Monday, 9 January 2017

Developing SQL Databases (beta) Exam 70-762

Published: August 26, 2016
Languages: English
Audiences: Developers
Technology: SQL Server
Credit toward certification: MCP, MCSA
Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.
Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.
Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.
If you have concerns about specific questions on this exam, please submit an exam challenge.
If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.
Design and implement database objects (25–30%)
Design and implement a relational database schema
Design tables and schemas based on business requirements, improve the design of tables by using normalization, write table create statements, determine the most efficient data types to use
Design and implement indexes
Design new indexes based on provided tables, queries, or plans; distinguish between indexed columns and included columns; implement clustered index columns by using best practices; recommend new indexes based on query plans
Design and implement views
Design a view structure to select data based on user or business requirements, identify the steps necessary to design an updateable view, implement partitioned views, implement indexed views
Implement columnstore indexes
Determine use cases that support the use of columnstore indexes, identify proper usage of clustered and non-clustered columnstore indexes, design standard non-clustered indexes in conjunction with clustered columnstore indexes, implement columnstore index maintenance
Implement programmability objects (20–25%)
Ensure data integrity with constraints
Define table and foreign key constraints to enforce business rules, write Transact-SQL statements to add constraints to tables, identify results of Data Manipulation Language (DML) statements given existing tables and constraints, identify proper usage of PRIMARY KEY constraints
Create stored procedures
Design stored procedure components and structure based on business requirements, implement input and output parameters, implement table-valued parameters, implement return codes, streamline existing stored procedure logic, implement error handling and transaction control logic within stored procedures
Create triggers and user-defined functions
Design trigger logic based on business requirements; determine when to use Data Manipulation Language (DML) triggers, Data Definition Language (DDL) triggers, or logon triggers; recognize results based on execution of AFTER or INSTEAD OF triggers; design scalar-valued and table-valued user-defined functions based on business requirements; identify differences between deterministic and non-deterministic functions
Manage database concurrency (25–30%)
Implement transactions
Identify DML statement results based on transaction behavior, recognize differences between and identify usage of explicit and implicit transactions, implement savepoints within transactions, determine the role of transactions in high-concurrency databases
Manage isolation levels
Identify differences between Read Uncommitted, Read Committed, Repeatable Read, Serializable, and Snapshot isolation levels; define results of concurrent queries based on isolation level; identify the resource and performance impact of given isolation levels
Optimize concurrency and locking behavior
Troubleshoot locking issues, identify lock escalation behaviors, capture and analyze deadlock graphs, identify ways to remediate deadlocks
Implement memory-optimized tables and native stored procedures
Define use cases for memory-optimized tables versus traditional disk-based tables, optimize performance of in-memory tables by changing durability settings, determine best case usage scenarios for natively compiled stored procedures, enable collection of execution statistics for natively compiled stored procedures
Optimize database objects and SQL infrastructure (20–25%)
Optimize statistics and indexes
Determine the accuracy of statistics and the associated impact to query plans and performance, design statistics maintenance tasks, use dynamic management objects to review current index usage and identify missing indexes, consolidate overlapping indexes
Analyze and troubleshoot query plans
Capture query plans using extended events and traces, identify poorly performing query plan operators, create efficient query plans using Query Store, compare estimated and actual query plans and related metadata, configure Azure SQL Database Performance Insight
Manage performance for database instances
Manage database workload in SQL Server; design and implement Elastic Scale for Azure SQL Database; select an appropriate service tier or edition; optimize database file and tempdb configuration; optimize memory configuration; monitor and diagnose scheduling and wait statistics using dynamic management objects; troubleshoot and analyze storage, IO, and cache issues; monitor Azure SQL Database query plans
Monitor and trace SQL Server baseline performance metrics
Monitor operating system and SQL Server performance metrics; compare baseline metrics to observed metrics while troubleshooting performance issues; identify differences between performance monitoring and logging tools, such as perfmon and dynamic management objects; monitor Azure SQL Database performance; determine best practice use cases for extended events; distinguish between Extended Events targets; compare the impact of Extended Events and SQL Trace; define differences between Extended Events Packages, Targets, Actions, and Sessions
QUESTION: No: 01
You are experiencing performance issues with the database server.
You need to evaluate schema locking issues, plan cache memory pressure points, and backup I/O
problems.
What should you create?

A. a System IV|onitor report
B. a sys.dm_exec_query_stats dynamic management view query
C. a sys.dm_exec_session_wait_stats dynamic management view query
D. an ActMty Monitor session in Microsoft SQL Management Studio.

Answer:


QUESTION: No: 02
You are developing an application to track customer sales.
You need to create a database object that meets the following requirements:
-Return a value of 0 if data inserted successfully into the Customers table.
-Return a value of 1 if data is not inserted successfully into the Customers table.
-Support logic that is written by using managed code.
What should you create'?

A. extended procedure
B. CLR procedure
C. user-defined procedure
D. DML trigger
E. DDL trigger
F. scalar-valued function
G. table-valued function

Answer:


QUESTION: No: 03
You are developing an application to track customer sales.
You need to create a database object that meets the following requirements:
-Return a value of 0 if data inserted successfully into the Customers table.
-Return a value of 1 if data is not inserted successfully into the Customers table.
-Support TRY CATCH error handling
- Be written by using Transact-SOL statements.
What should you create?

A. extended procedure
B. CLR procedure
C. user-defined procedure
D. DML trigger
E. scalar-valued function
F. table-valued function

Answer:


QUESTION: No: 04
You are developing an application to track customer sales.
You need to create a database object that meets the following requirements:
- Launch when table data is modified.
- Evaluate the state a table before and after a data modification and take action based on the difference.
- Prevent malicious or incorrect table data operations.
- Prevent changes that violate referential integrity by cancelling the attempted data modification.
-Run managed code packaged in an assembly that is created in the Microsoft.NET Framework and
located into Microsoft SQL Server.
What should you create?

A. extended procedure
B. CLR procedure
C. user-defined procedure
D. DML trigger
E. scalar-valued function
F. table-valued function

Answer:


QUESTION: No: 05
You are developing and application to track customer sales.
You need to return the sum of orders that have been finalized, given a specified order identifier. This
value will be used in other Transact-SOL statements.
You need to create a database object.
What should you create?

A. extended procedure
B. CLR procedure
C. user-defined procedure
D. DML trigger
E. scalar-valued function
F. table-valued function

Answer:


Saturday, 7 January 2017

400-151 CCIE Data Center

CCIE Data Center
Exam Number 400-151
Associated Certifications CCIE Data Center
Duration 120 minutes (90 - 110 questions)

This exam certifies expert-level skills to plan, design, implement, operate, and troubleshoot complex Data Center infrastructure. It accesses the ability to understand the requirements of Data Centers, how different components in the Data Center interoperate, and ability to translate it into the device configurations.

Exam Description
The Cisco CCIE Data Center Written Exam (400-151) certifies expert-level skills to plan, design, implement, operate, and troubleshoot complex Data Center infrastructure. It accesses the ability to understand the requirements of Data Centers, how different components in the Data Center interoperate, and ability to translate it into the device configurations.

An Evolving Technologies section is included in the Written exam only. It will enable candidates to bridge their core technology expertise with knowledge of the evolving technologies that are being adopted at an accelerated pace, such as cloud, IoT, and network programmability.

It has been recalibrated and will consist of three subdomains and a total of five tasks for which the expected depth of knowledge will be focused on conceptual comprehension. The Evolving Technologies section will account for 10 percent of the total score while the remaining core technologies will account for 90 percent.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

1.0 Cisco Data Center L2/L3 Technologies

1.1 Design Implement and Troubleshoot Complex Layer 2 Technologies
1.1.a Design, Implement and Troubleshoot Highly Available and redundant topologies for example vPC, fabricpath, STP
1.1.b Design, Implement and Troubleshoot Data Center Layer 2 overlays for example VXLAN, OTV, EVPN
1.1.c Design, Implement and Troubleshoot Network management protocols for example PTP, NTP, DNS, DHCP
1.1.d Design, Implement and Troubleshoot Traffic management for example queuing, policing, shaping
1.1.e Design, Implement and Troubleshoot layer 2 security features for example port security, MACsec, ACL, private vlans

1.2 Design, Implement and Troubleshoot Complex Layer 3 Technologies
1.2.a Design, Implement and Troubleshoot Routing Protocols and features for example OSPF, ISIS, MBGP, IBGP, PBR, BFD
1.2.b Design, Implement and Troubleshoot Layer 3 Overlay Protocols for example OTV, LISP
1.2.c Design, Implement and Troubleshoot Multicast protocols for example PIM, IGMP, RP, BSR
1.2.d Design, Implement and Troubleshoot layer 3 security features for example CoPP, ACL's, DAI, ip source guard
1.2.e Design, Implement and Troubleshoot Monitoring services for example Netflow

1.3 Design, Implement and Troubleshoot External Fabric Connectivity

1.3.a Design, Implement and Troubleshoot policy driven External Fabric Connectivity for example L2/L3 connectivity

2.0 Cisco Data Center Network Services

2.1 Design, Implement and Troubleshoot Service Insertion and Redirection

2.1.a Design, Implement and Troubleshoot Service Insertion and Redirection for example LB, vPATH, ITD, RISE

2.2 Design, Implement and Troubleshoot network services

2.2.a Design, Implement and Troubleshoot network services for example policy drivenL4-L7 services

3.0 Data Center Storage Networking and Compute

3.1 Configure and Troubleshoot Data Center Storage Protocols

3.1.a Describe, Configure and Troubleshoot infrastructure to support Block Storage Protocols for example FC, FCoE, iSCSI, DCB
3.1.b Configure and Troubleshoot infrastructure to support File Storage Protocols for example NFS, CIFS

3.2 Design, Implement and Troubleshoot Data Center Storage Networking Features

3.2.a Design, Implement and Troubleshoot Data Center Storage Networking Features for example zoning, multihop technologies

3.3 Implement and Troubleshoot Compute resources

3.3.a Implement and Troubleshoot Compute policies and pools for example SAN/LAN policies, boot policies, profiles
3.3.b Analyze and Troubleshoot Compute resources using tools such as UCS Central, UCSM

3.4 Design, Implement and Troubleshoot Data Center Compute Connectivity

3.4.a Design, Implement and Troubleshoot Data Center Compute Connectivity for example SAN/LAN uplinks, rack server integration, fabric ports, appliance ports

3.5 Design, Implement and Troubleshoot Virtual and Physical End Point Connectivity

3.5.a Design, Implement and Troubleshoot Virtual and Physical End Point Connectivity

4.0 Data Center Automation and Orchestration
4.1 Implement and Troubleshoot Data Center Automation
4.1.a Implement and Troubleshoot Data Center Automation using methods such as REST API implemented by scripting languages including Python
4.2 Implement and Troubleshoot Data Center Orchestration Tools
4.2.a Implement and Troubleshoot Data Center Orchestration using Tools such as UCSD, UCS Central, CPO
4.3 Integrate Cisco Cloud offerings into existing Data Center infrastructure
4.3.a Describe and Integrate Cisco Cloud technologies into existing Data Center infrastructure using solutions such as Cisco ONE Enterprise cloud Suite

5.0 Data Center Fabric Infrastructure
5.1 Design, Implement and Troubleshoot policy and non-policy driven Internal Fabric Connectivity
5.1.a Design, Implement and Troubleshoot policy and non-policy driven Internal Fabric connectivity for example ECMP, ISIS, inband mgmt, VXLAN

5.2 Design, Implement and Troubleshoot Infrastructure policies and elements
5.2.a Design, Implement and Troubleshoot policy driven Infrastructure for example interface policies, MGMT policies
5.2.b Configure and Troubleshoot physical infrastructure components for example controllers, switches
5.2.c Analyze and Troubleshoot logical infrastructure elements using health indicators

6.0 Evolving Technologies

6.1 Cloud
6.1.a Compare and contrast Cloud deployment models
6.1.a [i] Infrastructure, platform, and software services (XaaS)
6.1.a [ii] Performance and reliability
6.1.a [iii] Security and privacy
6.1.a [iv] Scalability and interoperability
6.1.b Describe Cloud implementations and operations
6.1.b [i] Automation and orchestration
6.1.b [ii] Workload mobility
6.1.b [iii] Troubleshooting and management
6.1.b [iv] OpenStack components

6.2 Network Programmability (SDN)
6.2.a Describe functional elements of network programmability (SDN) and how they interact
6.2.a [i] Controllers
6.2.a [ii] APIs
6.2.a [iii] Scripting
6.2.a [iv] Agents
6.2.a [v] Northbound vs. Southbound protocols
6.2.b Describe aspects of virtualization and automation in network environments
6.2.b [i] DevOps methodologies, tools and workflows
6.2.b [ii] Network/application function virtualization (NFV, AFV)
6.2.b [iii] Service function chaining
6.2.b [iv] Performance, availability, and scaling considerations

6.3 Internet of Things (IoT)
6.3.a Describe architectural framework and deployment considerations for Internet of Things
6.3.a [i] Performance, reliability and scalability
6.3.a [ii] Mobility
6.3.a [iii] Security and privacy
6.3.a [iv] Standards and compliance
6.3.a [v] Migration
6.3.a [vi] Environmental impacts on the network
QUESTION: No: 1
Which I ETF standard is the most efficient messaging protocol used in an |oT network?

A. SNMP
B. HTTP
C. CoAP
D. MQTI

Answer: C


QUESTION: No: 2
Within an ACI fabric, a routing protocol is needed to assist with route redistribution between the outside
networks and the internal fabric. Which routing protocol is needed to run in the fabric at location 1 to allow
the VM access to the networks advertised by the external Layer 3 network.

A. eBGP
B. OSPF
C. MP-BGP
D. iBGP
E. IS-IS

Answer: C


QUESTION: No: 3
How do you manually configure a vNIC MAC address?

A. Use the mac -address-table static command.
B. Modify the dynamic vNIC connection policy.
C. Use the set identity dynamic-mac command.
D. Modify the adapter policy.

Answer: D


QUESTION: No: 4
Which two statements about import and export route control in an ACI fabric are t rue? (Choose two.)

A. Prefixes learned from OSPF/EIGRP L30urs are never permitted inbound by default.
B. Prefixes learned from BGP L3outs cannot be filtered inbound.
C. Export route control controls if the prefixes are redistributed from NIP-BGP to the egress leaf.
D. Prefixes permitted inbound are redistributed into NIP-BGP at the ingress leaf.

Answer: C,D


QUESTION: No: 5
While doing service insertion with vASA with route peering, which two parts must be configured? (Choose
two.)

A. The path for interfaces must be specified when the L4-L7 device is created.
B. The route peering profile must be specified when the L4-L7 Service Graph template is created.
C. The VNI name must be specified when the L4-L7 device is created.
D. The chassis must be specified when the L4-L7 device is created.

Answer: A,B


Thursday, 5 January 2017

JN0-130 Juniper Networks Certified Internet Specialist

JNCIS-E Exam Objectives (Exam: JN0-130)

Advanced Operation, Configuration, and Troubleshooting
Identify the steps required to recover from a corrupted flash drive.
Describe the operation and configuration of NTP.
Define the logging and scripting capabilities of the E-series Router.
Describe the various macros available using the router CLI.
Identify the CLI login security features of the E-series Router.
Describe the steps performed during a Loopback test.
Describe the steps performed during a BERT test.

Interface Configuration
List the steps involved in configuring an ATM interface.
Identify the configuration components for a Frame Relay interface.
Define the configuration process for establishing both VLAN-tagged Ethernet and non-tagged Ethernet interfaces.
List the configuration steps for enabling a channelized interface.

Routing Information Protocol (RIP)
Describe the basic characteristics of the RIP protocol.
Identify the message types used in RIP.
List the CLI commands used to configure and verify RIP.

Open Shortest Path First (OSPF)
Define the functions of the following OSPF packet types: Hello, Database Descriptor, LS Request, LS Update, LS Ack.
Define the functions of the following OSPF area designations and functions: backbone area, non backbone area, stub area, and not-so-stubby area.
Define the functions of the following OSPF router types: backbone, area, ABR, ASBR.
Define the function and default values of the following OSPF timers: the hello interval, LSA transmission and retransmission interval, router dead interval.
Identify the steps required to form an OSPF adjacency.
Identify OSPF authentication types.
Identify the criteria used to choose an OSPF designated router (DR). Further discuss the functions of the DR and BDR.
Identify CLI commands used to configure and troubleshoot an OSPF network.

Intermediate System to Intermediate System (IS-IS)
Define the functions of the following IS-IS PDUs: Hello, Link-State, CSNP, PSNP.
Describe ISO network addressing as it applies to IS-IS.
Describe characteristics of IS-IS adjacencies, as they pertain to L1 and L2.
Define the function and identify the characteristics of the following IS-IS parameters: authentication, mesh groups, wide metrics, LSP lifetime, overload.
Describe the election of the Designated Intermediate System.
Describe interarea routing in IS-IS.
Describe the steps required to configure IS-IS.
Identify CLI commands used to monitor and troubleshoot an IS-IS network.

Border Gateway Protocol (BGP)
Define the functionality of BGP including partial updates, TCP connectivity, and BGP prefixes.
Describe the different BGP neighbor states.
Define the functions of the following BGP packet types: Open, Update, Notification, Keepalive.
Define the functions of the following BGP attributes: Next Hop, Local Preference, AS Path, Origin, MED, Community.
Identify the steps of the BGP Route Selection Algorithm.
Describe the default action for BGP route advertisements to EBGP and IBGP peers.
Define the consequences of BGP route flap damping.
Identify the characteristics of MBGP and list the reasons for enabling multiprotocol BGP.
Identify the use of route maps, prefix lists, and community lists in a BGP environment.
Describe the operation of a BGP confederation network.
Describe the operation of BGP route reflection.
Describe the steps required to configure and troubleshoot BGP.

Broadband Remote Access Services (B-RAS)
Identify configuration and troubleshooting steps involved in operating a Routed 1483 service offering.
Identify configuration and troubleshooting steps involved in operating a Bridged 1483 service offering.
Identify configuration and troubleshooting steps involved in operating a PPP over ATM service offering.
Identify configuration and troubleshooting steps involved in operating a PPP over Ethernet service offering.
Identify configuration and troubleshooting steps involved in using Dynamic Configuration Mode on the E-series Router.

Multiprotocol Label Switching (MPLS)
Define the functions of the following MPLS terms: Label-Switched Path, Label-Switched Router, Ingress, Transit, Penultimate, and Egress.
Identify the format and uses of an MPLS Label.
Define the functions and characteristics of RSVP.
Define the functions of the following RSVP attributes: Strict ERO, Loose ERO, Label Object, Label Request Object, Record-Route, Session Attribute, TSpec.
Describe the operation of LDP.
Define and configure basic MPLS functionality.
Describe the terminology of a BGP MPLS network.
Define the operation of a BP MPLS network.

Miscellaneous Topics
Identify the components of a multicast network.
Define how the E-series Router implements Quality of Service in a network environment.
Describe the applications of policy management on the E-series Router.
Identify the security features of the E-series Router.



QUESTION 1
What are two purposes of the RSVP signaling protocol when configuring MPLS Label-Switched
Paths (LSPs)? (Choose two.)

A. to perform a labelpush operation
B. to track the status of signaled LSPs
C. to perform longest-match route lookups
D. to reserve resources, such as labels and path information

Answer: B,D


QUESTION 2
A Bridged 1483 network is grouping all DSL users into a single logical subnet. Which configuration
command prevents the end users from directly communicating with each other?

A. noip arp
B. noip proxy-arp
C. restrictip arp
D. restrictip proxy-arp

Answer: B


QUESTION 3
Which three BGP attributes are always communicated in a BGP update packet? (Choose three.)

A. MED
B. Origin
C. AS Path
D. Next Hop
E. Aggregator

Answer: B,C,D


QUESTION 4
What is the default Quality of Service traffic class used by the ERX Edge Router?

A. bronze forwarding
B. assured forwarding
C. expedited forwarding
D. best effort forwarding

Answer: D


QUESTION 5
When configuring an explicit path, what does the next-address entry identify?

A. the tunnel end point
B. the tunnel start point
C. a specific node to be traversed
D. the node prior to the tunnel end point

Answer: A






Wednesday, 4 January 2017

JN0-342 Juniper Networks Certified Internet Associate (JNCIA-ER)

JNCIS-SP Exam Objectives (Exam: JN0-360)

Protocol-Independent Routing
Identify the concepts, operation and functionality of various protocol-independent routing components
Static, aggregate, and generated routes
Martian addresses
Routing instances, including RIB groups
Load balancing
Filter-based forwarding
Demonstrate knowledge of how to configure and monitor various protocol-independent routing components
Static, aggregate, and generated routes
Load balancing
Filter-based forwarding

Open Shortest Path First (OSPF)
Identify the concepts, operation and functionality of OSPF
Link-state database
OSPF packet types
Router ID
Adjacencies and neighbors
Designated router (DR) and backup designated router (BDR)
OSPF area and router types
LSA packet types
Demonstrate knowledge of how to configure, monitor and troubleshoot OSPF
Areas, interfaces and neighbors
Additional basic options
Routing policy application
Troubleshooting tools

Intermediate System to Intermediate System (IS-IS)
Identify the concepts, operation and functionality of IS-IS
Link-state database
IS-IS PDUs
TLVs
Levels and areas
Designated intermediate system (DIS)
Metrics
Demonstrate knowledge of how to configure, monitor and troubleshoot OSPF
Areas, interfaces and neighbors
Additional basic options
Routing policy application
Troubleshooting tools

Border Gateway Protocol (BGP)

Identify the concepts, operation and functionality of BGP
BGP basic operation
BGP message types
Attributes
Route/path selection process
IBGP and EBGP functionality and interaction
Demonstrate knowledge of how to configure and monitor BGP
Groups and peers
Additional basic options
Routing policy application

Layer 2 Bridging and VLANs
Identify the concepts, operation, and functionality of Layer 2 bridging for the Junos OS
Service Provider switching platforms
Bridging elements and terminology
Frame processing
Virtual Switches
Provider bridging (e.g., Q-in-Q tunneling)
Identify the concepts, benefits, and functionality of VLANs
Port modes
Tagging
MVRP
IRB
Demonstrate knowledge of how to configure, monitor and troubleshoot Layer 2 bridging and VLANs
Interfaces and ports
VLANs
MVRP
IRB
Provider bridging

Spanning-Tree Protocols
Identify the concepts, benefits, operation, and functionality of Spanning Tree Protocol and its variants
STP, RSTP, MSTP and VSTP concepts
Port roles and states
BPDUs
Convergence and reconvergence
Spanning-tree security
Demonstrate knowledge of how to configure, monitor and troubleshoot STP and its variants
Spanning-tree protocols - STP, RSTP, MSTP, VSTP
BPDU, loop and root protection

Multiprotocol Label Switching (MPLS) and MPLS VPNs
Identify the concepts, operation, and functionality of MPLS
MPLS terminology
MPLS packet header
End-to-end packet flow and forwarding
Labels and the label information base (LIB)
MPLS and routing tables
RSVP
LDP
Identify the concepts, benefits, operation, and functionality of MPLS VPNs
VPN routing tables
Layer 3 VPN terminology and components
BGP Layer 2 VPN terminology and components
LDP Layer 2 circuit terminology and components
Virtual private LAN service (VPLS) terminology and components
MPLS VPN control plane traffic flow
MPLS VPN data plane traffic flow
Demonstrate knowledge of how to configure and monitor MPLS
MPLS forwarding
RSVP-signaled and LDP-signaled LSPs

IPv6
Identify the concepts, operation and functionality of IPv6
IPv4 vs. IPv6
Address types, notation and format
Address scopes
Autoconfiguration
Tunneling
Demonstrate knowledge of how to configure and monitor IPv6
Interfaces
Static routes
Dynamic routing - OSPFv3, IS-IS, BGP
IPv6 over IPv4 tunneling

Tunnels
Identify the concepts, requirements and functionality of IP tunneling
Tunneling applications and considerations
GRE
IP-IP
Demonstrate knowledge of how to configure and monitor IP tunnels
GRE configuration
IP-IP configuration

High Availability

Identify the concepts, benefits, applications and requirements of high availability
Link aggregation groups (LAG) and multichassis LAGs (MC-LAGs)
Graceful restart (GR)
Graceful Routing Engine switchover (GRES)
Nonstop active routing (NSR)
Nonstsop bridging (NSB)
Bidirectional Forwarding Detection (BFD)
Virtual Router Redundancy Protocol (VRRP)
Unified In-Service Software Upgrade (ISSU)
Ethernet Ring Protection (ERP)
Demonstrate knowledge of how to configure and monitor high availability component
LAG, MC-LAG
Additional basic options
GR, GRES, NSR and NSB
VRRP
ISSU


QUESTION 1
Which two statements are true about MPLS VPNs? (Choose two.)

A. With Layer 3 VPNs, the provider’s routers participate in the customer’s Layer 3 routing.
B. MPLS VPNs are designed to run over private networks rather than the public Internet.
C. With Layer 2 VPNs, the provider does not participate in the routing of the customer’s private IP
traffic.
D. MPLS VPN tunnels are always encrypted.

Answer: A,C

Explanation:


QUESTION 2
Which label operation is performed by an MPLS transit router?

A. inject
B. pop
C. push
D. swap

Answer: D

Explanation: http://www.juniper.net/techpubs/software/junos-security/junos-security96/junossecurity-
swconfig-interfaces-and-routing/mpls-ov.html


QUESTION 3
Which Junos platform supports provider bridging?

A. T Series devices
B. SRX Series devices
C. MX Series devices
D. MAG Series devices

Answer: B

Explanation: http://www.juniper.net/techpubs/en_US/junos10.0/information-products/pathway-
pages/mx-series/ethernet-switching-mx-series.html


QUESTION 4
In which environment would you run BGP?

A. a company spread across multiple floors of a building
B. a company with a single office
C. a home network
D. the public Internet

Answer: D

Explanation:


QUESTION 5
For a network running single-area OSPF, how would you decrease the size of the link-state
database (LSDB)?

A. Implement RIP as an overlay protocol on all devices.
B. Add more devices to the OSPF network to help with LSDB processing.
C. Reduce the frequency of hello timers throughout the network.
D. Implement OSPF areas.

Answer: D

Explanation:

Thursday, 29 December 2016

JN0-660 Service Provider Routing and Switching, Professional (JNCIP-SP)

JNCIP-SP Exam Objectives (Exam: JN0-660)

OSPF
Describe the concepts, operation and functionality of OSPFv2 and OSPFv3
OSPF LSA types
OSPF area types and operations
LSA flooding through an OSPF multi-area network
DR/BDR operation
SPF algorithm
Metrics, including external metric types
Authentication options
Summarize and restrict routes
Virtual links
OSPFv2 vs OSPFv3
Given a scenario, demonstrate knowledge of how to configure and monitor single-area and multi-area OSPF
Implement OSPF routing policy

IS-IS
Describe the concepts, operation and functionality of IS-IS
IS-IS link-state PDU (LSP) types
IS-IS areas/levels and operations
LLSP flooding through an IS-IS multi-area network
DIS operation
SPF algorithm
Metrics, including wide metrics
Authentication options
Route summarization and route leaking
Given a scenario, demonstrate knowledge of how to configure and monitor single-area and multi-area IS-ISa
Implement IS-IS routing policy

BGP
Describe the concepts, operation and functionality of BGP
BGP route selection process
Next hop resolution
BGP attributes – concept and operation
BGP communities
Regular expressions
Multipath
Multihop
Load balancing
Advanced BGP options
BGP route damping
Multiprotocol BGP
Given a scenario, demonstrate knowledge of how to configure and monitor BGP
Route reflection
Confederations
Describe the concepts, operation and functionality of BGP scaling mechanisms
Implement BGP routing policy

Class of Service (CoS)
Describe the concepts, operation and functionality of Junos CoS
CoS processing on Junos devices
CoS header fields
Forwarding classes
Classification
Packet loss priority
Policers, including tricolor marking and hierarchical policers
Schedulers
Drop profiles
Shaping
Rewrite rules
Hierarchical scheduling (H-CoS) characteristics (high-level only)
Given a scenario, demonstrate knowledge of how to configure and monitor CoS

IP Multicast
Describe the concepts, operation and functionality of IP multicast
Components of IP multicast, including multicast addressing
IP multicast traffic flow
Any-Source Multicast (ASM) vs. Source-Specific Multicast (SSM)
RPF – concept and operation
IGMP
PIM dense-mode and sparse-mode
Rendezvous point (RP) – concept, operation, discovery, election
SSM – requirements, benefits, address ranges
MSDP, including single and multi-PIM domains
Anycast RP
Routing policy and scoping
Given a scenario, demonstrate knowledge of how to configure and monitor IGMP, PIM-DM, PIM-SM (including SSM) and MSDP
Implement IP multicast routing policy

MPLS
Describe the concepts, operation and functionality of MPLS
RSVP and LDP operation
Primary/secondary paths
LSP metrics, including interaction with IGP metrics
LSP priority and preemption
Fast reroute, link protection and node protection
LSP optimization
Routing table integration options for traffic engineering
RSVP reservation styles
Routing policy to control path selection
Advanced MPLS features
Describe the concepts, operation and functionality of Constrained Shortest Path First (CSPF)
TED
IGP extensions
CSPF algorithm – selecting the best path
Tie-breaking options
Administrative groups
Advanced CSPF options
Given a scenario, demonstrate knowledge of how to configure and monitor MPLS, LDP and RSVP
RSVP-signaled and LDP-signaled LSPs
Traffic protection mechanisms
CSPF
Implement MPLS routing policy

Layer 3 VPNs
Describe the concepts, operation and functionality of Layer 3 VPNs
Traffic flow – control and data planes
Full mesh vs. hub-and-spoke topology
VPN-IPv4 addressing
Route distinguishers
Route targets
Route distribution
Site of origin
Sham links
vrf-table-label
Layer 3 VPN scaling
Layer 3 VPN Internet access options
Given a scenario, demonstrate knowledge of how to configure and monitor the components of Layer 3 VPNs
Describe the concepts, operation and functionality of multicast VPNs
Next-generation MVPNs (NG-MVPN)
Flow of control and data traffic in a NG-MVPN
Describe Junos support for carrier-of-carriers and interprovider VPN models

Layer 2 VPNs
Describe the concepts, operation and functionality of BGP Layer 2 VPNs
Traffic flow – control and data planes
Forwarding tables
Connection mapping
Layer 2 VPN NLRI
Route distinguishers
Route targets
Layer 2 VPN scaling
Describe the concepts, operation and functionality of LDP Layer 2 circuits
Traffic flow – control and data planes
Virtual circuit label
Layer 2 interworking
Describe the concepts, operation and functionality of VPLS
Traffic flow – control and data planes
BGP VPLS label distribution
LDP VPLS label distribution
Route targets
Site IDs
Given a scenario, demonstrate knowledge of how to configure and monitor Layer 2 VPNs
BGP Layer 2 VPNs
LDP Layer 2 circuits
VPLS

Automation
Demonstrate basic knowledge of using automation scripts
Operation scripts
Commit scripts
Event scripts

QUESTION 1
You are the administrator for a network that uses IBGP. As the network grows, you must examine options to support increased scale. Which two scaling options should you consider? (Choose two.)

A. route reflection
B. areas
C. zones
D. confederations

Answer: A,D


QUESTION 2
You manage an MPLS network where the PE devices consist of multiple vendors. You are asked to conceal the MPLS topology for all LSPs. Which global configuration parameter will accomplish this?

A. Configure no-decrement-ttl on the ingress router only.
B. Configure no-propagate-ttl on the ingress router only.
C. Configure no-decrement-ttl on all routers within the MPLS network.
D. Configure no-propagate-ttl on all routers within the MPLS network.

Answer: D


QUESTION 3
In which two ways does VPLS populate the MAC table? (Choose two.)

A. dynamically using BGP
B. dynamically using the source MAC address on received frames
C. dynamically using LDP
D. statically using CLI

Answer: B,D


QUESTION 4
Which CoS feature supports per-VLAN queuing and scheduling?

A. multilevel scheduling
B. hierarchical scheduling
C. tagged queuing
D. per-instance queuing

Answer: C


QUESTION 5
Which two statements are true about OSPFv3? (Choose two.)

A. OSPFv3 uses a 32-bit router ID to uniquely identify a node in the network.
B. OSPFv3 uses a 128-bit router ID to uniquely identify a node in the network.
C. OSPFv3 routes are always preferred over OSPFv2 routes for all traffic.
D. OSPFv3 and OSPFv2 can be configured at the same time.

Answer: A,D

Thursday, 8 December 2016

JN0-696 Security Support, Professional (JNCSP-SEC)

JNCSP-SEC Exam Objectives (Exam: JN0-696)

Security Policy Troubleshooting
Given a scenario, demonstrate knowledge of how to troubleshoot security policy evaluation issues on Junos devices
Transit traffic issues
To-the-device traffic issues
Default and global policy issues
Zone issues
Address book issues
Filter-based forwarding
NAT issues
Configuration issues

IPSec VPN Troubleshooting
Given a scenario, demonstrate knowledge of how to troubleshoot IPSec VPN issues on Junos device
Route-based VPN issues
Policy-based VPN issues
IKE phase 1 issues
IKE phase 2 issues
Configuration issues

Application-Aware Security Services Troubleshooting
Given a scenario, demonstrate knowledge of how to troubleshoot Junos AppSecure issues
AppID issues
AppTrack issues
AppFW issues
AppDoS issues
AppQoS issues
Configuration issues

Intrusion Prevention Troubleshooting
Given a scenario, demonstrate knowledge of how to troubleshoot Junos Intrusion Prevention System (IPS) issues
Licensing and platform issues
Signature database issues
IPS and security policy issues
Configuration issues

Unified Threat Management (UTM) Troubleshooting
Given a scenario, demonstrate knowledge of how to troubleshoot UTM issues on Junos devices
Licensing and platform issues
Antivirus issues
Antispam issues
Content-filtering issues
Web-filtering issues
UTM and security policy issues
Configuration issues

High Availability (HA) Clustering Troubleshooting
Given a scenario, demonstrate knowledge of how to troubleshoot chassis cluster issues on Junos devices
Cluster architecture issues
Cluster component issues
Cluster mode issues
Configuration issues


QUESTION 1
You are having problems establishing an IPsec tunnel between two SRX Series devices.
What are two explanations for this problem? (Choose two.)

A. proposal mismatch
B. antivirus configuration
C. preshared key mismatch
D. TCP MSS clamping is disabled

Answer: B,D

Explanation:

QUESTION 2
Two SRX Series devices are having problems establishing an IPsec VPN session. One of the
devices has a firewall filter applied to its gateway interface that rejects UDP traffic.
What would resolve the problem?

A. Disable the IKE Phase 1 part of the session establishment.
B. Disable the IKE Phase 2 part of the session establishment.
C. Change the configuration so that session establishment uses TCP.
D. Edit the firewall filter to allow UDP port 500.

Answer: A

Explanation:

QUESTION 3
Your SRX Series device has the following configuration:
user@host> show security policies
...
Policy: my-policy, State: enabled, Index: 5, Sequence number: 1
Source addresses: any
Destination addresses: any
Applications: snmp
Action: reject
From zone: trust, To zone: untrust
...
When traffic matches my-policy, you want the device to silently drop the traffic; however, you
notice that the device is replying with ICMP unreachable messages instead.
What is causing this behavior?

A. the snmp application
B. the reject action
C. the trust zone
D. the untrust zone

Answer: C

Explanation:

QUESTION 4
You want to allow remote users using PCs running Windows 7 to access the network using an
IPsec VPN. You implement a route-based hub-and-spoke VPN; however, users report that they
are not able to access the network.
What is causing this problem?

A. The remote clients do not have proper licensing.
B. Hub-and-spoke VPNs cannot be route-based; they must be policy-based.
C. The remote clients' OS is not supported.
D. Hub-and-spoke VPNs do not support remote client access; a dynamic VPN must be
implemented instead.

Answer: B

Explanation:

Saturday, 3 December 2016

JN0-314 Junos Pulse Access Control, Specialist (JNCIS-AC)

JNCIS-AC Exam Objectives (Exam: JN0-314)

Overview
Identify the concepts, operation, and functionality of Junos Pulse Access Control Service
Junos Pulse Access Control Service components
Component functions and interaction
Identify the components of the access management framework
Interrelationship between realms, roles and policies

Platform Configuration
Demonstrate knowledge how to configure the basic elements of a Junos Pulse Access Control Service environment
Initial Junos Pulse Access Control Service configuration
Choosing the platform (e.g., virtual or physical)
Configure authentication servers
Connectivity verification

Roles
Identify the concepts, operation and functionality of roles
Purpose of roles
Role mapping
Customization of the end-user experience
Demonstrate knowledge of how to configure roles
Roles and role options

End User Access
Identify the Junos Pulse Access Control Service client access options
Junos Pulse
Odyssey Access Client (OAC)
Machine authentication and third party supplicant
Agentless access
Demonstrate knowledge of how to configure Junos Pulse Access Control Service clients
Junos Pulse
Odyssey Access Client (OAC)
Agentless access

Firewall Enforcement

Identify the concepts, operation and functionality of firewall enforcement
Purpose of resource policies
Resource policies for firewall enforcement
User-based firewall policies
Captive portal
Demonstrate knowledge of how to configure firewall enforcement
Junos Pulse Access Control Service configuration
SRX Series device configuration
User-based firewall policies
Captive portal

Layer 2 Enforcement
Identify the concepts, operation and functionality of Layer 2 enforcement techniques
802.1X security
RADIUS (related to 802.1X)
MAC authentication
Multiple supplicant authentication on EX Series devices
Demonstrate knowledge of how to configure Layer 2 enforcement
Junos Pulse Access Control Service configuration
EX Series device configuration
SRX Series device configuration

Endpoint Defense
Identify the concepts, operation and functionality of endpoint defense
Host Checker
Authentication policies and role restrictions
Demonstrate knowledge of how to configure endpoint defense
Host Checker
Authentication policies and role restrictions

Authentication Options

Identify the concepts, operation and functionality of user authentication
Authentication process
Authentication options
Demonstrate knowledge of how to configure authentication
Authentication servers including LDAP, RADIUS, AD/NT, anonymous
Authentication realms

Management and Troubleshooting

Demonstrate knowledge of how to manage and troubleshoot a Junos Pulse Access Control Service environment, including Junos Pulse Access Control Service and SRX Series devices
Logging (e.g., RADIUS logging, policy tracing)
System Monitoring
File Management
Information collection
Component connectivity
End user connectivity and enforcement

High Availability
Identify the concepts and requirements for high availability in a Junos Pulse Access Control Service environment
Clustering
Deployment options and considerations
Demonstrate knowledge of how to configure high availability
Junos Pulse Access Control Service configuration
SRX Series device configuration

Integration
Identify the concepts and requirements for Junos Pulse Access Control Service integration with other components
Integration with IF-MAP client
Integration with STRM
Integration with SRX Series devices
Integration with EX Series devices
Demonstrate knowledge of how to configure integration
IF-MAP federation
Syslog

QUESTION 1
A customer wants to create a custom Junos Pulse configuration. Which two are required?
(Choose two)

A. Connection set
B. Configuration set
C. Custom installer
D. Component set

Answer: A,D

Explanation:


QUESTION 2
What is a type of firewall enforcer supported by the Junos Pulse Access Control Service?

A. Checkpoint firewall
B. SRX Series device
C. DP sensor
D. MX Series device

Answer: B

Explanation:


QUESTION 3
A customer is trying to decide which 802.1X inner protocol to use on their network. The customer
requires that no passwords be sent across the network in plain text, that the protocol be supported
by the Windows native supplicant, and that the protocol supports password changes at Layer 2.
Which protocol would meet the customer's needs?

A. EAP-TLS
B. EAP-MD5
C. PAP
D. EAP-MSCHAPv2

Answer: D

Explanation:


QUESTION 4
You navigate to "UAC" > "Infranet Enforcer" > "Auth Table Mapping" in the admin GUI. You see
one policy, which is the unmodified, original default policy.
Which statement is true?

A. Dynamic auth table mapping is not enabled.
B. A successful authentication attempt will result in a new authentication table entry, which will be
delivered only to the Junos enforcer protecting the network from which the user has authenticated.
C. To create a static auth table mapping, you must delete the default policy.
D. The default policy applies only to the factory-default role User.

Answer: A

Explanation:


QUESTION 5
You have a Junos Pulse Secure Access Service acting as an IF-MAP client, configured to federate
all user roles to a Junos Pulse Access Control Service acting as an IF-MAP Federation server. A
remote user using Junos Pulse logs in to the Junos Pulse Secure Access Service; the Junos
Pulse Secure Access Service provisions a remote access session for that user.
What happens next?

A. The Junos Pulse Secure Access Service redirects the user to the Junos Pulse Secure Access
Service for authentication
B. The Junos Pulse Access Control Service provisions enforcement points to enable resource
access for that user.
C. The Junos Pulse Secure Access Service publishes user session and role information to the IFMAP
Federation server,
D. The Junos Pulse Secure Access Service provisions enforcement points to enable resource
access for that user.

Answer: C

Explanation: