McAfee Secure

Exam Code: JN0-364

Exam Name: Service Provider Routing and Switching, Specialist (JNCIS-SP)

Certification Provider: Juniper

Juniper JN0-364 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

69 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Specialist (JNCIS-SP) Exam", also known as JN0-364 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-364 Exam Engine. Your JN0-364 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-364 Practice Test 36

Question 350

A fictional service-provider team at Elmbridge Networks is reviewing a redundant core router pair. The finding is: An engineer expects a VLAN created in a virtual-switch instance to be usable by ports in another switching instance without assignment. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Compare instance membership, VLAN mappings, and MAC tables for cross-tenant isolation at each deployment.
  2. Include tagged and untagged frame tests in trunk turn-up and template drift checks.
  3. Monitor high-frequency MAC moves and correlate them with spanning-tree and bridge-interface events.
  4. Validate supported metric style, actual LSP metric values, and computed paths during topology expansion.

Explanation

Correct Answer

A:

Compare instance membership, VLAN mappings, and MAC tables for cross-tenant isolation at each deployment. This monitors the behavior that failed at Elmbridge Networks; the most useful acceptance signal is that the same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.

Incorrect Answers

B:

Include tagged and untagged frame tests in trunk turn-up and template drift checks. The monitored boundary differs from virtual-switch instance isolation, so the original weakness might reappear unnoticed. Virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding.

C:

The control protects MAC address learning and moves. It does not establish the ongoing virtual-switch instance isolation behavior required in this network. Virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding.

D:

Validate supported metric style, actual LSP metric values, and computed paths during topology expansion. That ongoing check is for IS-IS wide metrics; it would not reliably detect recurrence of virtual-switch instance isolation. Virtual-switch routing instances provide separate bridge contexts; similar VLAN identifiers alone do not imply shared L2 forwarding.

Question 351

The operations group at fictional Everfield Rail, working on a virtual-router integration, finds: A new static route points to a peer address learned only through the same failed path, leaving the destination absent from the forwarding table. Which focused engineering action would best correct the fault?

  1. Align aggregate generation with present contributing routes and confirm the discard or reject behavior and intentional export policy.
  2. Use a generated route with the intended contributor policy and verify the selected qualifying route supplies usable forwarding behavior.
  3. Correct the static route's reachable next hop and preference, then verify that its active route resolves to an operational forwarding interface.
  4. Restore compatible hello and dead intervals on the neighboring OSPF interfaces and observe stable hellos.

Explanation

Correct Answer

C:

Correct the static route's reachable next hop and preference, then verify that its active route resolves to an operational forwarding interface. This treats the fault shown by Everfield Rail: junos installs a usable route only after next-hop resolution and route selection; a configured static statement alone does not guarantee active forwarding. Confirm success when the intended destination appears as an active route with a resolvable next hop in the routing table and forwarding table.

Incorrect Answers

A:

Align aggregate generation with present contributing routes and confirm the discard or reject behavior and intentional export policy. That could help in a case involving aggregate route contributor. This failure instead depends on static route next-hop resolution; junos installs a usable route only after next-hop resolution and route selection; a configured static statement alone does not guarantee active forwarding.

B:

Use a generated route with the intended contributor policy and verify the selected qualifying route supplies usable forwarding behavior. That could help in a case involving generated route qualified next hop. This failure instead depends on static route next-hop resolution; junos installs a usable route only after next-hop resolution and route selection; a configured static statement alone does not guarantee active forwarding.

D:

The proposal changes OSPF hello and dead timers; that is not the failure isolated by the facts. It could leave static route next-hop resolution unresolved even if its own test passed. Junos installs a usable route only after next-hop resolution and route selection; a configured static statement alone does not guarantee active forwarding.

Question 352

At fictional Everfield Rail, during an intercity fiber refresh, engineers report: An RSVP-signaled LSP remains Down because the ingress sends PATH messages but no corresponding reservation returns. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Monitor RSVP reservation state and LSP establishment success, not only underlying IGP reachability.
  2. Audit explicit segment lists against intended physical-hop constraints before deployment.
  3. Audit MPLS forwarding tables and labeled traffic counters after routing or hardware transitions.
  4. Validate supported metric style, actual LSP metric values, and computed paths during topology expansion.

Explanation

Correct Answer

A:

Monitor RSVP reservation state and LSP establishment success, not only underlying IGP reachability. This monitors the behavior that failed at Everfield Rail; the most useful acceptance signal is that the LSP shows a completed RSVP reservation and an operational signaled path through intended hops.

Incorrect Answers

B:

The control protects segment routing adjacency SID. It does not establish the ongoing RSVP PATH and RESV signaling behavior required in this network. RSVP-TE establishes LSP state through forward PATH and reverse RESV processing; one-way PATH reception is insufficient.

C:

The control protects MPLS label forwarding table mismatch. It does not establish the ongoing RSVP PATH and RESV signaling behavior required in this network. RSVP-TE establishes LSP state through forward PATH and reverse RESV processing; one-way PATH reception is insufficient.

D:

Validate supported metric style, actual LSP metric values, and computed paths during topology expansion. The monitored boundary differs from RSVP PATH and RESV signaling, so the original weakness might reappear unnoticed. RSVP-TE establishes LSP state through forward PATH and reverse RESV processing; one-way PATH reception is insufficient.

Question 353

During a virtual-router integration at fictional Harborfield Datacenter, the team observes: Security auditors observe readable payloads captured on a GRE underlay because no separate encryption protects the packets. Which focused engineering action would best correct the fault?

  1. Tune the intended OSPF interface costs and verify SPF-selected reachability for the affected destinations.
  2. Restore underlay IP reachability between GRE tunnel endpoints and validate encapsulated probe traffic.
  3. Account for GRE/IP header overhead in tunnel MTU and path-MTU handling, then test large representative packets.
  4. Add an approved encryption layer such as IPsec when confidentiality is required, while retaining GRE only if needed for routing encapsulation.

Explanation

Correct Answer

D:

Add an approved encryption layer such as IPsec when confidentiality is required, while retaining GRE only if needed for routing encapsulation. This treats the fault shown by Harborfield Datacenter: GRE provides encapsulation and protocol carriage but does not inherently supply confidentiality or cryptographic integrity. Confirm success when an underlay capture cannot read protected payload content and transport still reaches the required tunnel endpoints.

Incorrect Answers

A:

The proposal changes OSPF interface metric selection; that is not the failure isolated by the facts. It could leave GRE confidentiality limitation unresolved even if its own test passed. GRE provides encapsulation and protocol carriage but does not inherently supply confidentiality or cryptographic integrity.

B:

Restore underlay IP reachability between GRE tunnel endpoints and validate encapsulated probe traffic. This addresses GRE endpoint underlay routing, but the reported symptoms arise from GRE confidentiality limitation. For this case, verify instead that an underlay capture cannot read protected payload content and transport still reaches the required tunnel endpoints.

C:

Account for GRE/IP header overhead in tunnel MTU and path-MTU handling, then test large representative packets. That could help in a case involving GRE tunnel path MTU. This failure instead depends on GRE confidentiality limitation; GRE provides encapsulation and protocol carriage but does not inherently supply confidentiality or cryptographic integrity.

Question 354

A fictional service-provider team at Meadowrise Internet is reviewing a virtual-router integration. The finding is: A bridging loop causes the same source MAC to appear alternately on multiple interfaces, but operators assume it is a routing protocol fault. Which networking principle most accurately explains the observed failure?

  1. RSTP port roles and rapid state transitions support fast loop-free reconvergence, unlike simply forcing all redundant ports forwarding.
  2. Q-in-Q carries an additional provider VLAN tag around customer-tagged traffic to isolate services with overlapping customer VLAN numbers.
  3. Access ports and trunk ports have different VLAN tagging and membership behaviors; link-up state does not make the modes equivalent.
  4. Ethernet bridges learn destination forwarding from observed source MAC addresses; unstable topology can continually invalidate learned ports.

Explanation

Correct Answer

D:

Ethernet bridges learn destination forwarding from observed source MAC addresses; unstable topology can continually invalidate learned ports. That is the specific distinction behind the observed outage. The targeted fix is to inspect bridge MAC learning, move events, and the Layer 2 topology; remove unintended loop or incorrect forwarding path. Applied here, the relevant facts are: A bridging loop causes the same source MAC to appear alternately on multiple interfaces, but operators assume it is a routing protocol fault. The question asks which networking principle most accurately explains the observed failure.

Incorrect Answers

A:

RSTP port roles and rapid state transitions support fast loop-free reconvergence, unlike simply forcing all redundant ports forwarding. That describes RSTP alternate port reconvergence, whereas the observed symptoms are caused by MAC address learning and moves; it does not predict the reported behavior.

B:

Although provider Q-in-Q tagging needs this consideration, the failure at issue has a different cause. Ethernet bridges learn destination forwarding from observed source MAC addresses; unstable topology can continually invalidate learned ports.

C:

Access ports and trunk ports have different VLAN tagging and membership behaviors; link-up state does not make the modes equivalent. Those conditions do not account for the specific MAC address learning and moves problem reported by Meadowrise Internet.

Question 355

The operations group at fictional Northshore Digital, working on a regional backbone upgrade, finds: Two customers use the same inner VLAN ID and their services are mixed because the carrier strips rather than preserves service separation. Which observation would most directly establish that the reported failure has been repaired?

  1. The correct single- and double-tagged service units receive traffic matching their configured VLAN identifiers.
  2. The MAC address stabilizes on the expected interface and unicast forwarding avoids repeated flooding.
  3. The prefix SID is advertised and all ingress routers compute consistent transport label behavior for the node destination.
  4. Captured service frames show the expected outer provider tag and unchanged customer tag, with distinct customers isolated.

Explanation

Correct Answer

D:

Captured service frames show the expected outer provider tag and unchanged customer tag, with distinct customers isolated. It tests the failed behavior itself rather than merely confirming that a configuration was committed. Q-in-Q carries an additional provider VLAN tag around customer-tagged traffic to isolate services with overlapping customer VLAN numbers.

Incorrect Answers

A:

This measurement tests flexible VLAN encapsulation alignment; it cannot distinguish success from failure for the observed provider Q-in-Q tagging condition. Q-in-Q carries an additional provider VLAN tag around customer-tagged traffic to isolate services with overlapping customer VLAN numbers.

B:

The check is meaningful for MAC address learning and moves, but it does not prove that provider Q-in-Q tagging was repaired. Q-in-Q carries an additional provider VLAN tag around customer-tagged traffic to isolate services with overlapping customer VLAN numbers.

C:

The prefix SID is advertised and all ingress routers compute consistent transport label behavior for the node destination. That establishes segment routing prefix SID rather than a repaired provider Q-in-Q tagging path. The reported failure still requires this evidence: captured service frames show the expected outer provider tag and unchanged customer tag, with distinct customers isolated.

Question 356

At fictional Moorland Carriers, during a provider-edge service migration, engineers report: An EBGP neighbor over a loopback address cannot establish because the session was designed beyond a directly connected hop. Which observation would most directly establish that the reported failure has been repaired?

  1. Comparably eligible paths carry intended MEDs and route selection in the agreed test case follows the planned preference.
  2. The prefix SID is advertised and all ingress routers compute consistent transport label behavior for the node destination.
  3. The intended multi-hop peer establishes while IP reachability and any required loopback-source configuration are correct.
  4. Advertised routes carry the intended community and the relevant neighbor policy matches those routes as designed.

Explanation

Correct Answer

C:

The intended multi-hop peer establishes while IP reachability and any required loopback-source configuration are correct. It tests the failed behavior itself rather than merely confirming that a configuration was committed. EBGP sessions to nonadjacent neighbors need suitable multihop TTL and transport reachability; routing reachability alone can be insufficient. Applied here, the relevant facts are: An EBGP neighbor over a loopback address cannot establish because the session was designed beyond a directly connected hop. The question asks which observation would most directly establish that the reported failure has been repaired.

Incorrect Answers

A:

The check is meaningful for BGP MED neighbor consideration, but it does not prove that EBGP multihop reachability was repaired. EBGP sessions to nonadjacent neighbors need suitable multihop TTL and transport reachability; routing reachability alone can be insufficient.

B:

The prefix SID is advertised and all ingress routers compute consistent transport label behavior for the node destination. That establishes segment routing prefix SID rather than a repaired EBGP multihop reachability path. The reported failure still requires this evidence: the intended multi-hop peer establishes while IP reachability and any required loopback-source configuration are correct.

D:

Advertised routes carry the intended community and the relevant neighbor policy matches those routes as designed. It would validate a separate BGP communities and routing policy operation, not the change needed here. Confirm instead that the intended multi-hop peer establishes while IP reachability and any required loopback-source configuration are correct.

Question 357

During a redundant core router pair at fictional Oakline Utilities, the team observes: A host connected to an access interface receives tagged frames that it cannot process because the port was made a trunk. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Include tagged and untagged frame tests in trunk turn-up and template drift checks.
  2. Audit BGP address-family negotiation and received IPv6 routes whenever dual-stack peering changes.
  3. Validate tag behavior, allowed VLAN membership, and connected device expectations at port provisioning.
  4. Validate VLAN-to-IRB bindings, gateway ARP or neighbor entries, and allowed cross-VLAN flows after provisioning.

Explanation

Correct Answer

C:

Validate tag behavior, allowed VLAN membership, and connected device expectations at port provisioning. This monitors the behavior that failed at Oakline Utilities; the most useful acceptance signal is that hosts receive the intended untagged frames and trunk links carry the specified VLAN tags with correct membership.

Incorrect Answers

A:

Include tagged and untagged frame tests in trunk turn-up and template drift checks. That ongoing check is for native untagged VLAN drift; it would not reliably detect recurrence of VLAN access trunk distinction. Access ports and trunk ports have different VLAN tagging and membership behaviors; link-up state does not make the modes equivalent.

B:

This is a useful guard against multiprotocol BGP IPv6 AFI, but it is not scoped to the observed VLAN access trunk distinction failure. An appropriate test would show that hosts receive the intended untagged frames and trunk links carry the specified VLAN tags with correct membership.

D:

Validate VLAN-to-IRB bindings, gateway ARP or neighbor entries, and allowed cross-VLAN flows after provisioning. That ongoing check is for integrated routing and bridging; it would not reliably detect recurrence of VLAN access trunk distinction. Access ports and trunk ports have different VLAN tagging and membership behaviors; link-up state does not make the modes equivalent.

Question 358

A fictional service-provider team at Maplewood Exchange is reviewing a dual-stack transit pilot. The finding is: A regional peer receives routes but a community-based steering policy fails because the expected community was never attached. Which networking principle most accurately explains the observed failure?

  1. Ordinary iBGP does not readvertise iBGP-learned routes to another iBGP peer; route reflectors provide a controlled exception.
  2. BGP communities provide policy metadata for grouping routes; they have no forwarding effect unless a matching policy interprets them.
  3. BFD provides rapid bidirectional path liveness detection; it triggers routing response but is not by itself a replacement route.
  4. MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks.

Explanation

Correct Answer

B:

BGP communities provide policy metadata for grouping routes; they have no forwarding effect unless a matching policy interprets them. That is the specific distinction behind the observed outage. The targeted fix is to apply and verify the appropriate BGP community marking and matching terms on approved routes at the correct policy boundary. Applied here, the relevant facts are: A regional peer receives routes but a community-based steering policy fails because the expected community was never attached. The question asks which networking principle most accurately explains the observed failure.

Incorrect Answers

A:

Ordinary iBGP does not readvertise iBGP-learned routes to another iBGP peer; route reflectors provide a controlled exception. That describes IBGP route reflection, whereas the observed symptoms are caused by BGP communities and routing policy; it does not predict the reported behavior.

C:

Although BFD fast failure detection needs this consideration, the failure at issue has a different cause. BGP communities provide policy metadata for grouping routes; they have no forwarding effect unless a matching policy interprets them.

D:

MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks. That describes BGP MED neighbor consideration, whereas the observed symptoms are caused by BGP communities and routing policy; it does not predict the reported behavior.

Question 359

The operations group at fictional Skybridge Metro, working on a multi-tenant service turn-up, finds: Two switches intended to share one MSTP region show divergent spanning-tree instances because their VLAN-to-instance maps differ. Which networking principle most accurately explains the observed failure?

  1. Loop protection protects non-designated ports against false transition to forwarding when expected BPDUs disappear.
  2. MSTP region identity depends on consistent name, revision, and VLAN mapping; mismatches create region boundaries.
  3. BGP import policy governs received routes and export policy governs outbound advertisements; changing the wrong direction cannot enforce the intended boundary.
  4. RSTP port roles and rapid state transitions support fast loop-free reconvergence, unlike simply forcing all redundant ports forwarding.

Explanation

Correct Answer

B:

MSTP region identity depends on consistent name, revision, and VLAN mapping; mismatches create region boundaries. That is the specific distinction behind the observed outage. The targeted fix is to align MST region name, revision, and VLAN-to-instance mapping across all intended region members.

Incorrect Answers

A:

Loop protection protects non-designated ports against false transition to forwarding when expected BPDUs disappear. That describes RSTP loop protection, whereas the observed symptoms are caused by MSTP region consistency; it does not predict the reported behavior.

C:

Although BGP import export control needs this consideration, the failure at issue has a different cause. MSTP region identity depends on consistent name, revision, and VLAN mapping; mismatches create region boundaries.

D:

RSTP port roles and rapid state transitions support fast loop-free reconvergence, unlike simply forcing all redundant ports forwarding. That describes RSTP alternate port reconvergence, whereas the observed symptoms are caused by MSTP region consistency; it does not predict the reported behavior.

Question 360

At fictional Eastlake Services, during a multi-tenant service turn-up, engineers report: A new region is missing reflected route reachability because the route reflector does not classify intended clients correctly. Which observation would most directly establish that the reported failure has been repaired?

  1. The same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches.
  2. Comparably eligible paths carry intended MEDs and route selection in the agreed test case follows the planned preference.
  3. Authorized clients receive the expected reflected iBGP paths and preserve appropriate originator or cluster-loop protection.
  4. Internal BGP best paths prefer the approved egress due to the intended local-preference values.

Explanation

Correct Answer

C:

Authorized clients receive the expected reflected iBGP paths and preserve appropriate originator or cluster-loop protection. It tests the failed behavior itself rather than merely confirming that a configuration was committed. Ordinary iBGP does not readvertise iBGP-learned routes to another iBGP peer; route reflectors provide a controlled exception. Applied here, the relevant facts are: A new region is missing reflected route reachability because the route reflector does not classify intended clients correctly. The question asks which observation would most directly establish that the reported failure has been repaired.

Incorrect Answers

A:

The same VLAN numbers can exist where supported without unintended MAC or broadcast leakage across isolated virtual switches. It would validate a separate virtual-switch instance isolation operation, not the change needed here. Confirm instead that authorized clients receive the expected reflected iBGP paths and preserve appropriate originator or cluster-loop protection.

B:

Comparably eligible paths carry intended MEDs and route selection in the agreed test case follows the planned preference. That establishes BGP MED neighbor consideration rather than a repaired IBGP route reflection path. The reported failure still requires this evidence: authorized clients receive the expected reflected iBGP paths and preserve appropriate originator or cluster-loop protection.

D:

Internal BGP best paths prefer the approved egress due to the intended local-preference values. That establishes BGP local preference rather than a repaired IBGP route reflection path. The reported failure still requires this evidence: authorized clients receive the expected reflected iBGP paths and preserve appropriate originator or cluster-loop protection.

Service Provider Routing and Switching, Specialist (JNCIS-SP) (JN0-364) Practice Tests