20+ practice questions focused on Layer 2 Security — one of the most tested topics on the Juniper Networks Enterprise Routing and Switching, Specialist (JNCIS-ENT, JN0-352) (JNCIS-ENT) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Layer 2 Security PracticeAn engineer configures storm control on an EX Series switch to protect against broadcast floods. The configuration uses a bandwidth-percentage rate limit of 20%. Which traffic types are targeted by default when storm control is applied to an interface?
Explanation: On Juniper EX Series switches, the default storm control configuration targets broadcast, unknown unicast, and multicast (BUM) traffic. When you apply a storm control profile with a bandwidth-percentage of 20%, all three traffic types are policed by default unless you explicitly override them. This is because the default action for storm control includes all BUM traffic, and the bandwidth limit applies to each type individually or collectively depending on configuration. The correct answer is therefore D.
Which command allows an administrator to verify storm control statistics and drop counts on an EX Series switch interface?
Explanation: The correct operational command to check storm control status and dropped packet counters on interfaces is 'show ethernet-switching storm-control interface'.
An administrator configures MACsec with pre-shared keys (PSK) between two EX Series switches. After applying the configuration, the secure channel fails to establish. Which operational command should be used to troubleshoot the MKA session state and connectivity?
Explanation: On Junos EX Series switches, MACsec operational state — including the MKA (MACsec Key Agreement) session, CAK/ICK derivation, and secure channel status — is viewed with 'show macsec connections'. This command reports whether the MKA session is up, which peer is the key server, and whether the secure association (SA) is established, making it the correct troubleshooting tool when a PSK-based secure channel fails.
An administrator needs to configure port security on an access switch running Junos OS to limit the number of learned MAC addresses on interface ge-0/0/1 to a maximum of two. Which configuration statement accomplishes this?
Explanation: The correct hierarchy for configuring port security MAC limits on a specific interface is 'set switch-options interface ge-0/0/1.0 mac-limit limit 2'.
Which Junos configuration command enables Dynamic ARP Inspection (DAI) for a specific VLAN named 'VLAN10'?
Explanation: DAI is enabled under ethernet-switching-options secure-access-port vlan for the specific VLAN name.
+15 more Layer 2 Security questions available
Practice all Layer 2 Security questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Layer 2 Security. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Layer 2 Security questions on the JNCIS-ENT frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Layer 2 Security is tested as part of the Juniper Networks Enterprise Routing and Switching, Specialist (JNCIS-ENT, JN0-352) (JNCIS-ENT) blueprint. Practicing with targeted Layer 2 Security questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free JNCIS-ENT practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Layer 2 Security is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Layer 2 Security practice session with instant scoring and detailed explanations.
Start Layer 2 Security Practice →