JNCIP-DC practice questions
Juniper Networks · JN0-480 · 300 questions
Original practice questions for the Juniper Networks Certified Professional – Data Center (JNCIP-DC) exam, covering data center deployment, Layer 3 fabrics, VXLAN, EVPN-VXLAN signaling, data center interconnect, and multitenancy and security.
This course contains the use of artificial intelligence.
About the JN0-480 exam
- Time allowed
- 1 hour 30 minutes
- Questions
- 65 multiple-choice
- Languages
- English
- Format
- Proctored written exam, Pearson VUE; pass/fail immediately after the exam
Exam details published by the vendor, checked 28 August 2026. Vendors change fees and formats without notice — confirm on the vendor's own page before you book.
Practice Quizzes
Test your knowledge with standard 20-question practice sets.
Quiz 1
Quiz 2
Quiz 3
Quiz 4
Quiz 5
Quiz 6
Quiz 7
Quiz 8
Quiz 9
Quiz 10
Quiz 11
Quiz 12
Quiz 13
Quiz 14
Quiz 15
Browse by Domain
Study specific topics at your own pace.
Data Center Deployment and Management · 50 questions
- A city IT ops lead wants new QFX leafs to boot, fetch configuration, and join the municipal fabric without console staging on every rack. What does Juniper zero-touch provisioning (ZTP) primarily provide in this data-center deployment?
- County DC techs debate whether ZTP requires a pre-staged USB stick on every leaf. Which statement correctly describes network-based ZTP for Juniper DC switches?
- A municipal fabric rollout fails because new leaves obtain DHCP addresses but never retrieve a configuration file. Which missing ZTP element best explains this failure?
- Public-works NOC asks which first-boot behavior starts ZTP on a factory-default Junos data-center switch. Which concept is correct?
- A township wants ZTP only for initial image and configuration, then permanent local management afterward. How should that goal be framed relative to ZTP’s role?
- City security reviewers fear ZTP means switches will pull unauthenticated configuration from anywhere on the Internet. Which description best reflects ZTP’s trust boundary in a Juniper DC design?
- A regional DC build needs identical leaf roles with unique hostnames and management IPs. How does a sound ZTP workflow support that requirement?
- Ops installs a leaf that already has a saved configuration and wonders why ZTP did not run. Which explanation is most accurate?
- A metro DC wants ZTP to upgrade Junos to the fabric standard before applying configuration. Which statement about ZTP scope is correct?
- Helpdesk confuses ZTP with an engineer pushing configuration via NETCONF from a laptop. What is the key distinction?
- A smart-city fabric pod documents ZTP prerequisites before racking. Which set best represents core components commonly required for Juniper ZTP?
- County auditors ask whether adopting ZTP removes the need to plan out-of-band or management-plane reachability. What is the correct assessment?
- A leaf ZTP loop repeatedly fetches the wrong role configuration. Which factor is most critical to correct in the ZTP design?
- A municipal DR site wants ZTP servers local to that site so new gear can bring up if the primary DC path is down. Which placement idea best supports resilient site-local ZTP?
- New leafs in the city hall DC get an IP address but never learn where the configuration file lives. Beyond assigning an address and gateway, what DHCP role is essential for DC ZTP?
- A parks department management VLAN for DHCP is mis-scoped, and new leafs land on the wrong network. What should the deployment design emphasize?
- Ops wonders whether DHCP is only for servers and not for switches in the municipal fabric. Which statement is accurate for ZTP-based DC switch deployment?
- A county fabric uses DHCP relay from the management VRF to a central DHCP server. Why does relay commonly appear in this DC management design?
- Two DHCP servers answer in the municipal management network with conflicting options. What is the most likely ZTP impact?
- A township wants DHCP only during rack-and-stack, then static management addressing in steady state. How should that policy be understood relative to DHCP’s DC role?
- NOC sees DHCP Discover from a new spine but no Offer. Which troubleshooting focus is most appropriate in a DC management context?
- City standards require DHCP logs retained for device identity audits during ZTP. What operational value does that logging provide?
- A lab leaf uses DHCP on a production management VLAN and pulls a production configuration. What design control best prevents this failure mode?
- A municipal IPv6-only management discussion asks whether DHCP-family concepts still matter for ZTP-like automated bring-up. Which framing is most accurate for this bank’s DC deployment focus?
- Helpdesk sets an extremely short DHCP lease and leafs churn management addresses mid-ZTP. What is the operational concern?
- A metro fabric documents which DHCP options point new Junos leaves to the config and image file paths during ZTP. What should operators treat those options as providing?
- A city NOC needs to know when a leaf-spine link flaps before citizen portal SLAs burn. Which monitoring focus best matches that operational need?
- A county asks whether SNMP polling alone is enough for modern leaf-spine health visibility. Which statement best reflects describe-level monitoring practice?
- Municipal ops wants dashboards for BGP underlay session state across spines. Why is that monitoring focus fabric-critical?
- After a change window, a city engineer verifies EVPN overlay health. Beyond interface counters, what should that verification emphasize?
- A township confuses device syslog with traffic analytics. Which distinction should operators apply?
- A public-safety DC requires alerting when optical power on spine uplinks degrades. Which monitoring approach best fits?
- Ops wants to monitor control-plane CPU on leaves during MAC move storms. Why is that resource monitoring relevant in a DC fabric?
- A regional NOC centralizes traps from all municipal DC pods. What monitoring architecture concept does that illustrate?
- City change policy requires pre/post health checks covering routes, tunnels, and VTEPs. What does that policy treat as fabric 'monitoring' for validation?
- A helpdesk ticket only checks ping to a leaf management IP and then declares the fabric healthy. What is the main flaw in that approach?
- A library consortium DC asks for role-based views so network and server teams see different monitoring dashboards. Which concept does that request apply?
- After a blackhole, a postmortem shows missing baseline interface error counters. What monitoring practice was lacking?
- A smart-city fabric wants streaming interface counters instead of five-minute SNMP polls for RoCE storage racks. What purpose does that telemetry choice serve?
- County architects ask what analytics adds beyond raw syslog. Which description is most accurate at describe depth?
- A municipal AI inference cluster needs fabric congestion visibility per queue. Which telemetry focus best matches that requirement?
- Ops enables sensors on Junos leaves but never exports them to a collector. What analytics architecture lesson applies?
- A city compares sFlow-like sampling with counter streaming for its leaves. How should those analytics approaches be distinguished at concept level?
- Compliance wants historical telemetry retained for 90 days after outages. Which analytics operations concept does that requirement highlight?
- The NOC hopes telemetry will automatically remediate BGP failures by itself. What separation should the candidate apply?
- A township enables gRPC-style streaming on Junos for fabric KPIs. At describe depth, what is the township adopting?
- Public works wants EVPN route-scale trends over months. Which analytics use case is that?
- Engineers drown in metrics with no SLOs. What analytics practice should they apply for the DC fabric?
- A metro DC uses telemetry to prove a vendor TAC case with timestamped drops. What analytics role does that illustrate?
- The city cloud team asks if telemetry replaces the need for on-box 'show' commands. Which balance is correct?
Layer 3 Fabrics · 50 questions
- A city replaces STP access pods with a leaf-spine Clos for the new civic cloud. Which trait best describes that IP fabric architecture?
- County planners ask why every leaf should connect to every spine in the municipal Clos. What is the primary architectural intent of that full leaf-to-spine wiring?
- A township proposes adding leaf-to-leaf underlay links as a backup path between racks. Why does a classic Clos IP fabric avoid that pattern?
- Municipal architects compare a simple 3-stage leaf-spine Clos with a 5-stage Clos for a larger regional data center. When does a multi-stage Clos typically enter the design conversation?
- Ops asks what role the spines play in the civic fabric if overlays typically terminate on the leaves. Which statement is most accurate?
- A city diagram of the new IP fabric still shows STP blocked links between switches. What correction should the fabric team make to the diagram’s mental model?
- The public-safety data center wants predictable hop counts between any two leaves on the Clos. Which architecture property delivers that regularity?
- A regional design dual-homes each server to two leaves on the IP fabric. Where does that multihoming sit in the architecture?
- Council slides describe the municipal fabric as “Layer 2 everywhere.” What is the accurate IP-fabric correction?
- A metro pod wants separate IP fabrics for storage versus general compute. What architecture choice does that request illustrate at concept level?
- Engineers debate oversubscribed versus non-oversubscribed spine capacity for the civic Clos. What does fabric oversubscription measure in this architecture discussion?
- A smart-city edge DC proposes running the Clos with only a single spine to save cost. What is the main architectural risk?
- The city underlay will use EBGP between leaves and spines. Which characteristic best matches that IP fabric routing approach?
- County fabric designers prefer IBGP with route reflectors placed on the spines. What underlay routing pattern does that describe?
- A leaf loses all spine underlay peers and its server subnets become unreachable from the rest of the civic fabric. What routing principle explains that black hole?
- Ops enables OSPF as the underlay for a small municipal pod instead of BGP. How should that choice be understood at concept level?
- A township sees unequal ECMP utilization because underlay metrics were set inconsistently across leaf-spine paths. What does that symptom highlight?
- BGP underlay sessions are up, but one leaf’s loopback used as a VTEP address is missing from remote routing tables. What underlay routing gap should be investigated first?
- City security wants aggressive underlay ACLs on fabric links and immediately breaks BGP between leaves and spines. What lesson applies to IP fabric routing?
- A metro EBGP Clos design assigns a private ASN per leaf. What concept does that ASN allocation illustrate?
- The NOC asks whether enabling VXLAN means the civic fabric can drop underlay routing between leaves and spines. What is the correct separation of roles?
- After the city adds a new spine, traffic still avoids it. What underlay routing condition must be true for the new spine to join ECMP?
- Public works dual-stacks the IP fabric underlay with both IPv4 and IPv6. What operational consideration matters most for overlay VTEP reachability?
- A leaf redistributes connected routes into BGP with a loose policy and leaks tenant networks into the underlay. What routing-hygiene principle did the fabric violate?
- The city IBGP fabric has grown past a comfortable full mesh among leaves. Which scaling approach fits IP fabric underlay practice?
- A county IP fabric’s leaf RIBs keep filling with host and external prefixes that servers never need for east-west reachability. What scaling practice should the fabric team apply first?
- A regional municipal data center plans to grow from dozens of leaves to hundreds while keeping non-blocking east-west capacity. How should the architects scale the Clos fabric?
- A civic EBGP-per-leaf fabric is drowning operators in unique ASNs and per-leaf policy objects as pods expand. What operational scaling tradeoff should the design review highlight versus an IBGP-plus-route-reflector underlay?
- Overlay /32 host routes from EVPN are exploding on county leaves and stressing RIB and FIB, even though the underlay still has only a modest number of loopbacks and fabric links. What distinction should engineers make when diagnosing the scale problem?
- County architects want each leaf to maintain fewer BGP sessions as spine count grows, without abandoning multipath. Which control-plane approach best targets session-count scaling?
- A municipal pod is approaching hardware TCAM limits for distinct ECMP groups as more spines and prefixes are added. What IP fabric scaling constraint should the team treat as first-class in the design?
- A metro interconnect starts injecting large volumes of external prefixes into the city’s IP fabric underlay. What boundary practice protects fabric scale?
- A municipal GPU cluster needs near-lossless behavior for RoCE storage traffic across the IP fabric. Which CoS approach belongs in the fabric design?
- A city enables Priority Flow Control on every interface, including the Internet edge, after reading about RoCE. What scoping correction should the design review demand?
- After a township marks ordinary backup flows with the RoCE codepoint, operators see PFC storms across the pod. What should they fix first?
- A township engineer asks why modern RoCE-capable IP fabrics bother with Explicit Congestion Notification. What role does ECN play?
- Spine buffer profiles for lossless queues differ sharply from leaf profiles on a civic RoCE path, and storage latency spikes under load. What CoS consistency concern should operators address?
- The NOC schedules civic VoIP in the same strict lossless class as RoCE storage on the IP fabric. What class-design correction is appropriate?
- After enabling lossless queues for RoCE, a microburst still drops UDP telemetry on county leaves. What CoS tradeoff should the team recognize?
- Architects ask whether enabling IP fabric CoS for RoCE means application and stack retry logic can be removed. What is the correct stance?
- A city runbook sets underlay interface MTU higher than the overlay payload size requires, specifically to leave headroom for encapsulation. Which IP fabric best practice does that reflect?
- A leaf reuses one undocumented loopback for underlay router-id, VTEP source, and several overlapping services. What addressing hygiene best practice should the fabric standard require?
- Change windows routinely edit underlay BGP and overlay EVPN together across the whole civic fabric with no canary leaves. What best practice should replace that pattern?
- A township still ships fabric switches with vendor default passwords on the management plane. Which IP fabric operational best practice is being violated?
- Design review for a new municipal Clos insists on symmetric leaf-to-spine cabling and clearly labeled ports. Why is that an IP fabric best practice?
- The civic NOC must confirm a leaf installs multipath next hops toward all spines for its fabric prefixes. What monitoring check best verifies underlay ECMP?
- A city leaf shows BGP Established to a spine but receives zero prefixes from that peer. Where should troubleshooting focus first?
- After a cabling change, one municipal spine carries no production traffic while peers are busy. What should engineers verify first on the leaf-spine fabric links?
- An engineer brings up underlay BGP on a new leaf but forgets to advertise the VTEP loopback into the fabric. What failure class does this misconfiguration create?
- Telemetry flags rising CRC errors on one civic fabric optic between leaf and spine. How should that finding rank in IP fabric troubleshooting?
VXLAN · 50 questions
- City architects ask how VTEPs can learn remote MAC and IP mappings for municipal workloads without relying on endless unknown-unicast flooding. Which control-plane approach best answers that design goal?
- A township still runs an underlay multicast group for VXLAN BUM delivery between civic VTEPs. What role does that multicast underlay play in a classic VXLAN design?
- A municipal standard mandates EVPN for VXLAN signaling across the city’s leaf-spine pods. Which statement correctly identifies that control plane?
- Ops confuses a VXLAN VNI with the local VLAN ID while reading control-plane advertisements on a county leaf. What is the correct distinction?
- A county enables VXLAN between leaves but deploys no EVPN or other MAC/IP control plane. What is the primary remote-learning implication?
- The civic NOC asks what head-end replication means for VXLAN BUM when the underlay has no multicast. Which explanation is accurate?
- City architects want to know which protocol carries EVPN routes for the municipal VXLAN fabric. Which answer is correct?
- A lab mixes statically configured VXLAN tunnels with EVPN-driven dynamic VTEP discovery for the same civic VNI. What control-plane contrast should engineers keep clear?
- A public-safety fabric team asks whether underlay PIM is still required if the pod uses EVPN-VXLAN with ingress replication for BUM. What is the sound conclusion?
- Engineers debate why ingress replication lists on municipal leaves grow as more VTEPs join each VNI. What scaling relationship should they cite?
- A metro design assigns different VNIs to Parks, Utilities, and Public Safety departments. How should architects treat those VNIs in the VXLAN control plane?
- Ops sees EVPN Type-2 MAC/IP routes on a city leaf but still claims the VXLAN MAC control plane is OSPF. Which correction is accurate?
- During a city DR test, BGP EVPN sessions flap while some existing VXLAN data-plane flows briefly continue. What operational nuance is most accurate at concept level?
- A municipal leaf advertises EVPN routes for a VNI, but peer leaves have no matching route-target import. What is the likely learning result?
- Township engineers ask what an L2 VNI versus an L3 VNI means in an EVPN-VXLAN control plane. Which distinction is correct?
- Municipal IPv6 tenants need host advertisements in the EVPN-VXLAN control plane alongside IPv4. What design awareness is required?
- The NOC wants multicast optimization inside an EVPN-VXLAN civic fabric rather than pure unoptimized flooding. What high-level control-plane expectation is fair?
- A design review asks who the “controller” is in a controllerless EVPN-VXLAN municipal fabric. Which answer best reflects the architecture?
- The city enables VXLAN on access devices that cannot speak EVPN while the leaf standard expects EVPN signaling. What problem does that create?
- After a route-target change on a county MAC-VRF, remote MACs withdraw from several leaves. What control-plane membership effect explains that?
- A packet between two VMs on different municipal leaves must cross the VXLAN fabric. What data-plane behavior is fundamental?
- City firewall and capture standards ask which UDP destination port identifies VXLAN traffic in the data plane. Which value is correct?
- Ops notices outer IP headers between civic leaves use loopback addresses as tunnel endpoints. What do those addresses represent in the VXLAN data plane?
- A township wonders what happens to the access VLAN tag when a frame crosses the VXLAN fabric between leaves. Which data-plane statement is correct?
- After enabling VXLAN on the municipal fabric, operators see MTU blackholes for large tenant frames. What data-plane planning issue is most likely?
- A municipal NOC captures leaf-to-spine fabric packets and sees a VNI field inside the VXLAN header. What data-plane role does that VNI play on the egress VTEP?
- Two servers attached to different city leaf VTEPs share the same subnet and VNI. How should east-west traffic between them behave in the VXLAN data plane?
- A county EVPN-VXLAN fabric must move traffic between two different tenant subnets on different VNIs. Which data-plane path concept applies?
- A transit-agency leaf receives a VXLAN packet destined to a server on a local access port. What should the VTEP do in the data plane?
- City operators enable VXLAN on two leaves, but the underlay cannot reach the remote VTEP loopback. What happens to the overlay data plane?
- A library data-center leaf-spine fabric load-balances VXLAN traffic across multiple underlay uplinks. What does underlay ECMP primarily hash on for those encapsulated flows?
- A public-works fabric must deliver broadcast, unknown unicast, and multicast (BUM) frames to other VTEPs in a VNI. What data-plane behavior is required?
- A county security team inserts an underlay firewall that drops UDP destination port 4789 between leaves and spines. What class of failure should operators expect?
- Two municipal tenant hosts are mapped to the same VNI number on different leaves, but each leaf mistakenly binds that VNI into a different VRF. What is the data-plane consequence?
- Telemetry on a city leaf-spine path shows the outer IP TTL of VXLAN packets decrementing at each underlay hop. What does that indicate about the data plane?
- A city security board asks whether enabling VXLAN by itself encrypts tenant traffic across the fabric. What is the accurate data-plane security statement?
- A server in the parks department sends jumbo frames that fit the access MTU but exceed what the underlay can carry once VXLAN headers are added. What planning issue does this expose?
- Municipal operators see DF-bit related drops and fragmentation symptoms for VXLAN-encapsulated traffic. What is the preferred data-plane approach?
- A dual-homed application pair at the water utility uses ESI multihoming with anycast VTEP behavior. At a high level, what does that change in the VXLAN data plane?
- A county engineer must describe the end-to-end VXLAN data-plane path for a unicast frame between servers on different leaves. Which sequence is correct?
- An engineer must verify that a VLAN used by court-records servers is mapped into the correct VXLAN VNI on a Junos leaf. What should they confirm?
- The municipal NOC needs to confirm a leaf can source and reach VXLAN traffic as a VTEP. Which verification focus is most appropriate?
- City monitoring shows a leaf encapsulating frames, yet the remote host MAC never appears and traffic fails. How should troubleshooting be split?
- Show commands on a township leaf reveal missing VXLAN tunnels or overlay next-hops toward a remote VTEP. What should operators conclude about monitoring?
- A vendor VTEP in a shared civic colo uses a nonstandard UDP port while the city’s Juniper leaves expect standard VXLAN port 4789. What is the likely result?
- Ops incorrectly associates VXLAN with an IRB on a municipal leaf and routed tenant traffic breaks. What configuration caution applies?
- Two hosts on the same city leaf communicate, but the same subnet fails to a host on a remote leaf. Where should VXLAN troubleshooting focus first?
- Counters on a source leaf show VXLAN packets leaving, but the remote leaf shows no corresponding VXLAN ingress or decap. What troubleshooting approach helps?
- A change window adds a new VNI on a municipal leaf but omits flood-list or EVPN membership for that VNI. What incomplete-enablement failure should be expected?
- A municipal VXLAN runbook needs a sensible first-pass order when overlay traffic fails between leaves. Which sequence best structures troubleshooting?
EVPN-VXLAN Signaling · 50 questions
- City engineers see EVPN Type-2 routes for a server MAC and IP on the municipal leaf fabric. What is the primary purpose of those Type-2 advertisements?
- A leaf needs to discover other VTEPs participating in a city VNI so BUM traffic has destinations. Which EVPN route type primarily supports that inclusive multicast / IMET membership role?
- County IT uses EVPN Type-5 between VRFs to share subnet prefixes across the data-center fabric. What do Type-5 routes primarily carry?
- After enabling multihoming on a municipal server ESI, ops confuses EVPN Type-1 with Type-2. What role do Type-1 Ethernet Auto-Discovery routes primarily play?
- A city design needs to advertise an Ethernet Segment Identifier so multihomed leaves can discover the shared ES and participate in DF election. Which EVPN route type serves that high-level purpose?
- The municipal NOC asks which EVPN advertisements carry MAC mobility sequence attributes when a server MAC moves between leaves. Which answer is correct?
- A township imports EVPN Type-5 prefixes and expects Layer 2 VNI stretching for the same broadcast domain. What correction should the engineer make?
- In the city lab, engineers observe EVPN Type-2 routes both with and without an IP address. What conceptual distinction do those variants represent?
- A route-target mismatch causes a municipal leaf to drop all EVPN Type-2 routes for a tenant. What does that symptom reinforce about EVPN route types?
- During a metro DCI discussion, architects mention EVPN Type-5 for Layer 3 interconnect between city data centers. What pattern does that preview within EVPN signaling concepts?
- An engineer reads a blog about an obscure EVPN route type rarely seen in the city's Juniper EVPN-VXLAN fabric. For JNCIP-DC-level focus, which guidance is sound?
- Public works asks why EVPN defines multiple route types instead of one catch-all NLRI for the municipal fabric. What is the best explanation?
- The city wants efficient multicast for IPTV receivers inside a tenant VNI on the EVPN-VXLAN fabric. Which statement best reflects EVPN multicast concepts at professional depth?
- Ops still floods all BUM traffic to every VTEP in a municipal VNI even when few leaves have interested receivers. Which improvement direction matches selective multicast concepts in EVPN?
- A township enables IGMP snooping on EVPN-VXLAN tenant bridges. How should that state relate to EVPN multicast signaling?
- The NOC asks whether classic underlay PIM is mandatory whenever EVPN multicast features are used in the city fabric. What is the accurate contrast?
- Duplicate multicast frames appear on a multihomed municipal Ethernet Segment after a change. Which EVPN multicast interaction should engineers review first?
- Municipal security wants multicast for one tenant contained so it does not leak into other tenants' broadcast domains. What EVPN-VXLAN principle applies?
- After operators disable IMET (Type-3) advertisements on a city leaf, BUM delivery for a VNI breaks. What does that confirm?
- Architects compare ingress replication versus underlay multicast trees for BUM on the municipal EVPN fabric. Which tradeoff statement is most accurate?
- The city underlay already runs BGP for IP fabric routes, and the overlay needs EVPN. What must engineers apply regarding Multiprotocol BGP?
- A leaf shows established IPv4 unicast BGP to the spines but installs no EVPN routes for municipal tenants. What should operators check first in MBGP terms?
- Route reflectors for EVPN sit on the city spines so leaves need not mesh full EVPN iBGP. What design idea does that apply?
- A township runs EBGP in the underlay for IP fabric reachability and iBGP EVPN for the overlay on separate session/family concerns. What awareness does that design reflect?
- The NOC tries to filter municipal EVPN routes using only ordinary IPv4 prefix-lists and finds the policy ineffective. What concept should they apply?
- A city fabric enables BGP add-path so equal-cost EVPN Type-2 paths from multiple VTEPs stay visible in the RIB. What overlay outcome does that primarily support?
- A municipal EVPN design uses a route-target community so only matching VRFs import a tenant's Type-2 and Type-5 routes. What does that extended community primarily control?
- City leaf peers establish BGP EVPN, but large UPDATE messages carrying many Type-2 routes are silently dropped on the path. Which transport health issue is the most likely cause?
- A municipal design places every tenant IRB default gateway on the spines while leaves only bridge into L2 VNIs. Which EVPN architecture is that?
- The city prefers anycast IRB default gateways on every leaf so spines mainly forward underlay transit. Which EVPN architecture matches that preference?
- Ops asks which EVPN architecture most often avoids hairpinning east-west inter-subnet traffic up to the spine. What should the engineer answer?
- A small township wants its first EVPN-VXLAN fabric with fewer devices holding complex tenant routing features. Why might CRB be chosen operationally?
- Spine TCAM utilization climbs as CRB host routes and IRB state concentrate centrally. What scale tradeoff does that illustrate versus ERB?
- A design diagram shows tenant VXLAN tunnels for inter-subnet routing terminating only on the spines, while leaves bridge into L2 VNIs. Which architecture does that depict?
- A fabric diagram shows VXLAN VTEPs and IRB interfaces on every leaf for tenant default gateways. Which EVPN architecture does that map to?
- During a city design review, engineers debate informal hybrid marketing labels for gateway placement. What should the JNCIP-DC candidate treat as the official architecture families on the blueprint?
- A server VM moves from one city leaf to another and the fabric must update where its MAC is known. Which EVPN behavior handles that move?
- The city enables ARP suppression that answers local ARP requests using information learned from EVPN MAC/IP routes. What is the main benefit?
- Ops sees the same MAC advertised from conflicting Ethernet Segment locations and suspects a learning conflict. What awareness should the engineer apply?
- On a leaf, a MAC is learned from a local access port while another MAC for a remote host arrives via EVPN. How do those learning paths differ?
- After an engineer clears the EVPN database on a leaf, MAC entries begin returning. From where do they repopulate?
- NOC staff expect classic STP MAC-flush behavior after a topology change, but the city fabric is EVPN-VXLAN. What contrast should they apply?
- Inter-subnet traffic uses the same L3 VNI mapping model in both directions between VTEPs. Which routing model is that?
- An asymmetric model routes at the ingress leaf toward a remote MAC using the L2 VNI, while the egress primarily bridges. How does that differ from symmetric IRB?
- The city standardizes on symmetric IRB across the fabric for operational predictability. What is the strongest rationale?
- Troubleshooting shows return traffic using a different encapsulation mode than the forward path between two leaves. What should the engineer suspect?
- An engineer must confirm that an EVPN Type-2 MAC/IP route for a host is advertised from a leaf. Which monitoring action best fits?
- BGP EVPN sessions are Established, yet a leaf installs no remote tenant routes. Investigation shows the route-target import is missing on the routing instance. What is the right fix focus?
- In a CRB design, inter-subnet traffic for a VLAN fails and the spine has no IRB for that VLAN. What configuration check aligns with the architecture?
- A multihomed Ethernet Segment shows an unexpected Designated Forwarder on city leaf peers. What should troubleshooting examine first at professional depth?
Data Center Interconnect · 50 questions
- A city links its primary data center to a DR data center with dark fiber and must classify that path for a JNCIP-DC DCI design review. Which interconnect network type does dark fiber represent?
- A county can connect its two data centers only over a routed IP WAN with no native Layer-2 metro service. Which DCI implication follows for model selection?
- A township buys a Layer-2 metro Ethernet handoff between two halls and plans to stretch VLANs across it for DCI. Which characteristic should the design assume?
- A municipal fabric design places MPLS PE routers between two data centers as the DCI underlay. How should that interconnect network type be treated?
- A public-safety agency must carry encrypted DCI traffic between sites over the Internet. Which interconnect awareness is most appropriate for the DCI design?
- A city compares two leaf-spine pods in one campus with two geographically separate data centers. Which statement correctly distinguishes true DCI?
- A city asks whether EVPN-VXLAN DCI requires purchasing a special DCI-only switch product SKU. What should the architecture answer emphasize?
- Latency and bandwidth limits on a county's DCI interconnect are forcing a redesign of stretch options. Which design principle applies?
- A regional WAN team owns the circuits between municipal data centers while the DC fabric team owns EVPN-VXLAN overlays. Which handoff is correct for DCI interconnect types?
- A dark fiber cut isolates a city's primary and DR data centers that had only one DCI path. Which interconnect design response is required?
- Municipal planners confuse Metro Ethernet E-Line with E-LAN when choosing a DCI interconnect service. Which mapping is correct at the concept level?
- Ops proposes naively stretching the same IP fabric underlay ASN across two city data centers over the WAN. What boundary concern should be raised?
- A citizen-identity application must keep the same Layer-2 subnet active in both municipal data centers. Which DCI stretch approach matches that requirement?
- A finance VRF in a county fabric only needs routed reachability between sites, not a shared broadcast domain. Which stretch model fits?
- A city fears broadcast storms if it stretches Layer-2 segments between data centers. Which L2-versus-L3 stretch tradeoff should guide the decision?
- A municipal DR runbook keeps cold VMs offline until failover and requires those VMs to retain the same IP and MAC after moving to the DR hall. Why is Layer-2 stretch a fit?
- Most township applications are reachable by IP with DNS-based geo steering and do not need shared L2 adjacency between halls. Which DCI preference follows?
- A municipal design needs some VNIs Layer-2 stretched between DCs while other tenants need Layer-3 reachability only. Which stretch approach is appropriate?
- After a city enables Layer-2 stretch DCI, ARP floods are observed crossing the WAN. What BUM impact should operators expect from L2 stretch?
- Border leaves between two county EVPN fabrics exchange IP prefixes for L3 stretch. Which EVPN mechanism commonly supports that Layer-3 stretch concept?
- A city wants active/active Layer-2 stretch across two halls. Which design caution is essential?
- A township runs active/passive DR with warm standby servers and needs only routed connectivity until failover. Which DCI stretch model is typically simpler?
- A municipal team duplicates the same subnet in both data centers without intentional stretch and then sees routing conflicts. What addressing lesson applies?
- A security team bans Layer-2 stretch for a PCI segment between city data centers. Which policy-driven DCI choice follows?
- Two municipal EVPN fabrics use different VNI number spaces, and border devices must join overlay domains for DCI. Which stitching concept applies?
- A city interconnects two EVPN-VXLAN sites where Site A uses VNI 10000 for a tenant segment and Site B uses VNI 20000 for the same logical tenant. What does stitching at the DCI border primarily provide in this design?
- Municipal ops says two VRFs are “stitched” because a static route leaks prefixes between them on a border router. For JNCIP-DC DCI concepts, how should that claim be corrected?
- A single municipal border leaf terminates every DCI stitch for three sites and now shows high control-plane and forwarding load. What design lesson should the fabric team apply?
- During a civic DCI design review, engineers debate “seamless stitch” versus re-encapsulation between overlay domains. What is the sound high-level takeaway for JNCIP-DC?
- After a township DCI stitch change, Site A learns remote MACs for a tenant VNI but Site B never installs the corresponding EVPN MAC routes from Site A. What is the most likely conceptual problem?
- A township wants DCI stitching only for the Parks department VNI and must keep other departmental overlays site-local. Which approach matches that requirement?
- A city adds dual stitch gateways for redundancy and then sees Layer-2 loops for a stretched segment across the interconnect. What design care does this highlight?
- Site A runs Centrally Routed Bridging (CRB) while Site B runs Edge Routed Bridging (ERB). The municipal DCI team will stitch the two overlays. What must the design reconcile carefully?
- City documentation labels the DCI border device a “stitch PE.” In JNCIP-DC DCI terms, what role does that name map to?
- For interconnecting municipal data centers per JNCIP-DC DCI objectives, which model is the preferred blueprint approach?
- A city extends overlay reachability by establishing EVPN route exchange between border gateways at each remote site. What does that session design primarily provide for EVPN-VXLAN DCI?
- Planners must choose how a civic application spans two DCs: keep the same L2 segment stretched, or interconnect only at L3. In EVPN-VXLAN DCI terms, which statement is correct?
- Between two municipal DCs the metro path is plain IP, while tenant traffic uses VXLAN overlays signaled by EVPN. What does this reinforce about EVPN-VXLAN DCI?
- Site A and Site B use different EVPN route-target schemes for the same logical tenants. What DCI planning step is essential before multi-site membership works?
- Ops brings up EVPN BGP between municipal DCI borders and sees Type-5 prefixes exchanging, yet VXLAN-encapsulated tenant packets never arrive. Underlay ping between border VTEP addresses fails. What is the core issue?
- A civic VM moves from DC-East to DC-West over an EVPN-VXLAN DCI that stretches the tenant L2 VNI. Which EVPN behavior should operations expect?
- Security asks that DCI EVPN signaling for the municipal interconnect run in a dedicated routing instance rather than sharing the production tenant instance casually. What design hygiene does that request reflect?
- A legacy slide deck still compares municipal multi-site L2 to VPLS. For JNCIP-DC exam focus, what should candidates prioritize?
- NOC validates municipal EVPN-VXLAN DCI after a change window. Which checklist best confirms both planes are healthy?
- The municipal NOC’s DCI dashboard must prove the remote DC gateway is still exchanging EVPN with the local border. What should operators monitor first?
- L2 stretch across the city’s DCI works, but unknown unicast and broadcast traffic is saturating the WAN links. What troubleshooting focus is appropriate?
- A remote municipal VRF is missing Type-5 prefixes that the local DCI border advertises for L3 interconnect. Where should troubleshooting start conceptually?
- During a large civic VM evacuation, the stitch gateway CPU spikes while MAC/IP routes churn across the DCI. What should the ops team monitor and plan for?
- An engineer configures the municipal interconnect overlay but sources VXLAN from the wrong VTEP address on the DCI-facing device. What is the likely result?
- Packet capture on the municipal WAN path between DCI borders shows IP routing and BGP, but no UDP 4789 VXLAN traffic during a tenant flow test that should traverse EVPN-VXLAN DCI. What should troubleshooting focus on?
Data Center Multitenancy and Security · 50 questions
- A city data center hosts Parks recreation apps and Police records apps that must not share broadcast or routing tables. Which design best delivers tenant traffic isolation for both Layer 2 and Layer 3?
- During a county audit, Parks and Transit are discovered on the same VLAN even though policy requires Layer 2 tenant isolation. What is the primary isolation failure?
- Health and Finance each have separate VRFs, but an engineer adds a broad route-leak policy that imports Finance prefixes into Health. What is the main multitenancy risk?
- A municipal payment VRF that handles PCI cardholder traffic must never reach the guest Wi-Fi VRF. Which approach best preserves strict Layer 3 isolation?
- Two unrelated city agencies share one L2 VNI while ops tries to separate them with different IRB subnets. Why is this a poor isolation design?
- A municipal multitenant data center can stretch Layer 2 to a remote site for one agency but must not offer that stretch to others. What isolation principle applies?
- City architects want east-west microsegmentation inside the Libraries tenant and also hard isolation from the Courts tenant. How should those goals be treated?
- A single city IT organization owns the whole fabric but still separates production and development with different VRFs. What does this illustrate?
- On a Juniper EVPN-VXLAN municipal leaf, how are Layer 2 and Layer 3 tenant isolation mechanisms typically mapped?
- A shared-services tenant hosts DNS and directory servers that selected agencies must reach without opening full mesh connectivity. Which pattern fits?
- Two agencies independently used 10.10.0.0/16 inside their own networks and now onboard to the same EVPN-VXLAN fabric. What enables that overlapping addressing?
- An auditor asks for proof that Parks servers cannot ARP Courts servers across the municipal fabric. Which verification concept matters most for Layer 2 isolation?
- On QFX leaves in a city EVPN-VXLAN fabric, what Junos construct is primarily used to separate tenant Layer 3 tables for multitenancy?
- City fabric engineers map each agency to a Junos routing instance used as a tenant VRF on EVPN-VXLAN leaves. Which instance approach best matches common DC tenant separation at describe depth?
- A tenant routing instance on a municipal leaf must advertise and learn overlay routes for its VNI. What binding is required?
- Operators place every municipal agency's tenant interfaces and routes into inet.0 on the leaves. Why does that undermine multitenancy?
- In a multitenant EVPN-VXLAN city fabric, why must route distinguishers be unique per tenant routing instance?
- Two unrelated agency VRFs accidentally share the same route target import/export values. What is the likely result?
- A small township data center runs one IT organization with no agency isolation requirements. Which architecture statement is most accurate?
- Planners propose hundreds of routing instances on each leaf for tiny municipal departments. Beyond raw platform limits, what operational concern should they weigh?
- Under an ERB design, where should a tenant's IRB interface be placed for correct multitenancy?
- Municipal operators need leaf management reachability without exposing tenant VRFs. Which separation practice is most appropriate?
- Internet breakout is available from a shared edge VRF. How should municipal tenant instances receive a default route?
- Across dozens of municipal leaves, tenant routing-instance names and IDs drift (vrf-parks vs ParksVRF vs tnt3). Why does consistent naming matter for multitenancy?
- An engineer moves a VLAN interface from the Parks routing instance into the Courts instance during a change window. What is the most accurate impact statement?
- A city data-center leaf must steer traffic from a permitting-office subnet into an inspection routing instance before it reaches tenant servers. Which Junos mechanism selects an alternate forwarding routing instance based on a packet filter match?
- Operations staff propose a firewall discard term to “secure” guest VLAN traffic the same way filter-based forwarding would. What is the key difference they must understand?
- A municipal guest Wi-Fi portal must redirect unauthenticated client traffic into a captive-portal routing instance on the EVPN-VXLAN leaf. Which approach best matches a classic filter-based forwarding use case?
- A county backup system marks bulk replication with a specific DSCP value, and the fabric must send those flows into a low-priority path routing instance. How should filter-based forwarding classify and steer that traffic?
- After deploying FBF toward a security VRF, a city auditor finds some matched flows still bypass inspection. What troubleshooting mindset should the engineer apply first?
- In an ERB EVPN-VXLAN design, tenant workloads attach through IRB interfaces in a tenant routing instance. Where should the city fabric typically attach filter-based forwarding to steer that tenant traffic?
- A township steers client-to-server traffic toward an inspection service with FBF but leaves the return path on the normal tenant instance. What pitfall should the designer anticipate?
- A township wants selected agency traffic forced out a specific DCI path rather than the default tenant exit. How can filter-based forwarding support that traffic-engineering goal?
- An engineer adds an FBF term to steer finance-subnet traffic, yet counters show an earlier accept term always hits first. What principle explains why the FBF action never applies?
- A city security design must send suspicious Internet-facing flows into a scrubbing routing instance and then return cleaned traffic to the normal tenant forwarding path. Which pattern best describes this FBF role?
- The operations team debates installing heavy, complex FBF policies on every leaf versus steering at a smaller set of centralized choke points. What placement tradeoff should drive the decision?
- An auditor asks how filter-based forwarding relates to VRF-based tenant isolation in the municipal fabric. Which statement best describes their complementary roles?
- A municipal zero-trust initiative needs microsegmentation with group tags and policy inside an existing EVPN-VXLAN VNI rather than creating a new VNI per tier. Which Juniper data-center security approach fits that goal?
- Operations asks why the city should use GBP instead of creating a separate VNI for every application tier that needs isolation. What advantage should be emphasized?
- After 802.1X or similar authentication, a civic endpoint should land in a GBP group that drives allow/deny policy in the fabric. What concept is being applied?
- Policy requires that the cameras group must not initiate sessions to the finance group on the city EVPN-VXLAN fabric. How does GBP express that intent?
- A city still maintains per-agency VRFs and VNIs while introducing GBP for finer controls inside some overlays. What layered-isolation principle applies?
- Engineers need every leaf to enforce the same GBP decisions for a mobile municipal workload. At a describe-level understanding, how does group information typically stay consistent across the fabric?
- A mis-tagged application server is placed in the wrong GBP group and suddenly reaches systems it should not. What does this incident highlight?
- Compared with maintaining traditional per-IP or per-port ACL sprawl on every leaf, what operational benefit does GBP microsegmentation provide for the municipal fabric?
- For east-west traffic between workloads on an EVPN-VXLAN city fabric, where is GBP policy commonly enforced?
- During GBP design review, stakeholders debate default deny between groups versus default allow with explicit denies. What should the team recognize about that choice?
- The municipality wants GBP group membership informed by its existing identity and access management (IAM) results rather than only static switch port maps. What conceptual integration is appropriate?
- Troubleshooting shows EVPN reachability to a remote VTEP is healthy, yet application flows between two groups still fail. What GBP-related explanation should be considered?
- A design review for the city’s first GBP rollout debates starting with dozens of hyper-granular groups versus a few coarse groups refined over time. Which approach is more practical?
These questions are original practice material and are NOT actual exam questions or brain-dump content. All vendor marks are trademarks of their respective owners. This site is not affiliated with, endorsed by, or sponsored by Juniper Networks.