Most Recent Juniper JN0-351 Exam Dumps

Ais correct because dynamic ARP inspection (DAI) is a Layer 2 security feature that prevents ARP spoofing attacks. ARP spoofing is a technique that allows an attacker to send fake ARP messages to associate a spoofed MAC address with a legitimate IP address. This can result in traffic redirection, man-in-the-middle attacks, or denial-of-service attacks.DAI validates ARP packets by checking the source MAC address and IP address against a trusted database, which is usually built by DHCP snooping1.DAI discards any ARP packets that do not match the database or have invalid formats1.

Cis correct because DHCP snooping is a Layer 2 security feature that prevents DHCP spoofing attacks. DHCP spoofing is a technique that allows an attacker to act as a rogue DHCP server and offer fake IP addresses and other network parameters to unsuspecting clients. This can result in traffic redirection, man-in-the-middle attacks, or denial-of-service attacks. DHCP snooping filters DHCP messages by classifying switch ports as trusted or untrusted.Trusted ports are allowed to send and receive any DHCP messages, while untrusted ports are allowed to send only DHCP requests and receive only valid DHCP replies from trusted ports2.DHCP snooping also builds a database of MAC addresses, IP addresses, lease times, and binding types for each client2.

The management IP address of a device is the IP address that is used to access the device for configuration and monitoring purposes. It is usually assigned to a dedicated management interface that is separate from the data interfaces. The management interface can be accessed via SSH, Telnet, HTTP, or other protocols.

In the exhibit, the list of interfaces and their statuses shows that the management interface is me0. This interface has an admin status of up, a protocol status of inet, a local address of 172.23.12.100/24, and a remote address of unspecified. This means that the me0 interface is active, has an IPv4 address assigned, and is not connected to another device.

Therefore, the management IP address of the device shown in the exhibit is 172.23.12.100.

: [Management Interfaces Overview] : [Displaying Interface Status Information]

BGP (Border Gateway Protocol) is a protocol designed to exchange routing and reachability information among autonomous systems (AS) on the internet1.

Option A is correct.When an EBGP router advertises routes to its neighbors, it appends its AS number to the AS_PATH attribute1.This is a key mechanism in BGP to prevent routing loops1.

Option C is correct.BGP has a built-in loop prevention mechanism whereby if a BGP router detects its own AS in the AS_PATH attribute, it will drop the prefix and will not continue to advertise it2.This helps to prevent routing loops2.

Option B is incorrect.EBGP routers do not accept routes that contain their own AS number in the AS_PATH2.Instead, they drop such routes as part of the loop prevention mechanism2.

Option D is incorrect.While it's true that EBGP routers append their AS number when advertising routes, they do not prepend their AS number1.The term ''prepend'' in BGP usually refers to a technique used to influence path selection by artificially lengthening the AS_PATH3.

The maximum allowable MTU size for a default GRE tunnel without IPv4 traffic fragmentation is1476 bytes1.This is because GRE packets are formed by the addition of the original packets and the required GRE headers1.These headers are 24-bytes in length and since these headers are added to the original frame, depending on the original size of the packet we may run into IP MTU problems1.The most common IP MTU is 1500-bytes in length (Ethernet)1.When the tunnel is created, it deducts the 24-bytes it needs to encapsulate the passenger protocols and that is the IP MTU it will use1.For example, if we are forming a tunnel over FastEthernet (IP MTU 1500) the IOS calculates the IP MTU on the tunnel as: 1500-bytes from Ethernet - 24-bytes for the GRE encapsulation = 1476-Bytes1.

The correct answer to your question isC. Option C. Here is why:

Option C shows the configuration of thechassisstatement, which defines the properties of the router chassis, such as the number of aggregated Ethernet interfaces, the number of FPCs, and the number of PICs1.

To enable aggregated Ethernet interfaces on a router, you need to specify theaggregated-devicesstatement under thechassisstatement and set theethernetparameter to the desired number of interfaces2. For example, to enable two aggregated Ethernet interfaces, you can use the following configuration:

chassis { aggregated-devices { ethernet { device-count 2; } } }

Option C shows this configuration with the device-count set to 2, which will enable two aggregated Ethernet interfaces on the router. The other options do not show this configuration and will not enable any aggregated Ethernet interfaces on the router.

Therefore, option C is the correct answer to your question.