Free JN0-649 Sample Questions — Enterprise Routing and Switching, Professional (JNCIP-ENT)

You are using 802.1X authentication in your network to secure all ports. You have a printer that does not support 802.1X and you must ensure that traffic is allowed to and from this printer without authentication. In this scenario, what will satisfy the requirement?

• A. MAC filtering
• B. MACsec
• C. static MAC bypass
• D. MAC RADIUS

You are asked to enforce user authentication using a captive portal before users access the corporate network. Which statement is correct in this scenario?

• A. HTTPS is the default protocol for a captive portal
• B. captive portal can be bypassed using an allowlist command containing a device’s IP address
• C. When enabled, a captive portal must be applied to each individual interface
• D. All Web browser requests are redirected to the captive portal until authentication is successful

Your network is multihomed to two ISPs. The BGP sessions are established; however, the ISP peers are not receiving any routes. Which two statements are correct about troubleshooting your configuration? (Choose two.)

• A. Verify the import policies on your router
• B. Verify that the BGP routes are active in your routing table
• C. Verify the export policies on your router
• D. Verity that the multihop settings are configured on your router

You are deploying IP phones in your enterprise network that must receive their power through their Ethernet connection. You are using your EX Series switch's PoE ports that support IEEE 802.3af. In this scenario, what is the maximum amount of power allocated to each interface?

• A. 10.2 W
• B. 15.4 W
• C. 30 W
• D. 50 W

There are two BGP routes to 10.200.200.0/24 received from two external peers. Route 1 comes from a neighbor with a router ID of 10.10.100.1 and a peer IP address of 10.10.30.1, and route 2 comes from a neighbor with a router ID of 10.10.200.1 and a peer IP address of 10.10.50.1. Both routes have the same MED value, origin value, AS path length, and local preference number. In this scenario, which statement is correct about the active route?

• A. Route 1 will be active because of the peer IP address
• B. Route 2 will be active because of the peer IP address
• C. Route 1 will be active because of the router ID
• D. Route 2 will be active because of the router ID

Which statement is correct about IS-IS?

• A. IS-IS uses areas and an autonomous system
• B. Level 1/2 routers automatically inject a default route to the nearest Level 1 router
• C. Level 2 routers must share the same area address
• D. Level 1 routers route traffic between autonomous systems

You must ensure that all routes in the 10.0.0/8 address range are not advertised outside of your AS. Which well-known BGP community should be assigned to these addresses to accomplish this task?

• A. no-export
• B. no-peer
• C. internet
• D. no-advertise

A Layer 2 connection does not expend across data centers. The IP subnet in a Layer 2 domain is confined within a single data center. Which EVPN route type is used to communicate prefixes between the data centers?

• A. Type 1
• B. Type 2
• C. Type 4
• D. Type 5

You are asked to configure 802.1X on your access ports to allow only a single device to authenticate. In this scenario, which configuration would you use?

• A. single supplicant mode
• B. multiple supplicant mode
• C. single-secure supplicant mode
• D. MAC authentication mode

Which three configuration parameters must match on all switches within the same MSTP region? (Choose three.)

• A. VLAN to instance mapping
• B. revision level
• C. configuration name
• D. bridge priority
• E. region name