Filter-Based VLANs JN0-650 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A network administrator is considering using filter-based VLANs to segment traffic on a Junos switch. The switch has a single access port that connects to a device that generates both management traffic (from a specific IP) and user traffic. The administrator wants to place management traffic in VLAN 10 and user traffic in VLAN 20. What is the primary advantage of using filter-based VLANs over port-based VLANs in this scenario?

   • AFilter-based VLANs provide better performance than port-based VLANs because they use hardware offloading.
   • BFilter-based VLANs are simpler to configure than port-based VLANs, requiring fewer configuration steps.
   • CFilter-based VLANs allow a single physical port to support multiple VLANs based on packet characteristics, whereas port-based VLANs assign the entire port to a single VLAN.
   • DFilter-based VLANs are more secure than port-based VLANs because they use encryption.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which command would you use to check if a firewall filter term is matching packets for a filter-based VLAN?

   • Ashow firewall filter <filter-name>
   • Bshow log messages
   • Cshow configuration interfaces
   • Dshow interfaces statistics
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is deploying a new access switch and wants to connect multiple devices with different security requirements to a single physical port. The devices are distinguished by their IP addresses. The company wants to place devices in the 192.168.10.0/24 subnet into VLAN 10 and devices in the 192.168.20.0/24 subnet into VLAN 20. Which Junos feature should be used to achieve this?

   • AA trunk port with two VLANs, and rely on the connected devices to tag their own traffic.
   • BMAC-based VLANs, by configuring the switch to learn MAC addresses and assign them to VLANs based on the IP subnet.
   • CFilter-based VLANs, using a firewall filter that matches on the source IP address and assigns the packet to the appropriate VLAN.
   • DPort-based VLANs, by configuring the port as an access port and assigning it to both VLANs.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which configuration hierarchy is used to define a firewall filter for a filter-based VLAN?

   • A[edit firewall family ethernet-switching filter <filter-name>]
   • B[edit policy-options policy-statement <name>]
   • C[edit interfaces <interface-name> unit 0 family ethernet-switching]
   • D[edit vlans <vlan-name>]
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the correct syntax for the action that assigns a packet to VLAN 'engineering' in a firewall filter term?

   • Athen accept vlan engineering;
   • Bthen vlan engineering;
   • Cthen set vlan-id engineering;
   • Dthen vlan-id engineering;
   Reveal Solution Discussion Select an answer first