Juniper Networks · Free Practice Questions · Last reviewed May 2026
48 real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
When configuring advanced VLAN mapping on a Juniper MX Series router using flexible VLAN tagging, which term describes the action of replacing an incoming inner VLAN tag with a new tag before forwarding into the provider core?
VLAN stripping
VLAN swap
VLAN swap replaces the incoming inner VLAN tag with a different tag before the frame is forwarded into the provider core, preserving the outer tag. This matches the stem's description of substituting the inner tag, distinguishing it from push, pop, or translate operations on the MX Series.
VLAN push
VLAN pop
You need to design a scalable Layer 2 architecture across multiple data center buildings using Juniper switches, avoiding single points of failure while preventing bridging loops. Which scaling mechanism allows Active-Active multihoming without running Spanning Tree Protocol across the core?
Layer 2 Tunneling Protocol (L2TPv3) bridging
Multi-Chassis Link Aggregation (MC-LAG) with ICCP
MC-LAG with ICCP lets two Juniper devices present one logical LAG to the access layer, giving Active-Active multihoming with no blocked links. ICCP synchronises state between peers, so the core needs no Spanning Tree Protocol to prevent loops.
Rapid PVST+ with root guard on all access ports
Virtual Chassis with spanning-tree disabled
An administrator implements MSTP (Multiple Spanning Tree Protocol) in a large data center using Juniper switches. Region boundaries must be maintained strictly. Which three parameters must match identically across all switches for them to be considered part of the same MST region?
MAC address, revision number, and region name
Region name, revision number, and VLAN-to-instance mapping
MSTP region membership requires identical region name, revision number and VLAN-to-instance mapping on every switch. If any of these three parameters differs, the switch belongs to a separate region, so matching all three preserves the strict region boundaries the administrator needs.
Bridge priority, hello time, and max age
Extended system ID, region name, and forward delay
You are configuring Q-in-Q tunneling on an MX Series router where customer frames arrive with VLAN tag 100, and you need to encapsulate them with a service provider outer VLAN tag 3000 using 'vlan-map'. Where is the VLAN map applied?
Under the routing-instance bridge-domain configuration
Under the logical interface unit configuration using input/output vlan-map
The vlan-map is applied at the logical interface unit level, where input and output maps rewrite or push VLAN tags. Configuring it there lets customer tag 100 be encapsulated with the outer service provider tag 3000, achieving Q-in-Q tunnelling on the MX Series.
Under protocols l22-control configuration hierarchy
Under the physical interface encapsulation statement
You are configuring private VLANs (PVLANs) on a Juniper EX switch to isolate customer ports from one another while sharing a common gateway. Which VLAN type is configured to allow communication only with promiscuous ports?
Primary VLAN
Community VLAN
Isolated VLAN
In a private VLAN, isolated ports can communicate only with promiscuous ports, not with each other. Assigning customer ports to the isolated VLAN enforces host isolation while still allowing traffic through the shared promiscuous gateway.
Target VLAN
You are configuring MAC limiting on an EX Series switch interface to restrict the maximum number of learned MAC addresses to 10. What happens when the 11th unique MAC address attempts to communicate through the interface?
The switch drops packets from the new MAC address and optionally logs or generates an SNMP trap.
Exceeding the MAC limit triggers the configured action, typically dropping new source MACs and logging.
The switch immediately reboots the line card to protect the control plane.
The switch forwards the frame and clears the oldest learned MAC entry from the forwarding table.
The switch dynamically converts the port into a routed Layer 3 interface.
Want more Ethernet Switching And Spanning Tree practice?
Practice this domainWhich BGP community is a well-known transitive community used to prevent a route from being advertised outside of a local autonomous system?
no-peer
local-as
no-export
The well-known no-export community prevents a route from being advertised beyond the local autonomous system, including to confederation peers. It is transitive, so it propagates between internal BGP speakers while still blocking external advertisement, matching the stem's constraint.
no-advertise
A network engineer has configured BGP multipath on a Junos routing device using the 'multipath' statement under the routing-options bgp hierarchy. However, traffic is still only utilizing a single path. Which condition must be met for BGP multipath to become active for a destination prefix?
Multipath requires BGP prefix-independent convergence (PIC) to be explicitly enabled on all routing engines.
The next hops must be directly connected interfaces without relying on IGP resolution.
All paths must originate from the exact same autonomous system in the AS path attribute.
All competing BGP paths must have identical AS path lengths, local preference, origin, and MED.
Junos installs multiple BGP paths for a prefix only when they are equal-cost: identical AS path length, local preference, origin and MED. If any of these attributes differ, path selection picks a single best route and multipath remains inactive despite the configuration.
An administrator applies a policy containing 'as-path-prepend "65001 65001"' to outbound BGP updates sent to an external provider. What is the primary objective of this configuration?
To force the external peer to drop all updates due to an AS path loop check failure.
To enable BGP multipath load balancing across multiple external links.
To establish a confederation sub-AS relationship with the external provider.
To artificially increase the AS path length attribute to make this path less preferred by inbound traffic.
Prepending repeats the local AS number in the AS path, lengthening it so remote BGP speakers applying shortest-path selection deprioritise this route. This satisfies the stated objective of making the path less preferred for inbound traffic from the external provider.
An enterprise network uses a BGP route reflector (RR) architecture where client routers reflect routes to each other. A non-client router sends a route with an Originator ID and Cluster List to the RR. How does the route reflector handle these attributes when reflecting the route to other clients?
It removes the Originator ID and replaces the Cluster List with its own cluster ID.
It increments the Originator ID value by one and clears the Cluster List.
It leaves the Originator ID intact and appends its own cluster ID to the Cluster List.
The RR preserves the Originator ID and adds its local cluster ID to the front of the Cluster List.
It clears both the Originator ID and Cluster List to reset loop detection for the local cluster.
During BGP route resolution on Junos, an indirect next hop is encountered. What mechanism does Junos use to resolve this indirect next hop to a direct forwarding next hop?
BGP Link-State (BGP-LS) topology databases.
Multiprotocol Label Switching (MPLS) label imposition without routing table participation.
Recursive lookups through the routing table using the active IGP or static route entries.
Junos resolves an indirect BGP next hop by performing recursive route lookups, walking the routing table until it reaches a directly connected next hop learned via an active IGP or static route, which is the constraint the stem specifies.
Address Resolution Protocol (ARP) directly against the BGP peer IP address.
An engineer needs to ensure that a Junos router balances BGP traffic across multiple paths with unequal IGP costs. Which feature must be configured to achieve this?
Setting the MED attribute to zero on all incoming EBGP updates.
BGP multipath with the 'as-path-relax' or equivalent multipath options enabled.
Relaxing strict AS path or IGP cost checks allows multipath load balancing across paths with different metrics.
Configuring static routes with identical preferences for every BGP prefix.
Enabling BGP Route Reflection on the local routing engine.
Want more BGP Advanced practice?
Practice this domainAn administrator is deploying EVPN multi-homing with all-active mode on an MX Series router. Which configuration element uniquely identifies the provider edge (PE) router's attachment circuit to an Ethernet segment?
Route Distinguisher (RD)
Ethernet Tag ID
Ethernet Segment Identifier (ESI)
The Ethernet Segment Identifier uniquely identifies the attachment circuit to the Ethernet segment, and all PE routers multi-homing that segment must share the same ESI value. This satisfies the requirement for a unique identifier in all-active EVPN multi-homing.
ESI Label Extended Community
An administrator notices that broadcast, unknown unicast, and multicast (BUM) traffic sent from a local host is looping back to the originating multi-homed PE when using an all-active Ethernet segment. Which mechanism prevents this loop in EVPN?
BGP Best Path Selection algorithm
EVPN Split Horizon filtering using ESI labels
When a multi-homed PE receives BUM traffic from its own Ethernet segment, the receiving PE checks the ESI label; split horizon filtering drops frames whose ESI label matches the local segment, preventing the loop back to the originating PE.
Designated Forwarder (DF) election
Spanning Tree Protocol (STP) root guard
Which specific EVPN route type is responsible for carrying IP prefix routes, often used for inter-subnet forwarding in an IP-VRF-to-EVPN integration scenario?
Route Type 5
Route Type 5 carries IP prefix routes, enabling inter-subnet forwarding between IP-VRFs across the EVPN fabric. Unlike Types 2 and 3, which advertise MAC/IP and inclusive multicast respectively, Type 5 satisfies the stem's requirement for IP prefix reachability in an IP-VRF-to-EVPN integration.
Route Type 3
Route Type 2
Route Type 1
When configuring centralized gateway or distributed gateway routing models in an EVPN-VXLAN environment, how does a distributed gateway using Integrated Routing and Bridging (IRB) interfaces operate regarding default gateway functionality?
Routing is disabled on leaf nodes, requiring all packets to be tunneled to spine nodes for L3 lookup.
A single designated MX core router handles all inter-subnet routing via centralized IRB interfaces.
Hosts must run VRRP between leaf nodes to dynamically elect a single active gateway.
All leaf nodes act as default gateways using the same virtual MAC and IP address, terminating traffic locally.
With distributed gateway IRB, every leaf terminates inter-subnet traffic locally using a shared virtual MAC and IP address as the default gateway. This symmetric, anycast-style design avoids tromboning traffic to a centralised gateway, reducing latency and improving forwarding efficiency across the EVPN-VXLAN fabric.
An engineer is verifying MAC learning behavior in an EVPN instance. A remote host's MAC address is learned via BGP Type 2 routes, but when the local host sends traffic to it, the packet drops. The engineer runs 'show route table bgp.evpn.0' and sees the route. What is the most likely reason the packet is dropping in the data plane?
The data-plane VNI mapping or tunnel next-hop resolution is incomplete.
Type 2 routes populate the control plane, but forwarding requires a valid VNI-to-tunnel mapping and resolvable next hop. If that mapping or resolution is incomplete, the route appears in bgp.evpn.0 yet traffic cannot be encapsulated, explaining the data-plane drop despite control-plane presence.
Type-4 routes have not been exchanged yet.
The BGP route target import policy is rejecting the route.
The local router's BGP router ID is misconfigured.
Which BGP address family must be enabled under the BGP neighbor configuration to exchange EVPN routes between PE routers?
inet-unicast
evpn signaling (or l2vpn evpn)
EVPN routes such as MAC/IP advertisement and IMET are carried in the BGP EVPN address family, enabled as evpn signalling under the neighbour hierarchy. The inet or inet6 families carry unicast IP routes only, so they cannot distribute EVPN NLRI between PE routers.
vpls-signaling
iso-unicast
Want more EVPN practice?
Practice this domainWhen configuring a hierarchical scheduler map on an MX Series router, what is the primary purpose of the aggregate level shaping?
To dynamically assign forwarding classes based on IP headers
To ensure absolute priority for best-effort traffic
To limit the total traffic across all queues associated with the scheduler map
Aggregate level shaping caps the combined bandwidth consumed by every queue beneath that scheduler node, rather than policing individual queues. This satisfies the requirement to limit total traffic across all queues associated with the scheduler map on the MX Series interface.
To rewrite CoS bits on egress frames
Which standard Junos forwarding class is reserved for control plane traffic such as routing protocols and management traffic?
expedited-forwarding
assured-forwarding
best-effort
network-control
The network-control forwarding class carries control plane traffic, including routing protocol messages and management access, and is mapped to a queue with strict-high priority by default. This matches the stem's requirement for the standard class reserved for routing and management traffic.
You need to ensure that delay-sensitive voice traffic is serviced before all other queues on an egress interface. Which scheduler property should you configure for the voice forwarding class?
buffer-size
transmit-rate
drop-profile
priority high
Configuring priority high on the voice forwarding class places it in a strict-priority queue, which is serviced before all other queues until empty. This satisfies the stem's requirement that delay-sensitive voice traffic be serviced ahead of every other queue.
You want to apply a rewrite rule on an outgoing interface to remark the DSCP bits of packets leaving your Juniper router. Where must this rewrite rule be applied within the CoS hierarchy?
[edit firewall]
[edit class-of-service interfaces]
Rewrite rules that remark DSCP on egress are configured under [edit class-of-service interfaces] on the outbound interface, where the scheduler maps forwarding classes to rewrite values. Applying it at the interface level ensures the remarking occurs as packets leave.
[edit routing-options]
[edit class-of-service classifiers]
Which command is used to verify the operational state of forwarding classes and their assigned queues on a specific interface on Junos?
show route forwarding-table
show class-of-service interface
`show class-of-service interface` displays per-interface forwarding-class-to-queue mappings, scheduler associations and queue counters, directly satisfying the stem's requirement to verify operational state on a specific interface. Unlike CoS configuration output, it reports live queue assignment and statistics, confirming that classification and scheduling behave as intended.
show interfaces extensive
show firewall
Which configuration stanza is used to define custom forwarding classes in Junos?
[edit class-of-service drop-profiles]
[edit class-of-service classifiers]
[edit class-of-service forwarding-classes]
Custom forwarding classes are defined under the [edit class-of-service forwarding-classes] hierarchy, where each class is mapped to a queue number. This stanza lets you name and assign up to eight classes, satisfying the requirement to define them explicitly rather than rely on default best-effort, expedited, assured and network-control classes.
[edit class-of-service schedulers]
Want more Class OF Service practice?
Practice this domainYou are troubleshooting an IP phone that is failing to discover its voice VLAN via LLDP-MED on an EX4600 switch. You issue the show lldp interface command and see that LLDP is transmitting properly, but the phone reports no voice VLAN TLV received. What is the most likely cause of this issue?
The voice VLAN is not configured under the switch-options vlan-group hierarchy.
The LLDP-MED network policy for voice has not been defined and mapped to the interface or device profile.
LLDP-MED voice VLAN information travels in the network policy TLV, which is only emitted when a network policy is defined and mapped to the interface or device profile. LLDP frames transmit regardless, matching the observed symptom of no voice VLAN TLV.
IEEE 802.1p priority marking is missing from the global bridge-options statement.
LLDP advertisement interval is set too high, causing timeout on the phone.
An administrator implements LLDP-MED on an EX Series switch network. To prevent unauthorized devices from masquerading as IP phones and requesting voice VLAN access, which feature should be combined with LLDP-MED?
Storm control with broadcast filtering
DHCP snooping and Dynamic ARP Inspection (DAI)
IEEE 802.1X port-based authentication with dynamic VLAN assignment
IEEE 802.1X port-based authentication with dynamic VLAN assignment verifies device identity against a RADIUS server before granting network access, then assigns the voice VLAN only after successful authentication. This prevents rogue devices from spoofing LLDP-MED TLVs to obtain voice VLAN membership, satisfying the requirement to block unauthorised masquerading as IP phones.
IP Source Guard
You notice that an EX4300 switch power budget calculation is set to use 'class-based' allocation. What does this mean regarding how power is reserved for connected IP phones?
The switch allocates a flat 15.4W to every port regardless of what device is plugged in.
The switch reserves power according to the maximum wattage defined by the device's hardware PoE class (e.g., Class 0, Class 3).
In class-based mode, the switch reserves power for each device according to the PoE class it reports during detection and classification, using the class maximum rather than actual consumption. That makes the budget predictable, but it can leave unused headroom, because many phones in Class 3 draw much less than 15.4 W. 'show poe controller' shows the mode, total budget and power in use.
The switch shares a dynamic pool where ports draw power on a first-come, first-served basis without limits.
The switch allocates power based on real-time LLDP-MED reported consumption values.
An IP phone connected to an EX4600 switch fails to power up. You run show poe interface ge-0/0/1 and find the status displays 'Hardware error'. What is the most appropriate troubleshooting step?
Check the switch's power supply units (PSUs) and internal PoE controller status using show chassis power.
A 'Hardware error' PoE status indicates the port's power controller or the supplying PSU cannot deliver power, so verifying chassis power and PoE controller health isolates whether the fault is internal hardware rather than the phone or cabling.
Reconfigure the port from access mode to trunk mode.
Modify the LLDP-MED network policy timeout value to allow longer initialization.
Disable spanning tree protocol on the interface.
What does the LLDP-MED acronym stand for in the context of enterprise networking and IP telephony?
Link Layer Device Protocol - Managed Ethernet Deployment
Link Layer Discovery Protocol - Media Endpoint Discovery
Link Layer Discovery Protocol – Media Endpoint Discovery extends IEEE 802.1AB LLDP with TIA-1057 TLVs, enabling automatic VLAN assignment, PoE negotiation and E911 location data for IP phones. This satisfies the stem's IP telephony context, where media endpoint discovery beyond standard LLDP is required.
Local Loop Discovery Protocol - Mobile Ethernet Device
Logical Link Discovery Protocol - Multi-access Equipment Design
An administrator configures PoE management mode on an EX4300 switch to 'consumption'. An IP phone connects, but before booting up completely, the switch denies power. Upon investigation, you find that the switch's static power reservation table is maxed out. What is the reason for this behavior in consumption mode?
Consumption mode still requires an initial allocation based on maximum class rating until LLDP-MED or CDP successfully negotiates the lower actual consumption value.
Consumption mode still reserves power at the class maximum before boot completes, because LLDP-MED or CDP power negotiation has not yet reported actual draw. With the static reservation table full, that initial allocation fails, so the switch denies power.
Consumption mode only works with non-PoE+ devices.
Consumption mode requires manual CLI power limits for every single port.
Consumption mode disables all dynamic power allocations permanently.
Want more IP Telephony Features practice?
Practice this domainWhen configuring OSPFv3, which Junos address-family hierarchy is used to enable OSPFv3 on an interface?
set protocols ospf3 area 0.0.0.0 interface xe-0/0/0.0
OSPFv3 runs as a separate routing process, so Junos uses the `protocols ospf3` hierarchy rather than `protocols ospf` with an address family. Assigning the interface under `area 0.0.0.0` enables OSPFv3 on that interface, satisfying the stem's requirement for the OSPFv3 address-family hierarchy.
set protocols ospf version 3 area 0.0.0.0 interface xe-0/0/0.0
set protocols ipv6 ospf area 0.0.0.0 interface xe-0/0/0.0
set protocols ospf3 ipv6 area 0.0.0.0 interface xe-0/0/0.0
Which Junos command displays the link-state database for OSPFv2, showing router LSAs and network LSAs?
show route ospf database
show link-state ospf database
show ospf database
`show ospf database` dumps the OSPFv2 link-state database, listing router LSAs and network LSAs with their link-state IDs, advertising routers, sequence numbers and ages. It directly satisfies the stem's requirement to display LSAs, unlike neighbour or interface commands that show adjacency state or timer values instead.
show protocols ospf database
An administrator needs to filter Type-3 LSAs entering an OSPF stub area on a Junos routing device. Which statement under the area hierarchy is required?
set protocols ospf area 0.0.0.2 type-3-lsa-block
set protocols ospf area 0.0.0.2 stub lsa-filter block-type-3
set protocols ospf area 0.0.0.2 filter type-3-lsa
set protocols ospf area 0.0.0.2 area-range 192.168.1.0/24 restrict
The 'restrict' option prevents the summary LSA from being injected into the area.
You are configuring OSPFv2 on a Junos device and need to inject default routes into an OSPF NSSA area. Which configuration command under protocols ospf area should be used?
set protocols ospf area 0.0.0.1 nssa default-metric 10
This command correctly generates a Type 7 default LSA into the NSSA area with the specified metric.
set protocols ospf area 0.0.0.1 stub default-metric 10
set protocols ospf area 0.0.0.1 nssa originate-default
set protocols ospf area 0.0.0.1 nssa default-route-advertise
What is the default OSPF reference bandwidth in Junos OS?
100 Mbps
Junos OS sets the OSPF reference bandwidth to 100 Mbps by default, so any interface at or above that speed receives a cost of 1. Administrators must raise this value on faster links to preserve meaningful cost differentiation.
10 Gbps
10 Mbps
1 Gbps
You want to change the OSPF reference bandwidth globally on a Junos routing device to accurately calculate costs for high-speed interfaces. Where is this configured?
set system ospf reference-bandwidth 10g
set protocols ospf reference-bandwidth 10g
Junos sets the OSPF reference bandwidth under the [edit protocols ospf] hierarchy, so the global command is set protocols ospf reference-bandwidth 10g. This raises the baseline used for cost calculation, giving accurate metrics for high-speed interfaces.
set protocols ospf area 0.0.0.0 reference-bandwidth 10g
set routing-options ospf reference-bandwidth 10g
Want more Interior Gateway Protocols practice?
Practice this domainWhat is the primary function of the RADIUS server attribute 'Tunnel-Medium-Type' (Attribute 65) when received during an 802.1X authentication exchange on an EX Series switch?
It defines the VLAN ID or VLAN name to which the authenticated client port should be dynamically assigned.
It determines the encryption cipher used between the switch and the RADIUS server.
It specifies the physical transport media type for the tunnel, such as 802 (Ethernet) for VLAN assignment.
Tunnel-Medium-Type (Attribute 65) defines the link-layer transport of the tunnel, using values such as 802 for Ethernet, and must accompany Tunnel-Type and Tunnel-Private-Group-ID for dynamic VLAN assignment. On EX Series switches, this triple lets the RADIUS server direct the supplicant into the correct VLAN after 802.1X succeeds.
It indicates the authentication protocol (PAP, CHAP, EAP) being used in the tunnel.
Which command allows an administrator to verify the active supplicant states and authentication status on a specific EX Series switch interface?
show ethernet-switching table dot1x
show access security clients
show radius-server authentication statistics
show dot1x interface
The 'show dot1x interface' command displays 802.1X supplicant state and authentication status per interface on EX Series switches. It directly satisfies the requirement to verify active supplicant states on a specific interface, unlike global dot1x commands that omit per-interface detail.
An enterprise network administrator needs to configure 802.1X authentication on EX Series switches. Which statement is correct regarding the default behavior of the supplicant timeout timer?
It dictates how long the switch waits before failing over to MAC RADIUS authentication.
It determines how long an authenticated client can remain idle before being disconnected.
It defines the duration the switch waits for an EAP-Request/Identity frame response before retransmitting.
The supplicant timeout timer governs the interval the authenticator waits for an EAP-Response/Identity from the supplicant before retransmitting the EAP-Request/Identity. This satisfies the stem's constraint on default 802.1X timer behaviour, since the switch acts as authenticator and retransmits to the supplicant when no reply arrives.
It specifies the interval before the switch drops the entire RADIUS authentication session.
You are configuring a captive portal on an EX Series switch. You want to ensure that specific management traffic and critical server subnets are accessible to clients *before* they authenticate through the captive portal. Which configuration feature accomplishes this?
RADIUS dynamic authorization profiles with pre-auth attributes.
Captive portal firewall exemption filters or walled garden (bypass) configuration.
Walled garden or firewall exemption filters let the switch permit pre-authentication traffic to specified destinations, such as DNS, DHCP and critical server subnets, while still forcing all other client traffic through the captive portal authentication process.
Global access profile authentication-bypass statements.
Static MAC bypass configuration under the protocols dot1x hierarchy.
Which statement accurately describes the function of the 'server-timeout' setting within a Juniper access profile?
It determines the maximum duration a client session can remain active before forced re-authentication.
It defines how long the switch waits for a reply from the RADIUS server before failing over to the next server.
The server-timeout value sets the interval the switch waits for a RADIUS reply before declaring that server unresponsive and moving to the next configured server. This satisfies the failover requirement: a slow or dead RADIUS server cannot stall authentication indefinitely, because the switch retries the next server once the timeout expires.
It dictates the interval at which the switch sends RADIUS accounting interim updates.
It specifies the idle timeout period for disconnected supplicants.
An EX Series switch is configured with 802.1X and MAC RADIUS. A client device connects that does not support 802.1X. The switch attempts 802.1X, times out, and successfully falls back to MAC RADIUS. However, the administrator notices a significant delay (several seconds) before the MAC RADIUS request is sent to the server. What parameter should be tuned to reduce this delay?
Reduce the 'supp-timeout' and 'max-retries' parameters under the 802.1X interface configuration.
Reducing `supp-timeout` and `max-retries` shortens the 802.1X EAPOL retransmission window before fallback triggers. The delay stems from the switch waiting through the full supplicant timeout multiplied by retry count; lowering both parameters accelerates the transition to MAC RADIUS authentication for non-802.1X clients.
Increase the 'server-timeout' parameter in the access-profile configuration.
Disable EAPOL-start message generation on the switch port.
Enable fast-reauth under the system authentication options.
Want more Layer 2 Authentication And Access Control practice?
Practice this domainA network administrator needs to display the multicast routing table entries, including incoming interfaces and outgoing interface lists (OIL), on a Junos device. Which operational command should be used?
show ospf route
show multicast route
The show multicast route command displays the multicast forwarding table, listing each (S,G) or (*,G) entry with its incoming interface and outgoing interface list. This directly satisfies the requirement to view OIL entries, unlike show route, which covers unicast routing only.
show igmp interface
show pim join
An administrator wants to configure MSDP (Multicast Source Discovery Protocol) between two autonomous system border routers to share active source information. Which configuration hierarchy in Junos is used to define the MSDP peer relationship?
[edit routing-options msdp]
[edit protocols msdp]
MSDP peer relationships are configured under the [edit protocols msdp] hierarchy, where you define each peer with its address and optional parameters such as local address and authentication. This satisfies the stem's requirement to share active source information between the two autonomous system border routers.
[edit protocols pim msdp]
[edit protocols bgp group msdp]
An enterprise design requires configuring an Anycast RP setup using two Junos routers to provide redundancy for PIM sparse-mode. Which mechanism is required to synchronize source state information between the two Anycast RPs within the same AS?
Multicast Source Discovery Protocol (MSDP)
MSDP is used between Anycast RPs to exchange source-active information so that receivers joined to one RP learn about sources registered to the other RP.
Protocol Independent Multicast Dense-Mode (PIM-DM)
IGMPv3 snooping
Multicast BGP (MBGP)
Which IPv4 multicast address range is designated for Source-Specific Multicast (SSM) operations according to IANA standards?
224.0.1.0/24
224.0.0.0/24
239.0.0.0/8
232.0.0.0/8
232.0.0.0/8 is the IANA-designated SSM range, letting receivers specify both source and group in IGMPv3 or MLDv2 joins. This satisfies the stem's requirement for the standard SSM block, unlike the ASM ranges 224.0.0.0/4 or the administratively scoped 239.0.0.0/8.
An engineer configures protocol independent multicast (PIM) sparse-mode on a Junos device and notices that join messages are not reaching the Rendezvous Point (RP). Which CLI command should the engineer use to verify the operational state of the PIM neighbor adjacencies and confirm that the hello messages are successfully exchanged?
show pim neighbor
PIM hello messages build neighbour adjacencies, and joins only propagate once these exist. The show pim neighbor command displays each neighbour's address, interface, uptime and holdtime, confirming whether hellos are being exchanged and revealing why join messages never reach the Rendezvous Point.
show mpls lsp
show rpc statistics
show igmp group
An engineer needs to view the MSDP Source-Active (SA) cache on a Junos router to verify which sources are currently active across different PIM domains. Which operational command should be executed?
show multicast source-cache
show bgp msdp active
show pim source-active
show msdp source-active
`show msdp source-active` directly queries the MSDP SA cache, listing active sources and their originating PIM domains. This satisfies the requirement to verify which sources are currently active across domains, since the SA cache is precisely the repository MSDP populates from SA messages. Other MSDP commands display peer or statistics data, not cached source entries.
Want more IP Multicast practice?
Practice this domainThe JNCIP-ENT exam has 65 questions and must be completed in 90 minutes. Always confirm current details on the vendor's official exam page.
Scenario-based questions covering exam objectives with detailed answer explanations.
The exam covers 8 domains: Ethernet Switching And Spanning Tree, BGP Advanced, EVPN, Class OF Service, IP Telephony Features, Interior Gateway Protocols, Layer 2 Authentication And Access Control, IP Multicast. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official Juniper Networks JNCIP-ENT exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.