McAfee Secure

Exam Code: JN0-364

Exam Name: Service Provider Routing and Switching, Specialist (JNCIS-SP)

Certification Provider: Juniper

Juniper JN0-364 Questions & Answers

Study with Up-To-Date REAL Exam Questions and Answers from the ACTUAL Test

69 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Specialist (JNCIS-SP) Exam", also known as JN0-364 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-364 Exam Engine. Your JN0-364 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-364 Practice Test 44

Question 430

A fictional service-provider team at Stonewell Fiber is reviewing a provider-edge service migration. The finding is: A routing process restarts but downstream peers immediately flush its prefixes, contrary to the operator's expectation of graceful preservation. Which focused engineering action would best correct the fault?

  1. Configure and verify compatible protocol graceful-restart capability and planned helper behavior between neighbors.
  2. Keep GRES for forwarding continuity and enable the appropriate supported NSB for bridging or NSR or graceful restart for routing sessions as required.
  3. Configure and verify the intended VSTP instance and per-VLAN root priorities for the affected VLANs.
  4. Align VRRP group, virtual gateway addressing and priority settings and verify master-to-backup handover.

Explanation

Correct Answer

A:

Configure and verify compatible protocol graceful-restart capability and planned helper behavior between neighbors. This treats the fault shown by Stonewell Fiber: graceful restart depends on protocol restart and helper behavior; it is not identical to copying live routing protocol state to a backup Routing Engine. Confirm success when during a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly.

Incorrect Answers

B:

Keep GRES for forwarding continuity and enable the appropriate supported NSB for bridging or NSR or graceful restart for routing sessions as required. That could help in a case involving GRES preserves forwarding not protocols. This failure instead depends on graceful restart peer assistance; graceful restart depends on protocol restart and helper behavior; it is not identical to copying live routing protocol state to a backup Routing Engine.

C:

Configure and verify the intended VSTP instance and per-VLAN root priorities for the affected VLANs. Its normal acceptance signal would be each VLAN's spanning-tree state selects its planned root and forwarding ports without creating a cross-VLAN loop. Here the deciding check is different: during a controlled routing restart, participating neighbors retain forwarding state only for the permitted grace interval and then converge correctly.

D:

Align VRRP group, virtual gateway addressing and priority settings and verify master-to-backup handover. That could help in a case involving VRRP virtual gateway failover. This failure instead depends on graceful restart peer assistance; graceful restart depends on protocol restart and helper behavior; it is not identical to copying live routing protocol state to a backup Routing Engine.

Question 431

The operations group at fictional Hawthorne Metro, working on a dual-stack transit pilot, finds: A backbone LAN has too many full mesh adjacencies and the team mistakenly expects point-to-point behavior on a broadcast segment. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Document stable broadcast-segment election priorities and rehearse controlled DR failure and recovery.
  2. Check inter-area prefix availability at each ABR after changes to area boundaries and route filters.
  3. Review tunnel transport security requirements and verify encryption rather than accepting GRE setup as proof of privacy.
  4. Include end-to-end MTU alignment and OSPF database exchange checks in circuit acceptance tests.

Explanation

Correct Answer

A:

Document stable broadcast-segment election priorities and rehearse controlled DR failure and recovery. This monitors the behavior that failed at Hawthorne Metro; the most useful acceptance signal is that the broadcast segment has the planned DR and BDR and expected adjacency states after a controlled election event.

Incorrect Answers

B:

Check inter-area prefix availability at each ABR after changes to area boundaries and route filters. The monitored boundary differs from OSPF designated router election, so the original weakness might reappear unnoticed. OSPF broadcast networks elect a DR and BDR; raising priority does not automatically preempt an already elected DR.

C:

Review tunnel transport security requirements and verify encryption rather than accepting GRE setup as proof of privacy. That ongoing check is for GRE confidentiality limitation; it would not reliably detect recurrence of OSPF designated router election. OSPF broadcast networks elect a DR and BDR; raising priority does not automatically preempt an already elected DR.

D:

The control protects OSPF MTU negotiation. It does not establish the ongoing OSPF designated router election behavior required in this network. OSPF broadcast networks elect a DR and BDR; raising priority does not automatically preempt an already elected DR.

Question 432

At fictional Northbay Telecom, during a carrier peering cutover, engineers report: A multi-exit AS expects a specific inbound link, but peers make a different choice when MED is compared out of the intended context. Which networking principle most accurately explains the observed failure?

  1. EBGP sessions to nonadjacent neighbors need suitable multihop TTL and transport reachability; routing reachability alone can be insufficient.
  2. AS-path prepending can make a path less attractive to other ASes but does not override their local policies or guarantee inbound steering.
  3. Routing instances maintain separate routing and forwarding contexts; entries in one RIB do not automatically appear in another.
  4. MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks.

Explanation

Correct Answer

D:

MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks. That is the specific distinction behind the observed outage. The targeted fix is to set and test a coherent MED policy between comparable paths, acknowledging peer AS comparison behavior and upstream policies. Applied here, the relevant facts are: A multi-exit AS expects a specific inbound link, but peers make a different choice when MED is compared out of the intended context. The question asks which networking principle most accurately explains the observed failure.

Incorrect Answers

A:

Although EBGP multihop reachability needs this consideration, the failure at issue has a different cause. MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks.

B:

Although AS-path prepend inbound influence needs this consideration, the failure at issue has a different cause. MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks.

C:

Routing instances maintain separate routing and forwarding contexts; entries in one RIB do not automatically appear in another. Those conditions do not account for the specific BGP MED neighbor consideration problem reported by Northbay Telecom.

Question 433

During a virtual-router integration at fictional Lighthouse Education, the team observes: An IGP route remains active for too long after a one-way transport fault because loss detection relies on slow routing hello timers. Which focused engineering action would best correct the fault?

  1. Enable supported NSR with required GRES on the platform, then verify routing protocol state replication and switchover behavior.
  2. Use supported BFD sessions tied to the relevant routing protocol and validate fast peer failure detection.
  3. Align LACP negotiation and member compatibility on both ends, then verify collecting and distributing member state.
  4. Set an end-to-end MTU that accounts for required additional Ethernet tags and verify supported hardware limits.

Explanation

Correct Answer

B:

Use supported BFD sessions tied to the relevant routing protocol and validate fast peer failure detection. This treats the fault shown by Lighthouse Education: BFD provides rapid bidirectional path liveness detection; it triggers routing response but is not by itself a replacement route. Confirm success when A controlled link or peer failure causes BFD Down and timely routing reconvergence rather than waiting for long protocol timers.

Incorrect Answers

A:

Enable supported NSR with required GRES on the platform, then verify routing protocol state replication and switchover behavior. This addresses NSR protocol state replication, but the reported symptoms arise from BFD fast failure detection. For this case, verify instead that A controlled link or peer failure causes BFD Down and timely routing reconvergence rather than waiting for long protocol timers.

C:

Align LACP negotiation and member compatibility on both ends, then verify collecting and distributing member state. This addresses LACP aggregation consistency, but the reported symptoms arise from BFD fast failure detection. For this case, verify instead that A controlled link or peer failure causes BFD Down and timely routing reconvergence rather than waiting for long protocol timers.

D:

Set an end-to-end MTU that accounts for required additional Ethernet tags and verify supported hardware limits. That could help in a case involving provider bridging MTU overhead. This failure instead depends on BFD fast failure detection; BFD provides rapid bidirectional path liveness detection; it triggers routing response but is not by itself a replacement route.

Question 434

A fictional service-provider team at Valleycrest Internet is reviewing an intercity fiber refresh. The finding is: A dual-stack backbone route resolves for IPv4 but the equivalent IPv6 static route is hidden because its next-hop scope is incorrect. Which observation would most directly establish that the reported failure has been repaired?

  1. Neighbor Solicitation and Advertisement complete and the destination's link-layer neighbor entry becomes usable.
  2. Every router has a distinct planned router ID and the LSDB tracks the appropriate originating router consistently.
  3. The intended IPv6 destination has an active route with a resolved next hop and working egress interface.
  4. Both IPv4 endpoint paths are reachable and IPv6 packets traverse the encapsulated link end to end.

Explanation

Correct Answer

C:

The intended IPv6 destination has an active route with a resolved next hop and working egress interface. It tests the failed behavior itself rather than merely confirming that a configuration was committed. IPv6 link-local next hops are interface-scoped; a bare link-local address can be insufficient to identify the outgoing link. Applied here, the relevant facts are: A dual-stack backbone route resolves for IPv4 but the equivalent IPv6 static route is hidden because its next-hop scope is incorrect. The question asks which observation would most directly establish that the reported failure has been repaired.

Incorrect Answers

A:

Neighbor Solicitation and Advertisement complete and the destination's link-layer neighbor entry becomes usable. That establishes IPv6 neighbor discovery filtering rather than a repaired IPv6 static next-hop scope path. The reported failure still requires this evidence: the intended IPv6 destination has an active route with a resolved next hop and working egress interface.

B:

This measurement tests stable OSPF router identifier; it cannot distinguish success from failure for the observed IPv6 static next-hop scope condition. IPv6 link-local next hops are interface-scoped; a bare link-local address can be insufficient to identify the outgoing link.

D:

Both IPv4 endpoint paths are reachable and IPv6 packets traverse the encapsulated link end to end. That establishes IPv6 over IPv4 tunnel underlay rather than a repaired IPv6 static next-hop scope path. The reported failure still requires this evidence: the intended IPv6 destination has an active route with a resolved next hop and working egress interface.

Question 435

The operations group at fictional Pinecrest Hosting, working on a carrier peering cutover, finds: An application complains about intermittent failures across GRE while DF-set oversized probes fail and ordinary ICMP ping succeeds. Which focused engineering action would best correct the fault?

  1. Add an approved encryption layer such as IPsec when confidentiality is required, while retaining GRE only if needed for routing encapsulation.
  2. Bind the correct VLAN bridge domain to its intended IRB routed interface and verify gateway addressing and routing.
  3. Install and verify independent underlay reachability for the GRE outer destination, preventing recursive use of the tunnel.
  4. Account for GRE/IP header overhead in tunnel MTU and path-MTU handling, then test large representative packets.

Explanation

Correct Answer

D:

Account for GRE/IP header overhead in tunnel MTU and path-MTU handling, then test large representative packets. This treats the fault shown by Pinecrest Hosting: GRE adds header bytes, reducing effective payload MTU across an unchanged underlay path. Confirm success when maximum expected encapsulated packets cross the tunnel without fragmentation blackholes or oversized drop counters.

Incorrect Answers

A:

Add an approved encryption layer such as IPsec when confidentiality is required, while retaining GRE only if needed for routing encapsulation. Its normal acceptance signal would be an underlay capture cannot read protected payload content and transport still reaches the required tunnel endpoints. Here the deciding check is different: maximum expected encapsulated packets cross the tunnel without fragmentation blackholes or oversized drop counters.

B:

Bind the correct VLAN bridge domain to its intended IRB routed interface and verify gateway addressing and routing. This addresses integrated routing and bridging, but the reported symptoms arise from GRE tunnel path MTU. For this case, verify instead that maximum expected encapsulated packets cross the tunnel without fragmentation blackholes or oversized drop counters.

C:

Install and verify independent underlay reachability for the GRE outer destination, preventing recursive use of the tunnel. That could help in a case involving GRE recursive route avoidance. This failure instead depends on GRE tunnel path MTU; GRE adds header bytes, reducing effective payload MTU across an unchanged underlay path.

Question 436

At fictional Skybridge Metro, during a multi-tenant service turn-up, engineers report: Two switches intended to share one MSTP region show divergent spanning-tree instances because their VLAN-to-instance maps differ. Which focused engineering action would best correct the fault?

  1. Align MST region name, revision, and VLAN-to-instance mapping across all intended region members.
  2. Apply root protection on boundary designated ports where upstream superiority must be blocked and verify root placement.
  3. Align the port's supported flexible VLAN tagging and per-unit encapsulation with the intended service frame format.
  4. Review RSTP roles and convergence expectations and ensure the valid alternate path can transition safely when the root path fails.

Explanation

Correct Answer

A:

Align MST region name, revision, and VLAN-to-instance mapping across all intended region members. This treats the fault shown by Skybridge Metro: MSTP region identity depends on consistent name, revision, and VLAN mapping; mismatches create region boundaries. Confirm success when adjacent devices report matching MST region configuration and VLANs map to the same intended instances.

Incorrect Answers

B:

Apply root protection on boundary designated ports where upstream superiority must be blocked and verify root placement. Its normal acceptance signal would be the approved root remains root despite inferior-site superior-BPDU injection, and the boundary behaves as designed. Here the deciding check is different: adjacent devices report matching MST region configuration and VLANs map to the same intended instances.

C:

Align the port's supported flexible VLAN tagging and per-unit encapsulation with the intended service frame format. This addresses flexible VLAN encapsulation alignment, but the reported symptoms arise from MSTP region consistency. For this case, verify instead that adjacent devices report matching MST region configuration and VLANs map to the same intended instances.

D:

The proposal changes RSTP alternate port reconvergence; that is not the failure isolated by the facts. It could leave MSTP region consistency unresolved even if its own test passed. MSTP region identity depends on consistent name, revision, and VLAN mapping; mismatches create region boundaries.

Question 437

During a dual-stack transit pilot at fictional Fernstone Logistics, the team observes: Two adjacent IPv6 devices have valid unicast addresses, but ping fails because an ACL blocks required ICMPv6 neighbor discovery messages. Which focused engineering action would best correct the fault?

  1. Allow the required scoped ICMPv6 neighbor discovery exchanges and confirm neighbor cache resolution.
  2. Enable compatible OSPFv3 IPv6 operation on the intended peers and validate neighbor and route state.
  3. Enable and verify negotiated IPv6-unicast capability and matching route-policy handling on the BGP peers.
  4. Configure and verify compatible protocol graceful-restart capability and planned helper behavior between neighbors.

Explanation

Correct Answer

A:

Allow the required scoped ICMPv6 neighbor discovery exchanges and confirm neighbor cache resolution. This treats the fault shown by Fernstone Logistics: IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist. Confirm success when neighbor Solicitation and Advertisement complete and the destination's link-layer neighbor entry becomes usable.

Incorrect Answers

B:

Enable compatible OSPFv3 IPv6 operation on the intended peers and validate neighbor and route state. This addresses OSPFv3 IPv6 neighbor reachability, but the reported symptoms arise from IPv6 neighbor discovery filtering. For this case, verify instead that neighbor Solicitation and Advertisement complete and the destination's link-layer neighbor entry becomes usable.

C:

Enable and verify negotiated IPv6-unicast capability and matching route-policy handling on the BGP peers. Its normal acceptance signal would be BGP peers exchange the intended IPv6 NLRI and establish resolvable IPv6 next hops. Here the deciding check is different: neighbor Solicitation and Advertisement complete and the destination's link-layer neighbor entry becomes usable.

D:

The proposal changes graceful restart peer assistance; that is not the failure isolated by the facts. It could leave IPv6 neighbor discovery filtering unresolved even if its own test passed. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.

Question 438

A fictional service-provider team at Brookstone Communications is reviewing a redundant core router pair. The finding is: A topology analyzer treats an IS-IS DIS as identical to an OSPF nonpreemptive DR, giving incorrect convergence expectations after priority changes. Which observation would most directly establish that the reported failure has been repaired?

  1. The intended multi-hop peer establishes while IP reachability and any required loopback-source configuration are correct.
  2. The shared LAN shows the intended DIS and pseudonode information, and adjacency remains stable through a controlled election.
  3. Link-state PDUs include the intended reachability TLVs and the matching routes populate peer routing tables.
  4. The two peers converge to consistent current LSP sequence information and compute the same intended topology reachability.

Explanation

Correct Answer

B:

The shared LAN shows the intended DIS and pseudonode information, and adjacency remains stable through a controlled election. It tests the failed behavior itself rather than merely confirming that a configuration was committed. On an IS-IS broadcast LAN the DIS originates pseudonode LSPs and may be re-elected when priority changes; the process differs from OSPF DR behavior. Applied here, the relevant facts are: A topology analyzer treats an IS-IS DIS as identical to an OSPF nonpreemptive DR, giving incorrect convergence expectations after priority changes. The question asks which observation would most directly establish that the reported failure has been repaired.

Incorrect Answers

A:

This measurement tests EBGP multihop reachability; it cannot distinguish success from failure for the observed IS-IS LAN designated intermediate system condition. On an IS-IS broadcast LAN the DIS originates pseudonode LSPs and may be re-elected when priority changes; the process differs from OSPF DR behavior.

C:

The check is meaningful for IS-IS TLV reachability, but it does not prove that IS-IS LAN designated intermediate system was repaired. On an IS-IS broadcast LAN the DIS originates pseudonode LSPs and may be re-elected when priority changes; the process differs from OSPF DR behavior.

D:

The two peers converge to consistent current LSP sequence information and compute the same intended topology reachability. That establishes IS-IS LSP database synchronization rather than a repaired IS-IS LAN designated intermediate system path. The reported failure still requires this evidence: the shared LAN shows the intended DIS and pseudonode information, and adjacency remains stable through a controlled election. Applied here, the relevant facts are: A topology analyzer treats an IS-IS DIS as identical to an OSPF nonpreemptive DR, giving incorrect convergence expectations after priority changes. The question asks which observation would most directly establish that the reported failure has been repaired.

Question 439

The operations group at fictional Foxglove Broadband, working on a regional backbone upgrade, finds: IPv6 routes vanish after OSPFv3 was configured on one side of a link while the peer runs only OSPFv2. Which networking principle most accurately explains the observed failure?

  1. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.
  2. OSPFv3 provides OSPF routing for IPv6; successful IPv4 OSPFv2 peering does not establish an IPv6 adjacency.
  3. IS-IS can carry IPv6 topology and prefix information using appropriate TLVs; an IPv4 route table is not a substitute.
  4. MED is a BGP path hint with lower values generally preferred when compared; it is not a guarantee of inbound routing across arbitrary networks.

Explanation

Correct Answer

B:

OSPFv3 provides OSPF routing for IPv6; successful IPv4 OSPFv2 peering does not establish an IPv6 adjacency. That is the specific distinction behind the observed outage. The targeted fix is to enable compatible OSPFv3 IPv6 operation on the intended peers and validate neighbor and route state. Applied here, the relevant facts are: IPv6 routes vanish after OSPFv3 was configured on one side of a link while the peer runs only OSPFv2. The question asks which networking principle most accurately explains the observed failure.

Incorrect Answers

A:

This principle matters when troubleshooting IPv6 neighbor discovery filtering, but using it here mistakes a different failure mode for OSPFv3 IPv6 neighbor reachability. The relevant distinction is: OSPFv3 provides OSPF routing for IPv6; successful IPv4 OSPFv2 peering does not establish an IPv6 adjacency.

C:

IS-IS can carry IPv6 topology and prefix information using appropriate TLVs; an IPv4 route table is not a substitute. Those conditions do not account for the specific OSPFv3 IPv6 neighbor reachability problem reported by Foxglove Broadband.

D:

This principle matters when troubleshooting BGP MED neighbor consideration, but using it here mistakes a different failure mode for OSPFv3 IPv6 neighbor reachability. The relevant distinction is: OSPFv3 provides OSPF routing for IPv6; successful IPv4 OSPFv2 peering does not establish an IPv6 adjacency.

Question 440

At fictional Fernstone Logistics, during a dual-stack transit pilot, engineers report: Two adjacent IPv6 devices have valid unicast addresses, but ping fails because an ACL blocks required ICMPv6 neighbor discovery messages. Which ongoing control would most directly detect or prevent the same failure from recurring?

  1. Validate next-hop address scope and outbound interface for static IPv6 routes during deployment.
  2. Track IPv4 and IPv6 IS-IS reachability separately in dual-stack health checks.
  3. Monitor RSVP reservation state and LSP establishment success, not only underlying IGP reachability.
  4. Test ICMPv6 neighbor discovery after applying IPv6 filters or host-security policies.

Explanation

Correct Answer

D:

Test ICMPv6 neighbor discovery after applying IPv6 filters or host-security policies. This monitors the behavior that failed at Fernstone Logistics; the most useful acceptance signal is that neighbor Solicitation and Advertisement complete and the destination's link-layer neighbor entry becomes usable.

Incorrect Answers

A:

The control protects IPv6 static next-hop scope. It does not establish the ongoing IPv6 neighbor discovery filtering behavior required in this network. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.

B:

Track IPv4 and IPv6 IS-IS reachability separately in dual-stack health checks. The monitored boundary differs from IPv6 neighbor discovery filtering, so the original weakness might reappear unnoticed. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.

C:

The control protects RSVP PATH and RESV signaling. It does not establish the ongoing IPv6 neighbor discovery filtering behavior required in this network. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.

Service Provider Routing and Switching, Specialist (JNCIS-SP) (JN0-364) Practice Tests