A network administrator is setting up a switch for a new office. They need to support IP phones and also provide network access for visitors. The IP phones should be in a separate VLAN from the visitor devices. Which configuration approach should be used?

Configure a single VLAN for both IP phones and visitors

Configure a guest VLAN for IP phones and a voice VLAN for visitors

Configure a dynamic VLAN for IP phones and a static VLAN for visitors

Configure a voice VLAN for the IP phones and a guest VLAN for visitors

A company is implementing a guest VLAN for a public Wi-Fi network. The security team wants to minimize the risk of guests launching attacks on the internal network. Which of the following should be implemented?

Allow guests to access all internal servers for convenience

Use a firewall to filter traffic between the guest VLAN and the internal network

Place the guest VLAN on the same subnet as the internal network

A school provides network access to students' personal devices. The school wants to ensure that these devices can access the internet but cannot access the school's administrative network. What should be implemented?

A dynamic VLAN based on MAC address

A guest VLAN with internet-only access

A voice VLAN for the personal devices

A hotel offers free Wi-Fi to guests. The network uses 802.1X for employee devices. Guests' devices do not have 802.1X supplicants. What is the purpose of configuring a guest VLAN on the switch ports?

To allow guests to access the employee network without authentication

To automatically assign IP addresses to guest devices

To provide guests with internet access while isolating them from the employee network

To prioritize guest traffic over employee traffic

What is a common troubleshooting step when a device in the guest VLAN cannot reach the internet?

Check if the device has a valid 802.1X certificate

Check if the device is connected to a trunk port

Check if the guest VLAN has an IP address and routing configured

Check if the device is using the correct VLAN ID

Juniper NetworksCertified Professional, Enterprise Routing and Switching (JNCIP-ENT)

Domain 5Objective 6

Guest VLAN JN0-650 Practice Questions (Page 2)

Part of the Layer 2 Authentication and Access Control domain, which makes up ~19% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 1–2 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

6concepts

Questions 6–10

6application · medium
A network administrator is setting up a switch for a new office. They need to support IP phones and also provide network access for visitors. The IP phones should be in a separate VLAN from the visitor devices. Which configuration approach should be used?
Select an answer first
7application · medium
A company is implementing a guest VLAN for a public Wi-Fi network. The security team wants to minimize the risk of guests launching attacks on the internal network. Which of the following should be implemented?
Select an answer first
8application · medium
A school provides network access to students' personal devices. The school wants to ensure that these devices can access the internet but cannot access the school's administrative network. What should be implemented?
Select an answer first
9application · medium
A hotel offers free Wi-Fi to guests. The network uses 802.1X for employee devices. Guests' devices do not have 802.1X supplicants. What is the purpose of configuring a guest VLAN on the switch ports?
Select an answer first
10foundation · easy
What is a common troubleshooting step when a device in the guest VLAN cannot reach the internet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-650

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-650” is a trademark of its owner, used for identification only.