Courseiva

CCNA BGP Questions

34 questions · BGP · All types, answers revealed

1
MCQeasy

An administrator wants to modify the Local Preference attribute for all routes received from a specific external BGP peer. Where must this policy be applied in Junos?

A.Import policy applied to the eBGP neighbor or group
B.Export policy applied to the eBGP group
C.Forwarding plane firewall filter
D.Global system-level static route policy
AnswerA

Local Preference is a well-known discretionary attribute evaluated during inbound processing, so an import policy bound to the eBGP neighbour or group modifies it before best-path selection. Export policy would affect the peer's decision, not the local router's.

Why this answer

Inbound routing policies on Junos affect attributes like Local Preference before path selection occurs.

2
Multi-Selectmedium

Which TWO characteristics describe eBGP compared to iBGP? (Choose two)

Select 2 answers
A.Automatic route reflection enabled by default
B.Must reside within the same Autonomous System
C.Peers reside in different Autonomous Systems
D.Default TTL of 1
E.Default Local Preference of 200
AnswersC, D

eBGP sessions form between routers whose peers sit in different Autonomous Systems, with the AS number in the OPEN message differing. This contrasts with iBGP, where both peers belong to the same AS, satisfying the characteristic being tested.

Why this answer

Option C is correct because eBGP (External BGP) is specifically designed to exchange routing information between routers in different Autonomous Systems, whereas iBGP peers must be within the same AS. Option D is correct because eBGP sessions between directly connected external peers use a default IP TTL of 1 (multihop eBGP requires explicitly raising the TTL with the ebgp-multihop command), while iBGP sessions default to TTL 255. Option A is incorrect because route reflection is an iBGP mechanism (used to avoid the full-mesh requirement) and is not enabled by default on eBGP.

Option B is incorrect because residing within the same Autonomous System describes iBGP, not eBGP. Option E is incorrect because the default Local Preference in BGP is 100, not 200, and this value is not a distinguishing eBGP-versus-iBGP characteristic.

3
Multi-Selecthard

Which THREE statements describe the role and function of the BGP Router ID? (Choose three)

Select 3 answers
A.It automatically replaces the AS_PATH attribute if missing.
B.It is exchanged during the BGP OPEN message negotiation phase.
C.It is used as a final tie-breaker in the BGP path selection algorithm.
D.It must be identical across all routers within the same Autonomous System.
E.It is a 32-bit identifier represented in dotted-quad notation.
AnswersB, C, E

The Router ID is carried in the BGP OPEN message, allowing peers to identify each other during session establishment. This satisfies the negotiation-phase constraint: each speaker advertises its Router ID before the session reaches Established, so both peers learn the other's identifier as part of capability exchange rather than through later UPDATE messages.

Why this answer

Option B is correct because the BGP Router ID is carried in the BGP OPEN message as part of session establishment, allowing peers to identify each other during negotiation. Option C is correct because when all other path attributes are equal, BGP uses the lowest Router ID as the final tie-breaker in the best-path selection algorithm. Option E is correct because the Router ID is a 32-bit value written in dotted-quad notation, just like an IPv4 address.

Option A is wrong because the AS_PATH attribute is generated and propagated by BGP itself and is never replaced by the Router ID. Option D is wrong because Router IDs must be unique within an Autonomous System, not identical across all routers.

4
MCQmedium

During troubleshooting of a flapping BGP session, you notice BGP Notification messages being sent. Which BGP message type is responsible for tearing down a session due to an error condition?

A.KEEPALIVE
B.UPDATE
C.OPEN
D.NOTIFICATION
AnswerD

The NOTIFICATION message carries error codes and subcodes, and its receipt causes the peer to tear down the BGP session. Unlike OPEN, UPDATE or KEEPALIVE, it is the message type explicitly used to signal an error condition and terminate the adjacency.

Why this answer

The Notification message is sent when an error is detected, causing the BGP connection to close immediately.

5
MCQhard

A Juniper router is configured with a BGP peer group that includes multiple neighbors. You want to apply a policy to all neighbors in the group that sets the next-hop to a specific address for all routes received from them. Which configuration statement should you use?

A.Configure the next-hop self statement under the group.
B.Apply an import policy under the group configuration that sets the next-hop to the desired address.
C.Apply an export policy under each neighbor that sets the next-hop to the desired address.
D.Use a routing instance to rewrite the next-hop for all BGP routes.
AnswerB

Applying an import policy at the group level affects all neighbors in that group. The policy can match routes and set the next-hop attribute. This is the correct approach because it ensures consistency and reduces configuration redundancy. The next-hop is set before the route is installed in the routing table, influencing BGP path selection.

Why this answer

To modify the next-hop for routes received from all neighbors in a BGP group, you apply an import policy at the group level. This policy can match the desired routes and set the next-hop attribute. This approach is efficient and ensures that all neighbors in the group are affected consistently.

Export policies and next-hop self are used for outbound advertisements, not for modifying received routes.

Exam trap

The trap here is confusing import and export policies, or assuming that next-hop self can set an arbitrary address, when it actually sets the next-hop to the local router's address and is used on export.

6
MCQmedium

What is the purpose of the BGP Keepalive message and what is its default interval in Junos?

A.To maintain the session; sent every 30 seconds by default.
B.To report session errors; sent immediately upon failure.
C.To negotiate capabilities; sent every 60 seconds.
D.To update routing tables; sent every 5 seconds.
AnswerA

BGP Keepalive messages sustain established peering sessions by confirming the peer remains reachable, resetting the Hold Timer before it expires. Junos defaults to a 30-second Keepalive interval, with a 90-second Hold Timer, satisfying the stem's requirement for both the message's purpose and its default interval.

Why this answer

BGP KEEPALIVE messages are sent periodically to confirm that the peer session is still alive and to reset the Hold Timer, preventing the session from being torn down. In Junos (and per RFC 4271), the default Keepalive interval is 30 seconds, with a default Hold Time of 90 seconds — exactly three times the Keepalive interval. If three consecutive Keepalives are missed, the Hold Timer expires and the session resets.

Exam trap

The trap is mixing up BGP message types — candidates confuse KEEPALIVE (liveness, 30s default) with NOTIFICATION (errors) or OPEN (capabilities), and often misremember the 30/90 second default timer relationship.

How to eliminate wrong answers

Option B is wrong because session errors are reported via NOTIFICATION messages, not KEEPALIVE — NOTIFICATION is sent immediately when an error is detected to tear down the session with a specific error code. Option C is wrong because capability negotiation is performed by the OPEN message using Optional Parameters (e.g., MP-BGP, route refresh, 4-byte AS), and the 60-second figure is incorrect for Keepalive. Option D is wrong because routing table updates are carried in UPDATE messages, and 5 seconds is not a BGP timer default — it more closely resembles an IGP hello interval (OSPF hello is 10s, IS-IS is 10s).

7
MCQmedium

You are a network administrator for a company using Juniper EX Series switches. You have an iBGP session between two routers in the same AS. You notice that routes learned from one iBGP peer are not being advertised to another iBGP peer. What is the default behavior of iBGP that explains this?

A.The AS path loop prevention detects the local AS and discards the route.
B.The next-hop attribute is not changed, so the route is considered invalid.
C.iBGP requires a full mesh, so routes are only advertised to eBGP peers.
D.iBGP split horizon: routes learned from an iBGP peer are not advertised to other iBGP peers.
AnswerD

By default, iBGP enforces split horizon, meaning a route learned from an iBGP peer is not advertised to another iBGP peer. This prevents routing loops within the AS. To allow propagation, you must configure either a full mesh, route reflectors, or confederations.

Why this answer

iBGP split horizon is the default behavior that prevents a route learned from one iBGP peer from being advertised to another iBGP peer. This is designed to prevent routing loops within an AS. To allow route propagation, you must use a full mesh, route reflectors, or confederations.

Exam trap

The trap here is assuming that iBGP automatically propagates routes to all peers, when in fact split horizon prevents this without additional configuration.

8
MCQeasy

An administrator configures a BGP policy to reject routes with an AS_PATH containing a specific AS number. Which match condition in a Junos routing policy is used to evaluate the AS_PATH?

A.pref
B.metric
C.as-path
D.community
AnswerC

The `as-path` match condition evaluates a route's AS_PATH attribute against a regular expression, directly satisfying the requirement to reject routes containing a specific AS number. Junos applies this condition within a policy term, so any path whose AS sequence matches the expression is filtered before advertisement or installation.

Why this answer

In Junos, the as-path match condition evaluates routes against a defined as-path regular expression.

9
MCQhard

Which BGP message type is responsible for negotiating session parameters, including autonomous system numbers, hold times, and BGP identifiers during session establishment?

A.Notification
B.Open
C.Update
D.Keepalive
AnswerB

The Open message carries the version, my autonomous system number, hold time and BGP identifier, letting both peers agree on session parameters before any routing data flows. It is the first message exchanged after the TCP three-way handshake, directly satisfying the stem's requirement for negotiating session parameters during establishment.

Why this answer

The BGP Open message is the first message sent after a TCP connection is established. It contains parameters such as the BGP version, local AS number, hold time, BGP identifier, and optional parameters (capabilities).

10
Multi-Selectmedium

Which TWO BGP message types are responsible for maintaining session state or reporting errors without carrying routing information? (Choose two)

Select 2 answers
A.OPEN
B.KEEPALIVE
C.UPDATE
D.QUERY
E.NOTIFICATION
AnswersB, E

KEEPALIVE messages carry only the 19-byte BGP header with no path attributes, and their sole function is refreshing the hold timer to confirm the peer session remains active. This satisfies the requirement for a message type that maintains session state without transporting routing information.

Why this answer

B. KEEPALIVE is correct because BGP peers exchange KEEPALIVE messages periodically (default 60 seconds, hold time 180 seconds) to confirm the session is still alive and to maintain the established state without carrying any NLRI routing information. E.

NOTIFICATION is correct because it is sent when an error condition is detected (for example a hold-timer expiry, bad message header, or unsupported capability), causing the session to be torn down; it reports the error and carries no routing information. A. OPEN is not correct here because, although it establishes the session and negotiates capabilities, it is a session-initiation message rather than a state-maintenance or error-reporting message.

C. UPDATE is not correct because UPDATE is precisely the message that carries routing information (NLRI and path attributes). D.

QUERY is not correct because QUERY is not a BGP message type; the four BGP message types are OPEN, UPDATE, KEEPALIVE, and NOTIFICATION.

Exam trap

JNCIS-ENT often tests the distinction between BGP message types that carry routing information (UPDATE) and those that manage session state (KEEPALIVE, NOTIFICATION). Candidates may mistakenly include OPEN as a session maintenance message, but OPEN is only for initial negotiation.

11
MCQmedium

You are configuring a new eBGP session between two Juniper routers in different autonomous systems. The physical link is up and you can ping the remote interface, but the BGP session remains in the Active state. Reviewing the configuration, you notice that the neighbor statement on both routers specifies the loopback address of the peer, but no additional configuration is present. What is the most likely cause of the problem?

A.The BGP session is not configured with authentication, which is required for eBGP.
B.The BGP session is not configured with multihop because the peers are using loopback addresses.
C.The BGP router ID is not configured and defaults to the loopback address.
D.The autonomous system numbers are mismatched on the two routers.
AnswerB

eBGP peers using loopback addresses are not on the same subnet, so the default TTL of 1 causes the TCP connection to fail. The session remains in Active state because the router cannot establish a TCP session to a non-directly connected peer. Configuring multihop with an appropriate TTL allows the BGP session to be established over multiple hops.

Why this answer

The session remains in Active because the routers cannot establish a TCP connection to each other's loopback addresses. By default, eBGP uses a TTL of 1, so packets to a non-directly connected address are dropped. Configuring multihop with a TTL greater than 1 allows the BGP session to be established over multiple hops, resolving the Active state.

Exam trap

The trap here is assuming that because the physical link is up and you can ping the remote interface, BGP should automatically work without considering that the loopback address requires multihop configuration.

12
MCQhard

While examining a BGP routing table, you notice a route with an ORIGIN attribute set to 'Incomplete'. What does this indicate about the origin of the route?

A.The route was learned via eBGP from an unknown AS.
B.The BGP update packet was corrupted in transit.
C.The route is an aggregate route without specific components.
D.The route was injected into BGP via redistribution (e.g., from static or IGP).
AnswerD

BGP ORIGIN codes are IGP, EGP and Incomplete. Incomplete signals the prefix was not learned natively via a BGP network statement but injected through redistribution from a static route or IGP, so its path origin cannot be fully verified.

Why this answer

BGP origin types are IGP (0), EGP (1), and Incomplete (2). Incomplete means the route origin is unknown, typically redistributed from an IGP or static route.

13
MCQeasy

An engineer is troubleshooting a BGP session between two routers and notices that the connection is stuck in the Active state. What does the Active state indicate about the BGP finite state machine?

A.The TCP connection attempt is ongoing or has failed, and the router is actively trying to establish a TCP session with the peer.
B.The local router has successfully completed the TCP handshake and is waiting for an Open message.
C.BGP has exchanged Open messages and is currently negotiating capability parameters.
D.The BGP session is fully operational and exchanging Keepalive messages.
AnswerA

The Active state means the router has sent a TCP connection request to the peer but has not received a response, so it keeps retrying. The session is not established; the router is actively attempting to open TCP port 179, which distinguishes it from Idle or Connect states.

Why this answer

In the Active state, the local router has initiated a TCP connection to the peer, but the TCP handshake has not yet completed successfully or has failed. This usually points to routing, firewall, or port 179 issues.

14
MCQhard

A Junos router is configured as a BGP route reflector. It learns a route from a client and reflects it to a non-client and another client. Which attribute does the route reflector modify or add to prevent routing loops?

A.MED and NEXT_HOP
B.AS_PATH and LOCAL_PREF
C.COMMUNITY and ATOMIC_AGGREGATE
D.ORIGINATOR_ID and CLUSTER_LIST
AnswerD

The route reflector adds ORIGINATOR_ID, carrying the originating client's router ID, and CLUSTER_LIST, recording the reflection path. A client receiving a route containing its own router ID or cluster ID detects the loop and discards it.

Why this answer

When a route reflector reflects a route, it adds the ORIGINATOR_ID (the router ID of the route's originator) and CLUSTER_LIST (a list of cluster IDs the route has traversed) to prevent routing loops. If a route reflector receives a route with its own router ID in ORIGINATOR_ID or its cluster ID in CLUSTER_LIST, it discards the route.

Exam trap

The trap is assuming AS_PATH is used for loop prevention in iBGP route reflection — AS_PATH is not modified within an AS; ORIGINATOR_ID and CLUSTER_LIST are the correct attributes.

How to eliminate wrong answers

Option A is wrong because MED and NEXT_HOP are not used for loop prevention by route reflectors; NEXT_HOP is typically unchanged (unless next-hop-self is configured), and MED is an optional attribute for path selection. Option B is wrong because AS_PATH and LOCAL_PREF are not modified by route reflectors for loop prevention — AS_PATH is used for inter-AS loop prevention, and LOCAL_PREF is for outbound path selection. Option C is wrong because COMMUNITY and ATOMIC_AGGREGATE are not used for route reflector loop prevention; communities are for tagging, and ATOMIC_AGGREGATE indicates aggregation.

15
Multi-Selectmedium

You are configuring a BGP session between two Juniper routers. You want to ensure that the session can be established and that routes are exchanged correctly. Which two statements are true about BGP message types? (Choose two.)

Select 2 answers
A.ROUTE-REFRESH messages are mandatory for all BGP sessions.
B.UPDATE messages are used to advertise and withdraw routes.
C.OPEN messages are used to establish the BGP session and negotiate capabilities.
D.KEEPALIVE messages are used to request retransmission of lost UPDATE messages.
E.NOTIFICATION messages are used to advertise new routes.
AnswersB, C

UPDATE messages carry Network Layer Reachability Information (NLRI) for advertised routes and path attributes, as well as withdrawn routes. They are the primary messages for exchanging routing information. This is a correct description of the UPDATE message's purpose.

Why this answer

In BGP, OPEN messages initiate the session and negotiate parameters, while UPDATE messages carry routing information, including advertisements and withdrawals. KEEPALIVE messages maintain the session, NOTIFICATION messages report errors, and ROUTE-REFRESH messages are optional for requesting route updates. Thus, the OPEN and UPDATE message descriptions are correct.

Exam trap

The trap here is confusing the roles of KEEPALIVE and NOTIFICATION messages, or assuming that ROUTE-REFRESH is mandatory, when in fact it is optional and must be negotiated.

16
MCQeasy

Which TCP port is used by BGP to establish communication between peers?

A.UDP 520
B.TCP 179
C.TCP 80
D.TCP 500
AnswerB

BGP peers establish sessions over TCP port 179, using it for the initial three-way handshake and all subsequent UPDATE, KEEPALIVE and NOTIFICATION messages. This satisfies the stem's requirement, distinguishing BGP from protocols such as RIP that operate over UDP.

Why this answer

BGP operates over TCP port 179.

17
MCQmedium

A network administrator needs to modify the Local Preference path attribute for all routes received from a specific external BGP peer using a routing policy on Junos. Under which configuration hierarchy should the routing policy be applied?

A.policy-options policy-statement term then export
B.protocols bgp group neighbor import
C.routing-options rib inet.0 static
D.protocols ospf area
AnswerB

Import policies applied at the BGP neighbour or group level modify attributes of routes received from that peer before they enter the routing table. Configuring 'import' under protocols bgp group neighbour therefore satisfies the requirement to alter Local Preference for all routes from the specific external peer.

Why this answer

To modify Local Preference for routes received from a specific eBGP peer, the routing policy must be applied as an import policy on that neighbor or group under 'protocols bgp group <name> neighbor <ip> import <policy>'. Import policies are evaluated on inbound updates, which is where Local Preference is typically set for eBGP-learned routes.

Exam trap

The trap is confusing import vs. export policy direction — candidates often apply the policy as export, but Local Preference for received routes must be set on import.

How to eliminate wrong answers

Option A is wrong because export policies are applied to outbound updates and cannot set Local Preference for routes received from a peer — Local Preference is a local attribute used for outbound path selection within the AS. Option C is wrong because 'routing-options rib inet.0 static' is for static route configuration, not for applying BGP import policies. Option D is wrong because 'protocols ospf area' is for OSPF configuration and has nothing to do with BGP path attributes.

18
MCQmedium

What is the primary function of the BGP OPEN message?

A.To advertise reachability and path attributes for network prefixes.
B.To maintain the connection state and verify liveliness at regular intervals.
C.To signal fatal errors and immediately terminate the BGP session.
D.To establish a peering session and negotiate capabilities such as ASNs and timers.
AnswerD

The OPEN message initiates the BGP session after TCP establishment, carrying the version, local AS number, hold time, router ID, and optional capability parameters. This negotiation satisfies the stem's requirement by exchanging ASNs and timers before any UPDATE messages flow.

Why this answer

The OPEN message is the first message sent after a TCP connection is established, used to negotiate BGP parameters such as ASN, hold time, and router ID.

19
Multi-Selecthard

Which THREE actions occur when a BGP speaker receives a Notification message from a peer? (Choose three.)

Select 3 answers
A.A Keepalive message is immediately sent in response to acknowledge the error.
B.The peer router automatically re-establishes the connection without applying the connect retry timer.
C.The TCP connection associated with the BGP session is closed.
D.The BGP session transitions to the Idle state.
E.All routes learned from that specific peer are removed from the BGP routing table.
AnswersC, D, E

A Notification message signals an unrecoverable error, so the receiving speaker tears down the underlying TCP connection carrying the session. This satisfies the scenario's requirement that the TCP connection associated with the BGP session is closed.

Why this answer

When a BGP speaker receives a Notification message, it treats this as a fatal error condition for the session. Option C is correct because the BGP speaker closes the underlying TCP connection (port 179) that carries the BGP session, since the Notification signals an unrecoverable error. Option D is correct because the BGP Finite State Machine transitions the session to the Idle state after the TCP connection is torn down, where it waits for the ConnectRetry timer before attempting to re-establish.

Option E is correct because all routes previously learned from that specific peer are withdrawn and removed from the BGP routing table (Adj-RIB-In and Loc-RIB), since the peer is no longer considered a valid source. Option A is incorrect because Keepalive messages are only sent periodically (default 60 seconds) to maintain an established session, not to acknowledge errors; Notifications themselves terminate the session. Option B is incorrect because re-establishment does not happen automatically or immediately—the router must wait for the ConnectRetry timer (default 120 seconds) before attempting a new TCP connection.

20
MCQhard

You are running BGP between two routers. One router has a 4-byte ASN (e.g., ASN 65536). The remote router only supports 2-byte ASNs. How does BGP handle this compatibility issue?

A.The session fails to open because 4-byte ASNs are strictly incompatible with 2-byte peers.
B.The router uses the reserved AS 23456 (AS_TRANS) in place of the 4-byte ASN for legacy peers.
C.The session establishes as iBGP instead of eBGP.
D.The 4-byte ASN is truncated to 2 bytes by dropping the most significant bits.
AnswerB

AS_TRANS (AS 23456) is a reserved 2-byte placeholder defined in RFC 6793, allowing a 4-byte-ASN speaker to present a compatible 2-byte value to a legacy peer. The real 4-byte ASN travels in the AS4_PATH attribute, so the constraint of 2-byte-only remote support is satisfied without losing path information.

Why this answer

When a BGP speaker with a 4-byte ASN peers with a legacy 2-byte-only router, BGP uses the reserved AS number 23456 (AS_TRANS) in the AS_PATH for the legacy peer. The 4-byte ASN is carried in a separate AS4_PATH attribute, and the legacy router sees AS_TRANS as a placeholder, preserving compatibility.

Exam trap

JNCIS-ENT often tests the specific reserved ASN value (23456) and the AS4_PATH attribute; candidates may think the session fails or that the ASN is truncated, missing the AS_TRANS mechanism.

How to eliminate wrong answers

Option A is wrong because 4-byte ASNs are not strictly incompatible; RFC 6793 defines a backward-compatible mechanism using AS_TRANS. Option C is wrong because the session remains eBGP; the ASN size does not change the session type. Option D is wrong because the 4-byte ASN is not truncated; truncation would corrupt routing, and the protocol instead uses AS_TRANS plus AS4_PATH.

21
Multi-Selectmedium

Which TWO statements describe characteristics of BGP path attributes? (Choose two.)

Select 2 answers
A.Local Preference is a well-known discretionary attribute that is exchanged across eBGP peers.
B.MED is a well-known mandatory attribute used for inter-AS route selection.
C.Well-known mandatory attributes must be recognized by all BGP implementations and included in every Update message containing path information.
D.Optional transitive attributes are ignored by BGP speakers that do not recognize them and are never passed along to other peers.
E.AS_PATH is a well-known mandatory attribute.
AnswersC, E

Well-known mandatory attributes, such as AS_PATH and NEXT_HOP, must be understood by every BGP speaker and carried in each Update advertising a route. This universal recognition and mandatory inclusion is precisely what distinguishes them from optional or discretionary attributes.

Why this answer

Option C is correct because well-known mandatory attributes, by definition in BGP (RFC 4271), must be recognized by every BGP implementation and must appear in every UPDATE message that carries reachable NLRI/path information. Option E is correct because AS_PATH is one of the three well-known mandatory attributes (along with NEXT_HOP and ORIGIN), and it is present in every UPDATE advertising a route. Option A is wrong because Local Preference is a well-known discretionary attribute, not one exchanged across eBGP peers — it is typically propagated only within an AS via iBGP.

Option B is wrong because MED is an optional non-transitive attribute, not well-known mandatory, and it influences inter-AS route selection only when explicitly configured. Option D is wrong because optional transitive attributes that are unrecognized are still passed along to other peers (with the partial bit set), not discarded.

22
MCQmedium

You need to ensure that BGP sessions fail over within sub-second intervals if a link degrades or goes down. Which protocol should you integrate with BGP on your Junos router?

A.BFD (Bidirectional Forwarding Detection)
B.STP (Spanning Tree Protocol)
C.LDP (Label Distribution Protocol)
D.OSPF
AnswerA

BFD provides sub-second failure detection by sending rapid, lightweight hello packets independently of routing protocols, then signalling BGP immediately when a session degrades. This satisfies the stem's sub-second failover constraint, since BGP's own keepalive timers (seconds to minutes) are far too slow to detect link degradation promptly.

Why this answer

BFD (Bidirectional Forwarding Detection) provides fast failure detection that can trigger BGP session teardown within milliseconds.

23
Multi-Selectmedium

You are configuring BGP on a Juniper SRX Series firewall. You want to influence inbound traffic from an eBGP peer for a specific prefix. You have applied an export policy that prepends your AS multiple times. Which two statements are true about AS path prepending in this scenario? (Choose two.)

Select 2 answers
A.It makes the AS path longer, which is less preferred by BGP path selection.
B.It is applied using an import policy on the local router.
C.It affects outbound traffic from your local router.
D.It can be used to influence inbound traffic by making the path less preferred.
E.It requires the 'as-override' statement to function.
AnswersA, D

AS path prepending increases the length of the AS path attribute. BGP prefers shorter AS paths, so a longer path is less likely to be selected by remote routers. This is a common technique to influence inbound traffic by making a particular path appear less attractive.

Why this answer

AS path prepending is a technique used in BGP to influence inbound traffic by artificially lengthening the AS path. A longer AS path is less preferred by BGP's path selection algorithm, so remote routers may choose an alternative path. It is applied via export policy on the local router and does not affect outbound traffic selection.

Exam trap

The trap here is confusing inbound and outbound traffic influence; AS path prepending affects how others reach you, not how you reach others.

24
MCQeasy

An engineer must inspect the BGP state and verify the received prefix counts from a specific neighbor on an MX Series router. Which operational command should be used?

A.show bgp neighbor 10.1.1.1
B.show ospf neighbor
C.show route protocol bgp
D.show bgp summary
AnswerA

`show bgp neighbor 10.1.1.1` queries the BGP neighbour session directly, displaying its state and the received prefix count for that specific peer. This satisfies the stem's requirement to inspect state and verify received prefixes from one neighbour on the MX Series, unlike summary or route-table commands that lack per-neighbour detail.

Why this answer

The command 'show bgp neighbor 10.1.1.1' displays detailed BGP session information for the specified neighbor, including state, received prefix counts, and other statistics. It is the correct command to inspect a specific neighbor.

Exam trap

JNCIS-ENT often tests the difference between 'show bgp summary' and 'show bgp neighbor'. Candidates may choose 'show bgp summary' for detailed neighbor information, but it only provides a summary. The correct command for detailed state and prefix counts for a specific neighbor is 'show bgp neighbor <ip>'.

How to eliminate wrong answers

Option B is wrong because 'show ospf neighbor' displays OSPF neighbor information, not BGP. Option C is wrong because 'show route protocol bgp' displays BGP routes in the routing table, not neighbor state or prefix counts. Option D is wrong because 'show bgp summary' provides a summary of all BGP neighbors, not detailed information for a specific neighbor.

25
MCQeasy

An engineer needs to verify which BGP routes are currently installed in the forwarding table (FIB). Which command should be used?

A.show route forwarding-table protocol bgp
B.show bgp forwarding
C.show route table inet.0
D.show route summary
AnswerA

`show route forwarding-table protocol bgp` queries the FIB itself, filtering to BGP-derived entries, so it directly satisfies the requirement to verify which BGP routes are actually installed for forwarding. The alternative `show route protocol bgp` reads only the routing table (RIB), which may hold BGP routes that never reached the FIB.

Why this answer

The forwarding table is viewed using 'show route forwarding-table'.

26
MCQhard

A BGP speaker receives an UPDATE message containing a malformed attribute. According to BGP specifications, which action does the receiving router take?

A.Strip the attribute and propagate the route to iBGP peers.
B.Send an UPDATE message requesting retransmission.
C.Send a NOTIFICATION message and terminate the BGP session.
D.Silently ignore the attribute and install the route.
AnswerC

BGP treats a malformed path attribute as a fatal error under RFC 4271. The receiving speaker must send a NOTIFICATION with the appropriate error code and subcode, then tear down the peering session rather than silently discard the UPDATE or retain the route.

Why this answer

A malformed attribute or critical error triggers a NOTIFICATION message with an appropriate error code, followed by session teardown.

27
Multi-Selectmedium

Which TWO statements are true regarding BGP communities in Junos? (Choose two)

Select 2 answers
A.Communities are optional transitive path attributes.
B.Communities replace the AS_PATH attribute entirely.
C.Communities are evaluated after the router ID tie-breaker.
D.Communities can only be applied to eBGP sessions and are stripped on iBGP.
E.Standard communities are formatted as two 16-bit values separated by a colon (ASN:value).
AnswersA, E

BGP communities are optional transitive path attributes, so a router that does not recognise them still propagates them to peers. This satisfies the stem's requirement for a true statement about Junos BGP communities, as Junos stores and matches them without stripping the attribute.

Why this answer

Option A is correct because BGP communities are carried as an optional transitive path attribute (attribute type code 8), meaning they are not required in every UPDATE but, when present, are propagated to other BGP speakers. Option E is correct because a standard community is a 32-bit value expressed as two 16-bit numbers in the ASN:value format, for example 65000:100, where the first field is typically the autonomous system number and the second is an administrator-defined value. Option B is wrong because communities are an additional attribute and do not replace AS_PATH, which remains the primary loop-prevention and path-selection attribute.

Option C is wrong because community matching is a policy action performed during route evaluation, not a tie-breaker after router ID; the router ID tie-breaker applies only when comparing otherwise equal paths. Option D is wrong because communities can be attached and matched on both eBGP and iBGP sessions, and they are not automatically stripped on iBGP.

28
Multi-Selectmedium

Which TWO actions occur when a Junos BGP routing policy includes the 'next policy' action? (Choose two)

Select 2 answers
A.Evaluation of the current policy terminates immediately.
B.Evaluation proceeds to the next independent policy defined in the chain.
C.The route is immediately accepted and installed in the routing table.
D.The route is rejected and dropped.
E.Evaluation jumps to the next term within the same policy block.
AnswersA, B

The 'next policy' action halts evaluation of the current policy immediately, so no further terms within it are assessed. The route then passes to the next policy in the chain, satisfying the stem's requirement for this terminating behaviour rather than accepting or rejecting the route.

Why this answer

Option A is correct because the 'next policy' action terminates evaluation of the current policy immediately, so no further terms within that policy are processed. Option B is correct because, after stopping the current policy, Junos proceeds to evaluate the next independent policy in the chain (the next policy referenced in the import/export chain), allowing subsequent policies to make the final accept/reject decision. Option C is incorrect because 'next policy' does not itself accept or install a route; acceptance requires an explicit 'accept' action or a default policy decision.

Option D is incorrect because 'next policy' does not reject or drop the route; rejection is performed by a 'reject' action. Option E is incorrect because jumping to the next term within the same policy block is not what 'next policy' does; that would be the behavior of 'next term'.

Exam trap

JNCIS-ENT often tests the difference between 'next policy' and 'next term'. Candidates may confuse the two, thinking 'next policy' jumps to the next term within the same policy, but it actually moves to the next policy in the chain.

29
MCQhard

While reviewing BGP updates, you notice an attribute type code of 3 with a value representing an IP address. Which well-known mandatory path attribute is this?

A.AS_PATH
B.ORIGIN
C.NEXT_HOP
D.LOCAL_PREF
AnswerC

NEXT_HOP carries attribute type code 3 and holds an IP address, exactly matching the observed BGP update. As a well-known mandatory attribute, it specifies the next-hop IP for the advertised prefix, satisfying the stem's requirement to identify the attribute by its type code and IP-address value.

Why this answer

Attribute type code 3 corresponds to NEXT_HOP, which is a well-known mandatory attribute indicating the IP address of the router used to reach the destination.

30
Multi-Selectmedium

Which TWO statements accurately describe the behavior of the BGP AS_PATH attribute? (Choose two)

Select 2 answers
A.It is automatically stripped when crossing a confederation boundary.
B.It is a well-known mandatory attribute.
C.It is prepended with the local AS number when sent to an eBGP peer.
D.It is modified when an update is sent to an iBGP peer.
E.It is an optional non-transitive attribute used for internal metrics.
AnswersB, C

AS_PATH is a well-known mandatory attribute, meaning every BGP update carrying reachable NLRI must include it, and all BGP implementations must recognise and process it. This mandatory classification distinguishes it from optional or discretionary attributes.

Why this answer

Option B is correct because AS_PATH is classified as a well-known mandatory BGP attribute, meaning every BGP UPDATE that carries reachable NLRI must include it, and all BGP-speaking routers must recognize and process it. Option C is correct because when a router advertises a route to an external BGP (eBGP) peer, it prepends its own local AS number to the AS_PATH, which is the core loop-prevention and path-length mechanism of BGP. Option A is wrong because AS_PATH is not stripped at confederation boundaries; confederation sub-AS numbers are carried in a separate AS_CONFED_SEQUENCE/AS_CONFED_SET segment, and the attribute itself is preserved.

Option D is wrong because updates sent to internal BGP (iBGP) peers do not modify AS_PATH — the local AS is only prepended on eBGP advertisements. Option E is wrong because AS_PATH is not an optional non-transitive attribute; that description fits attributes like MED, and AS_PATH is well-known mandatory rather than used for internal metrics.

31
MCQmedium

You need to configure authentication for a BGP peering session on a Junos device to prevent spoofing attacks. Where is the MD5 authentication key configured?

A.firewall family inet filter bgp-auth
B.system authentication-algorithm md5
C.protocols bgp group name authentication-key
D.routing-options md5-key
AnswerC

MD5 authentication is configured at the BGP group level under protocols bgp, using the authentication-key statement, which applies the TCP MD5 signature to every session in that group. This prevents spoofed TCP segments from establishing or hijacking the peering.

Why this answer

BGP MD5 authentication keys are configured under the specific neighbor or group definition using the authentication-key statement.

32
MCQeasy

An administrator needs to verify the exact BGP timers negotiated with an eBGP peer on a Junos device. Which operational command should be used?

A.show ospf neighbor
B.show bgp summary
C.show route advertising-protocol bgp
D.show bgp neighbor
AnswerD

The show bgp neighbor command displays per-peer session details, including the negotiated hold time and keepalive interval exchanged with the eBGP peer. This directly satisfies the requirement to verify the exact timers actually agreed, rather than configured values.

Why this answer

The 'show bgp neighbor' command provides detailed information about a BGP neighbor session, including negotiated hold time, keepalive interval, state, and message statistics.

33
Multi-Selecthard

Which THREE attributes are optional transitive BGP path attributes? (Choose three)

Select 3 answers
A.AS4_PATH
B.AGGREGATOR
C.MED
D.COMMUNITY
E.LOCAL_PREF
AnswersA, B, D

AS4_PATH is an optional transitive attribute, carrying 4-byte AS path information when older 2-byte speakers are involved, satisfying the "optional transitive" classification. Its transitive nature ensures it propagates across autonomous systems that lack native 4-byte AS support, unlike well-known mandatory attributes such as AS_PATH, which every BGP speaker must recognise and include.

Why this answer

AS4_PATH (A) is an optional transitive attribute defined in RFC 6793 that carries 4-byte AS path information for backward compatibility with 2-byte AS speakers, and it is propagated to other ASes. AGGREGATOR (B) is an optional transitive attribute (type code 7) that records the AS and router ID of the device that performed route aggregation, and it is passed along to BGP peers. COMMUNITY (D) is an optional transitive attribute (type code 8) used to tag routes with community values that are propagated across AS boundaries.

MED (C) is an optional nontransitive attribute, so it is not propagated beyond the neighboring AS, and LOCAL_PREF (E) is a well-known discretionary attribute used only within a single AS, so neither qualifies as optional transitive.

34
MCQeasy

An administrator wants to gracefully restart a BGP routing daemon without dropping the underlying TCP session or causing traffic loss. Which Junos feature should be enabled?

A.Nonstop Active Routing (NAR)
B.TCP MD5 Signature bypass
C.BGP Bidirectional Forwarding Detection (BFD)
D.BGP Graceful Restart
AnswerD

BGP Graceful Restart preserves forwarding state during a routing daemon restart by having the helper router retain previously learned routes, avoiding traffic loss. The restarting router's peers keep the TCP session alive, satisfying the requirement to restart BGP without dropping the underlying session or disrupting forwarding.

Why this answer

Graceful Restart allows a BGP speaker to express its ability to preserve forwarding state while restarting the control plane.

Ready to test yourself?

Try a timed practice session using only BGP questions.