Tenant Traffic Isolation and Routing Instances JN0-683 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A data center has two VRFs, 'VRF-A' and 'VRF-B'. The engineer needs to allow VRF-A to reach a specific subnet in VRF-B, but VRF-B must not be able to initiate traffic to VRF-A. Which method achieves this requirement while maintaining isolation in the reverse direction?

   • AConfigure a static route in VRF-A pointing to the subnet in VRF-B via the VRF-B interface.
   • BPlace both VRFs in the same routing instance and use a firewall filter to block traffic from VRF-B to VRF-A.
   • CConfigure a logical tunnel interface between the two VRFs and apply a firewall filter on the VRF-A side to block return traffic.
   • DUse route leaking to import the specific subnet from VRF-B into VRF-A, and do not configure any reverse route leaking.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A data center operator is configuring a VRF named 'Tenant-A' on a Junos MX router. The VRF must import routes from the global routing table that carry a specific route target, and export routes from the VRF with a different route target. The operator has already created the routing instance and assigned interfaces. What additional configuration is required to achieve the import and export behavior?

   • AConfigure the route distinguisher and route targets directly in the routing instance without any policies.
   • BDefine a VRF import policy that matches the desired route target and a VRF export policy that sets the export route target, then apply both policies to the routing instance.
   • CApply a firewall filter to the VRF's interfaces to permit only routes with the desired route target.
   • DUse the 'routing-options' stanza to configure a static route for each desired prefix in the VRF.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network engineer is configuring a VRF on a Junos router for a new tenant. The tenant requires that the VRF import routes from the global routing table that have a specific route target. The engineer has created the routing instance and assigned interfaces. What is the next step to complete the configuration?

   • ASet the route distinguisher to match the route target.
   • BConfigure a VRF export policy that sets the route target on routes leaving the VRF.
   • CEnable IP forwarding in the routing instance.
   • DConfigure a VRF import policy that matches the route target and apply it to the routing instance.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is route leaking in the context of routing instances?

   • AThe accidental exposure of routes due to misconfiguration
   • BThe process of copying routes from one routing instance to another to enable inter-instance communication
   • CThe process of removing routes from a routing table
   • DThe use of a firewall filter to block routes
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A network engineer is troubleshooting a tenant's inability to reach a remote site. The tenant's traffic is forwarded through a VRF on a Junos router. The engineer verifies that the VRF has the correct routes in its routing table and that the next-hop interface is up. However, traffic is still not being forwarded. What is the most likely cause of the problem?

   • AThe next-hop address in the VRF routing table is not reachable via the VRF's forwarding table.
   • BThe tenant's interface is not assigned to the VRF, so traffic is being sent to the global routing table.
   • CThe route distinguisher is incorrectly configured, causing the route to be ignored.
   • DThe VRF export policy is blocking the route from being installed in the forwarding table.
   Reveal Solution Discussion Select an answer first