McAfee Secure

Exam Code: JN0-364

Exam Name: Service Provider Routing and Switching, Specialist (JNCIS-SP)

Certification Provider: Juniper

Juniper JN0-364 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

69 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Specialist (JNCIS-SP) Exam", also known as JN0-364 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-364 Exam Engine. Your JN0-364 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-364 Practice Test 2

Question 10

A fictional service-provider team at Eastlake Services is reviewing a virtual-router integration. The finding is: A transit LSR receives labeled packets but the expected outgoing label swap is missing from the forwarding entries. Which networking principle most accurately explains the observed failure?

  1. MPLS forwards using labels: ingress commonly pushes labels, intermediate LSRs swap them, and the egress removes the remaining label.
  2. RSVP-TE establishes LSP state through forward PATH and reverse RESV processing; one-way PATH reception is insufficient.
  3. SR-MPLS prefix SIDs and the segment routing global block provide IGP-signaled reachability without relying on LDP for each FEC.
  4. LACP aggregates only compatible negotiated member links; physical Up state alone does not prove active bundle participation.

Explanation

Correct Answer

A:

MPLS forwards using labels: ingress commonly pushes labels, intermediate LSRs swap them, and the egress removes the remaining label. That is the specific distinction behind the observed outage. The targeted fix is to verify MPLS forwarding roles and install the correct ingress push, transit swap, and egress pop treatment for the intended LSP.

Incorrect Answers

B:

RSVP-TE establishes LSP state through forward PATH and reverse RESV processing; one-way PATH reception is insufficient. That describes RSVP PATH and RESV signaling, whereas the observed symptoms are caused by MPLS label push swap pop; it does not predict the reported behavior.

C:

Although segment routing prefix SID needs this consideration, the failure at issue has a different cause. MPLS forwards using labels: ingress commonly pushes labels, intermediate LSRs swap them, and the egress removes the remaining label.

D:

LACP aggregates only compatible negotiated member links; physical Up state alone does not prove active bundle participation. Those conditions do not account for the specific MPLS label push swap pop problem reported by Eastlake Services.

Question 11

The operations group at fictional Meadowrise Internet, working on a provider-edge service migration, finds: The network announces a generated summary while its selected qualifying route has a next hop unsuitable for the intended exit. Which observation would most directly establish that the reported failure has been repaired?

  1. Every router has a distinct planned router ID and the LSDB tracks the appropriate originating router consistently.
  2. Only the selected traffic uses the inspection forwarding table while unmatched traffic follows the ordinary destination route.
  3. The generated route becomes active when eligible contributors exist and forwards through the intended resolved contributing next hop.
  4. The affected customer's lookup uses the intended instance RIB and reaches only the destinations deliberately made available to that instance.

Explanation

Correct Answer

C:

The generated route becomes active when eligible contributors exist and forwards through the intended resolved contributing next hop. It tests the failed behavior itself rather than merely confirming that a configuration was committed. Generated routes can derive their next-hop behavior from qualifying contributing routes, unlike aggregate discard summaries.

Incorrect Answers

A:

This measurement tests stable OSPF router identifier; it cannot distinguish success from failure for the observed generated route qualified next hop condition. Generated routes can derive their next-hop behavior from qualifying contributing routes, unlike aggregate discard summaries.

B:

Only the selected traffic uses the inspection forwarding table while unmatched traffic follows the ordinary destination route. That establishes filter-based forwarding table selection rather than a repaired generated route qualified next hop path. The reported failure still requires this evidence: the generated route becomes active when eligible contributors exist and forwards through the intended resolved contributing next hop.

D:

The affected customer's lookup uses the intended instance RIB and reaches only the destinations deliberately made available to that instance. It would validate a separate routing instance separation operation, not the change needed here. Confirm instead that the generated route becomes active when eligible contributors exist and forwards through the intended resolved contributing next hop.

Question 12

At fictional Fabletree Media, during a wholesale access handoff, engineers report: Two external AS exits advertise the same prefix; inbound traffic favors the congested link because AS-path preparation was not applied as planned. Which focused engineering action would best correct the fault?

  1. Set the intended local preference on eligible received routes and validate propagated internal best-path selection.
  2. Apply an approved outbound AS-path prepend policy on the less-preferred advertised path and validate what peers receive.
  3. Set and test a coherent MED policy between comparable paths, acknowledging peer AS comparison behavior and upstream policies.
  4. Use supported BFD sessions tied to the relevant routing protocol and validate fast peer failure detection.

Explanation

Correct Answer

B:

Apply an approved outbound AS-path prepend policy on the less-preferred advertised path and validate what peers receive. This treats the fault shown by Fabletree Media: AS-path prepending can make a path less attractive to other ASes but does not override their local policies or guarantee inbound steering. Confirm success when external route advertisements show the intended relative AS-path lengths and measured inbound behavior is compared with the goal.

Incorrect Answers

A:

The proposal changes BGP local preference; that is not the failure isolated by the facts. It could leave AS-path prepend inbound influence unresolved even if its own test passed. AS-path prepending can make a path less attractive to other ASes but does not override their local policies or guarantee inbound steering.

C:

The proposal changes BGP MED neighbor consideration; that is not the failure isolated by the facts. It could leave AS-path prepend inbound influence unresolved even if its own test passed. AS-path prepending can make a path less attractive to other ASes but does not override their local policies or guarantee inbound steering.

D:

Use supported BFD sessions tied to the relevant routing protocol and validate fast peer failure detection. Its normal acceptance signal would be A controlled link or peer failure causes BFD Down and timely routing reconvergence rather than waiting for long protocol timers. Here the deciding check is different: external route advertisements show the intended relative AS-path lengths and measured inbound behavior is compared with the goal.

Question 13

During a network change window at fictional Tidewater Hosting, the team observes: An engineer raises MED to make a link more attractive, although the routing design assumes a lower comparable MED is preferred. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Test MED behavior in realistic same-neighbor-AS scenarios and monitor actual received path attributes.
  2. Monitor hidden BGP routes and next-hop resolution after IGP or route-reflector changes.
  3. Audit route-reflector client assignments and reflected prefix visibility during iBGP topology changes.
  4. Audit which ports are true edges and test protective action when a simulated switch sends a BPDU.

Explanation

Correct Answer

A:

Test MED behavior in realistic same-neighbor-AS scenarios and monitor actual received path attributes. This monitors the behavior that failed at Tidewater Hosting; the most useful acceptance signal is that comparably eligible paths carry intended MEDs and route selection in the agreed test case follows the planned preference.

Incorrect Answers

B:

Monitor hidden BGP routes and next-hop resolution after IGP or route-reflector changes. That ongoing check is for BGP next-hop reachability; it would not reliably detect recurrence of BGP MED neighbor consideration. MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks.

C:

This is a useful guard against IBGP route reflection, but it is not scoped to the observed BGP MED neighbor consideration failure. An appropriate test would show that comparably eligible paths carry intended MEDs and route selection in the agreed test case follows the planned preference.

D:

Audit which ports are true edges and test protective action when a simulated switch sends a BPDU. The monitored boundary differs from BGP MED neighbor consideration, so the original weakness might reappear unnoticed. MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks.

Question 14

A fictional service-provider team at Hawthorne Metro is reviewing a metro aggregation ring. The finding is: A provider edge moves a tagged VLAN and fails to carry its corresponding VSTP configuration, leaving that VLAN without its planned loop topology. Which focused engineering action would best correct the fault?

  1. Review RSTP roles and convergence expectations and ensure the valid alternate path can transition safely when the root path fails.
  2. Configure and verify the intended VSTP instance and per-VLAN root priorities for the affected VLANs.
  3. Align MST region name, revision, and VLAN-to-instance mapping across all intended region members.
  4. Set and test a coherent MED policy between comparable paths, acknowledging peer AS comparison behavior and upstream policies.

Explanation

Correct Answer

B:

Configure and verify the intended VSTP instance and per-VLAN root priorities for the affected VLANs. This treats the fault shown by Hawthorne Metro: VSTP maintains spanning-tree behavior per VLAN; one VLAN's root decision does not automatically govern every VLAN. Confirm success when each VLAN's spanning-tree state selects its planned root and forwarding ports without creating a cross-VLAN loop.

Incorrect Answers

A:

Review RSTP roles and convergence expectations and ensure the valid alternate path can transition safely when the root path fails. This addresses RSTP alternate port reconvergence, but the reported symptoms arise from VSTP per-VLAN root choice. For this case, verify instead that each VLAN's spanning-tree state selects its planned root and forwarding ports without creating a cross-VLAN loop.

C:

Align MST region name, revision, and VLAN-to-instance mapping across all intended region members. This addresses MSTP region consistency, but the reported symptoms arise from VSTP per-VLAN root choice. For this case, verify instead that each VLAN's spanning-tree state selects its planned root and forwarding ports without creating a cross-VLAN loop.

D:

Set and test a coherent MED policy between comparable paths, acknowledging peer AS comparison behavior and upstream policies. This addresses BGP MED neighbor consideration, but the reported symptoms arise from VSTP per-VLAN root choice. For this case, verify instead that each VLAN's spanning-tree state selects its planned root and forwarding ports without creating a cross-VLAN loop.

Question 15

The operations group at fictional Winterfield Utilities, working on a network change window, finds: Two tenant services share a physical switch but should maintain distinct Layer 2 address-learning domains. Which focused engineering action would best correct the fault?

  1. Align the explicitly approved native and untagged VLAN behavior at both ends and verify tagged versus untagged traffic.
  2. Align the port's supported flexible VLAN tagging and per-unit encapsulation with the intended service frame format.
  3. Place each tenant's ports and VLANs in the intended virtual-switch context and verify independent bridge learning.
  4. Align aggregate generation with present contributing routes and confirm the discard or reject behavior and intentional export policy.

Explanation

Correct Answer

C:

Place each tenant's ports and VLANs in the intended virtual-switch context and verify independent bridge learning. This treats the fault shown by Winterfield Utilities: virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding. Confirm success when the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

Incorrect Answers

A:

Align the explicitly approved native and untagged VLAN behavior at both ends and verify tagged versus untagged traffic. Its normal acceptance signal would be untagged frames map to the intended VLAN on both devices while explicitly tagged VLAN traffic remains isolated. Here the deciding check is different: the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

B:

Align the port's supported flexible VLAN tagging and per-unit encapsulation with the intended service frame format. Its normal acceptance signal would be the correct single- and double-tagged service units receive traffic matching their configured VLAN identifiers. Here the deciding check is different: the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

D:

Align aggregate generation with present contributing routes and confirm the discard or reject behavior and intentional export policy. Its normal acceptance signal would be the aggregate is active only with the expected contributors and disappears when the contributor precondition is removed. Here the deciding check is different: the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

Question 16

At fictional Clearwater Transit, during a backbone recovery drill, engineers report: After a software upgrade, a route is not retained because the neighbor has not negotiated or supported the relevant graceful-restart helper capability. Which observation would most directly establish that the reported failure has been repaired?

  1. The same virtual gateway remains reachable when the active VRRP router is failed in a controlled test.
  2. Incoming labels resolve to valid outgoing label operations and interfaces, and data-plane counters show successful forwarding.
  3. A controlled link or peer failure causes BFD Down and timely routing reconvergence rather than waiting for long protocol timers.
  4. During a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly.

Explanation

Correct Answer

D:

During a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly. It tests the failed behavior itself rather than merely confirming that a configuration was committed. Graceful restart depends on protocol restart and helper behavior; it is not identical to copying live routing protocol state to a backup Routing Engine.

Incorrect Answers

A:

The same virtual gateway remains reachable when the active VRRP router is failed in a controlled test. It would validate a separate VRRP virtual gateway failover operation, not the change needed here. Confirm instead that during a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly.

B:

Incoming labels resolve to valid outgoing label operations and interfaces, and data-plane counters show successful forwarding. It would validate a separate MPLS label forwarding table mismatch operation, not the change needed here. Confirm instead that during a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly.

C:

This measurement tests BFD fast failure detection; it cannot distinguish success from failure for the observed graceful restart peer assistance condition. Graceful restart depends on protocol restart and helper behavior; it is not identical to copying live routing protocol state to a backup Routing Engine.

Question 17

During a network change window at fictional Winterfield Utilities, the team observes: Two tenant services share a physical switch but should maintain distinct Layer 2 address-learning domains. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Validate VLAN-to-IRB bindings, gateway ARP or neighbor entries, and allowed cross-VLAN flows after provisioning.
  2. Test one-way BPDU loss and confirm correct port role and loop-protection state during maintenance.
  3. Validate tag behavior, allowed VLAN membership, and connected device expectations at port provisioning.
  4. Compare instance membership, VLAN mappings, and MAC tables for cross-tenant isolation at each deployment.

Explanation

Correct Answer

D:

Compare instance membership, VLAN mappings, and MAC tables for cross-tenant isolation at each deployment. This monitors the behavior that failed at Winterfield Utilities; the most useful acceptance signal is that the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

Incorrect Answers

A:

This is a useful guard against integrated routing and bridging, but it is not scoped to the observed virtual-switch instance isolation failure. An appropriate test would show that the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

B:

The control protects RSTP loop protection. It does not establish the ongoing virtual-switch instance isolation behavior required in this network. Virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding.

C:

This is a useful guard against VLAN access trunk distinction, but it is not scoped to the observed virtual-switch instance isolation failure. An appropriate test would show that the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

Question 18

A fictional service-provider team at Clearwater Transit is reviewing a metro aggregation ring. The finding is: A tenant requests private transport across the internet, but the design assumes ordinary GRE encapsulation encrypts application traffic. Which focused engineering action would best correct the fault?

  1. Install and verify independent underlay reachability for the GRE outer destination, preventing recursive use of the tunnel.
  2. Add an approved encryption layer such as IPsec when confidentiality is required, while retaining GRE only if needed for routing encapsulation.
  3. Restore underlay IP reachability between GRE tunnel endpoints and validate encapsulated probe traffic.
  4. Configure the appropriate EBGP multihop reachability and neighbor addressing, then verify session setup on the intended loopback endpoints.

Explanation

Correct Answer

B:

Add an approved encryption layer such as IPsec when confidentiality is required, while retaining GRE only if needed for routing encapsulation. This treats the fault shown by Clearwater Transit: GRE provides encapsulation and protocol carriage but does not inherently supply confidentiality or cryptographic integrity. Confirm success when an underlay capture cannot read protected payload content and transport still reaches the required tunnel endpoints.

Incorrect Answers

A:

Install and verify independent underlay reachability for the GRE outer destination, preventing recursive use of the tunnel. This addresses GRE recursive route avoidance, but the reported symptoms arise from GRE confidentiality limitation. For this case, verify instead that an underlay capture cannot read protected payload content and transport still reaches the required tunnel endpoints.

C:

Restore underlay IP reachability between GRE tunnel endpoints and validate encapsulated probe traffic. Its normal acceptance signal would be packets to the remote outer endpoint resolve through an ordinary underlay route and GRE probes reach the peer. Here the deciding check is different: an underlay capture cannot read protected payload content and transport still reaches the required tunnel endpoints.

D:

Configure the appropriate EBGP multihop reachability and neighbor addressing, then verify session setup on the intended loopback endpoints. This addresses EBGP multihop reachability, but the reported symptoms arise from GRE confidentiality limitation. For this case, verify instead that an underlay capture cannot read protected payload content and transport still reaches the required tunnel endpoints.

Question 19

The operations group at fictional Meadowrise Internet, working on a regional backbone upgrade, finds: An intended customer prefix is visible in the local routing table but is not accepted by a peer because the wrong import/export direction was modified. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Audit network type against actual link topology during edge circuit deployment.
  2. Continuously diff effective import/export policies against approved prefix filters and peer relationships.
  3. Validate local-AS and peer-AS inventory against change requests before activating external sessions.
  4. Audit route-reflector client assignments and reflected prefix visibility during iBGP topology changes.

Explanation

Correct Answer

B:

Continuously diff effective import/export policies against approved prefix filters and peer relationships. This monitors the behavior that failed at Meadowrise Internet; the most useful acceptance signal is that only approved prefixes are advertised to or accepted from the intended neighbor, as confirmed by received and advertised route views.

Incorrect Answers

A:

Audit network type against actual link topology during edge circuit deployment. That ongoing check is for OSPF point-to-point topology; it would not reliably detect recurrence of BGP import export control. BGP import policy governs received routes and export policy governs outbound advertisements; changing the wrong direction cannot enforce the intended boundary.

C:

Validate local-AS and peer-AS inventory against change requests before activating external sessions. The monitored boundary differs from BGP import export control, so the original weakness might reappear unnoticed. BGP import policy governs received routes and export policy governs outbound advertisements; changing the wrong direction cannot enforce the intended boundary.

D:

Audit route-reflector client assignments and reflected prefix visibility during iBGP topology changes. That ongoing check is for IBGP route reflection; it would not reliably detect recurrence of BGP import export control. BGP import policy governs received routes and export policy governs outbound advertisements; changing the wrong direction cannot enforce the intended boundary.

Question 20

At fictional Lighthouse Education, during a provider-edge service migration, engineers report: After enabling MPLS forwarding on a new link, Junos does not discover an LDP neighbor because LDP discovery is not enabled on that interface. Which networking principle most accurately explains the observed failure?

  1. LDP uses discovery messages on enabled interfaces before exchanging label mappings; IGP reachability alone does not start LDP.
  2. LDP supplies label bindings for eligible FECs; IP reachability without a usable label binding does not prove labeled forwarding.
  3. Root protection blocks acceptance of an unexpected superior root across designated boundary ports; it is not the same as BPDU edge protection.
  4. Control-plane LSP state and data-plane label forwarding entries are separate checks; an Up session does not prove the FIB is correct.

Explanation

Correct Answer

A:

LDP uses discovery messages on enabled interfaces before exchanging label mappings; IGP reachability alone does not start LDP. That is the specific distinction behind the observed outage. The targeted fix is to enable appropriate LDP interface discovery and verify discovery hellos and eventual neighbor session state.

Incorrect Answers

B:

LDP supplies label bindings for eligible FECs; IP reachability without a usable label binding does not prove labeled forwarding. That describes LDP label binding completeness, whereas the observed symptoms are caused by LDP neighbor discovery; it does not predict the reported behavior.

C:

Although RSTP root protection needs this consideration, the failure at issue has a different cause. LDP uses discovery messages on enabled interfaces before exchanging label mappings; IGP reachability alone does not start LDP.

D:

Control-plane LSP state and data-plane label forwarding entries are separate checks; an Up session does not prove the FIB is correct. That describes MPLS label forwarding table mismatch, whereas the observed symptoms are caused by LDP neighbor discovery; it does not predict the reported behavior.

Service Provider Routing and Switching, Specialist (JNCIS-SP) (JN0-364) Practice Tests