Filter-Based Forwarding JN0-364 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A network engineer is designing FBF for a multi-tenant environment. Each tenant has a dedicated routing instance. The router receives traffic from multiple tenants on the same physical interface, distinguished by source IP. The engineer wants to ensure that traffic from each tenant is correctly redirected. What is the most important consideration when designing the FBF filter?

   • AThe filter terms must be ordered so that more specific matches come first.
   • BThe filter must be applied to the output direction of the interface.
   • CThe routing instances must have default routes.
   • DThe routing instances must have unique names.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A service provider wants to use FBF to direct traffic from a specific customer subnet to a routing instance that has a dedicated internet link. The engineer has created the routing instance and the firewall filter. After applying the filter to the ingress interface, the traffic is still using the global table. The filter counters show matches. What is the most likely reason for the traffic not being redirected?

   • AThe filter is applied to the output direction instead of the input direction.
   • BThe 'then routing-instance' action is missing from the filter term.
   • CThe routing instance name is misspelled in the filter.
   • DThe routing instance does not have a route to the destination, so packets are dropped.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants to send all traffic from its finance department (subnet 10.1.1.0/24) to a separate routing instance 'finance' that has a dedicated internet link. The engineer has created the routing instance and the firewall filter. Which additional configuration is required to ensure the filter is evaluated for incoming traffic?

   • AAdd a default route in the 'finance' instance.
   • BEnable 'filter-based-forwarding' under the routing-options hierarchy.
   • CApply the filter to the input of the interface that receives the finance traffic.
   • DCreate a static route in the global table pointing to the finance instance.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A network engineer is configuring FBF on a Junos router. The goal is to send traffic from the 192.168.10.0/24 subnet to a separate routing instance named 'guest'. The engineer has created the routing instance and the firewall filter. What is the final required step to make FBF operational?

   • AAdd a static route in the 'guest' instance for the 192.168.10.0/24 subnet.
   • BApply the firewall filter to the ingress interface with the 'family inet' statement.
   • CConfigure a routing policy to export the filter's match criteria.
   • DCommit the configuration and verify with 'show route table guest.inet.0'.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A router has a single ingress interface carrying traffic for two departments. Department A (subnet 172.16.1.0/24) must use a dedicated routing instance 'dept-a' with a specific next-hop, while Department B uses the global table. The engineer has applied an FBF filter to the interface. After testing, Department A traffic is not being redirected. The filter counters show zero matches. What is the most likely cause?

   • AThe routing instance 'dept-a' does not have a default route.
   • BThe filter is applied to the output direction instead of the input direction.
   • CThe 'then routing-instance' action is misspelled as 'then routing-instance'.
   • DThe source address match is configured as 172.16.1.0/24 instead of 172.16.1.0/24.
   Reveal Solution Discussion Select an answer first