A.
192.168.0.0/16 only
B.
192.168.0.0/17 only
C.
192.168.0.0/16 and 192.168.0.0/17
D.
192.168.0.0/17, 192.168.50.0/24, and 192.168.51.0/24
Answer: B
Explanation:
QUESTION NO: 309
-- Exhibit --
[edit policy-options]
[email protected]# show
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
176

policy-statementpolicyABC {
term A {
from {
protocol rip;
route-filter 192.168.1.0/24 longer;
}
then accept;
}
}
[edit protocols ospf]
[email protected]# show
exportpolicyABC;
area 0.0.0.0 {
interface ge-0/0/0.0;
interface lo0.0;
}
-- Exhibit --
Referring to the exhibit, which two statements are true? (Choose two.)
A.
The route 192.168.1.0/25 is accepted.
B.
The route 192.168.2.0/24 is accepted.
C.
OSPF routes will be exported into RIP.
D.
RIP routes will be exported into OSPF.
Answer: A,D
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
177

Explanation:
QUESTION NO: 310
-- Exhibit --
[edit interfaces]
[email protected]# show
...
lo0 {
unit 0 {
familyinet {
filter {
input protect-loopback;
}
address 192.168.100.1/32;
}
}
}
-- Exhibit --
Given the configuration shown in the exhibit, what is the function of the protect-loopback filter?
A.
to protect the Routing Engine
B.
to protect all interfaces on the device
C.
to protect the Packet Forwarding Engine
D.
to protect the management interface
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
178

Answer: A
Explanation:
QUESTION NO: 311
Referring to the exhibit, you want to block HTTP access to Web-Server from the subnet where
Mal-User is located. All other traffic should be permitted.
Which firewall filter configuration do you use?
A.
[edit firewall family inet filter STOP-MAL-USER]
[email protected]# show
term one {
from {
source-address {
200.200.200.0/24;
}
destination-address {
100.100.100.10/32;
}
protocoltcp;
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
179

destination-port http;
}
then accept;
}
term two {
then {
reject;
}
}
B.
[edit firewall family inet filter STOP-MAL-USER]
[email protected]# show
term one {
from {
source-address {
100.100.100.0/24;
}
destination-address {
200.200.200.1/32;
}
protocoltcp;
destination-port http;
}
then accept;
}
term two {
then {
reject;
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
180

}
}
C.
[edit firewall family inet filter STOP-MAL-USER]
[email protected]# show
term one {
from {
source-address {
100.100.100.0/24;
}
destination-address {
200.200.200.1/32;
}
protocoltcp;
destination-port http;
}
then reject;
}
term two {
then {
accept;
}
}
D.
[edit firewall family inet filter STOP-MAL-USER]
[email protected]# show
term one {
from {
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
181

source-address {
200.200.200.0/24;
}
destination-address {
100.100.100.10/32;
}
protocoltcp;
destination-port http;
}
then reject;
}
term two {
then {
accept;
}
}
Answer: D
Explanation:
QUESTION NO: 312
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
182

Referring to the exhibit, you are asked to rate-limit traffic from Web-Server to the subnet where
Mal-User is located. All other traffic should be permitted.
Which firewall filter configuration do you use?
A.
[edit firewall]
[email protected]# show
policer LIMIT-MAL-USER {
if-exceeding {
bandwidth-limit 400k;
burst-size-limit 100k;
}
then discard;
}
familyinet {
filter STOP-MAL-USER {
term one {
from {
source-address {
100.100.100.10/32;
}
Juniper JN0-102 Exam
"Pass Any Exam. Any Time." -
183

destination-address {
200.200.200.0/24;
}
}
thenpolicer LIMIT-MAL-USER;
}
term two {
then accept;
}
}
}
B.


You've reached the end of your free preview.
Want to read all 254 pages?
- Fall '19