JN0-452 시험 - Juniper실제시험문제와 답 - 160문항

Question No : 1

A network administrator notices that the SSID “Guest-WiFi” is consuming too much airtime, especially in high-density areas. The site has 6 active SSIDs configured.
What could be contributing to the airtime issue, and what is a best practice to address it?

A.Replace the Guest-WiFi with a BLE overlay
B.Increase the minimum RSSI threshold for clients
C.Too many SSIDs generate excess beacon frames; consolidate and reduce SSIDs
D.Hidden SSIDs cause more broadcast traffic

정답:
Explanation:
Each SSID generates periodic beacon frames, consuming airtime. Best practice is to reduce the number of SSIDs to minimize channel overhead and improve performance.

Question No : 2

A university deploys Mist Wi-Fi across multiple buildings. All users connect to a single SSID called “CampusWiFi.” However, students should only have internet access, while faculty should access internal systems like printers and servers.
What is the **best way** to implement this using Mist?

A.Create two SSIDs with different VLAN tags
B.Assign WxLAN roles based on RADIUS authentication and enforce role-based VLAN and policy controls
C.Set SLE scores differently for students and faculty
D.Use MAC address filtering for faculty and students

정답:
Explanation:
Mist’s WxLAN allows assigning roles based on RADIUS identity. Both students and faculty can connect to the same SSID, but access different network resources based on their assigned roles and VLANs.

Question No : 3

What is the legal consideration when enabling Containment Mode in Mist WIPS?

A.It requires the client to use only WPA3
B.It may be restricted by local regulations such as FCC rules
C.It disables Bluetooth when active
D.It prevents guest VLANs from being assigned

정답:
Explanation:
Containment (e.g., sending deauth frames) can be considered unlawful interference in some countries, including under FCC rules in the U.S., and should be used with caution.

Question No : 4

Which threat can Mist’s WIPS functionality detect?

A.Encrypted DNS hijacking
B.Rogue AP broadcasting unauthorized SSID
C.Overuse of SLE scoring by clients
D.Invalid firmware on Mist Edge

정답:
Explanation:
Mist’s WIDS/WIPS can detect unauthorized (rogue) APs broadcasting SSIDs and alert administrators or trigger auto-containment if configured.

Question No : 5

What is the purpose of Mist's Client Journey Timeline feature?

A.Display system logs of controller uplink status
B.Show step-by-step logs of client connection events (association, auth, DHCP, etc.)
C.Monitor Wi-Fi security compliance reports
D.Control SSID broadcast timers

정답:
Explanation:
Mist’s Client Journey Timeline shows the client’s full connection path: association, authentication, DHCP, DNS, and SLE metrics. It's ideal for troubleshooting.

Question No : 6

In Mist, what happens when you configure an SSID as “Hidden”?

A.It will not appear in the list of available networks for nearby users
B.The AP disables all DHCP communication for that SSID
C.Only WPA3 clients can connect to it
D.Devices must use BLE to discover it

정답:
Explanation:
A hidden SSID is not broadcast in beacon frames. Users must manually enter the network name to connect. This does not add real security.

Question No : 7

What is the main purpose of Mist's Band Steering feature?

A.Prevent legacy devices from joining the network
B.Force all clients onto the same SSID
C.Encourage capable devices to use less congested 5 GHz or 6 GHz bands
D.Prioritize BLE communication for location tracking

정답:
Explanation:
Band Steering nudges compatible devices away from 2.4 GHz toward 5 GHz or 6 GHz, which offer faster speeds and lower interference.

Question No : 8

Which Mist WLAN access control option allows each user to log in with a unique username and password?

A.WPA2-Personal (PSK)
B.WPA2-Enterprise (802.1X with RADIUS)
C.MAC-based control
D.OWE (Opportunistic Wireless Encryption)

정답:
Explanation:
WPA2-Enterprise uses 802.1X and a RADIUS server to provide per-user authentication with individual credentials, ideal for enterprises.

Question No : 9

What is the primary role of a Captive Portal operating in "Redirect-Only" mode in Mist?

A.Handles authentication within the Mist cloud
B.Provides MAC address whitelisting for IoT devices
C.Delivers RADIUS attribute enforcement
D.Redirects clients to an external site without performing authentication

정답:
Explanation:
In Redirect-Only mode, Mist simply redirects clients to an external URL. It doesn’t perform authentication or policy enforcement ― this is handled by the external server.

Question No : 10

In Mist WLAN, what is the recommended reason for keeping the number of SSIDs low at each site?

A.To reduce airtime consumption caused by excessive beacon broadcasts
B.To minimize the total number of VLANs used
C.To allow 802.1X to function correctly
D.To improve BLE scanning performance

정답:
Explanation:
Each SSID increases broadcast overhead by generating periodic beacon frames, which consume airtime and reduce Wi-Fi efficiency. Mist recommends minimizing SSIDs to avoid this.

Question No : 11

An enterprise wants to integrate Mist with its ServiceNow platform. The goal is to receive real-time alerts when APs go offline and automatically create IT tickets.
Which Mist feature is used in this integration?

A.Syslog forwarding
B.BLE triangulation events
C.REST API with hourly polling
D.Webhooks with event-based triggers

정답:
Explanation:
Mist supports Webhooks to push real-time notifications (e.g., AP offline, SLE violations) to third-party platforms like ServiceNow, Teams, or Slack for automated incident handling.

Question No : 12

A company wants to provide access to both employees and contractors through the same SSID. However, employees should be on VLAN 10 with access to internal resources, and contractors should be isolated on VLAN 20.
Which Mist feature enables this behavior?

A.Captive Portal with sponsor approval
B.Marvis AI Insights
C.WxLAN with identity-based VLAN assignment
D.MAC filtering on SSID

정답:
Explanation:
WxLAN allows Mist to apply policy-based VLAN assignments based on user role or authentication, even when users connect to the same SSID.

Question No : 13

A healthcare provider is deploying Mist APs in a hospital. Due to strict data protection regulations, all patient-related traffic must stay within the building and never touch the cloud.
Which Mist component is required in this design?

A.Mist Edge for local traffic breakout and compliance
B.Marvis AI with SLE metrics enabled
C.Webhook-based DNS redirection
D.Mist-hosted Captive Portal

정답:
Explanation:
Mist Edge enables on-premises traffic forwarding while still using cloud-managed configuration. It ensures compliance with data protection rules by keeping sensitive traffic local.

Question No : 14

A global retail company has multiple IT administrators. One administrator should only manage the Paris store’s Wi-Fi configuration, while another should manage global policies.
How should roles be assigned in Mist?

A.Use only the template system to separate access
B.Assign both as global Admins to allow shared flexibility
C.Assign one as a Site-level Admin for Paris and the other as Org-level Admin
D.Make one a Site-level Admin for Paris and the other a Read-only user

정답:
Explanation:
Site-level Admins can manage specific site configurations (e.g., Paris), while Org-level Admins control policies, templates, and users across all sites.

Question No : 15

A technician is deploying Mist APs in a new office site. After plugging the APs into a PoE-enabled switch and verifying they receive DHCP addresses, the APs are not broadcasting any SSIDs.
What is the **most likely reason** for this behavior?

A.The APs need static IPs to function with the Mist cloud
B.The APs must be registered and assigned a configuration template in Mist Cloud
C.Marvis AI must first run an RF scan before enabling broadcast
D.The APs require CLI access to enable SSIDs manually

정답:
Explanation:
In Mist, APs must be registered to an organization/site and have a configuration template applied before broadcasting SSIDs. DHCP and PoE are necessary, but cloud configuration is essential to complete the setup.

Juniper JN0-452 시험