packet is forwarded
C. An ICMP message is sent to the source and the packet is dropped
D. The packet is forwarded and the packet is marked as rejected in the header

Correct Answer: C

QUESTION 4
Which two statements are correct about the BGP MED attribute? (Choose two.)

A. BGP uses the MED value when peering to two or more connections to the same upstream AS
B. BGP routes require the MED attribute be defined
C. BGP uses the MED value when peering to two different upstream ASs
D. BGP assumes the MED value to be 0, if not already defined

Correct Answer: AD

Actualkey Juniper JN0-362 Exam pdf, Certkingdom Juniper JN0-362 PDF

Best Juniper JN0-362 Certification, Juniper JN0-362 Training at certkingdom.com

Juniper

JN0-230 Security-Associate (JNCIA-SEC) Exam

January 6, 2021 Lindsay

Exam Details
JNCIA-SEC exam topics are based on the content of the recommended instructor-led training courses, as well as the additional resources.

Juniper Networks, Inc. is an American worldwide organization that creates and markets diverse systems administration items that incorporate switches, switches, arrange the board programming, programming characterized by organizing innovation, and system security items.

The Juniper is crucial to carry straightforwardness to systems administration with inventive arrangements, administrations, and items that associate the world with no interference and security concerns.

The organization holds over a 40% portion of the center switches showcase. To help its multipurpose and wide cluster of systems administration items and advances and the clients who utilize these items the Juniper offers certification programs.

These Juniper certifications fall into various classes, for example, Associate, Specialist, Professional and Expert levels. The Juniper certification gives a substantial, solid and reasonable strategy for surveying information and mastery to chip away at the Juniper items and innovation. With this certification program, Juniper needs to build up an overall network of ensured experts who sell, administration, support and prescribe Juniper items and arrangements.

Juniper JN0-230 Exam Details:
Juniper JN0-230 Exam or Security, Associate is one of the most prominent and profession remunerating Juniper certification programs that will confirm your strong comprehension of systems administration security. This program is intended for systems administration experts, this composed exam will exam the applicant’s learning and ability of security innovations and related stage structuring, execution, setup, and investigating, and so forth.

Regardless of whether you are beginning your career with Juniper or Juniper experts and need to overhaul their insight, you should attempt to pass this Security, Associate exam with great success.

Exam code: JN0-230
Administered by Pearson VUE
Exam length: 90 minutes
Exam type: 65 multiple-choice questions
Scoring and pass/fail status is available immediately
Junos Software Release: 19.1

Exam Objectives
This list provides a general view of the skill set required to successfully complete the specified certification exam.

Identify concepts or general features of SRX Series devices
Interfaces
Hardware
Initial configuration
Traffic flow/security processing
vSRX

Identify concepts or general functionality of security zone, screen, address, or services objects
Zones
Screens
Addresses/address books

Describe the concepts, benefits, or operation of security policies
Zone-based policies
Global policies
Application firewall
Unified security policies
IPS/IDP
Integrated user firewall

Identify the concepts, benefits, or operation of Sky ATP
General operation
Blocking mechanisms

Describe the concepts, benefits, or operation of NAT
Source NAT
Destination NAT
Static NAT

Identify the concepts, benefits, or operation of IPsec VPNs
IPsec tunnel establishment
IPsec traffic processing
IPsec site-to-site VPNs

Identify the concepts, benefits, or operation of UTM
Content filtering
Web filtering
Antivirus
Antispam

Describe methods for monitoring, reporting, or logging for Juniper security solutions
J-Web
Sky Enterprise
Junos Space Security Director

Preparation
The resources listed on this section are recommended, but do not guarantee passing scores on JNCP exams. Success depends on each candidate’s motivation, experience, and dedication. Candidates may find additional resources not listed on this page helpful as well.

Introduction to Juniper Security
Industry/Product Knowledge
Juniper Networks Technical Publication (Tech Pubs)

Visit Junos Genius for information pertaining to this practice test.

Recertification
The JNCIA-SEC certification is valid for three years. To view the recertification options, go to the Recertification webpage.

QUESTION 1
Which statement is correct about Junos security zones?

A. User-defined security zones must contain at least one interface.
B. Logical interfaces are added to user-defined security zones.
C. Security policies are referenced within a user-defined security zone.
D. User-defined security zones must contain the key word “zone”.

Correct Answer: A

QUESTION 2
Which type of traffic is analyzed by an SRX Series device configured to use an antispam UTM policy?

A. IMAP
B. POP3
C. SMTP
D. https:

Correct Answer: C

QUESTION 3
What is the definition of a zone on an SRX Series device?

A. a collection of one or more network segments sharing similar security requirements
B. an individual logical interface with a public IP address
C. a collection of one or more network segments with different security requirements
D. an individual logical interface with a private IP address

Correct Answer: A

QUESTION 4
Your company uses SRX Series devices to secure the edge of the network.
You are asked to protect the company from ransomware attacks.
Which solution will satisfy this requirement?

A. screens
B. unified security policies
C. AppSecure
D. Sky ATP

Correct Answer: D

QUESTION 5
Which method do VPNs use to prevent outside parties from viewing packets in clear text?

A. integrity
B. authentication
C. encryption
D. NAT-T

Correct Answer: C

Actualkey Juniper JN0-230 Exam pdf, Certkingdom Juniper JN0-230 PDF

Best Juniper JN0-230 Certification, Juniper JN0-230 Training at certkingdom.com

Juniper

Juniper JN0-1331 Security Design – Specialist (JNCDS-SEC)

December 8, 2020 Lindsay

A great way to start the Juniper Networks Certified Design Specialist Security (JNCDS-SEC) preparation is to begin by properly appreciating the role that syllabus and study guide play in the Juniper JN0-1331 certification exam. This study guide is an instrument to get you on the same page with Juniper and understand the nature of the Juniper JNCDS Security exam.

Our team of experts has composed this Juniper JN0-1331 exam preparation guide to provide the overview about Juniper Security Design Specialist exam, study material, sample questions, practice exam and ways to interpret the exam objectives to help you assess your readiness for the Juniper JNCDS-SEC exam by identifying prerequisite areas of knowledge. We recommend you to refer the simulation questions and practice test listed in this guide to determine what type of questions will be asked and the level of difficulty that could be tested in the Juniper JNCDS Security certification exam.

Juniper JN0-1331 Exam Overview:
Security Design Specialist
Exam Number JN0-1331 JNCDS-SEC
Exam Price $300 USD
Duration 90 minutes
Number of Questions 65
Passing Score Variable (60-70% Approx.)
Recommended Training Juniper Networks Design – Security (JND-SEC)
Exam Registration PEARSON VUE
Sample Questions Juniper JN0-1331 Sample Questions
Practice Exam Juniper Networks Certified Design Specialist Security Practice Test
Juniper JN0-1331 Exam Topics:

Section Objectives

Fundamental Security Concepts Describe the various tenets of common security features
– Access control lists
– Stateful security policies
– ALG’s
– IPS
– UTM
– NAT
– IPsec
– Next-generation firewall
– Screen

Advanced Security Concepts Describe advanced security features
– Security intelligence (e.g., cloud security, Sky ATP, JATP)
– Advanced anti-malware
– Defense in-depth

Securing the Campus or Branch Describe the security design considerations within a campus or branch network
– Network segmentation (e.g., SDSN)
– Network access
– Wireless
– 802.1X
– Remote access VPN’s
– Remote access VPN’s
– NAT
– End-to-end security
– BYOD

Securing the Enterprise WAN Describe the security design considerations for an enterprise WAN
– Internet edge security design principles
– WAN aggregation
– Private WAN
– VPNs

Securing the Service Provider WAN Describe the security design considerations for a service provider WAN
– DoS/DDos attacks
– Securing the control plane
– Internet security
– CG-NAT

Securing the Data Center Describe the security design considerations in a data center
– Securing data center interconnects
– Securing North-South flows
– Securing East-West flows
– Virtual routers

Security Automation and Management

Describe the design considerations for security management
– Securing the individual devices
– Centralized security
– Junos Space management platform
– Junos Space Security Director and Log Director
– Juniper Secure Analytics

Describe the design considerations for automating security.
– Simplifying deployment
– On-box automation
– Off-box automation

Security Virtualization Describe the security design considerations for a virtualized environment
– NFV
– Service chaining
– Micro-segmentation
– vSRX

High Availability Describe the design considerations of high availability in a secure networks
– Physical high availability
– Virtual high availability
– Asymmetrical traffic handling
– Chassis clustering

Juniper JNCDS-SEC Exam Description:

The Juniper Networks Certification Program (JNCP) Design Track allows participants to demonstrate competence with Juniper Networks design principles and associated technologies. Successful candidates demonstrate thorough understanding of best practices, theory, and design principles for the network.

QUESTION 1
You are deploying Security Director with the logging and reporting functionality for VMs that use SSDs. You
expect to have approximately 20,000 events per second of logging in your network.
In this scenario, what is the minimum number of logging and reporting devices that should be used?

A. 2
B. 4
C. 1
D. 3

Correct Answer: C

QUESTION 2
You are concerned about users attacking the publicly accessible servers in your data center through
encrypted channels. You want to block these attacks using your SRX Series devices.
In this scenario, which two features should you use? (Choose two.)

A. Sky ATP
B. IPS
C. SSL forward proxy
D. SSL reverse proxy

Correct Answer: BC

QUESTION 3
Your customer needs help designing a single solution to protect their combination of various Junos network
devices from unauthorized management access.
Which Junos OS feature will provide this protection?

A. Use a firewall filter applied to the fxp0 interface
B. Use a security policy with the destination of the junos-host zone
C. Use the management zone host-inbound-traffic feature
D. Use a firewall filter applied to the lo0 interface

Correct Answer: A

Actualkey Juniper JN0-1331 Exam pdf, Certkingdom Juniper JN0-1331 PDF

Best Juniper JN0-1331 Certification, Juniper JN0-1331 Training at certkingdom.com

Juniper, Uncategorized

JN0-221 Automation and DevOps, Associate (JNCIA-DevOps) Exam

November 26, 2020 Lindsay

Automation and DevOps Certification Track
The Juniper Networks Certification Program (JNCP) Automation and DevOps Track allows participants to demonstrate competence with common scripting languages and tools through the automation of device and network functions. Successful candidates demonstrate understanding of applying automation to Junos devices and networks.
Certification Path

The Automation and DevOps certification track is shown below. Click the arrow tab with the appropriate certification name to view details on its requirements and recommendations.

ASSOCIATE
Automation and DevOps, Associate (JNCIA-DevOps)

This certification is designed for networking professionals with introductory-level knowledge of automation tools and best practices. The written exam for the certification verifies the candidate’s understanding of DevOps and automation concepts as they pertain to Juniper devices and solutions.
Prerequisite certification

None

Exam Details
JNCIA-DevOps exam topics are based on the content of the recommended instructor-led training course, as well as the additional resources.

Exam code: JN0-221
Administered by Pearson VUE
Exam length: 90 minutes
Exam type: 65 multiple-choice questions
Scoring and pass/fail status is available immediately
Junos Software: 20.1
Python: 3.4+
Ansible: 2.9

Exam Objectives
This list provides a general view of the skill set required to successfully complete the specified certification exam. The objectives are subject to change prior to the exam’s release.

Identify concepts and general features of Junos automation or DevOps
Automation tools
Automation frameworks
Automation APIs
DevOps culture, practices, and tools

Identify concepts and general functionality of XML, the XML API, XPath, or NETCONF
XML concepts and syntax
XPath concepts and syntax
NETCONF concepts
XML API concepts and syntax

Identify the concepts, benefits, or operation of data serialization
YAML
JSON

Identify the use of Ansible for automating Junos tasks
Architecture and capabilities
Play books
Juniper Junos Ansible modules: modifying configurations, operations commands, and software updates
Basic inventory files

Identify Python or PyEZ tools for automating Junos
Syntax and concepts
RPCs
PyEZ exception handling
Device status and configuration handling

Identify the concepts, benefits, or operation of the Junos REST API
Configuring the Junos REST API
Using the REST API Explorer
Using curl to access the REST API

Preparation
The resources in this section are suggestions only. They are not requirements, nor do they guarantee a passing score on JNCP exams. Success depends on each candidate’s motivation, experience, and dedication. Candidates may find resources not listed on this page helpful as well.

QUESTION 1
What is the advantage of using the REST API?

A. The REST API enables Junos devices to participate in other REST management system environments
B. The REST API is enabled by default on all Junos devices
C. By default, the REST API retrieves data from a Junos device in CSV format
D. By default, the REST API retrieves data from a Junos device in HTML format

Correct Answer: C

QUESTION 2
Junos PyEZ is a microframework used to operate the Junos OS using which language?

A. Puppet
B. Chef
C. Python
D. Ruby

Correct Answer: C

QUESTION 3
What is the default port for NETCONF connections over SSH?

A. 22
B. 830
C. 443
D. 8080

Correct Answer: A

QUESTION 4
Which two statements are correct about Junos PyEZ Tables and Views? (Choose two.)

A. PyEZ Tables and Views are defined using YAML
B. The juniper_junos_config module enables the use of PyEZ Tables and Views
C. PyEZ Tables and Views are defined using CSV
D. The juniper_junos_table module enables the use of PyEZ Tables and Views

Correct Answer: AD

Actualkey Juniper JNCIA-DevOps JN0-221 Exam pdf, Certkingdom Juniper JNCIA-DevOps JN0-221 PDF

Best Juniper JNCIA-DevOps JN0-221 Certification, Juniper JNCIA-DevOps JN0-221 Training at certkingdom.com

Juniper

JN0-635 Security, Professional (JNCIP-SEC) Exam

November 9, 2020 Lindsay

Exam Details
JNCIP-SEC exam topics are based on the content of the recommended instructor-led training courses, as well as the additional resources.

Exam code: JN0-635
Written exam
Administered by Pearson VUE
Exam length: 120 minutes
Exam type: 65 multiple choice questions
Pass/fail status is available immediately

Exam Objectives
This list provides a general view of the skill set required to successfully complete the specified certification exam.

Describe the concepts, operation, or functionality of firewall filters and ACLs
Selective packet processing
Troubleshooting with firewall filters
Filter-based forwarding

Given a scenario, demonstrate how to configure, troubleshoot, or monitor firewall filters

Given a scenario, demonstrate how to troubleshoot or monitor security policies or security zones
Tools
Logging and tracing
Other outputs

Describe the concepts, operation, or functionality of Juniper ATP
Collectors
Custom rules
Mitigation

Given a scenario, demonstrate how to configure or monitor Juniper ATP

Describe the concepts, operation, or functionality of edge security features
Hardware support
SecIntel
IPS
Corero DDoS mitigation
ATP

Describe the concepts or operation of security compliance
RBAC
Security Director
AAA and SAML integration

Describe the concepts, operation, or functionality of threat mitigation
Malware identification or mitigation
Malicious lateral traffic identification or mitigation
Zero trust micro segmentation

Given a scenario, demonstrate how to configure or monitor threat mitigation

Describe the concepts, operation, or functionality of the logical systems
Administrative roles
Security profiles
LSYS communication

Describe the concepts, operation, or functionality of the tenant systems
Master and tenant admins
TSYS capacity

Describe the concepts, operation, or functionality of Layer 2 security
Transparent mode
Mixed mode
Secure wire
MACsec

Given a scenario, demonstrate how to configure or monitor Layer 2 security

Describe the concepts, operation, or functionality of advanced NAT functionality
Persistent NAT
DNS doctoring
IPv6 NAT

Given a scenario, demonstrate how to configure, troubleshoot, or monitor advanced NAT scenarios

Describe the concepts, operation, or functionality of advanced IPsec application
Remote access VPNs
Hub-and-spoke VPNs
PKI
ADVPNs
Routing with IPsec
Overlapping IP addresses
Dynamic gateways
IPsec CoS

Given a scenario, demonstrate how to configure, troubleshoot, or monitor advanced IPsec functionality

Preparation
The resources listed on this section are recommended, but do not guarantee passing scores on JNCP exams. Success depends on each candidate’s motivation, experience, and dedication. Candidates may find additional resources not listed on this page helpful as well.

QUESTION 1
Your organization has multiple Active Directory domains to control user access. You must ensure that security policies are passing traffic based upon the users’ access rights.
What would you use to assist your SRX Series devices to accomplish this task?

A. JATP Appliance
B. JIMS
C. JSA
D. Junos Space

Correct Answer: B

QUESTION 2
You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps.
Which two configuration parameters must be set to accomplish this task? (Choose two.)

A. Set a traffic SNMP trap on the JATP appliance
B. Set a logging notification on the JATP appliance
C. Set a general triggered notification on the JATP appliance
D. Set a traffic system alert on the JATP appliance

Correct Answer: BD

QUESTION 3
You have configured static NAT for a webserver in your DMZ. Both internal and external users can reach the
webserver using the webserver’s IP address. However, only internal users can reach the webserver using the
webserver’s DNS name. When external users attempt to reach the webserver using the webserver’s DNS name, an error message is received.
Which action would solve this problem?

A. Disable Web filtering
B. Use DNS doctoring
C. Modify the security policy
D. Use destination NAT instead of static NAT

Correct Answer: B

QUESTION 4
Which interface family is required for Layer 2 transparent mode on SRX Series devices?

A. LLDP
B. Ethernet switching
C. inet
D. VPLS

Correct Answer: B

Actualkey Juniper JNCIP-SEC JN0-635 Exam pdf, Certkingdom Juniper JNCIP-SEC JN0-635 PDF

Best Juniper JNCIP-SEC JN0-635 Certification, Juniper JNCIP-SEC JN0-635 Training at certkingdom.com

Juniper

JN0-103 Junos – Associate – Juniper Networks Certified Associate Exam

June 5, 2020 Lindsay

Exam Details
JNCIA-Junos exam topics are based on the content of the recommended instructor-led training courses, as well as the additional resources.

Exam code: JN0-103
Administered by Pearson VUE
Exam length: 90 minutes
Exam type: 65 multiple-choice questions
Scoring and pass/fail status is available immediately
Junos Software Release: 19.4

Exam Objectives
This list provides a general view of the skill set required to successfully complete the specified certification exam.

Identify the concepts, benefits or functionality of the core elements of the Junos OS
Software architecture
Control and forwarding planes
Routing Engine and Packet Forwarding Engine
Transit traffic processing
Exception traffic

Identify the concepts, operation or functionality of the Junos user interface
CLI functionality
CLI modes
CLI navigation
CLI Help
Filtering output
Active versus candidate configuration
Reverting to previous configurations
Modifying, managing, and saving configuration files
Viewing, comparing, and loading configuration files
J-Web (core/common functionality only)

Identify the main elements for configuring Junos devices
Factory-default state
Initial configuration
User accounts
Login classes
User authentication methods
Interface types and properties
Configuration groups
Additional initial configuration elements, such as NTP, SNMP, and syslog
Configuration archival
Logging and tracing
Rescue configuration

Describe how to configure basic components of a Junos device

Identify methods of monitoring or maintaining Junos devices
Show commands
Monitor commands
Interface statistics and errors
Network tools, such as ping, traceroute, telnet, SSH, and so on
Junos OS installation and upgrades
Powering on and shutting down Junos devices
Root password recovery

Describe monitoring or maintenance procedures for a Junos device

Identify basic routing concepts or functionality for Junos devices
Traffic forwarding concepts
Routing tables
Routing versus forwarding tables
Route preference
Routing instances
Static routing
Advantages of and use cases for dynamic routing protocols

Describe how to configure or monitor basic routing elements for a Junos device

Identify the concepts or functionality of routing policy and firewall filters on Junos devices
Default routing policies
Import and export policies
Routing policy flow
Effect of policies on routes and routing tables
Policy structure and terms
Policy match criteria, match types, and actions
Firewall filter concepts
Filter structure and terms
Filter match criteria and actions
Effect of filters on packets
Unicast reverse-path-forwarding (RPF)

Describe how to configure or monitor routing policies and firewall filters on a Junos device

Preparation
The resources listed on this section are recommended, but do not guarantee passing scores on JNCP exams. Success depends on each candidate’s motivation, experience, and dedication. Candidates may find additional resources not listed on this page helpful as well.

QUESTION 1
Which command verifies configuration syntax without applying the changes?

A. commit confirmed
B. commit check
C. commit comment
D. commit and-quit

Correct Answer: B

QUESTION 2
By default, which character indicates the UNIX shell prompt?

A. #
B. %
C. $
D. >

Correct Answer: B

QUESTION 3
You are considering an upgrade from 19.1R1 and want to ensure that only bug fixes are included.
Which two software versions should you consider in this situation? (Choose two.)

A. 19.3R1-S1
B. 19.3R2
C. 19.1R3
D. 19.1R1-S2

Correct Answer: AC

QUESTION 4
Which two statements are true about static routes in the Junos OS? (Choose two.)

A. Static routes remain in the routing table until you remove them or until they become inactive.
B. Static routes must have a next hop defined.
C. Static routes are learned by neighboring devices and added to their routing tables.
D. Static routes are defined at the [edit routing-instances] hierarchy.

Correct Answer: AB

QUESTION 5
When multiple users are editing the configuration on a Junos device, what is the default behavior when a user issues a commit command?

A. All valid configuration changes made by all users will take effect.
B. The user’s configuration changes are committed; other users’ configuration changes are still pending.
C. The user will receive an error message disallowing a commit of the configuration.
D. The user’s configuration changes are committed; other users will be exited from configuration mode.

Correct Answer: A

Actualkey Juniper JNCIA JN0-103 exam pdf, Certkingdom Juniper JNCIA JN0-103 PDF

Best Juniper JNCIA JN0-103 Certification, Juniper JNCIA JN0-103 Training at certkingdom.com

Juniper

JN0-334 Security, Specialist JNCIS-SEC Exam

May 13, 2020 Lindsay

Exam Details
JNCIS-SEC exam topics are based on the content of the recommended instructor-led training courses, as well as the additional resources.

Exam code: JN0-334
Written exam
Administered by Pearson VUE
Exam length: 90 minutes
Exam type: 65 multiple-choice questions
Pass/fail status is available immediately
Junos Software Release: 19.1

Identify the concepts, benefits, or operation of security policies
ALGs
Logging
Session management
Scheduling

Demonstrate knowledge of how to configure, monitor, or troubleshoot security policies

Preparation
The resources listed on this section are recommended, but do not guarantee passing scores on JNCP exams. Success depends on each candidate’s motivation, experience, and dedication. Candidates may find additional resources not listed on this page helpful as well.

Exam Objectives
This list provides a general view of the skill set required to successfully complete the specified certification exam.

Identify application security concepts
Application Firewall
Application QoS
Applicate ID
APBR

Demonstrate knowledge how to configure, monitor, or troubleshoot application security
Identify application IDP/IDS concepts
IPS database management
IPS policy

Demonstrate knowledge how to configure, monitor, or troubleshoot IDP/IDS
Identify the concepts, benefits, or operation of security policies
ALGs
Logging
Session management
Scheduling

Demonstrate knowledge of how to configure, monitor, or troubleshoot security policies
Identify the concepts, benefits, or operation of Sky ATP
Supported files
Components
Security feeds
Traffic remediation
Workflow

Demonstrate knowledge of how to configure, monitor, or troubleshoot Sky ATP
Identify the concepts, benefits, or operation of JATP
Cyber kill chain
Application
Traffic remediation

Demonstrate knowledge of how to configure, monitor, or troubleshoot JATP
Identify the concepts, benefits, or operation of HA
HA features and characteristics
Deployment requirements and considerations
Chassis cluster characteristics and operation
Real-time objects and state synchronization

Demonstrate knowledge of how to configure, monitor, or troubleshoot clustering
Describe concepts, general features, or functionality of virtualized security using vSRX or cSRX
Installation
Deployment scenarios
Troubleshooting

Identify concepts, general features, or functionality of JIMS
Ports and protocols
Data flow

Demonstrate knowledge of how to configure, monitor, or troubleshoot JIMS
Identify concepts, general features, or functionality of SSL Proxy
Certificates
Client and server protection

Demonstrate knowledge of how to configure, monitor, or troubleshoot SSL proxy
Identify concepts, general features, or functionality of JSA
Logging
Analytics

QUESTION 1
What are two examples of RTOs? (Choose two.)

A. IPsec SA entries
B. session table entries
C. fabric link probes
D. control link heartbeats

Correct Answer: C,D

QUESTION 2
Which three features are parts of Juniper Networks’ AppSecure suite? (Choose three.)

A. AppQoE
B. APBR
C. Secure Application Manager
D. AppQoS
E. AppFormix

Correct Answer: A,B,D

QUESTION 3
Which two statements are correct about server-protection SSP proxy? (Choose two.)

A. The server-protection SSL proxy intercepts the server certificate.
B. The server-protection SSL proxy is also known as SSL reverse proxy.
C. The server-protection SSL proxy forwards the server certificate after modification.
D. The server-protection SSL proxy acts as the server from the client’s perspective.

Correct Answer: B,D

Actualkey JN0-334 exam pdf, Certkingdom Juniper JNCIS-SEC JN0-334PDF

Best Juniper JNCIS-SEC JN0-334 Certification, Juniper JNCIS-SEC JN0-334 Training at certkingdom.com

Juniper

JN0-1101 Design, Associate (JNCDA)

April 8, 2019 Lindsay

JN0-1101 Design, Associate (JNCDA)

Exam Details

JNCDA exam topics are based on the content of the recommended instructor-led training courses, as well as the additional listed resources.

JN0-1101
Administered by Pearson VUE
Exam length: 90 minutes
Exam type: 65 multiple-choice questions
Pass/fail status is available immediately

Exam Objectives

This list provides a general view of the skill set required to successfully complete the specified certification exam.

Identify initial network design requirements

Identify security design principles

Identify network design considerations for business continuity

Describe design considerations for network automation
Describe design considerations for network management strategies

Describe considerations for a campus or branch network
Describe considerations for a WAN
Describe considerations for a data center
Preparation

The resources listed on this section are recommended, but do not guarantee passing scores on JNCP exams. Success depends on each candidate’s motivation, experience, and dedication. Candidates may find additional resources not listed on this page helpful as well.

Juniper Networks Design Fundamentals (JNDF)

QUESTION: 1
When discussing network reliability, what does the term “five nines” mean?

A. The network is up 99.999% of the time.
B. The network is up .99999% of the time.
C. The network is up 9.9999% of the time.
D. The network is up .09999% of the time.

Answer: A

QUESTION: 2
Which component triggers the quarantine of an infected endpoint?

A. ALG
B. firewall
C. Policy Enforcer
D. switch

Answer: C

QUESTION: 3
You are in the process of developing a business continuity plan for your network design. You must
analyze data about weather patterns, maintenance history pertaining to leased buildings, and the
frequency of power failures.
For which purpose would you collect this information?

A. risk assessment
B. redundancy
C. high availability
D. disaster recovery

Answer: A

QUESTION: 4
You are asked to provide a design proposal for a service provider network. The design must ensure
that customers are able to send Layer 2 traffic between sites.
In this scenario, which VPN technology would be used to accomplish this task?

A. IPsec VPN
B. Layer 3 VPN
C. GRE
D. EVPN

Answer: D

Click here to view complete Q&A of JN0-1101 exam
Certkingdom Review, Certkingdom PDF Torrents

Best Juniper JN0-1101 Certification, JNCDA JN0-1101 Training at certkingdom.com

Juniper

JN0-361 Service Provider Routing and Switching, Specialist (JNCIS-SP)

March 30, 2018 Lindsay

Designed for experienced networking professionals with beginner to intermediate knowledge of routing and switching implementations in Junos, this written exam verifies the candidate’s basic understanding of routing and switching technologies and related platform configuration and troubleshooting skills.

Prerequisite certification JNCIA-Junos

Exam Details
JNCIS-SP exam topics are based on the content of the recommended instructor-led training courses, as well as the additional resources.

Exam code: JN0-361
Written exam Administered at Pearson VUE testing centers worldwide
Exam length: 90 minutes
Exam type: 65 multiple-choice questions
Pass/fail status is available immediately
Junos Software Release: 17.3

Exam Objectives
This list provides a general view of the skill set required to successfully complete the specified certification exam.

Identify the concepts, operation and functionality of various protocol-independent routing components
Static, aggregate, and generated routes
Martian addresses
Routing instances, including RIB groups
Load balancing
Filter-based forwarding

Demonstrate knowledge of how to configure and monitor various protocol-independent routing components
Static, aggregate, and generated routes
Load balancing
Filter-based forwarding

Identify the concepts, operation, or functionality of OSPF
Link-state database
OSPF packet types
Router ID
Adjacencies and neighbors
Designated router (DR) and backup designated router (BDR)
OSPF area and router types
LSA packet types

Demonstrate knowledge of how to configure, monitor and troubleshoot IS-IS
Areas, interfaces and neighbors
Additional basic options
Routing policy application
Troubleshooting tools

Identify the concepts, operation and functionality of IS-IS
Link-state database
IS-IS PDUs
TLVs
Adjacencies and neighbors
Levels and areas
Designated intermediate system (DIS)
Metrics

Demonstrate knowledge of how to configure, monitor and troubleshoot IS-IS
Levels, interfaces, and adjacencies
Additional basic options
Routing policy application
Troubleshooting tools

Identify the concepts, operation and functionality of BGP
BGP basic operation
BGP message types
Attributes
Route/path selection process
IBGP and EBGP functionality and interaction

Demonstrate knowledge of how to configure, monitor, or troubleshoot BGP
Groups and peers
Additional basic options
Routing policy application

Identify the concepts, operation, or functionality of Layer 2 bridging for the Junos OS
Service Provider switching platforms
Bridging elements and terminology
Frame processing
Virtual Switches
Provider bridging (e.g., Q-in-Q tunneling)

Identify the concepts, benefits, and functionality of VLANs
Port modes
Tagging
MVRP
IRB

Demonstrate knowledge of how to configure, monitor, or troubleshoot Layer 2 bridging and VLANs
Interfaces and ports
VLANs
MVRP
IRB
Provider bridging

Identify the concepts, benefits, operation, or functionality of Spanning Tree Protocol and its variants
STP, RSTP, MSTP and VSTP concepts
Port roles and states
BPDUs
Convergence and reconvergence
Spanning-tree security

Demonstrate knowledge of how to configure, monitor or troubleshoot STP and its variants
Spanning-tree protocols: STP, RSTP, MSTP, VSTP
BPDU, loop, and root protection

Identify the concepts, operation, or functionality of MPLS
MPLS terminology
MPLS packet header
End-to-end packet flow and forwarding
Labels and the label information base (LIB)
MPLS and routing tables
RSVP
LDP

Demonstrate knowledge of how to configure, monitor, or troubleshoot MPLS
MPLS forwarding
RSVP-signaled and LDP-signaled LSPs

Demonstrate knowledge of how to configure and monitor various protocol-independent routing components
Static, aggregate, and generated routes
Load balancing
Filter-based forwarding

Demonstrate knowledge of how to configure, monitor and troubleshoot IS-IS
Areas, interfaces and neighbors
Additional basic options
Routing policy application
Troubleshooting tools

Identify the concepts, operation and functionality of IS-IS
Link-state database
IS-IS PDUs
TLVs
Adjacencies and neighbors
Levels and areas
Designated intermediate system (DIS)
Metrics

Demonstrate knowledge of how to configure, monitor and troubleshoot IS-IS
Levels, interfaces, and adjacencies
Additional basic options
Routing policy application
Troubleshooting tools

Identify the concepts, operation and functionality of BGP
BGP basic operation
BGP message types
Attributes
Route/path selection process
IBGP and EBGP functionality and interaction

Demonstrate knowledge of how to configure, monitor, or troubleshoot BGP
Groups and peers
Additional basic options
Routing policy application

Identify the concepts, benefits, and functionality of VLANs
Port modes
Tagging
MVRP
IRB

Demonstrate knowledge of how to configure, monitor, or troubleshoot Layer 2 bridging and VLANs
Interfaces and ports
VLANs
MVRP
IRB
Provider bridging

Demonstrate knowledge of how to configure, monitor or troubleshoot STP and its variants
Spanning-tree protocols: STP, RSTP, MSTP, VSTP
BPDU, loop, and root protection

Demonstrate knowledge of how to configure, monitor, or troubleshoot MPLS
MPLS forwarding
RSVP-signaled and LDP-signaled LSPs

Identify the concepts, operation, or functionality of IPv6
IPv4 vs. IPv6
Address types, notation and format
Address scopes
Autoconfiguration
Tunneling

Demonstrate knowledge of how to configure, monitor, or troubleshoot IPv6
Interfaces
Static routes
Dynamic routing: OSPFv3, IS-IS, BGP
IPv6 over IPv4 tunneling

Identify the concepts, requirements, or functionality of IP tunneling
Tunneling applications and considerations
GRE
IP-IP

Demonstrate knowledge of how to configure, monitor, or troubleshoot IP tunnels
GRE
IP-IP