JNCIS-ENT Exam Objectives (Exam: JN0-343 and JN0-346)

Layer 2 Switching and VLANs
Identify the concepts, operation, and functionality of Layer 2 switching for the Junos OS
Enterprise switching platforms
Bridging components
Frame processing
Identify the concepts, benefits, and functionality of VLANs
Ports
Tagging
Native VLANs and voice VLANs
Inter-VLAN routing
Demonstrate knowledge of how to configure, monitor and troubleshoot Layer 2 switching and VLANs
Interfaces and ports
VLANs
Routed VLAN interfaces (RVI)

Spanning Tree
Identify the concepts, benefits, operation, and functionality of the Spanning Tree Protocol
STP and RSTP concepts
Port roles and states
BPDUs
Convergence and reconvergence
Demonstrate knowledge of how to configure and monitor STP and RSTP
STP
RSTP

Layer 2 Security
Identify the concepts, benefits and operation of various protection and security features
BPDU, loop and root protection
Port security, including MAC limiting, DHCP snooping, Dynamic ARP inspection (DAI) and IP source guard
Storm control
Identify the concepts, benefits and operation of Layer 2 firewall filtres
Filter types
Processing order
Match criteria and actions
Demonstrate knowledge of how to configure and monitor Layer 2 security
Protection
Port security
Storm control
Firewall filter configuration and application

Protocol Independent Routing
Identify the concepts, operation and functionality of various protocol-independent routing components
Static, aggregate, and generated routes
Martian addresses
Routing instances, including RIB groups
Load balancing
Filter-based forwarding
Demonstrate knowledge of how to configure and monitor various protocol-independent routing components
Static, aggregate, and generated routes
Load balancing
Filter-based forwarding

Open Shortest Path First (OSPF)
Identify the concepts, operation and functionality of OSPF
Link-state database
OSPF packet types
Router ID
Adjacencies and neighbors
Designated router (DR) and backup designated router (BDR)
OSPF area and router types
LSA packet types
Demonstrate knowledge of how to configure, monitor and troubleshoot OSPF
Areas, interfaces and neighbors
Additional basic options
Routing policy application
Troubleshooting tools
Realms

Intermediate System to Intermediate System (IS-IS)
Identify the concepts, operation and functionality of IS-IS
Link-state database
IS-IS PDUs
TLVs
Adjacencies and neighbors
Levels and areas
Designated intermediate system (DIS)
Metrics
Demonstrate knowledge of how to configure, monitor and troubleshoot IS-IS
Levels, interfaces and adjacencies
Additional basic options
Routing policy application
Troubleshooting tools

Border Gateway Protocol (BGP)
Identify the concepts, operation and functionality of BGP
BGP basic operation
BGP message types
Attributes
Route/path selection process
IBGP and EBGP functionality and interaction
Demonstrate knowledge of how to configure and monitor BGP
Groups and peers
Additional basic options
Routing policy application

Tunnels
Identify the concepts, requirements and functionality of IP tunneling
Tunneling applications and considerations
GRE
IP-IP
Demonstrate knowledge of how to configure and monitor IP tunnels
GRE
IP-IP

High Availability
Identify the concepts, benefits, applications and requirements for high availability in a Junos OS environment
Link aggregation groups (LAG)
Redundant trunk groups (RTG)
Virtual Chassis
Graceful restart (GR)
Graceful Routing Engine switchover (GRES)
Nonstop active routing (NSR)
Nonstop bridging (NSB)
Bidirectional Forwarding Detection (BFD)
Virtual Router Redundancy Protocol (VRRP)
Unified In-Service Software Upgrade (ISSU)
Demonstrate knowledge of how to configure and monitor high availability components
LAG and RTG
Virtual Chassis
GR, GRES, NSR, and NSB
VRRP
ISSU

QUESTION 1
Which statement describes the default Junos OS behavior for OSPF?

A. External LSAs are advertised in a stub area.
B. An ABR does not announce a default route into a stub area.
C. Stub area internal routers generate a default route.
D. Only totally stubby areas need a default route.

Answer: B

Explanation:

---

QUESTION 2
What are two valid BPDU types? (Choose two.)

A. topology change notification
B. configuration change
C. configuration
D. root bridge

Answer: A,C

Explanation:

---

QUESTION 3
Which of the following is enabled by default on an EX Series switch?

A. MAC move limiting
B. storm control
C. IP source guard
D. dynamic ARP inspection

Answer: B

Explanation:

---

QUESTION 4
Which three statements correctly describe the default BGP advertisement behavior in the Junos
OS? (Choose three.)

A. Routes learned through EBGP are advertised to IBGP peers.
B. Routes learned through EBGP are advertised to other EBGP peers.
C. Routes learned through IBGP are advertised to other IBGP peers.
D. Routes learned through IBGP will be advertised to EBGP peers.
E. Routes learned through an IGP are automatically advertised to EBGP peers.

Answer: A,B,D

Explanation:

---

QUESTION 5
When loop protection is enabled on an interface, what happens when the port stops receiving BPDUs?

A. The port is placed in a loop-inconsistent role.
B. The port is placed into listening mode.
C. The port is transitioned into a forwarding state.
D. The interface is disabled.

Answer: A

Explanation:

---

QUESTION 6
Which OSPF LSA type is sent by all routers in an area to advertise its connected subnets?

A. router
B. network
C. external
D. summary

Answer: A

Explanation:

---

QUESTION 7
Which command correctly assigns AS 65432 as the local router’s autonomous system?

A. set protocols bgp local-as 65432
B. set routing-options local-as 65432
C. set protocols bgp autonomous-system 65432
D. set routing-options autonomous-system 65432

Answer: D

Explanation:

Click here to view complete Q&A of JN0-343 exam
Certkingdom Review

Best Cisco JN0-343 Certification, Cisco JN0-343 Training at certkingdom.com

JN0-332 NCIS-SEC Exam Objectives

Junos Security Overview
Identify concepts, general features and functionality of Junos OS security
Junos security architecture
Branch vs. high-end platforms
Major hardware components of SRX Series services gateways
Packet flow
Packet-based vs. session-based forwarding

Zones
Identify concepts, benefits and operation of zones
Zone types
Dependencies
Host inbound packet behavior
Transit packet behavior
Demonstrate knowledge of how to configure, monitor and troubleshoot zones
Zone configuration steps
Hierarchy priority (Inheritance)
Monitoring and troubleshooting

Security Policies
Identify the concepts, benefits and operation of security policies
Policy types (default policy)
Policy components
Policy ordering
Host inbound traffic examination
Transit traffic examination
Scheduling
Rematching
ALGs
Address books
Applications
Demonstrate knowledge of how to configure, monitor and troubleshoot security policies
Policies
ALGs
Address books
Custom applications
Monitoring and troubleshooting

Firewall User Authentication
Describe the concepts, benefits and operation of firewall user authentication
User Firewall
User authentication types
Authentication server support
Client groups

Screens
Identify the concepts, benefits and operation of Screens
Attack types and phases
Screen options
Demonstrate knowledge of how to configure, monitor and troubleshoot Screens
Screen configuration steps
Monitoring and troubleshooting

NAT
Identify the concepts, benefits and operation of NAT
NAT types
NAT/PAT processing
Address persistence
NAT proxy ARP
Configuration guidelines
Demonstrate knowledge of how to configure, monitor and troubleshoot NAT
NAT configuration steps
Monitoring and troubleshooting

IPSec VPNs
Identify the concepts, benefits and operation of IPSec VPNs
Secure VPN characteristics and components
IPSec tunnel establishment
IPSec traffic processing
Junos OS IPSec implementation options
Demonstrate knowledge of how to configure, monitor and troubleshoot IPSec VPNs
IPSec VPN configuration steps
Monitoring and troubleshooting

High Availability (HA) Clustering
Identify the concepts, benefits and operation of HA
HA features and characteristics
Deployment requirements and considerations
Chassis cluster characteristics and operation
Cluster modes
Cluster and node IDs
Redundancy groups
Cluster interfaces
Real-time objects
State synchronization
Ethernet switching considerations
IPSec considerations
Manual failover
Demonstrate knowledge of how to configure, monitor and troubleshoot clustering
Cluster preparation
Cluster configuration steps
Monitoring and troubleshooting

Unified Threat Management (UTM)
Identify concepts, general features and functionality of UTM
Packet flow and processing
Design considerations
Policy flow
Platform support
Licensing
Describe the purpose, configuration and operation of antispam filtering
Methods
Whitelists vs. blacklists
Order of operations
Traffic examination
Configuration steps using the CLI
Monitoring and troubleshooting
Describe the purpose, configuration and operation of antivirus protection
Scanning methods
Antivirus flow process
Scanning options and actions
Configuration steps using the CLI
Monitoring and troubleshooting
Describe the concepts, benefits and operation of content and Web filtering
Filtering features and solutions
Configuration steps using the CLI
Monitoring and troubleshooting

QUESTION 1
Which type of Web filtering by default builds a cache of server actions associated with each URL it
has checked?

A. Websense Redirect Web filtering
B. integrated Web filtering
C. local Web filtering
D. enhanced Web filtering

Answer: B

Explanation:

---

QUESTION 2
Which security or functional zone name has special significance to the Junos OS?

A. self
B. trust
C. untrust
D. junos-global

Answer: D

Explanation:

---

QUESTION 3
Which command do you use to display the status of an antivirus database update?

A. show security utm anti-virus status
B. show security anti-virus database status
C. show security utm anti-virus database
D. show security utm anti-virus update

Answer: A

Explanation:

---

QUESTION 4
Which zone is system-defined?

A. security
B. functional
C. junos-global
D. management

Answer: C

Explanation:

---

QUESTION 5
You want to allow your device to establish OSPF adjacencies with a neighboring device connected
to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone. Under which
configuration hierarchy must you permit OSPF traffic?

A. [edit security policies from-zone HR to-zone HR]
B. [edit security zones functional-zone management protocols]
C. [edit security zones protocol-zone HR host-inbound-traffic]
D. [edit security zones security-zone HR host-inbound-traffic protocols]

Answer: D

Explanation:

Click here to view complete Q&A of JN0-332 exam
Certkingdom Review

Best Microsoft MCTS Certification, Juniper JN0-332 Training at certkingdom.com