Courseiva

CCNA Class OF Service Questions

39 questions · Class OF Service · All types, answers revealed

1
MCQeasy

Which standard Junos forwarding class is reserved for control plane traffic such as routing protocols and management traffic?

A.expedited-forwarding
B.assured-forwarding
C.best-effort
D.network-control
AnswerD

The network-control forwarding class carries control plane traffic, including routing protocol messages and management access, and is mapped to a queue with strict-high priority by default. This matches the stem's requirement for the standard class reserved for routing and management traffic.

Why this answer

In Junos, the network-control forwarding class is reserved for control plane traffic to ensure it receives priority handling.

2
MCQhard

You are troubleshooting a scenario where multi-field classifiers and behavior aggregate classifiers are both configured on the same ingress interface. In what order does Junos process classification?

A.Junos rejects configurations where both BA and MF classifiers are applied to the same interface
B.Both classifiers are executed simultaneously in hardware without precedence
C.Behavior aggregate classification is evaluated first, and multi-field classification can override the result
D.Multi-field classification is evaluated first, followed by behavior aggregate classification
AnswerC

Junos applies behaviour aggregate classifiers first, then multi-field classifiers, which can override the BA result. This ordering satisfies the stem's scenario of both classifier types on one ingress interface, letting MF classification take precedence for finer-grained matching.

Why this answer

Junos processes Behavior Aggregate (BA) classification first, followed by Multi-Field (MF) classification which can override the BA result.

3
MCQmedium

You are deploying a Junos EX Series switch in a campus network. Voice packets arrive untagged from IP phones on access ports, while a trunk uplink carries traffic already marked with DSCP values from the core. You need to ensure that all ingress traffic on the uplink is classified into forwarding classes based solely on the existing DSCP bits without inspecting Layer 3 or Layer 4 headers. Which classifier type should you apply to the uplink interface?

A.Fixed classifier
B.Multifield classifier
C.EXP classifier
D.Behavior aggregate classifier
AnswerD

A behavior aggregate (BA) classifier maps a single field, such as the DSCP value in the IP header, directly to a forwarding class and loss priority. Because the uplink traffic already carries DSCP markings from the core and you must classify solely on those bits, a BA classifier applied to the interface is exactly the right tool for this scenario.

Why this answer

Because the incoming packets on the uplink already carry DSCP markings from the core and the goal is to classify them without deeper header inspection, a behavior aggregate classifier is the correct mechanism. BA classifiers map a single CoS field such as DSCP directly to a forwarding class and loss priority, providing efficient, marking-based classification at ingress.

Exam trap

The trap here is assuming that any classifier that reads packet markings must inspect multiple header fields, when in fact a behavior aggregate classifier reads only a single field such as DSCP.

4
MCQmedium

You need to configure a classifier that inspects the Multiprotocol Label Switching (MPLS) experimental (EXP) bits. Which classifier type must you specify?

A.exp
B.fec
C.ieee-802.1
D.dscp
AnswerA

The exp classifier matches the MPLS experimental bits, the three-bit field in the label stack header used for QoS marking. Specifying exp lets the classifier inspect those bits directly, satisfying the requirement to classify traffic by MPLS EXP value rather than by IP DSCP or 802.1p.

Why this answer

The MPLS EXP bits are classified using the exp classifier type in Junos CoS configurations.

5
MCQeasy

In Junos CoS architecture, what role does a forwarding class play?

A.It represents an internal queue abstraction used to group and process packets
B.It specifies the egress interface physical speed
C.It provides static IP routing table entries
D.It defines the physical queue index directly on the ASIC
AnswerA

A forwarding class is an internal queue abstraction that groups packets sharing the same CoS treatment. Classifiers map traffic into forwarding classes, and schedulers then apply bandwidth and drop behaviour per class, controlling how each group is processed.

Why this answer

Forwarding classes act as internal labels used by the router to group traffic into specific queues for scheduling and drop treatment.

6
MCQhard

When applying a rewrite rule on an interface, you notice that packets are being remarked incorrectly. You realize that both a DSCP rewrite rule and an IEEE 802.1p rewrite rule are configured on the same physical interface. What is the rule regarding multiple rewrite rules on a single interface in Junos?

A.Applying multiple rewrite rules causes an automatic system kernel crash
B.Only one rewrite rule total can be applied per logical interface regardless of type
C.Different rewrite rule types (such as DSCP and ieee-802.1) can be applied simultaneously on the same logical interface
D.Only Layer 2 rewrite rules are permitted on trunk ports
AnswerC

Junos permits one rewrite rule per type per logical interface, so a DSCP rule and an ieee-802.1 rule coexist without conflict. Remarking errors therefore stem from elsewhere, since these two rule types operate on different header fields simultaneously.

Why this answer

Junos allows only one rewrite rule per packet header type (e.g., one DSCP, one 802.1p) per logical interface, but you can have different header types applied simultaneously if they map to different packet layers.

7
MCQeasy

Which statement describes the function of a drop-profile in Junos CoS?

A.It maps incoming CoS bits to internal forwarding classes
B.It defines how traffic is shaped to a specific peak rate
C.It rewrites outer VLAN tags on trunk interfaces
D.It determines when and how many packets to drop based on buffer occupancy
AnswerD

A drop-profile defines the drop behaviour applied by a scheduler, specifying drop probabilities at given buffer-occupancy thresholds. It controls when packets are discarded and in what proportion as queue depth rises, delivering weighted random early detection rather than simple tail drop.

Why this answer

A drop-profile defines the packet drop probability as a function of buffer occupancy to implement RED or WRED congestion avoidance.

8
MCQmedium

You are configuring a Junos router where a customer wants assured forwarding for three classes of traffic: AF11, AF21, and AF31. Each class must receive its own bandwidth guarantee and its own congestion behaviour. You are defining the behavior aggregate classifier. Which configuration element maps the incoming DSCP values to the correct forwarding classes and loss priorities?

A.A behavior aggregate classifier containing dscp and loss-priority entries for each code point
B.A scheduler map binding forwarding classes to schedulers with drop profiles
C.A multifield classifier referencing a firewall filter with dscp match conditions
D.A forwarding-class-to-DSCP rewrite rule applied on the egress interface
AnswerA

A behavior aggregate classifier maps specific DSCP code points to forwarding classes and loss priorities in a single lookup. Defining entries for AF11, AF21, and AF31 lets the router classify each packet on ingress by its DSCP value alone, which is precisely what the customer requires for assured forwarding with distinct per-class treatment.

Why this answer

Behavior aggregate classifiers perform a single-field lookup on the DSCP value and assign forwarding class and loss priority, making them the correct mechanism for mapping AF11, AF21, and AF31 to distinct classes with appropriate drop precedence. Multifield classifiers match multiple fields, rewrite rules act on egress, and scheduler maps govern scheduling after classification, so none of those performs the required ingress DSCP mapping.

Exam trap

The trap here is conflating egress rewrite rules, which set DSCP on outgoing packets, with ingress behavior aggregate classifiers, which interpret incoming DSCP to assign forwarding class and loss priority.

9
MCQhard

When configuring a hierarchical scheduler map on an MX Series router, what is the primary purpose of the aggregate level shaping?

A.To dynamically assign forwarding classes based on IP headers
B.To ensure absolute priority for best-effort traffic
C.To limit the total traffic across all queues associated with the scheduler map
D.To rewrite CoS bits on egress frames
AnswerC

Aggregate level shaping caps the combined bandwidth consumed by every queue beneath that scheduler node, rather than policing individual queues. This satisfies the requirement to limit total traffic across all queues associated with the scheduler map on the MX Series interface.

Why this answer

Aggregate level shaping controls the total bandwidth allocated to a group of queues or sub-interfaces, ensuring overall traffic limits are respected.

10
MCQhard

You are troubleshooting a CoS issue on a Juniper EX Series switch. You have configured a policer to limit traffic to 100 Mbps with a burst size of 10 KB. You notice that traffic occasionally exceeds 100 Mbps for short periods but is not being dropped. Which statement explains this behavior?

A.The policer is applied to the egress interface, and egress policers do not drop packets that exceed the rate.
B.The policer is misconfigured because it should drop all traffic that exceeds 100 Mbps immediately.
C.The policer is configured as a two-rate three-color policer, which allows traffic to exceed the committed rate without penalty.
D.The policer is configured as a single-rate two-color policer, which allows bursting up to the burst size before dropping.
AnswerD

A single-rate two-color policer uses a token bucket with a committed burst size. Traffic can burst up to the burst size without being dropped, as long as the average rate does not exceed the committed information rate. The short periods of exceeding 100 Mbps are within the burst allowance, so packets are not dropped. This behavior is expected and matches the scenario.

Why this answer

A single-rate two-color policer allows traffic to burst up to the configured burst size without being dropped, even if the instantaneous rate exceeds the committed information rate. The short periods of exceeding 100 Mbps are within the burst allowance, so the policer does not drop packets. This is the expected behavior for this type of policer.

Exam trap

The trap here is assuming that any traffic exceeding the committed rate is immediately dropped, ignoring the burst size allowance in token bucket policers.

11
MCQhard

An engineer configures a two-color policer on an MX router. What are the two states or outcomes for evaluated packets in a standard two-color policer?

A.In-profile and Out-of-profile only with temporal buffers
B.Green and Red
C.Green, Yellow, and Red
D.Discard and Forward without loss priority marking
AnswerB

A two-color policer classifies each packet against a single rate and burst threshold, marking it either green (within the committed rate, forwarded) or red (exceeding it, discarded or re-marked). No yellow state exists without a three-color policer.

Why this answer

A two-color policer evaluates packets as either conforming (within the rate limit) or non-conforming (exceeding the rate limit).

12
Multi-Selecthard

Which TWO parameters can be configured within a Junos scheduler definition? (Choose two)

Select 2 answers
A.rewrite-rule
B.bandwidth-limit
C.transmit-rate
D.drop-profile-map
E.policer-action
AnswersC, D

transmit-rate sets the assured bandwidth a scheduler guarantees to its queue, expressed as an absolute rate or percentage. It is a valid scheduler parameter, defining the minimum throughput allocated to traffic mapped to that forwarding class.

Why this answer

Schedulers include parameters such as transmit-rate, buffer-size, priority, and drop-profile-map.

13
MCQmedium

You are configuring Class of Service on an MX Series router. You want to ensure that the best-effort forwarding class receives at least 10 Mbps of bandwidth during congestion on a 1 Gbps interface, but you also want to allow it to use additional bandwidth if other queues are idle. Which scheduler configuration should you apply?

A.transmit-rate percent 1;
B.transmit-rate remainder;
C.transmit-rate 10m;
D.shaping-rate 10m;
AnswerC

The transmit-rate 10m configuration sets a guaranteed minimum bandwidth of 10 Mbps for the best-effort queue. When other queues are idle, the scheduler allows this queue to use additional bandwidth up to the interface capacity or the shaping rate, satisfying the requirement to allow bursting. This is the correct way to provide a guaranteed rate with excess sharing.

Why this answer

The scheduler transmit-rate statement with a specific value like 10m sets a guaranteed minimum bandwidth for the queue. When other queues are not using their allocated bandwidth, the scheduler allows this queue to exceed its minimum, up to the interface or shaping rate. This provides both a guaranteed floor and the ability to burst, which matches the scenario requirements.

Exam trap

The trap here is confusing transmit-rate with shaping-rate; transmit-rate guarantees a minimum and allows bursting, while shaping-rate enforces a maximum and prevents bursting.

14
MCQhard

An administrator configures a scheduler map on a Junos MX Series router with three queues: best-effort with transmit-rate remainder, expedited-forwarding with a strict-high transmit rate, and assured-forwarding with a transmit rate of 30 percent. Users report that voice quality degrades whenever assured-forwarding traffic bursts, even though expedited-forwarding is marked strict-high. Which statement explains this behavior?

A.Assured-forwarding queues always preempt expedited-forwarding queues because assured-forwarding has a defined transmit rate.
B.Expedited-forwarding requires a buffer size larger than the default to guarantee priority service.
C.Strict-high scheduling only guarantees priority when the queue is not rate-limited by a shared shaper or when the interface is not oversubscribed by other strict-high queues.
D.Strict-high priority traffic is only guaranteed bandwidth in excess of the configured shaping rate on the physical interface.
AnswerC

A strict-high queue is serviced first, but its effective rate can still be constrained by an interface-level shaper or by other strict-high queues competing for the same bandwidth. If the interface shaper or another strict-high queue consumes the available bandwidth, voice packets can be delayed even though the queue is marked strict-high.

Why this answer

A strict-high queue is always serviced before other queues, but its throughput is still bounded by any interface-level shaper and by the aggregate demand of other strict-high queues. When the interface is oversubscribed or shaped, voice can be delayed despite the strict-high designation, which matches the reported symptom.

Exam trap

The trap here is believing that strict-high priority bypasses all bandwidth limits, when interface shapers and competing strict-high queues can still constrain it.

15
MCQhard

An administrator applies a DSCP rewrite rule to an SRX Series device interface that faces an untrusted WAN. The goal is to mark voice packets with EF (46) and best-effort traffic with 0 before they leave the device. After applying the rewrite rule, the administrator notices that some packets still leave with their original DSCP values. Which statement explains the most likely cause?

A.The rewrite rule is applied to the wrong interface and must be applied to the ingress interface to take effect.
B.Rewrite rules are only supported on MPLS interfaces and cannot rewrite DSCP on IP interfaces.
C.The rewrite rule is applied on the egress interface but the packets were already classified into a different forwarding class by the ingress BA classifier.
D.The rewrite rule only applies to packets whose forwarding class and loss priority match an entry in the rewrite table, and unmatched packets keep their original DSCP.
AnswerD

A DSCP rewrite rule contains a table keyed by forwarding class and loss priority. Packets whose forwarding class and loss priority do not appear in that table are not rewritten and retain their original DSCP, which explains why some packets still leave with their original values on the WAN interface.

Why this answer

A DSCP rewrite rule rewrites only packets whose forwarding class and loss priority are listed in the rewrite table. Packets assigned to a forwarding class or loss priority that is absent from the table keep their original DSCP, which produces the mixed marking observed on the WAN interface.

Exam trap

The trap here is assuming a rewrite rule rewrites every packet, when it actually rewrites only the forwarding class and loss priority combinations present in its table.

16
Multi-Selecthard

Which TWO statements describe the characteristics of Random Early Detection (RED) and drop profiles in Junos? (Choose two)

Select 2 answers
A.Drop profiles are configured under the forwarding-classes hierarchy
B.Drop profiles drop 100% of packets immediately once the queue fill level reaches the start point
C.Drop profile curves plot drop probability against queue buffer fill level
D.Drop profiles help prevent TCP global synchronization by dropping packets before buffers are completely full
E.Drop profiles operate exclusively on Layer 2 control frames
AnswersC, D

The graph maps drop probability versus fill level percentage.

Why this answer

Drop profiles define drop probability against fill level, helping prevent TCP global synchronization.

17
MCQmedium

A network engineer notices that on a Junos EX Series switch, the voice queue is configured with strict-high priority, but during periods of congestion, data traffic is being dropped while voice traffic is unaffected. The engineer wants to ensure that voice traffic is not only prioritized but also limited so it cannot consume all interface bandwidth. Which scheduler property should be added to the voice queue to cap its maximum transmission rate?

A.shaping-rate
B.transmit-rate
C.buffer-size
D.excess-rate
AnswerA

The shaping-rate statement on a scheduler enforces a maximum transmission rate for a queue, effectively capping how much bandwidth it can consume. Applying shaping-rate to the strict-high voice queue limits its usage so it cannot starve other queues, which directly addresses the requirement to cap the voice queue while preserving its priority treatment.

Why this answer

A strict-high priority queue can consume all available bandwidth during congestion, starving lower-priority queues. To prevent this while preserving priority servicing, the shaping-rate property must be configured on the voice queue to enforce a maximum transmission rate. This caps the voice queue's consumption and protects other traffic.

Exam trap

The trap here is assuming that transmit-rate or excess-rate limits a queue's maximum bandwidth, when only shaping-rate enforces a hard upper bound on transmission.

18
Multi-Selectmedium

Which THREE types of classifiers are natively supported in Junos Class of Service? (Choose three)

Select 3 answers
A.exp
B.dscp
C.ieee-802.1
D.tcp-port
E.mac-address
AnswersA, B, C

The EXP classifier maps MPLS Experimental bits to forwarding classes and packet-loss priorities, satisfying the stem's requirement for natively supported Junos CoS classifiers. Junos supports exp, inet-precedence, and dscp classifiers; exp specifically handles MPLS label headers, unlike dscp or inet-precedence, which read IP header fields.

Why this answer

Junos CoS natively supports three fixed classifier types: exp, dscp, and ieee-802.1. Option A (exp) is correct because the MPLS EXP classifier maps the 3-bit EXP field in the MPLS shim header to forwarding classes and loss priorities. Option B (dscp) is correct because the DSCP classifier examines the 6-bit Differentiated Services Code Point in the IP ToS byte for IP traffic.

Option C (ieee-802.1) is correct because the IEEE 802.1 classifier inspects the 3-bit User Priority field in the 802.1Q VLAN tag for Layer 2 traffic. Options D (tcp-port) and E (mac-address) are not native Junos CoS classifier types; Junos classifiers operate on CoS marking fields such as EXP, DSCP, and 802.1p, not on TCP port numbers or MAC addresses.

19
MCQeasy

You are configuring a Junos SRX Series device to protect the control plane from a flood of BGP keepalives. You want to police traffic destined to the Routing Engine and apply a rate limit that drops excess packets while allowing normal protocol operation. Which CoS mechanism should you use?

A.A drop profile applied to the loopback interface
B.A rewrite rule applied to the loopback interface
C.A scheduler map applied to the loopback interface
D.A policer applied to a firewall filter that is bound to the loopback interface as an input filter
AnswerD

Policers enforce a rate limit and mark or drop excess traffic. Binding a firewall filter containing a policer to the loopback interface as an input filter applies the rate limit to traffic destined to the Routing Engine, which is exactly the control-plane protection described. This is the standard Junos approach for protecting the RE.

Why this answer

Policers are the Junos mechanism for enforcing a rate limit and dropping or marking excess traffic. To protect the Routing Engine, the policer is referenced by a firewall filter applied as an input filter on the loopback interface, which is the standard control-plane protection pattern.

Exam trap

The trap here is confusing egress queuing tools such as scheduler maps and drop profiles with ingress rate-limiting tools such as policers.

20
Multi-Selecthard

You are tuning an egress interface on a Junos device for a service provider environment. You have configured three drop profiles and applied them to a scheduler map. You need to verify that the weighted random early detection (WRED) behaviour is operating as intended under congestion. Which TWO statements correctly describe how Junos implements drop profiles and WRED? (Choose two.)

Select 2 answers
A.Drop profiles only apply to low-priority queues and are ignored for high-priority forwarding classes.
B.WRED drops packets randomly as soon as the queue reaches its configured maximum buffer size, regardless of fill level.
C.Each drop profile defines fill-level thresholds and corresponding drop probabilities that determine which packets are discarded as the queue fills.
D.Drop profiles are applied directly to the physical interface and override any scheduler map configuration.
E.A drop profile is applied to a forwarding class through the scheduler map, linking the class to its drop behaviour.
AnswersC, E

A Junos drop profile is a table of queue fill-level percentages mapped to drop probabilities. As the average queue depth crosses each configured fill level, the associated probability determines the likelihood that an arriving packet is discarded. This is the core mechanism that makes WRED gradual rather than a hard tail drop, and it is exactly what must be verified when tuning congestion behaviour.

Why this answer

Drop profiles in Junos map queue fill levels to drop probabilities and are attached to forwarding classes through schedulers and scheduler maps, which together produce WRED behaviour that ramps up dropping as congestion increases. Statements claiming interface-level override, tail-drop-only operation, or restriction to low-priority queues misdescribe the configuration hierarchy and the gradual nature of weighted random early detection.

Exam trap

The trap here is confusing WRED probabilistic dropping, which starts at lower fill-level thresholds, with tail drop, which only discards when the queue is completely full.

21
MCQeasy

What is the primary function of a behavior aggregate (BA) classifier in Junos CoS?

A.It classifies packets based exclusively on header CoS bits such as DSCP or EXP
B.It drops packets exceeding a predefined bandwidth rate
C.It rewrites VLAN tags on egress interfaces
D.It classifies packets based on Layer 4 port numbers and source IP addresses
AnswerA

A behaviour aggregate classifier inspects only the CoS marking already present in the packet header — DSCP for IP or EXP for MPLS — and maps it to a forwarding class and loss priority, without any multifield inspection of source, destination or port.

Why this answer

A Behavior Aggregate (BA) classifier classifies packets based solely on the CoS bits in the packet header (such as DSCP, EXP, or IEEE 802.1p).

22
Multi-Selectmedium

Which TWO statements are correct regarding the behavior of policers in Junos? (Choose two)

Select 2 answers
A.Policers buffer exceeding packets in temporal memory queues until transmission capacity opens
B.Policers can mark the loss priority of exceeding packets
C.Policers are always applied to egress interfaces only
D.Policers guarantee a minimum bandwidth allocation for best-effort traffic
E.Policers use a token bucket algorithm to measure traffic rates
AnswersB, E

Junos policers support actions beyond discard: they can set the packet's loss priority (for example, to high) on traffic exceeding the configured rate. This satisfies the statement's claim, letting downstream congestion controls drop marked packets preferentially.

Why this answer

Policers can drop traffic or mark loss priority, and they operate based on token bucket algorithms.

23
MCQmedium

You want to map three loss priorities (low, medium-low, high) to different drop profiles within a specific forwarding class. Which statement should you use inside the scheduler configuration?

A.classifier-map
B.drop-profile-map
C.loss-priority-mapping
D.queue-drop-profile
AnswerB

The `drop-profile-map` statement inside a scheduler maps each loss priority (low, medium-low, high) to a specific drop profile, satisfying the requirement to assign three distinct profiles within one forwarding class. Junos uses this hierarchy under the scheduler's `drop-profile-map` to bind PLP values to profiles.

Why this answer

In Junos scheduler configurations, drop-profile-map associates a loss priority and forwarding class with a specific drop profile.

24
MCQhard

An enterprise WAN edge router running Junos OS has a single 1 Gbps uplink. The design requires that when total egress congestion occurs, the queue carrying business-critical database replication traffic must be guaranteed a minimum of 400 Mbps, while the queue carrying guest internet traffic must never consume more than 200 Mbps even if bandwidth is idle. Which CoS configuration accomplishes this requirement?

A.Apply a transmit-rate of 400m to the critical queue and a transmit-rate of 200m to the guest queue in the scheduler.
B.Apply a transmit-rate of 400m to the critical queue and a shaping-rate of 200m to the guest queue in the scheduler.
C.Apply a shaping-rate of 400m to the critical queue and a transmit-rate of 200m to the guest queue in the scheduler.
D.Apply a transmit-rate of 400m with exact to the critical queue and a transmit-rate of 200m with exact to the guest queue in the scheduler.
AnswerB

A transmit-rate guarantees the critical queue its minimum share during congestion, while a shaping-rate caps the guest queue's maximum throughput at 200 Mbps regardless of idle capacity. Together they satisfy both the guaranteed-minimum and maximum-limit requirements on the congested uplink interface.

Why this answer

Guaranteeing a minimum and enforcing a maximum are distinct scheduler behaviors. A transmit-rate provides the guaranteed minimum share during congestion, whereas a shaping-rate imposes a hard ceiling on how much a queue can transmit even when bandwidth is available. The critical queue needs the guarantee and the guest queue needs the cap, so pairing transmit-rate with shaping-rate matches the design intent.

Exam trap

The trap here is assuming that a transmit-rate acts as a bandwidth ceiling for a queue, when it actually only guarantees a minimum share during congestion.

25
MCQeasy

Which configuration stanza is used to define custom forwarding classes in Junos?

A.[edit class-of-service drop-profiles]
B.[edit class-of-service classifiers]
C.[edit class-of-service forwarding-classes]
D.[edit class-of-service schedulers]
AnswerC

Custom forwarding classes are defined under the [edit class-of-service forwarding-classes] hierarchy, where each class is mapped to a queue number. This stanza lets you name and assign up to eight classes, satisfying the requirement to define them explicitly rather than rely on default best-effort, expedited, assured and network-control classes.

Why this answer

Custom forwarding classes are defined under the [edit class-of-service forwarding-classes] hierarchy.

26
MCQeasy

A network engineer is configuring class of service on a Junos switch and wants to guarantee that the network control traffic forwarding class always has bandwidth available for routing protocol updates, even during heavy data congestion. The engineer also wants to ensure that this class is not starved by other queues. Which scheduler configuration should the engineer apply to the network control forwarding class?

A.A scheduler with a strict-high priority and a policer to cap its rate
B.A scheduler with a low priority and a small buffer size
C.A scheduler with a guaranteed transmit-rate and a high priority
D.A scheduler with an excess transmit-rate and a low priority
AnswerC

Assigning a guaranteed transmit-rate ensures the network control class always has bandwidth reserved, while high priority causes it to be serviced ahead of lower-priority data queues. Together they protect routing protocol updates during congestion without the starvation risk of strict-high priority. This is the recommended approach for the network control forwarding class.

Why this answer

A guaranteed transmit-rate reserves bandwidth for the network control forwarding class, and high priority ensures it is serviced ahead of ordinary data queues, protecting routing protocol updates during congestion without the starvation risk of strict-high priority. Low priority, excess-only rates, and strict-high with policing all fail to provide the required balance of guaranteed bandwidth and preferential servicing.

Exam trap

The trap here is reaching for strict-high priority for important control traffic, when a guaranteed rate with high priority protects bandwidth without starving all other forwarding classes.

27
Multi-Selectmedium

Which THREE methods are valid for marking packet headers using CoS rewrite rules in Junos? (Choose three)

Select 3 answers
A.exp
B.ieee-802.1
C.dscp
D.vlan-id
E.mpls-ttl
AnswersA, B, C

The EXP field is the three-bit MPLS header field that Junos rewrite rules can mark, satisfying the requirement for valid CoS rewrite targets. Rewrite rules map forwarding classes to EXP bits on egress label-switched interfaces, so exp qualifies alongside inet-precedence and dscp as a supported header marker.

Why this answer

In Junos CoS rewrite rules, the valid header fields you can rewrite are the EXP bits (for MPLS), IEEE 802.1p (for Layer 2 CoS), and DSCP (for IP ToS). Option A (exp) is correct because MPLS EXP bits are rewritten via the exp rewrite rule. Option B (ieee-802.1) is correct because 802.1p priority bits in VLAN tags are rewritten via the ieee-802.1 rewrite rule.

Option C (dscp) is correct because IP DSCP values are rewritten via the dscp rewrite rule. Options D (vlan-id) and E (mpls-ttl) are not valid rewrite-rule match/rewrite fields; vlan-id is a VLAN identifier, not a CoS marking, and MPLS TTL is a forwarding/hop-limit field, not a CoS rewrite target.

Exam trap

JNCIP-ENT often tests the confusion between rewrite markers and unrelated header fields — candidates pick vlan-id or mpls-ttl because they sound like header fields, but only dscp, exp, and ieee-802.1 are valid CoS rewrite targets.

28
MCQmedium

Which command displays the configured scheduler maps and their association with forwarding classes on a Junos device?

A.show class-of-service queue
B.show class-of-service scheduler-map
C.show class-of-service forwarding-class
D.show configuration class-of-service schedulers
AnswerB

The `show class-of-service scheduler-map` command lists every configured scheduler map alongside its forwarding-class associations, satisfying the requirement to display both mappings together. Unlike `show class-of-service scheduler-map <name>`, which requires a specific map name, this form enumerates all maps, directly answering the stem's request for configured scheduler maps and their forwarding-class associations.

Why this answer

The show class-of-service scheduler-map command displays details of scheduler maps and queue associations.

29
MCQeasy

A network administrator is configuring CoS on a Junos EX Series switch and wants to verify the mapping between forwarding classes and queues as currently applied to a specific interface. Which operational command should the administrator use to display the forwarding class to queue mapping along with scheduler and classifier details for a given interface?

A.show class-of-service forwarding-class
B.show class-of-service interface
C.show configuration class-of-service
D.show interfaces extensive
AnswerB

The show class-of-service interface command displays the CoS configuration applied to a specific interface, including the classifier, rewrite rule, scheduler map, and the forwarding class to queue mapping. This directly provides the information the administrator needs to verify how forwarding classes map to queues on the interface in question.

Why this answer

The show class-of-service interface command is the operational command that displays the CoS elements applied to a specific interface, including the classifier, rewrite rule, scheduler map, and the resulting forwarding class to queue mapping. It is the correct tool to verify how classes map to queues on that interface.

Exam trap

The trap here is assuming that viewing the CoS configuration stanza shows the applied per-interface mapping, when only the operational interface command reveals the effective bindings.

30
Multi-Selecthard

Which TWO statements are true regarding traffic shapers versus policers in Junos? (Choose two)

Select 2 answers
A.Shapers are typically implemented on egress interfaces
B.Policers are primarily configured on egress interfaces for shaping purposes
C.Shapers buffer exceeding traffic to smooth out bursts over time
D.Policers buffer exceeding traffic in dedicated memory queues
E.Shapers operate without drop profiles or buffer allocation
AnswersA, C

Shaping delays packets rather than dropping them, so it must be applied where the device controls transmission scheduling. Egress interfaces allow the router to queue and meter outbound traffic, whereas ingress shaping is impractical because the upstream sender controls the rate.

Why this answer

Shapers buffer excess traffic to smooth out bursts, whereas policers drop or mark exceeding traffic immediately.

31
MCQeasy

Which command is used to verify the operational state of forwarding classes and their assigned queues on a specific interface on Junos?

A.show route forwarding-table
B.show class-of-service interface
C.show interfaces extensive
D.show firewall
AnswerB

`show class-of-service interface` displays per-interface forwarding-class-to-queue mappings, scheduler associations and queue counters, directly satisfying the stem's requirement to verify operational state on a specific interface. Unlike CoS configuration output, it reports live queue assignment and statistics, confirming that classification and scheduling behave as intended.

Why this answer

The show class-of-service interface command displays operational CoS details, including queue mappings, for specified interfaces.

32
MCQmedium

You are configuring a rewrite rule on a Junos device to mark outgoing packets with the appropriate DSCP value based on their forwarding class. You want to ensure that packets in the expedited-forwarding class are marked with DSCP EF (46). Which configuration correctly accomplishes this?

A.Set the rewrite rule to map forwarding class expedited-forwarding to IP precedence 5 and apply it to the ingress interface.
B.Set the rewrite rule to map forwarding class expedited-forwarding to DSCP 46 and apply it to the egress interface.
C.Set the rewrite rule to map forwarding class expedited-forwarding to DSCP 46 and apply it to the ingress interface.
D.Set the rewrite rule to map forwarding class expedited-forwarding to DSCP 46 and apply it to all interfaces using the apply-groups command.
AnswerB

A rewrite rule is used to mark CoS bits on outgoing packets. To mark expedited-forwarding packets with DSCP EF (46), you configure a DSCP rewrite rule that maps the expedited-forwarding forwarding class to code point 46, and then apply that rewrite rule to the egress interface. This is the correct configuration.

Why this answer

To mark expedited-forwarding packets with DSCP EF (46), you configure a DSCP rewrite rule that maps the expedited-forwarding forwarding class to code point 46. This rewrite rule must be applied to the egress interface so that outgoing packets are marked correctly. Applying it to the ingress interface or using apply-groups is not correct.

Exam trap

The trap here is applying the rewrite rule to the ingress interface; rewrite rules always operate on egress to mark packets leaving the device.

33
Multi-Selectmedium

Which THREE actions can be executed by a firewall filter policer when traffic exceeds the specified rate? (Choose three)

Select 3 answers
A.discard
B.loss-priority high
C.reroute-lsp
D.forward
E.queue-switch
AnswersA, B, D

A policer's discard action drops excess traffic immediately at the interface, enforcing the committed rate without buffering. This satisfies the stem's requirement for actions triggered when traffic exceeds the specified rate, since discarding is one of the three standard policer outcomes alongside rate-limiting and marking.

Why this answer

In Junos firewall filter policers, the three valid actions that can be configured when traffic exceeds the specified rate are discard, loss-priority high, and forward. Option A (discard) is correct because the policer can simply drop out-of-profile packets, which is the most common bandwidth-limiting behavior. Option B (loss-priority high) is correct because the policer can mark excess packets with a high loss priority so downstream congestion-management (RED/WRED) drops them preferentially instead of dropping them immediately.

Option D (forward) is correct because the policer can pass out-of-profile packets through while optionally setting a loss priority, allowing later devices or schedulers to handle them. Option C (reroute-lsp) is not a policer action; it is an MPLS routing action used in routing policies or forwarding-adjacency contexts, not in a policer's then statement. Option E (queue-switch) is not a valid policer action either; queue selection is handled by forwarding classes and schedulers, not by policers.

34
MCQmedium

You need to ensure that delay-sensitive voice traffic is serviced before all other queues on an egress interface. Which scheduler property should you configure for the voice forwarding class?

A.buffer-size
B.transmit-rate
C.drop-profile
D.priority high
AnswerD

Configuring priority high on the voice forwarding class places it in a strict-priority queue, which is serviced before all other queues until empty. This satisfies the stem's requirement that delay-sensitive voice traffic be serviced ahead of every other queue.

Why this answer

In Junos, priority high or priority low is used to designate strict priority queuing for a forwarding class in a scheduler.

35
MCQhard

You are troubleshooting a Junos EX Series switch where a firewall filter applied to an ingress interface uses a policer to mark excess traffic as loss priority high. Downstream, a scheduler map on the egress interface is supposed to drop those high-loss-priority packets first using a drop profile. However, all excess packets are being dropped immediately at ingress instead of being forwarded and selectively discarded at egress. What is the most likely cause?

A.The policer is configured with the discard action instead of the loss-priority high action, so it drops excess packets rather than remarking them.
B.The scheduler map is not applied to the egress interface, so the drop profile never takes effect.
C.The drop profile thresholds are configured with a fill level of zero, causing all packets to be dropped.
D.The behavior aggregate classifier is remarking the loss priority back to low before egress processing.
AnswerA

A policer with a discard action discards non-conforming packets at ingress, which matches the observed immediate loss. To remark excess traffic and let the egress drop profile handle selective discarding, the policer must use loss-priority high or a similar remark action. Checking the policer action is therefore the correct first step in diagnosing this behaviour.

Why this answer

When a policer uses the discard action, non-conforming packets are dropped at the point of policing rather than being remarked and passed along. To achieve the intended design where excess traffic is marked loss priority high and then selectively discarded by an egress drop profile, the policer must use a loss-priority remark action. The other explanations describe egress-side or classifier-side issues that would not produce immediate ingress drops of only excess traffic.

Exam trap

The trap here is overlooking the policer action itself and assuming the egress drop profile is at fault, when the immediate ingress loss is caused by the policer discarding packets instead of remarking them.

36
MCQmedium

You are deploying a Junos EX Series switch in a campus network. Voice traffic arrives untagged and must be placed into the expedited-forwarding forwarding class based solely on the Differentiated Services Code Point (DSCP) value carried in the IP header. No firewall filter is allowed on the ingress interface. Which classifier type should you apply to the interface?

A.A multi-field (MF) classifier applied to the ingress interface
B.An egress rewrite rule applied to the interface
C.A behavior aggregate (BA) classifier applied to the ingress interface
D.A fixed classifier applied to the ingress interface
AnswerC

A BA classifier maps a single CoS field such as DSCP, IP precedence, or MPLS EXP into a forwarding class and loss priority without examining other packet fields. Because the requirement is to classify solely on the DSCP bits in the IP header with no firewall filter, the BA classifier applied to the ingress interface is exactly the right tool.

Why this answer

A behavior aggregate classifier examines a single CoS field, such as the DSCP bits, and assigns the packet to a forwarding class and loss priority. Since the requirement is to classify untagged voice traffic purely by DSCP with no firewall filter, a BA classifier bound to the ingress interface is the correct and simplest solution.

Exam trap

The trap here is assuming that any classifier can read DSCP, when in fact a fixed classifier ignores header bits entirely and an MF classifier requires a firewall filter.

37
MCQmedium

You have configured a custom scheduler map, but traffic in the best-effort queue is being starved during periods of heavy congestion. Which scheduler parameter should you adjust to guarantee a minimum bandwidth for this queue?

A.drop-profile-map
B.buffer-size temporal
C.priority high
D.transmit-rate
AnswerD

The transmit-rate parameter sets the minimum guaranteed bandwidth for a queue, ensuring the best-effort queue receives its allocated share even under congestion. Configuring transmit-rate prevents starvation by reserving capacity, whereas other scheduler parameters only influence excess-bandwidth distribution or buffer behaviour.

Why this answer

The transmit-rate parameter in a scheduler definition guarantees a minimum bandwidth allocation for a queue even during congestion.

38
MCQmedium

You are deploying a Junos device where a single physical interface carries both a latency-sensitive multicast video stream and best-effort file transfers. You must ensure that the video traffic is transmitted with the lowest possible per-hop latency and jitter, even when the best-effort queue is congested, without starving the other queues. Which CoS feature should you configure on the egress interface to meet this requirement?

A.A strict-high priority scheduler applied to the video forwarding class queue
B.A low-priority scheduler with a large buffer size on the video queue
C.A weighted round-robin scheduler with a high transmit-rate on the video queue
D.A rate-limited policer applied to the video forwarding class
AnswerA

A strict-high priority scheduler services the video queue ahead of all other queues whenever packets are present, giving the multicast stream the lowest possible latency and jitter even under congestion. Junos guarantees the strict-high queue is drained before other queues are scheduled, which directly satisfies the requirement without dropping the other classes entirely.

Why this answer

Strict-high priority scheduling is the only Junos scheduler property that guarantees a queue is serviced ahead of all others when packets are present, which is exactly what latency-sensitive multicast video requires under congestion. Weighted scheduling, low-priority scheduling, and policing all address bandwidth allocation or rate limiting rather than strict preferential transmit ordering, so they cannot provide the lowest per-hop latency and jitter.

Exam trap

The trap here is assuming that assigning a high transmit-rate or a large buffer to a queue gives it strict precedence over other queues, when only a strict-high priority scheduler actually services that queue first.

39
MCQmedium

You want to apply a rewrite rule on an outgoing interface to remark the DSCP bits of packets leaving your Juniper router. Where must this rewrite rule be applied within the CoS hierarchy?

A.[edit firewall]
B.[edit class-of-service interfaces]
C.[edit routing-options]
D.[edit class-of-service classifiers]
AnswerB

Rewrite rules that remark DSCP on egress are configured under [edit class-of-service interfaces] on the outbound interface, where the scheduler maps forwarding classes to rewrite values. Applying it at the interface level ensures the remarking occurs as packets leave.

Why this answer

Rewrite rules in Junos are applied on egress interfaces under the interfaces statement within the class-of-service configuration hierarchy.

Ready to test yourself?

Try a timed practice session using only Class OF Service questions.