Free Practice Questions for Juniper JN0-106 Exam

The Junos Command Line Interface (CLI) is strictly partitioned into operational and configuration modes to maintain a clear boundary between monitoring and administrative changes. Operational mode, identified by the > prompt, is designed for executing commands that monitor device status, troubleshoot network connectivity, and manage the physical system state. One typical administrative task performed here is clearing log files (using the clear log command) to free up storage space or reset diagnostic data during troubleshooting.

Additionally, high-level system requests that do not alter the persistent configuration database, such as rebooting the hardware, are executed in operational mode. The request system reboot command allows the administrator to gracefully restart the device after a software update or as part of a maintenance cycle. In contrast, actions such as configuring routing protocols or committing changes require transitioning to configuration mode (the # prompt). Committing a configuration is the specific act of moving changes from the candidate database to the active database, which is a logic-altering event strictly reserved for configuration mode. Therefore, operational mode remains the dedicated environment for real-time observation and system-level requests that ensure the device operates correctly within its existing parameters. Reference: User Interfaces, CLI Modes, Operational Mode Commands.

==========

In Junos OS, standard firewall filters operate as a primary security and traffic management tool within the forwarding plane. These filters are fundamentally stateless, meaning they evaluate each packet individually and in isolation without maintaining a session table or tracking the state of network connections. This stateless nature allows the Packet Forwarding Engine (PFE) to process filters at hardware speeds, ensuring minimal latency for transit traffic. This distinguishes them from the stateful security policies found on Junos security devices like the SRX Series, which track the entire lifecycle of a flow.

Furthermore, firewall filters are designed to inspect and match header information up to Layer 4 of the OSI model. This capability allows administrators to define terms based on parameters such as source and destination IP addresses (Layer 3) as well as TCP or UDP port numbers and protocol types (Layer 4). While they provide granular control over packet flow, they do not natively inspect Layer 7 application payloads, which is typically reserved for advanced services like Intrusion Detection and Prevention (IDP). By combining stateless execution with Layer 4 matching, Junos firewall filters provide an efficient method for implementing transit protection, rate limiting through policing, and protecting the local Routing Engine through loopback interface filtering. Reference: Routing Policy and Firewall Filters, Firewall Filter Framework.

==========

The Junos OS CLI is engineered with an extensive, self-contained help subsystem designed to provide immediate technical guidance without requiring constant reference to external manuals. The help command is a versatile tool that operates through several key sub-commands: topic, reference, and log. While help topic provides conceptual overviews and help reference displays specific configuration syntax and hierarchical requirements, the help log command is specifically tailored for system maintenance and troubleshooting.

The primary purpose of help log is to provide a detailed explanation for specific system log error messages generated by the device. When a Junos daemon or process writes an entry to the syslog, it includes a unique message identifier or " tag. " By executing help log < message-tag > , an architect can retrieve a clinical breakdown of why the message was generated, the severity of the event, and often the recommended action to resolve the underlying issue. This capability is vital for rapid interpretation of complex system events in real-time. It ensures that administrators have authoritative, context-aware information directly at the terminal, effectively bridging the gap between raw diagnostic output and actionable technical intelligence within the Junos environment. Reference: User Interfaces, CLI Help Facilities, help log.

==========

In the Junos OS architecture, the Routing Engine (RE) manages path selection by evaluating multiple potential routes to a specific destination found within the Routing Information Base (RIB). When multiple routing sources (such as static configuration, OSPF, IS-IS, and BGP) provide information for the exact same destination prefix—in this case, 192.168.100.100/32 —the device utilizes route preference as the primary tie-breaker to determine which entry becomes the " active " route.

The provided exhibit displays the default preference values for each protocol: Static is 5 , OSPF is 10 , IS-IS is 15 , and BGP is 170 . Junos OS follows a " lower is better " logic for preference; therefore, the Static route is selected as the most trustworthy path. In the command output, the active route is explicitly identified by the asterisk (*) and plus sign (+) symbols located next to the [Static/5] entry. Looking at the specific next-hop information for this active static route, the output indicates the traffic is sent to 192.168.0.2 via xe-0/0/0.0 . Consequently, the Packet Forwarding Engine (PFE) will install this specific path into the forwarding table, causing all traffic destined for 192.168.100.100 to be egressed over the xe-0/0/0.0 interface.

The Junos OS operates using a candidate configuration model, where changes are made in a temporary buffer before being applied to the running system. To ensure accuracy and prevent unintended network disruptions, it is a critical best practice to review the differences between the candidate buffer and the currently active configuration. The command show | compare executed from the [edit] hierarchy level is the primary tool for this task.

When this command is issued, the CLI performs a line-by-line comparison. The output uses a " diff " format: lines prefixed with a plus sign (+) represent new statements added to the candidate configuration, while lines prefixed with a minus sign (-) indicate statements that have been removed. This visualization allows the architect to verify exactly what will change upon execution of the commit command. Unlike operational mode commands that only show the final state, show | compare highlights the delta, making it indispensable for auditing complex policy changes or interface reconfigurations. This step acts as a final manual validation gate, reducing the risk of syntax errors or logical misconfigurations entering the production environment. Using this command is a fundamental skill for passing the JNCIA-Junos exam and for professional day-to-day operations.

Junos OS firewall filters operate on a sequential, " first-match " logic, but their behavior is significantly influenced by the use of terminating versus non-terminating actions. In this exhibit, a packet with a source address of 10.0.0.0/8 is evaluated against the filter named test.

Evaluation begins with term 1 . The packet matches the source-address criteria, triggering the actions defined in the then statement. The first action is log, which sends the packet header information to the firewall task buffer for logging. The second action is next term . This is a critical non-terminating action ; it instructs the Packet Forwarding Engine (PFE) to continue the evaluation process using the subsequent term in the filter rather than stopping after the match.

Evaluation then moves to term 2 . Because term 2 contains no from match conditions, it acts as a " catch-all " for any traffic that reaches it. The action in this term is reject . This is a terminating action that discards the packet and sends an ICMP " destination unreachable " message back to the source. Therefore, the packet is first recorded by the logging process and is subsequently dropped by the rejection mechanism. If next term had not been present in term 1 , the packet would have been implicitly accepted (as any matched term without a terminating action like discard, reject, or accept defaults to an implicit accept in that specific term). However, the explicit instruction to move forward ensures the packet hits the reject statement.

Maintaining the integrity of the Junos OS file system is a critical operational requirement, especially during maintenance that involves removing power from the hardware. To achieve a graceful power-down, the request system halt command must be used. This command initiates a systematic shutdown of all running software processes and daemons, flushes any pending data from the system ' s volatile memory (RAM) to the solid-state storage or hard disk, and unmounts the file systems correctly. Once the software has safely shut down, the console will typically display a message indicating that it is safe to turn off the physical power switch or remove the power cables.

Using request system halt prevents potential file system corruption that can occur if power is abruptly cut while the OS is actively writing logs or configuration data. This is distinct from request system reboot, which restarts the OS, or request system logout, which merely terminates the current CLI session. As a Senior Architect, it is essential to follow this procedure to ensure that the device remains in a reliable state for its next power-on cycle. For devices equipped with dual Routing Engines, the command can often be directed to a specific member or both simultaneously to ensure a synchronized and safe shutdown of the entire chassis. Reference: Operational Monitoring and Maintenance, System Halt and Reboot Procedures.

==========

Creating a new user account in Junos OS involves several specific steps within the [edit system login] configuration hierarchy. To establish a functional and secure user account, an administrator must first define the username and assign that user to a login class. Login classes are essential because they define the permissions and access levels for the user, such as super-user, read-only, or operator. Without a login class, a user would have no permissions to perform tasks within the CLI.

The second mandatory task is to configure an authentication method for the user, most commonly a password. This is typically done using the authentication plain-text-password command, which prompts the administrator to enter and confirm the secret string that the system then hashes and stores. While Junos also supports public-key authentication for SSH, a local password remains the standard for basic access control. It is important to note that SSH access is generally controlled at the system level under [edit system services] and does not need to be enabled on a per-user basis individually. Furthermore, allowing a user to bypass authentication is contrary to the Junos security model and is not a standard task in user account creation. Reference: User Interfaces, User Management, Login Classes.

The Junos Command Line Interface (CLI) is structured into two primary hierarchical modes: operational mode and configuration mode. Operational mode is the default entry point when a user logs into the device, signified by the > prompt. This mode is designed for monitoring the health of the device, troubleshooting network issues, and executing system-level maintenance tasks. Specifically, an administrator uses operational mode to verify the version of Junos OS currently active on the device using the show version command.

Additionally, system-level administrative actions that do not involve modifying the device ' s persistent configuration logic are performed within the operational mode. This includes requesting the system to reboot or halt via the request system hierarchy of commands. In contrast, tasks that involve manipulating the configuration database—such as committing proposed changes or rolling back to a previous configuration version—require the user to transition into configuration mode, indicated by the # prompt. Understanding this distinction is vital for efficient navigation of the Junos CLI; while operational mode provides the tools to observe the system and manage its physical state, configuration mode is reserved for altering the logical parameters and routing policies that govern device behavior. Reference: User Interfaces, CLI Modes, Operational Mode Commands.

==========