Referring to the exhibit, you are asked to rate-limit traffic from Web-Server to the subnet where
Mal-User is located. All other traffic should be permitted.

Which firewall filter configuration do you use?

— Exhibit –user@router> show route
inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
10.10.10.91/32 *[Direct/0] 00:09:40
> via lo0.0
10.10.10.92/32 *[OSPF/10] 00:01:50, metric 1
> to 172.16.1.2 via ge-0/0/2.0
100.100.1.0/24 *[Static/5] 00:01:50
Reject
172.16.1.0/24 *[Direct/0] 00:06:09
> via ge-0/0/2.0
172.16.1.1/32 *[Local/0] 00:06:09
Local via ge-0/0/2.0
192.168.0.0/16 *[Aggregate/130] 00:00:06
Reject
192.168.0.0/17 *[Aggregate/130] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
192.168.50.0/24 *[Static/5] 00:00:06

> to 172.16.1.2 via ge-0/0/2.0
192.168.51.0/24 *[Static/5] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
user@router> show configuration policy-options
policy-statement demo {
term 1 {
from {
protocol aggregate;
route-filter 192.168.0.0/16 longer;
}
then accept;
}
}
user@router> show configuration protocols ospf
export demo;
area 0.0.0.0 {
interface ge-0/0/2.0;
}
— Exhibit –Given the configuration and routing table shown in the exhibit, which routes will be advertised to
OSPF neighbors because of the demo policy?

— Exhibit –user@router> show configuration firewall
family inet {
filter demo {
term example {
from {
source-address {
100.100.100.0/24;
}
destination-address {
200.200.200.0/24;
}
}
then {
reject;
}
}
term testing {
from {
source-address {
10.10.10.0/28;
}
destination-address {

200.200.200.0/24;
}
}
then sample;
}
term results {
from {
address {
200.200.200.0/24;
}
}
then accept;
}
term final {
then policer LAPD;
}
}
}
— Exhibit –Given the configuration shown in the exhibit, what will happen to traffic from source 10.10.10.25
destined to 200.200.200.1?

— Exhibit –user@router> show route
inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
10.10.10.91/32 *[Direct/0] 00:09:40
> via lo0.0
10.10.10.92/32 *[OSPF/10] 00:01:50, metric 1
> to 172.16.1.2 via ge-0/0/2.0
100.100.1.0/24 *[Static/5] 00:01:50
Reject
172.16.1.0/24 *[Direct/0] 00:06:09
> via ge-0/0/2.0
172.16.1.1/32 *[Local/0] 00:06:09
Local via ge-0/0/2.0
192.168.0.0/16 *[Aggregate/130] 00:00:06
Reject
192.168.0.0/17 *[Aggregate/130] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
192.168.50.0/24 *[Static/5] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
192.168.51.0/24 *[Static/5] 00:00:06
> to 172.16.1.2 via ge-0/0/2.0
user@router> show configuration policy-options
policy-statement demo {

term 1 {
from {
route-filter 192.168.0.0/16 longer accept;
}
then reject;
}
}
user@router> show configuration protocols ospf
export demo;
area 0.0.0.0 {
interface ge-0/0/2.0;
}
— Exhibit –Given the configuration and routing table shown in the exhibit, which routes will be advertised to
OSPF neighbors because of the demo policy?

— Exhibit –[edit interfaces]
user@router# show
…

lo0 {
unit 0 {
family inet {
filter {
input protect-loopback;
}
address 192.168.100.1/32;
}
}
}
— Exhibit –Given the configuration shown in the exhibit, what is the function of the protect-loopback filter?

— Exhibit –[edit snmp]
user@router# show
community CommunityA {
authorization read-only;
clients {
192.168.1.0/28;

}
}
trap-group groupA {
categories {
link;
}
targets {
192.168.100.1;
192.168.200.1;
}
}
— Exhibit –Referring to the exhibit, what is the purpose of the targets section of the configuration?

— Exhibit –[edit policy-options]
user@router# show
policy-statement policyABC {
term A {
from {

protocol rip;
route-filter 192.168.1.0/24 longer;
}
then accept;
}
}
[edit protocols ospf]
user@router# show
export policyABC;
area 0.0.0.0 {
interface ge-0/0/0.0;
interface lo0.0;
}
— Exhibit –Referring to the exhibit, which two statements are true? (Choose two.)

— Exhibit –…
if-exceeding {
bandwidth-limit 1m;

burst-size-limit 3k;
}
then discard;
— Exhibit –The configuration in the exhibit is associated with which class of service component?

— Exhibit –interfaces {
ge-0/0/8 {
unit 0 {
family inet {
address 192.168.1.1/24;
}
}
}
ge-0/0/9 {
unit 0 {
family inet {
address 192.168.10.1/24;
}

}
}
}
— Exhibit –Referring to the exhibit, which command would you use to add an additional address to the ge-0/0/9.0 interface?

— Exhibit –user@router> show route protocol static
inet.0: 12 destinations, 12 routes (12 active, 0 holddown, 0 hidden)
+ = Active Route, – = Last Active, * = Both
192.168.1.128/27 *[Static/5] 00:03:13
> to 10.20.106.10 via fe-0/0/5.106
192.168.1.144/29 *[Static/5] 00:03:13
> to 10.20.14.131 via ge-0/0/0.0
192.168.1.192/27 *[Static/5] 00:03:13
> to 10.18.1.1 via ge-0/0/1.0

192.168.1.128/28 *[Static/5] 00:01:06
> to 10.20.14.130 via ge-0/0/0.0
— Exhibit –Given the routing entries shown in the exhibit, which next-hop IP address will be used for the
destination IP address 192.168.1.142? (Assume that only static routes are available for the
destination.)