Question 1

You have two MX Series devices connected together and configured for Layer 2 operations. The
interface that connects the two routers must carry tagged and untagged traffic.
Which approach would meet this objective?

Accepted Answer

B

Explanation: To transport both tagged and untagged Layer 2 traffic over a single physical link between two MX Series devices, the connecting interfaces must be configured as trunk ports. A trunk port is designed to carry traffic for multiple VLANs, which it does by using 802.1Q tags to identify the VLAN for each frame. To handle untagged traffic, the native-vlan-id option is configured on the trunk interface. Any untagged frames received on this interface are then associated with the specified native VLAN. This configuration effectively allows the single link to multiplex traffic from multiple tagged VLANs and one untagged VLAN.

Question 2

Which RSVP object allows LSRs to influence path selection?

Accepted Answer

B

Explanation: The Explicit Route Object (ERO) is used in RSVP Path messages to specify a particular path that a Label-Switched Path (LSP) must take. The ingress Label Switching Router (LSR) includes the ERO, which contains a list of specific routers (hops) for the path. This allows network administrators to explicitly control the route, overriding the path that would otherwise be selected by the Interior Gateway Protocol (IGP). This capability is fundamental to MPLS Traffic Engineering (TE).

Question 3

Which two statements are true for GRE tunneling? (Choose two.)

Accepted Answer

A, D

Explanation: Generic Routing Encapsulation (GRE) encapsulates payload packets within an outer IP packet for transport over an IP network. For this transport to succeed, the device originating the tunnel (the source endpoint) must have a valid route in its routing table to the IP address of the tunnel's destination endpoint. This ensures the outer IP packet can be forwarded correctly. Within Juniper's Junos OS, tunnel interfaces such as GRE (gr-) are implemented as logical interfaces that have specific limitations. A key limitation is that they support the configuration of only a single logical unit, which must be unit 0.

Question 4

What happens when a packet matches a static route with the next hop parameter set to reject?

Accepted Answer

C

Explanation: When a packet matches a static route configured with the reject next-hop action, the Junos device performs two actions: it drops the packet and sends an ICMP "Destination Unreachable" message back to the source host. This behavior explicitly informs the source that the destination is unreachable, which is distinct from the discard action that drops the packet silently without any notification. The reject option is commonly used to enforce routing policies and provide immediate feedback about unreachable networks.

Question 5

Click the Exhibit button. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_2_img_1.jpg Referring to the exhibit, which two statements are true? (Choose two.)

Accepted Answer

B, C

Explanation: The network diagram shows two distinct BGP peering types. The connection between R1 (AS 65001) and R4 (AS 65002) is an External BGP (eBGP) session because the peers are in different Autonomous Systems. The standard and most common practice for eBGP between directly connected routers is to establish the peering session using the IP addresses of the physical interfaces. The connections between R1, R2, and R3 are Internal BGP (iBGP) sessions, as they all reside within the same Autonomous System (AS 65001). For iBGP, the best practice is to use loopback interface addresses for peering. This design provides stability, as the loopback interface is always active, and the iBGP session will remain up as long as the underlying Interior Gateway Protocol (IGP) can maintain reachability between the loopback addresses.

Question 6

Click the Exhibit button. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_3_img_1.jpg Referring to the exhibit, which statement about the IS-IS interface is true?

Accepted Answer

A

Explanation: In Junos OS, if an IS-IS level is not explicitly configured for a specific interface, that interface inherits the level setting from the global [edit protocols isis] configuration. The default behavior for a Juniper router, when IS-IS is enabled without a specific level designation at the global level, is to function as a Level 1 and Level 2 (L1/L2) router. Therefore, since the ge-0/0/0.0 interface in the exhibit has no specific level configured, it inherits the default L1/L2 behavior and will participate in both Level 1 and Level 2 adjacencies and routing.

Question 7

Which statement about a virtual-router type of routing instance is correct?

Accepted Answer

D

Explanation: The primary function of a virtual-router routing instance in Junos OS is to create a separate and isolated routing table (e.g., instance-name.inet.0) and a corresponding forwarding table. This effectively partitions a single physical router into multiple independent logical routers. Each virtual-router instance has its own interfaces, routing protocol configurations, and policies, operating independently from the main inet.0 routing table and other instances. This is used for non-VPN network segmentation scenarios where traffic from different logical networks must be kept separate.

Question 8

Click the Exhibit button. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_33_img_1.jpg In the network shown in the exhibit, all switches are configured with the default STP root bridge priority, and Switch A has been selected as root. You recently added the older Switch D into the network as an access switch, and notice it has taken over as root. Which configuration would solve this problem? https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_34_img_1.jpg

Accepted Answer

B

Explanation: In a Spanning Tree Protocol (STP) environment, the switch with the lowest Bridge ID is elected as the root bridge. The Bridge ID is a combination of a configurable bridge priority and the switch's MAC address. All switches have a default priority of 32768. The scenario indicates the older Switch D became the root because it has a lower MAC address than the other switches. To force Switch A to become the root bridge, its Bridge ID must be made the lowest in the network. The most reliable method is to configure a bridge priority on Switch A that is lower than the default. Option B sets the priority on Switch A to 4096 (4k), which is lower than 32768, ensuring it will win the root bridge election.

Question 9

Click the Exhibit button. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_35_img_1.jpg You are asked to configure OSPF for the network? Referring to the exhibit, how should Area 1 be configured?

Accepted Answer

C

Explanation: The exhibit shows that Area 1 is connected to the backbone (Area 0) and also contains an Autonomous System Boundary Router (ASBR) that is redistributing routes from an external BGP domain. A standard stub area or a totally stubby area cannot contain an ASBR. The Not-So-Stubby Area (NSSA) is a specific OSPF area type designed for this exact scenario. An NSSA blocks Type 5 LSAs (external routes) from entering from other areas but allows an internal ASBR to inject external routes as Type 7 LSAs. The Area Border Router (ABR) then translates these Type 7 LSAs into Type 5 LSAs for propagation into the backbone.

Question 10

Click the Exhibit button. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_10_img_1.jpg Both configuration hierarchies shown in the exhibit have been committed to your MX Series device. Which two statements are true in this scenario? (Choose two.)

Accepted Answer

B, C

Explanation: The Junos OS routing process selects the active route for the forwarding table based on the lowest route preference value when comparing routes to the same destination prefix. In this scenario, two protocols are configured to provide a route to the 10.3.0.0/24 prefix: 1. OSPF: The preference for all OSPF-learned routes is explicitly set to 5. 2. MPLS: The install statement under the LSP R1-to-R6 injects a route for 10.3.0.0/24 into the inet.0 routing table with an explicit preference of 7. Since the OSPF preference (5) is lower than the MPLS LSP's preference (7), the OSPF-learned route will be selected as the active route. Consequently, traffic destined for 10.3.0.1 will be forwarded using the OSPF next-hop, not the LSP. The active route entry in the routing table will show a preference of 5.

Question 11

In which situation would you disable penultimate-hop popping?

Accepted Answer

C

Explanation: By default, penultimate-hop popping (PHP) removes the MPLS label at the router just before the egress LSR. The egress router then receives a standard IP packet and must rely on the IP header's DSCP bits for Class of Service (CoS) classification. Disabling PHP (by signaling an explicit null label) ensures the MPLS-labeled packet is sent to the egress router. This preserves the MPLS header's Traffic Class (TC/EXP) bits, allowing the egress router to apply CoS policies based on the MPLS header. This enforces a consistent CoS behavior across the entire Label Switched Path (LSP).

Question 12

Click the Exhibit button. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_4_img_1.jpg Referring to the exhibit, why is the route hidden?

Accepted Answer

C

Explanation: In the Junos OS, a route is marked as "Hidden" when it is received and stored in the routing table but is not eligible to become the active route and is therefore not installed in the forwarding table. The most common reason for this state is the inability to resolve the protocol next hop. The exhibit shows a BGP route to 192.168.0.2/32 with a next hop of 10.0.0.2. For this BGP route to be active, the router must have a valid, active route to 10.0.0.2 in its inet.0 table (typically learned via an IGP or a static route). The "Hidden" status indicates that such a route to the next hop does not exist or is not active.

Question 13

You want to disable MAC learning only for interface ge-0/0/0.0 on an MX Series device. Which syntax will accomplish this task? https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_23_img_1.jpg https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_24_img_1.jpg

Accepted Answer

B

Explanation: On MX Series devices, MAC learning is a function of a bridge domain. To disable MAC learning for a specific logical interface, the no-mac-learning statement must be applied to that interface within the bridge domain's configuration hierarchy. The correct syntax is set bridge-domains interface no-mac-learning. Option B correctly applies this configuration, targeting only the ge-0/0/0.0 interface within the data bridge domain, fulfilling the specific requirement of the question.

Question 14

Click the Exhibit button. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/Juniper_JN0-362/page_22_img_1.jpg Referring to the exhibit, which statement is correct?

Accepted Answer

C

Explanation: The BGP path selection algorithm in Junos OS prefers the path with the highest local-preference value. The default local preference for routes learned from an internal BGP (iBGP) peer is 100. In the exhibit, the BGP group for neighbor 10.3.3.3 is explicitly configured with local-preference 110. Since 110 is greater than the default value of 100, any routes learned from this peer will be more preferred than routes with the default local preference. This configuration effectively makes the path through 10.3.3.3 the most preferred path among the three groups shown.

Question 15

Which two statements describe operations performed by the encapsulating tunnel endpoint in an IP- IP tunnel? (Choose two.)

Accepted Answer

A, C

Explanation: When an IP packet enters an IP-IP tunnel, the encapsulating endpoint performs two key operations. First, it treats the original packet as if it were forwarding it, which includes decrementing the Time-to-Live (TTL) field in the original (inner) IP header by one. This is standard router behavior to prevent indefinite packet looping. Second, it creates a new, outer IP header. The source address of this new header is the encapsulating router's tunnel interface, and the destination address is the IP address of the remote tunnel endpoint (the decapsulator). The original IP packet then becomes the payload of this new IP packet.

Free Juniper JN0-362 Actual Exam Questions