JN0-105 Junos - Associate (JNCIA-Junos) 2025 Exam Question and Answers

The Packet Forwarding Engine (PFE) in Junos OS performs several key functions, including implementing firewall filters (A) and forwarding transit traffic (C). The PFE applies firewall filter rules to incoming and outgoing traffic and is responsible for the high-speed forwarding of packets based on the information in the forwarding table.

The TCP three-way handshake establishes a reliable connection between two hosts. During this process:

SYN: The client sends a TCP segment with the SYN flag set, including an initial sequence number (ISN) and port information.

SYN-ACK: The server responds with a SYN-ACK, which contains its own sequence number and acknowledgment of the client’s ISN.

ACK: The client replies with an ACK, confirming receipt of the server’s ISN.

Thus, port numbers (to identify the application endpoints) and sequence numbers (to ensure ordered and reliable data transfer) are exchanged.

Interfaces and application names are not exchanged during this process.

From Junos OS Fundamentals / TCP Concepts:

“The TCP three-way handshake establishes a reliable session by exchanging port numbers and sequence numbers between peers. This process synchronizes both sides before data transmission begins.”

The Network Time Protocol (NTP) is designed to synchronize the clocks of computers over a network. Configuring NTP on a Junos device ensures that its clock is set accurately, which is crucial for logging, troubleshooting, and maintaining the integrity of time-sensitive operations and security protocols. NTP allows devices to use a hierarchy of time sources, from primary servers synchronized to a reference clock (such as an atomic clock or GPS time) to secondary servers that distribute the time to other devices on the network.

The clear log ospf-trace command on a Juniper Networks router is used specifically to manage the contents of the log file named ospf-trace. Executing this command clears or deletes the existing data within the ospf-trace log file but does not stop the logging process. The router continues to log new OSPF-related events and data into this file after the command is executed. This functionality is crucial for troubleshooting and monitoring the OSPF (Open Shortest Path First) protocol's operation by allowing network administrators to remove old or irrelevant log data while continuously capturing new events without interruption.

The show chassis hardware command in Junos OS displays detailed information about the hardware installed in the device, including the chassis itself. This command provides a list of all hardware components, their serial numbers, part numbers, and version information. When looking for the chassis serial number specifically, this command is the most direct and comprehensive way to retrieve that information, as it includes the serial number of the chassis among the details provided.

After increasing the MTU size of an interface and committing the configuration, the command to verify the applied MTU change is D, "show interfaces ge-0/0/0." This command displays detailed information about the interface, including the current MTU size, making it the best choice for verifying the applied changes.

To convert the decimal number 7 to binary, the correct representation is 00000111 (C). In binary, 7 is represented as 1+2+4 (2^0 + 2^1 + 2^2), which corresponds to the last three digits being 1 in the binary format, with leading zeros added for clarity.

The firewall filter configuration in the exhibit specifies a filter with two terms. Term 1 matches traffic from the source address 10.0.0.0/8 and has two actions: 'log' and 'next term'. The 'log' action will record the match to a log file, and 'next term' indicates that the firewall should evaluate the next term after logging. There is no explicit action such as 'accept' or 'reject' in term 1, so by default, the traffic will be accepted unless subsequently rejected by another term.

Term 2 has the action 'reject', which discards packets that reach this term. Since there is no 'from' condition in term 2, it acts as a default rule for all traffic not matched by term 1.

Because the traffic sourced from 10.0.0.0/8 matches term 1 and there is no reject action in that term, it will be logged and then accepted by the firewall filter. There is no subsequent term that rejects this specific traffic, so the action from term 2 does not apply to it.

Firewall filters in Junos OS are stateless, meaning they process each packet individually without regard to the state of a connection or sequence of packets. These filters can match various packet attributes, including those at Layer 4, such as TCP and UDP port numbers. This allows for granular control over traffic based on the type of service or application. Unlike stateless filters, stateful firewalls keep track of the state of active connections and make decisions based on the context of the traffic flow, which is not a capability of Junos firewall filters. Additionally, Junos firewall filters primarily operate up to Layer 4 and do not natively inspect Layer 7 parameters, which involve application-level data.

In Junos OS, a policer is a feature used to limit the rate of traffic flow in the network, including exception traffic sent from the Packet Forwarding Engine (PFE) to the Routing Engine (RE). Exception traffic consists of packets that cannot be processed by the PFE alone and require intervention by the RE, such as control packets or packets destined for the device itself. A policer can be configured to enforce bandwidth limits and drop or mark packets that exceed specified rate limits, thus protecting the RE from being overwhelmed by excessive exception traffic.

In Junos OS, the request system configuration rescue save command is used to save the current active configuration as a rescue configuration. This feature is particularly useful for preserving a known good configuration state that can be quickly reverted to in case of configuration errors or issues. By saving a rescue configuration, administrators can ensure that they have a reliable fallback option that can be loaded in the future to restore the device's operation without having to reconfigure from scratch. This is an essential practice for maintaining network stability and quick recovery.

Junos OS supports three types of configuration sessions:

Configure exclusive: allows only one user to enter configuration mode. This prevents conflicts. If uncommitted changes exist from a previous session, they are retained.

Configure private: allows multiple users to edit simultaneously, each with their own candidate copy.

Configure (default/shared): multiple users can edit the same candidate configuration at once.

Thus, configure exclusive:

✔ Retains uncommitted changes in the candidate configuration.

✔ Permits only one user to edit at a time.

From Junos OS Fundamentals:

“The configure exclusive command allows a single administrator to lock the configuration. Uncommitted changes remain intact until committed or discarded.”

Layer 2 network switches are crucial components in local area networks (LANs), providing multiple functions for data packet forwarding and network segmentation. One inherent characteristic of switches is their susceptibility to traffic loops, especially in networks with redundant paths. Without proper loop prevention protocols like Spanning Tree Protocol (STP), loops can cause broadcast storms and network instability. Additionally, switches inherently flood broadcast traffic to all ports within the broadcast domain, except the port on which the broadcast was received. This is because broadcast frames are meant to be delivered to all devices within the VLAN, and the switch ensures this by flooding these frames to all ports in the VLAN, except the source port.

The Routing Protocol Daemon (rpd) is a critical component in Juniper Networks devices, responsible for all routing operations. It maintains routing tables, which hold information about network paths and destinations derived from various routing protocols. These tables are used to make decisions about where to send packets. Additionally, rpd generates forwarding tables based on the information in the routing tables. The forwarding tables are then used by the Packet Forwarding Engine (PFE) to actually forward packets to their next hop or final destination.

The CLI help command in Junos OS provides assistance and explanations for commands, command options, and in some cases, specific system log error messages. By using the help command followed by specific keywords or messages, users can get detailed information and context for the commands they are using or errors they are encountering. This feature is particularly useful for understanding the purpose of commands, their syntax, and troubleshooting error messages that may appear in system logs.

Junos OS supports several external authentication methods for administrative access, with TACACS+ (Terminal Access Controller Access-Control System Plus) and RADIUS (Remote Authentication Dial-In User Service) being among the most commonly used. Both TACACS+ and RADIUS are protocols that allow network devices to communicate with a central authentication server, enabling centralized control over user authentication and authorization. This centralization simplifies the management of user credentials and access policies, especially in larger networks with multiple devices.

Junos OS supports only 1 rescue configuration file on a device. This rescue configuration is a safeguard feature that allows network administrators to revert to a known good configuration in case of a configuration error or issue, ensuring network stability.

In Junos OS, each device supports only one rescue configuration file. The rescue configuration is a specific configuration that can be saved and later retrieved if needed. This is used as a fallback configuration that you know works and can be applied in case of an emergency or if the current configuration has issues.

Junos OS can store up to 50 rollback configuration files, making B the correct answer. These rollback files allow administrators to revert to previous configurations, providing a safety net that facilitates recovery from configuration errors or undesired changes

The Packet Forwarding Engine (PFE) in Junos OS is responsible for maintaining the forwarding table. The PFE processes incoming packets, performs route lookups in the forwarding table, and forwards packets based on this information, offloading these tasks from the Routing Engine to ensure efficient packet forwarding.

In Junos OS, to navigate from operational mode to configuration mode, you can use either the edit or configure command. Both commands move the CLI from operational mode, where you can view the state of the device, to configuration mode, where you can make changes to the device's configuration.

Class of Service (CoS) in Junos OS provides tools for managing traffic congestion and ensuring that latency-sensitive traffic is given priority over less time-critical data. By implementing CoS, network administrators can classify traffic into different priority levels, apply scheduling policies to ensure that high-priority traffic is transmitted first, and use congestion management techniques such as queue buffers and drop profiles. This helps in maintaining the quality of service for critical applications, especially during periods of high network congestion. However, CoS does not eliminate congestion entirely nor does it inherently make the network faster; it provides a mechanism for better managing and controlling traffic flows according to their importance and time sensitivity.

Operating an Interior Gateway Protocol (IGP) within an Autonomous System (AS) provides several benefits, including determining the optimal paths for data transmission (B), reacting quickly to network changes (D), and learning all about the subnets and best paths within the network (E). IGPs are designed to manage routing within a single AS efficiently, adapting to changes and ensuring data is routed through the best available paths.

In Junos OS, when creating a new user account, the minimum required fields are the username and the login class. The username is the identifier for the account, while the login class specifies the level of access or permissions the user has on the device. Login classes allow for the differentiation between various roles, such as read-only access or full administrative rights. Other information, such as full name or user ID, is optional and not strictly necessary for the creation of a functional user account.

When multiple users are configuring a Junos device using the "configure private" command, each user gets their own candidate configuration (C). This allows for isolated configuration sessions, where changes made by one user do not impact or interfere with the changes made by another user in their private session.

In the exhibit shown, the highlighted number next to the route type (Static) within the square brackets indicates the route preference, also known as the administrative distance. In Junos, the route preference is a value that determines the priority of the route source. Lower numbers indicate a higher priority when the routing table is being calculated. The route preference is used to select the best route when multiple paths to the same destination exist from different routing sources. The number 5 is unusually low for a static route by default, suggesting it has been manually configured to override other route types.

In Juniper Networks devices, when the factory default configuration is loaded, the first step before committing any configuration is to set up root authentication. This is crucial because it secures the device by ensuring that only authorized users have administrative access. Without setting up a root password, the device will not allow any commit operations, which is a safety measure to prevent unauthorized access. This requirement emphasizes the importance Juniper places on security right from the initial setup of the device.

The monitor interface ge-0/0/3 command is used in Junos OS to view real-time statistics for a specific interface. This command helps in diagnosing issues like packet loss by displaying real-time updates of traffic and error statistics for the specified interface.

When you enter ? at the command-line prompt in Junos OS, the system provides assistance in two significant ways. Firstly, it lists the available commands and options that can be used at the current point in the command hierarchy, aiding users in understanding what commands they can execute next. Secondly, it displays summary information about those commands and options, providing brief descriptions or additional context that can help users understand the function of each command or option. This feature is particularly useful for learning the command structure or for quick reference when specific command syntax is forgotten.

CSMA/CD is the access method used in classic Ethernet (half-duplex). Its main functions:

Carrier Sense: A device listens to the medium to check if another device is transmitting before sending (avoiding collisions).

Collision Detection: If two devices transmit at the same time, they detect the collision, stop, and wait a random backoff period before retrying.

Devices can either transmit or receive at a given time (half-duplex), not both simultaneously.

Thus, correct answers:

✔ A – Listen before transmit.

✔ B – Devices can either transmit or receive.

Options C and D are incorrect:

CSMA/CD is a half-duplex protocol, not full-duplex.

Full-duplex eliminates collisions and no longer uses CSMA/CD.

From JNCIA-Junos Study Guide:

“CSMA/CD requires that devices sense the wire before transmitting. Devices can either transmit or receive, but not both at the same time.”