JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2025) — Question 16

You must limit access to a printer with a persistent DHCP address of 2001:db8:0000:50::10/64 in VLAN v50 to users assigned to VLAN v50 only.
Which action would satisfy this requirement?

Answer options

• A. Implement persistent MAC learning to ensure that 2001:db8:0000:50::10 is allocated properly.
• B. Implement a firewall filter on the IRB interface for VLAN v50, blocking traffic to/from 2001:db8:0000:50::10.
• C. Implement a firewall filter on the VLAN v50, blocking traffic to/from 2001:db8:0000:50::10.
• D. Implement DHCP snooping on VLAN v50 to ensure that 2001:db8:0000:50::10 is allocated properly.

Correct answer: B

Explanation

The correct answer is B, as implementing a firewall filter on the IRB interface for VLAN v50 will effectively restrict access to the printer for users not in VLAN v50. Option A does not provide access control, C applies the filter to the wrong interface type, and D only ensures correct DHCP allocation without controlling access.