— Exhibit —
{master:0}
user@switch> show spanning-tree interface
Spanning tree interface parameters for instance 0
Interface Port ID Designated Designated Port State Role
port ID bridge ID Cost
ge-0/0/6.0 128:519 128:519 32768.0019e2552481 200000 FWD DESG
ge-0/0/7.0 64:520 64:520 32768.0019e2552481 20000 FWD DESG
ge-0/0/8.0 32:521 32:521 32768.0019e2552481 20000 FWD DESG
ge-0/0/9.0 32:522 32:522 32768.0019e2552481 200000 FWD DESG

ge-0/0/11.0 32:524 32:524 32768.0019e2552481 2000 FWD DESG
ge-0/0/12.0 64:525 64:525 32768.0019e2552481 2000 FWD DESG
ge-0/0/13.0 64:526 64:526 32768.0019e2552481 2000 FWD DESG
— Exhibit —
Which three statements are correct regarding the information shown in the exhibit? (Choose
three.)

— Exhibit —
{master:0}
user@switch> show spanning-tree interface
Spanning tree interface parameters for instance 0
Interface Port ID Designated Designated Port State Role
port ID bridge ID Cost
ge-0/0/1.0 142:519 142:519 0.002688027490 10000 BLK ALT (Root-Incon)
ge-0/0/2.0 142:520 142:520 4128.0019e2516580 10000 FWD DESG
ge-0/0/3.0 142:521 142:521 4128.0019e2516580 10000 FWD DESG
— Exhibit —

Referring to the exhibit, which statement is correct about the ge-0/0/1 interface?

— Exhibit —
{master:0}
user@switch> show spanning-tree interface
Spanning tree interface parameters for instance 0
Interface Port ID Designated Designated Port State Role
port ID bridge ID Cost
ge-0/0/1.0 142:519 142:519 0.002688027490 10000 FWD ROOT
ge-0/0/2.0 142:520 142:520 4128.0019e2516580 10000 FWD DESG
ge-0/0/3.0 142:521 142:521 4128.0019e2516580 10000 BLK DIS (Loop-Incon)
— Exhibit —
Referring to the exhibit, which statement is true about the ge-0/0/3 interface?

Which two statements about dynamic ARP inspection (DAI) are true? (Choose two.)

Your security department has identified an increase in IP spoofing attacks.
Which feature should you enable with DHCP snooping to prevent these attacks?

You are asked to ensure that an unauthorized switch running spanning tree cannot be added to
any edge port on your EX Series switch. The ports must discard any incoming spanning tree
packets but the interface must continue to forward traffic.
What should you do to accomplish the behavior?

— Exhibit —
{master:0}[edit]
user@switch# show firewall
family ethernet-switching {
filter block-traffic {
term count {
from {
source-address {
10.100.0.254/32;
}
then count blocked-subnet;
}
term reject-traffic {
from {
source-address {
10.100.0.254/32;
}
then discard;

}
term accept-rest {
then accept;
}
}
— Exhibit —
You have a device that is sending a malicious packet to other devices in your Layer 2 network.
You are asked to ensure that packets sent from this device are not allowed to enter your network.
You must also keep track of the number of packets that are being received. The device’s IP
address is 10.100.0.254. You have created and applied the firewall filter shown in the exhibit to the
correct port. However, traffic is still being forwarded into the network.
What is causing the problem?

Which two statements are true about firewall filters on an EX Series switch? (Choose two.)

In your network, you have configured an EX Series switch with port-based, VLAN-based, and
router-based firewall filters. The filters are applied to examine all outgoing traffic.
In which order will they be processed by the switch?

You are asked to inspect your EX Series switch for MAC limit violations.
Which two CLI commands would you use? (Choose two.)