McAfee Secure

Exam Code: JN0-364

Exam Name: Service Provider Routing and Switching, Specialist (JNCIS-SP)

Certification Provider: Juniper

Juniper JN0-364 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

69 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Specialist (JNCIS-SP) Exam", also known as JN0-364 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-364 Exam Engine. Your JN0-364 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-364 Practice Test 39

Question 380

At fictional Maplewood Exchange, during a wholesale access handoff, engineers report: A wholesale carrier accepts ordinary-sized frames but fails jumbo-frame handoff when encapsulation overhead increases the on-wire size. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Compare OSPF area IDs at both ends of every new inter-router link before production cutover.
  2. Include tagged maximum-frame-size tests and hardware interface MTU limits in service acceptance.
  3. Validate tag behavior, allowed VLAN membership, and connected device expectations at port provisioning.
  4. Monitor high-frequency MAC moves and correlate them with spanning-tree and bridge-interface events.

Explanation

Correct Answer

B:

Include tagged maximum-frame-size tests and hardware interface MTU limits in service acceptance. This monitors the behavior that failed at Maplewood Exchange; the most useful acceptance signal is that tagged test frames of the required service size traverse each handoff without oversize or discard counters rising.

Incorrect Answers

A:

Compare OSPF area IDs at both ends of every new inter-router link before production cutover. That ongoing check is for OSPF area identity mismatch; it would not reliably detect recurrence of provider bridging MTU overhead. Provider tag stacking adds frame overhead; an unchanged link MTU may reject frames that previously fitted untagged.

C:

Validate tag behavior, allowed VLAN membership, and connected device expectations at port provisioning. That ongoing check is for VLAN access trunk distinction; it would not reliably detect recurrence of provider bridging MTU overhead. Provider tag stacking adds frame overhead; an unchanged link MTU may reject frames that previously fitted untagged.

D:

Monitor high-frequency MAC moves and correlate them with spanning-tree and bridge-interface events. The monitored boundary differs from provider bridging MTU overhead, so the original weakness might reappear unnoticed. Provider tag stacking adds frame overhead; an unchanged link MTU may reject frames that previously fitted untagged.

Question 381

During a network change window at fictional Eastlake Services, the team observes: An operator enables multiple routes but expects alternating packets; the observed forwarding selection is stable per flow instead. Which focused engineering action would best correct the fault?

  1. Build a narrowly scoped IS-IS export policy that matches approved active prefixes and verify received advertisements.
  2. Align aggregate generation with present contributing routes and confirm the discard or reject behavior and intentional export policy.
  3. Validate eligible equal-cost next hops and the configured forwarding-table export load-balancing behavior, measuring distribution across multiple flows.
  4. Inspect the forwarding lookup in the correct routing instance and apply explicit, authorized route sharing only where required.

Explanation

Correct Answer

C:

Validate eligible equal-cost next hops and the configured forwarding-table export load-balancing behavior, measuring distribution across multiple flows. This treats the fault shown by Eastlake Services: equal routing candidates do not prove the forwarding engine is using ECMP; Junos load-balancing policy and flow hashing determine installed next hops. Confirm success when the forwarding table contains the intended next-hop set and several independent flows distribute across healthy equal-cost paths.

Incorrect Answers

A:

Build a narrowly scoped IS-IS export policy that matches approved active prefixes and verify received advertisements. That could help in a case involving IS-IS route redistribution policy. This failure instead depends on equal-cost forwarding flow hashing; equal routing candidates do not prove the forwarding engine is using ECMP; Junos load-balancing policy and flow hashing determine installed next hops.

B:

Align aggregate generation with present contributing routes and confirm the discard or reject behavior and intentional export policy. Its normal acceptance signal would be the aggregate is active only with the expected contributors and disappears when the contributor precondition is removed. Here the deciding check is different: the forwarding table contains the intended next-hop set and several independent flows distribute across healthy equal-cost paths.

D:

Inspect the forwarding lookup in the correct routing instance and apply explicit, authorized route sharing only where required. This addresses routing instance separation, but the reported symptoms arise from equal-cost forwarding flow hashing. For this case, verify instead that the forwarding table contains the intended next-hop set and several independent flows distribute across healthy equal-cost paths.

Question 382

A fictional service-provider team at Pinecrest Hosting is reviewing a metro aggregation ring. The finding is: A newly imported static route should be exported into IS-IS for a limited scope, but a broad policy accidentally advertises other routes. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Review IS-IS export policies against owner-approved prefix and origin criteria after service changes.
  2. Validate VLAN-to-IRB bindings, gateway ARP or neighbor entries, and allowed cross-VLAN flows after provisioning.
  3. Audit L1/L2 levels, attached-bit behavior, and approved route leaks after backbone changes.
  4. Validate NET area and system-ID uniqueness automatically before onboarding each IS-IS router.

Explanation

Correct Answer

A:

Review IS-IS export policies against owner-approved prefix and origin criteria after service changes. This monitors the behavior that failed at Pinecrest Hosting; the most useful acceptance signal is that the intended service route is advertised while nonapproved connected and static prefixes remain outside the IS-IS domain.

Incorrect Answers

B:

The control protects integrated routing and bridging. It does not establish the ongoing IS-IS route redistribution policy behavior required in this network. IS-IS exports externally originated routes through routing policy; forming an adjacency does not redistribute every route automatically.

C:

This is a useful guard against IS-IS L1 and L2 reachability, but it is not scoped to the observed IS-IS route redistribution policy failure. An appropriate test would show that the intended service route is advertised while nonapproved connected and static prefixes remain outside the IS-IS domain.

D:

This is a useful guard against IS-IS NET and system ID, but it is not scoped to the observed IS-IS route redistribution policy failure. An appropriate test would show that the intended service route is advertised while nonapproved connected and static prefixes remain outside the IS-IS domain.

Question 383

The operations group at fictional Ironwood Transit, working on a metro aggregation ring, finds: An operator expects an upstream static prefix to appear in OSPF, but no policy allows the correct external route to be originated. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Check inter-area prefix availability at each ABR after changes to area boundaries and route filters.
  2. Maintain an authoritative router-ID inventory and block duplicate assignments in provisioning checks.
  3. Audit OSPF export filters against an approved prefix list after every service addition.
  4. Inspect label forwarding entries at ingress, transit, and egress after every LSP change.

Explanation

Correct Answer

C:

Audit OSPF export filters against an approved prefix list after every service addition. This monitors the behavior that failed at Ironwood Transit; the most useful acceptance signal is that the approved external route is advertised with the intended type and metric while unapproved routes are not redistributed.

Incorrect Answers

A:

This is a useful guard against OSPF area LSA propagation, but it is not scoped to the observed OSPF external route export failure. An appropriate test would show that the approved external route is advertised with the intended type and metric while unapproved routes are not redistributed.

B:

Maintain an authoritative router-ID inventory and block duplicate assignments in provisioning checks. The monitored boundary differs from OSPF external route export, so the original weakness might reappear unnoticed. OSPF external redistribution is controlled by export policy; stable IGP neighbor state does not imply arbitrary static or direct routes are advertised.

D:

The control protects MPLS label push swap pop. It does not establish the ongoing OSPF external route export behavior required in this network. OSPF external redistribution is controlled by export policy; stable IGP neighbor state does not imply arbitrary static or direct routes are advertised.

Question 384

At fictional Lakecrest Utility, during a wholesale access handoff, engineers report: A dual-RE router keeps forwarding through a GRES switchover but loses routing neighbors because protocol state was not preserved. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Exercise multihop peering tests with source addresses and routed hop counts before production turn-up.
  2. Check negotiated restart capabilities, grace timers, and stale-route expiration in resilience drills.
  3. Test forwarding, bridge MAC state, and protocol-neighbor continuity separately during redundant Routing Engine failover drills.
  4. Verify backup RE protocol-state synchronization and rehearse switchover in an approved maintenance window.

Explanation

Correct Answer

C:

Test forwarding, bridge MAC state, and protocol-neighbor continuity separately during redundant Routing Engine failover drills. This monitors the behavior that failed at Lakecrest Utility; the most useful acceptance signal is that A controlled Routing Engine switchover retains forwarding and the planned bridge or routing state without unexpected protocol resets.

Incorrect Answers

A:

The control protects EBGP multihop reachability. It does not establish the ongoing GRES preserves forwarding not protocols behavior required in this network. GRES preserves forwarding and kernel state but does not by itself preserve all routing or bridging state; NSB targets bridge continuity and NSR or graceful restart addresses routing continuity.

B:

Check negotiated restart capabilities, grace timers, and stale-route expiration in resilience drills. The monitored boundary differs from GRES preserves forwarding not protocols, so the original weakness might reappear unnoticed. GRES preserves forwarding and kernel state but does not by itself preserve all routing or bridging state; NSB targets bridge continuity and NSR or graceful restart addresses routing continuity.

D:

Verify backup RE protocol-state synchronization and rehearse switchover in an approved maintenance window. The monitored boundary differs from GRES preserves forwarding not protocols, so the original weakness might reappear unnoticed. GRES preserves forwarding and kernel state but does not by itself preserve all routing or bridging state; NSB targets bridge continuity and NSR or graceful restart addresses routing continuity.

Question 385

During a multi-tenant service turn-up at fictional Fairway Telecom, the team observes: Large customer Ethernet frames are dropped only after an outer provider VLAN tag is added during Q-in-Q transport. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Include tagged maximum-frame-size tests and hardware interface MTU limits in service acceptance.
  2. Validate VLAN-to-IRB bindings, gateway ARP or neighbor entries, and allowed cross-VLAN flows after provisioning.
  3. Compare instance membership, VLAN mappings, and MAC tables for cross-tenant isolation at each deployment.
  4. Audit BGP address-family negotiation and received IPv6 routes whenever dual-stack peering changes.

Explanation

Correct Answer

A:

Include tagged maximum-frame-size tests and hardware interface MTU limits in service acceptance. This monitors the behavior that failed at Fairway Telecom; the most useful acceptance signal is that tagged test frames of the required service size traverse each handoff without oversize or discard counters rising.

Incorrect Answers

B:

Validate VLAN-to-IRB bindings, gateway ARP or neighbor entries, and allowed cross-VLAN flows after provisioning. The monitored boundary differs from provider bridging MTU overhead, so the original weakness might reappear unnoticed. Provider tag stacking adds frame overhead; an unchanged link MTU may reject frames that previously fitted untagged.

C:

This is a useful guard against virtual-switch instance isolation, but it is not scoped to the observed provider bridging MTU overhead failure. An appropriate test would show that tagged test frames of the required service size traverse each handoff without oversize or discard counters rising.

D:

The control protects multiprotocol BGP IPv6 AFI. It does not establish the ongoing provider bridging MTU overhead behavior required in this network. Provider tag stacking adds frame overhead; an unchanged link MTU may reject frames that previously fitted untagged.

Question 386

A fictional service-provider team at Lighthouse Education is reviewing an intercity fiber refresh. The finding is: A customer tries to influence remote inbound selection by changing LOCAL_PREF only inside its own AS, with no change to external advertisements. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Exercise multihop peering tests with source addresses and routed hop counts before production turn-up.
  2. Monitor exported AS paths and actual traffic after inbound-traffic-engineering changes.
  3. Validate supported metric style, actual LSP metric values, and computed paths during topology expansion.
  4. Validate local-AS and peer-AS inventory against change requests before activating external sessions.

Explanation

Correct Answer

B:

Monitor exported AS paths and actual traffic after inbound-traffic-engineering changes. This monitors the behavior that failed at Lighthouse Education; the most useful acceptance signal is that external route advertisements show the intended relative AS-path lengths and measured inbound behavior is compared with the goal.

Incorrect Answers

A:

This is a useful guard against EBGP multihop reachability, but it is not scoped to the observed AS-path prepend inbound influence failure. An appropriate test would show that external route advertisements show the intended relative AS-path lengths and measured inbound behavior is compared with the goal.

C:

The control protects IS-IS wide metrics. It does not establish the ongoing AS-path prepend inbound influence behavior required in this network. AS-path prepending can make a path less attractive to other ASes but does not override their local policies or guarantee inbound steering.

D:

Validate local-AS and peer-AS inventory against change requests before activating external sessions. The monitored boundary differs from AS-path prepend inbound influence, so the original weakness might reappear unnoticed. AS-path prepending can make a path less attractive to other ASes but does not override their local policies or guarantee inbound steering.

Question 387

The operations group at fictional Silverstone Wireless, working on a wholesale access handoff, finds: A GRE tunnel interface shows configured addresses but no traffic passes after the remote outer IP endpoint loses reachability. Which networking principle most accurately explains the observed failure?

  1. IRB provides an L3 interface for a Layer 2 VLAN bridge domain; MAC learning alone cannot perform inter-subnet routing.
  2. GRE provides encapsulation and protocol carriage but does not inherently supply confidentiality or cryptographic integrity.
  3. GRE encapsulates packets between outer IP endpoints; the underlay must route the outer destination before inner traffic can succeed.
  4. GRE adds header bytes, reducing effective payload MTU across an unchanged underlay path.

Explanation

Correct Answer

C:

GRE encapsulates packets between outer IP endpoints; the underlay must route the outer destination before inner traffic can succeed. That is the specific distinction behind the observed outage. The targeted fix is to restore underlay IP reachability between GRE tunnel endpoints and validate encapsulated probe traffic. Applied here, the relevant facts are: A GRE tunnel interface shows configured addresses but no traffic passes after the remote outer IP endpoint loses reachability. The question asks which networking principle most accurately explains the observed failure.

Incorrect Answers

A:

Although integrated routing and bridging needs this consideration, the failure at issue has a different cause. GRE encapsulates packets between outer IP endpoints; the underlay must route the outer destination before inner traffic can succeed.

B:

Although GRE confidentiality limitation needs this consideration, the failure at issue has a different cause. GRE encapsulates packets between outer IP endpoints; the underlay must route the outer destination before inner traffic can succeed.

D:

GRE adds header bytes, reducing effective payload MTU across an unchanged underlay path. Those conditions do not account for the specific GRE endpoint underlay routing problem reported by Silverstone Wireless.

Question 388

At fictional Alderbrook Transit, during a wholesale access handoff, engineers report: Hosts in two VLANs can bridge within their VLAN but cannot communicate across subnets because no L3 gateway is attached. Which focused engineering action would best correct the fault?

  1. Align LACP negotiation and member compatibility on both ends, then verify collecting and distributing member state.
  2. Place each tenant's ports and VLANs in the intended virtual-switch context and verify independent bridge learning.
  3. Inspect bridge MAC learning, move events, and the Layer 2 topology; remove unintended loop or incorrect forwarding path.
  4. Bind the correct VLAN bridge domain to its intended IRB routed interface and verify gateway addressing and routing.

Explanation

Correct Answer

D:

Bind the correct VLAN bridge domain to its intended IRB routed interface and verify gateway addressing and routing. This treats the fault shown by Alderbrook Transit: IRB provides an L3 interface for a Layer 2 VLAN bridge domain; MAC learning alone cannot perform inter-subnet routing. Confirm success when hosts reach the expected IRB gateway and traffic between approved subnets is routed rather than bridged blindly.

Incorrect Answers

A:

The proposal changes LACP aggregation consistency; that is not the failure isolated by the facts. It could leave integrated routing and bridging unresolved even if its own test passed. IRB provides an L3 interface for a Layer 2 VLAN bridge domain; MAC learning alone cannot perform inter-subnet routing.

B:

Place each tenant's ports and VLANs in the intended virtual-switch context and verify independent bridge learning. That could help in a case involving virtual-switch instance isolation. This failure instead depends on integrated routing and bridging; IRB provides an L3 interface for a Layer 2 VLAN bridge domain; MAC learning alone cannot perform inter-subnet routing.

C:

The proposal changes MAC address learning and moves; that is not the failure isolated by the facts. It could leave integrated routing and bridging unresolved even if its own test passed. IRB provides an L3 interface for a Layer 2 VLAN bridge domain; MAC learning alone cannot perform inter-subnet routing.

Question 389

During a wholesale access handoff at fictional Elmbridge Networks, the team observes: An invalid address block enters a lab RIB after a routing-policy change and operators mistake the route for genuine service reachability. Which observation would most directly establish that the reported failure has been repaired?

  1. The forwarding table contains the intended next-hop set and several independent flows distribute across healthy equal-cost paths.
  2. The inappropriate prefix is absent or rejected while legitimate provider routes remain eligible and active.
  3. During a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly.
  4. The generated route becomes active when eligible contributors exist and forwards through the intended resolved contributing next hop.

Explanation

Correct Answer

B:

The inappropriate prefix is absent or rejected while legitimate provider routes remain eligible and active. It tests the failed behavior itself rather than merely confirming that a configuration was committed. Martian-address handling protects routing tables from addresses that should not be accepted as normal routable destinations.

Incorrect Answers

A:

The forwarding table contains the intended next-hop set and several independent flows distribute across healthy equal-cost paths. That establishes equal-cost forwarding flow hashing rather than a repaired martian source address rejection path. The reported failure still requires this evidence: the inappropriate prefix is absent or rejected while legitimate provider routes remain eligible and active.

C:

During a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly. That establishes graceful restart peer assistance rather than a repaired martian source address rejection path. The reported failure still requires this evidence: the inappropriate prefix is absent or rejected while legitimate provider routes remain eligible and active.

D:

The check is meaningful for generated route qualified next hop, but it does not prove that martian source address rejection was repaired. Martian-address handling protects routing tables from addresses that should not be accepted as normal routable destinations.

Question 390

A fictional service-provider team at Brookstone Communications is reviewing a wholesale access handoff. The finding is: A provider access fabric changes its MST revision on only one device and behaves like a boundary instead of a single region. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Monitor root-bridge identity and test controlled superior-BPDU attempts at trust boundaries.
  2. Audit VSTP per-VLAN root topology after new VLAN or trunk additions.
  3. Validate MST digest and instance mapping consistency as part of configuration review.
  4. Audit network type against actual link topology during edge circuit deployment.

Explanation

Correct Answer

C:

Validate MST digest and instance mapping consistency as part of configuration review. This monitors the behavior that failed at Brookstone Communications; the most useful acceptance signal is that adjacent devices report matching MST region configuration and VLANs map to the same intended instances.

Incorrect Answers

A:

The control protects RSTP root protection. It does not establish the ongoing MSTP region consistency behavior required in this network. MSTP region identity depends on consistent name, revision, and VLAN mapping; mismatches create region boundaries.

B:

This is a useful guard against VSTP per-VLAN root choice, but it is not scoped to the observed MSTP region consistency failure. An appropriate test would show that adjacent devices report matching MST region configuration and VLANs map to the same intended instances.

D:

Audit network type against actual link topology during edge circuit deployment. The monitored boundary differs from MSTP region consistency, so the original weakness might reappear unnoticed. MSTP region identity depends on consistent name, revision, and VLAN mapping; mismatches create region boundaries.

Service Provider Routing and Switching, Specialist (JNCIS-SP) (JN0-364) Practice Tests