[2017-Oct.-New]100% Real Exam Questions-Braindump2go JN0-643 VCE and PDF 301Q Download[91-100]
2017 Oct. New JN0-643 Exam Dumps with PDF and VCE Free Updated Today! Following are some JN0-643 Questions:
1.|2017 New JN0-643 Exam Dumps (PDF & VCE) 301Q&As Download:
https://www.braindump2go.com/jn0-643.html
2.|2017 New JN0-643 Exam Questions & Answers Download:
https://drive.google.com/drive/folders/0B75b5xYLjSSNSXllWnNFZnB5NG8?usp=sharing
QUESTION 91
Port authentication falls back to Captive Portal.
In which two scenarios would the port authentication move back to 802.1X? (Choose two.)
A. if any MAC RADIUS request packet is received on the interface and if there are no sessions in authenticated/authenticating state
B. if Captive Portal is deactivated on the interface
C. if the user gets logged out
D. if the EAP packet is received on the interface and if there are no sessions in authenticated/authenticating state
Answer: BD
QUESTION 92
A network routes IPv4 traffic only. You want to add IPv6 to the network, but you must use a single IGP for both IPv4 and IPv6 traffic.
Which protocol meets this requirement?
A. OSPFv2
B. BGPv4
C. ES-ISv1
D. OSPFv3
Answer: D
QUESTION 93
A Layer 2 forwarding loop occurred on your network during a scheduled maintenance period.
You must prevent this behavior in the future.
Which protocol should you enable on the EX Series switch to address this condition in the future?
A. DVMRP
B. L2TPv3
C. STP
D. RSVP
Answer: D
QUESTION 94
You have implemented 802.1X authentication in your Layer 2 network and you have only a single RADIUS server. You are asked to ensure that if the RADIUS server becomes unreachable or fails, users connected to the ge-0/0/0 port are still able to reach the Internet using a predefined guest VLAN.
Which command allows this access?
A. [edit]
user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 radius-fail vlan guest
B. [edit]
user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 server-fail vlan-name guest
C. [edit]
user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 auth-fail assign-vlan guest
D. [edit]
user@switch# set protocols dot1x authenticator interface ge-0/0/0.0 radius-fail assign guest
Answer: B
QUESTION 95
Which option is a valid IPv6 multicast address?
A. fe80::205:8640:471:3200/64
B. ::172.16.0.5/126
C. ff03:365:ba::23
D. ff01:cgfc:345::226:8ff:fee4:bf6f
Answer: C
QUESTION 96
A company is deploying a new 802.1X port-based security infrastructure to allow users to access resources through wired Ethernet ports. However they recently deployed an RSA token-based system for users to connect remotely. The network administrator wants to reuse the same security database for 802.1X port-based security.
Which 802.1X authentication protocol is required?
A. EAP-TLS
B. LAN-PEAP
C. RSA-EAP
D. EAP-TTLS
Answer: D
QUESTION 97
Which protocol reachability is advertised by OSPFv2?
A. IPv4
B. IPv5
C. IPv6
D. ISO
Answer: D
QUESTION 98
Which AS path regular expression matches only routes originated in your AS?
A. “6573.*”
B. “.*”
C. “{“
D. “^$”
Answer: D
QUESTION 99
Voice traffic is coming in on UDP port 17689. This traffic must be classified into the expedited-forwarding forwarding class.
Which type of classifier is needed?
A. code point alias
B. rewrite marker
C. multifield
D. behavior aggregate
Answer: C
QUESTION 100
Which three attributes must a BGP update contain? (Choose three.)
A. next-hop
B. MED
C. origin
D. AS-path
E. local preference
Answer: ACD
!!!RECOMMEND!!!
1.|2017 New JN0-643 Exam Dumps (PDF & VCE) 301Q&As Download:
https://www.braindump2go.com/jn0-643.html
2.|2017 New JN0-643 Study Guide Video:
Post Author: mavis
