JNCIS-ENT · domain
troubleshooting
Practise Juniper Networks Enterprise Routing and Switching, Specialist (JNCIS-ENT, JN0-352) (JNCIS-ENT) troubleshooting practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice troubleshooting questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about troubleshooting
troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common troubleshooting exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All troubleshooting questions (320)
Click any question to see the full explanation, or start a practice session above.
You have an EX Series switch running RSTP. You want to configure a port connected to a printer to immediately transition to forwarding without going through the learning state. Which configuration statement should you use?
Medium2You are configuring VRRP on an EX4300 switch acting as the master for VLAN 100. You want the master to immediately relinquish its role if its uplink toward the core fails, so that the backup can take over without waiting for the default VRRP advertisement timer to expire. Which VRRP feature should you configure?
Medium3A network administrator is configuring IS-IS on a Juniper router. They want to ensure that the router participates in both Level 1 and Level 2 routing. Which configuration statement is correct?
Easy4When configuring a routing instance of type 'virtual-router', which THREE characteristics apply? (Choose three)
Hard5Which THREE parameters are included when calculating the MST region configuration digest? (Choose three.)
Medium6An administrator wants to modify the Local Preference attribute for all routes received from a specific external BGP peer. Where must this policy be applied in Junos?
Easy7An administrator is configuring a new point-to-point link between two Junos routers running IS-IS. By default, how does IS-IS handle adjacency establishment on a point-to-point link compared to a broadcast link?
Medium8Which TWO characteristics describe eBGP compared to iBGP? (Choose two)
Medium9An enterprise network design requires implementing private VLANs (PVLANs) on an EX Series switch. Which THREE components or port types are characteristic of a private VLAN architecture? (Choose three.)
Hard10What is the OSPF router ID format used by Junos OS when initializing the OSPF routing process if no explicit router ID is configured?
Easy11What happens if you have an area address mismatch in a Level 1 adjacency?
Medium12Which THREE actions occur when a Junos router with GRES and NSR enabled performs a manual Routing Engine switchover while running OSPF and BGP? (Choose three)
Hard13Which THREE statements describe the role and function of the BGP Router ID? (Choose three)
Hard14You are troubleshooting an OSPF network on Junos devices. A router in area 1 is not receiving external routes from an ASBR in area 0. The ABR connecting the areas is correctly configured. You suspect a problem with LSA flooding. Which LSA type is used by the ASBR to advertise external routes, and what is its flooding scope?
Hard15During troubleshooting of a flapping BGP session, you notice BGP Notification messages being sent. Which BGP message type is responsible for tearing down a session due to an error condition?
Medium16Which TWO factors must be carefully managed when running OSPF over a GRE tunnel interface on Junos devices? (Choose two.)
Hard17A Juniper router is configured with a BGP peer group that includes multiple neighbors. You want to apply a policy to all neighbors in the group that sets the next-hop to a specific address for all routes received from them. Which configuration statement should you use?
Hard18What is the primary function of the RSTP port role known as the 'Backup' port?
Easy19You need to write a Layer 2 firewall filter to drop inbound frames with a specific source MAC address on an EX Series switch. Where must this filter be applied to take effect?
Medium20What is the purpose of the 'lsp-generation-interval'?
Easy21An operator configures RSTP across multiple EX Series switches. A rogue switch running legacy STP is connected to an RSTP switch. How does the RSTP switch handle interaction with the legacy STP switch?
Hard22An administrator configures a GRE tunnel with a tunnel key enabled for security segmentation between two sites. The tunnel comes up, but traffic fails to pass. Debugging reveals that packets are dropped because the receiving router rejects the packets. What is the most probable configuration mismatch?
Hard23You need to ensure that traffic entering interface ge-0/0/1 is forced into a specific forwarding routing instance named 'corp-fwd', regardless of the destination IP address in the packet header. Which configuration steps must you perform?
Medium24Which of the following are true regarding the IS-IS 'hello-interval'? (Choose TWO)
Medium25You are configuring a GRE tunnel over an IPv4 network, but you want to secure the GRE traffic using IPsec (GRE over IPsec). In Junos, how is this typically structured on SRX or MX devices?
Hard26During an audit of an IS-IS routing network, an engineer examines the Type-Length-Value (TLV) structures used in IS-IS PDUs. Which TLV is specifically responsible for carrying IPv4 internal and external reachability information when using wide metrics?
Easy27You are reviewing the configuration of an EX Series switch and notice that interface ge-0/0/15 is configured with 'interface-mode access' but has no explicit 'vlan members' statement defined. Which VLAN does the interface default to?
Medium28You have configured a qualified next-hop for a static route to 10.1.1.0/24 with a primary next-hop of 192.168.1.1 and a qualified next-hop of 192.168.1.2. Both next-hops are reachable. Under what condition will the qualified next-hop be used?
Hard29During the examination of IS-IS packet captures on a multi-access LAN interface, an engineer notices a specific PDU type being transmitted periodically by the Designated Intermediate System (DIS) to maintain synchronized link-state databases. Which PDU type performs this function?
Easy30What is the purpose of the BGP Keepalive message and what is its default interval in Junos?
Medium31You are implementing MACsec on an EX Series switch to secure a point-to-point link between two data centers. The link uses a 10 Gigabit Ethernet interface. You want to ensure that only encrypted traffic is accepted and that unencrypted frames are dropped. Which configuration parameter must be set on the interface?
Hard32Which TWO features characterize OSPFv3 compared to OSPFv2? (Choose two)
Medium33Which of the following are true regarding IS-IS authentication? (Choose TWO)
Medium34Which THREE conditions can cause a Virtual Chassis primary Routing Engine election or switchover to occur unexpectedly? (Choose three)
Hard35You are configuring an EX Series switch and want to set the forward delay timer to 15 seconds. Which command is used?
Medium36An enterprise network runs MSTP. Instance 0 is always reserved for which specific purpose?
Hard37An engineer needs to configure a static IPv4 route on a Juniper Networks MX Series router pointing traffic destined for 192.168.100.0/24 to next-hop 10.0.0.1. Which configuration accomplishes this task?
Easy38An administrator configures Dynamic ARP Inspection (DAI) on an access switch. To ensure legitimate ARP packets from the default gateway (which uses a statically configured IP address on a core router) are not dropped, what must be configured?
Hard39On an MX Series router, you configure a GRE tunnel that terminates on a routing instance (VRF). Where must the tunnel source and destination addresses be routable?
Hard40You are configuring authentication for OSPF on a Junos router using MD5. Where must the MD5 key ID and password be defined in the configuration hierarchy?
Medium41Which command is used to verify the IS-IS adjacency state on a Junos device?
Easy42You are configuring MACsec on a pair of Juniper EX4300 switches to secure data links between wiring closets. Which key agreement protocol is used by default in Junos MACsec to dynamically negotiate and manage encryption keys?
Medium43An engineer is preparing to perform an In-Service Software Upgrade (ISSU) on a pair of dual-RE MX240 routers. Which condition must be met to ensure the ISSU succeeds without dropping traffic?
Hard44An engineer configures a Virtual Chassis using EX4300 switches. To ensure member IDs are assigned consistently even if physical positions change, how should the administrator provision the member IDs?
Medium45Which TWO parameters are mandatory when configuring a basic GRE tunnel interface in Junos? (Choose two)
Easy46You need to configure MACsec on an EX4300 switch interface. Which cipher suite is configured by default when MACsec is enabled without specifying an explicit cipher suite?
Medium47When configuring a Link Aggregation Group (LAG) on a Juniper switch, what is the naming convention used for the aggregated interface in the Junos CLI?
Easy48When configuring an IP-IP tunnel on Junos, can you run multicast routing protocols like PIM over the IP-IP tunnel?
Hard49You are configuring a GRE tunnel carrying IPv6 traffic over an IPv4 transport network (GRE over IPv4). Which interface family must be configured under the gr- interface unit?
Hard50You have a Level 1/Level 2 router connecting two areas. How does it advertise itself to Level 1 routers?
Medium51You are performing a pre-check for an ISSU on an MX series router. You execute 'request system software in-service check' and the system reports an error indicating that graceful restart or NSR is not properly configured for active routing protocols. How do you resolve this?
Hard52You are troubleshooting a Virtual Chassis where member 0 has failed completely. The replacement switch arrives. Before inserting it into the running Virtual Chassis ring, what critical precaution must be taken regarding Junos OS software versions?
Hard53You are a network administrator for a company using Juniper EX Series switches. You have an iBGP session between two routers in the same AS. You notice that routes learned from one iBGP peer are not being advertised to another iBGP peer. What is the default behavior of iBGP that explains this?
Medium54You are configuring IS-IS on a Juniper router and want to verify the adjacency state with a neighbor. You issue the command 'show isis adjacency'. The output shows the neighbor's system ID, interface, and state as 'Up'. However, you notice that the 'Holdtime' field is decreasing. What does this indicate?
Medium55Which THREE features are considered part of the secure access port feature suite in Junos OS? (Choose three)
Medium56An administrator is configuring Graceful Restart on a pair of Juniper MX series routers running OSPF. What is the primary purpose of Graceful Restart in this scenario?
Easy57Which command allows an administrator to view the OSPF link-state database (LSDB) summary on a Junos device?
Easy58An administrator needs to view the MAC address learning table on an EX Series switch to verify which switchport a specific server is connected to. Which operational command should be used?
Easy59Which of the following are valid IS-IS interface types? (Choose TWO)
Medium60An engineer is configuring a static route with multiple qualified next hops to provide load balancing and redundancy. Which TWO statements are true regarding qualified next hops in Junos? (Choose two.)
Medium61You are troubleshooting an OSPF network where an NSSA area is connected to the backbone via an ABR. External routes are being injected into the NSSA by an ASBR. Which router is responsible for translating Type 7 LSAs into Type 5 LSAs before flooding them into the backbone area?
Hard62You are configuring multi-topology IS-IS. What does this allow?
Hard63Which THREE components are required for Dynamic ARP Inspection (DAI) to function properly on an EX Series switch? (Choose three)
Hard64You are configuring port security on an EX Series switch. The security policy states that when a MAC limit is exceeded on an access port, the port should be shut down and remain down until manually re-enabled by an administrator. Which configuration action accomplishes this requirement?
Medium65An administrator configures a BGP policy to reject routes with an AS_PATH containing a specific AS number. Which match condition in a Junos routing policy is used to evaluate the AS_PATH?
Easy66You are troubleshooting port security on an EX Series switch. An interface has been configured with 'action-on-violation shutdown', and a violation occurs. What is the default operational state of the interface after the violation, and how is it restored?
Medium67Which THREE characteristics distinguish GRE tunnels from IP-IP tunnels on Junos devices? (Choose three)
Medium68While reviewing OSPF logs on a Junos device, you notice frequent adjacency flaps. You suspect a mismatch in the OSPF timer configurations. Which two timers must match identically on adjacent OSPF interfaces for an adjacency to form?
Medium69What does the 'show isis statistics' command reveal?
Medium70You are configuring Multiple Spanning Tree Protocol (MSTP) across multiple EX Series switches in your enterprise network. Which three parameters must be identical across all switches to ensure they belong to the same MST region?
Medium71You need to configure filter-based forwarding (FBF) to route traffic from a specific subnet (192.168.1.0/24) through an alternate next-hop gateway. Which components are required to implement this successfully?
Medium72Which OSPF packet type is used to acknowledge the receipt of Link-State Updates (LSUs) to ensure reliable flooding?
Easy73Which TWO actions occur during OSPF link-state database flooding on a Junos routing device? (Choose two)
Medium74Which statement accurately describes port security MAC-limit behavior?
Easy75You need to configure an IP-IP tunnel on a Junos device. Which interface prefix is designated for IP-IP tunnels in the Junos CLI?
Medium76You have configured an IP-IP tunnel, but traffic fails to pass through. You run 'show interfaces ip-0/0/0' and see that the output displays 'Input drops' incrementing rapidly. What is the most likely reason?
Medium77Which TWO OSPF packet types are used for reliable flooding and direct acknowledgment of Link State Advertisements? (Choose two.)
Easy78Which BGP message type is responsible for negotiating session parameters, including autonomous system numbers, hold times, and BGP identifiers during session establishment?
Hard79You are configuring a virtual router routing instance on a Juniper device to isolate traffic for a specific department. Which routing-instance type should you select?
Easy80What type of LSA is generated by an OSPF Area Border Router (ABR) to advertise networks from one area to another area?
Easy81An administrator enables Dynamic ARP Inspection (DAI) on a VLAN that uses DHCP snooping for IP binding verification. A static client on the same VLAN cannot communicate with the default gateway. What is the most likely cause of this issue?
Hard82An engineer wants to configure Nonstop Active Routing (NSR) alongside GRES on an MX204 router running OSPF. What is the primary operational benefit of enabling NSR compared to running GRES alone?
Medium83What happens if you have an LSP with an expired lifetime?
Medium84You are configuring an IP-IP tunnel on a Junos routing platform. Which statement correctly identifies how IP-IP encapsulation differs from GRE encapsulation?
Medium85Which actions occur during an IS-IS SPF calculation? (Choose THREE)
Hard86You are configuring Filter-Based Forwarding (FBF) on an interface. You apply a firewall filter that matches specific source addresses and uses 'then routing-instance' as an action. What must be configured in that target routing instance to ensure return traffic is handled correctly?
Medium87An administrator has configured a GRE tunnel between two SRX Series devices. Traffic originating from behind the local security zone destined for the tunnel interface is being dropped by default security policies. Which action must be taken to ensure transit traffic can enter the GRE tunnel?
Hard88Which protocol number is used in the outer IP header for an IP-IP tunnel?
Easy89You are configuring a GRE tunnel and want to ensure that integrity checks are performed on the transmitted packets to detect corruption. Which parameter should you add to the tunnel configuration?
Medium90An engineer needs to configure a Link Aggregation Group (LAG) between two Juniper EX4300 switches to provide redundant uplinks to a core router. Which statements regarding the LACP configuration requirements on the EX4300 switch must be met?
Medium91You have enabled DHCP snooping on an EX Series switch. What must be configured on the interface connecting to the legitimate corporate DHCP server to prevent rogue DHCP server replies?
Medium92You are configuring a Private VLAN (PVLAN) on an EX Series switch to isolate hosts within a DMZ segment while allowing them to reach a shared gateway. Which TWO statements correctly describe the behavior of PVLAN port types in this scenario? (Choose two.)
Medium93Which Junos command displays detailed information about OSPF neighbor states, including dead timer countdowns and address bindings?
Easy94When configuring Private VLANs (PVLANs) on Juniper EX Series switches, which TWO types of ports are defined within the architecture? (Choose two.)
Hard95Which THREE parameters must match across all switches for them to successfully form a single MST region? (Choose three.)
Medium96You need to ensure that a core switch retains its position as the root bridge even if a new switch with a manually lowered bridge priority is added to the network. Which feature should you configure on the core switch's ports facing the downstream switches?
Medium97Which THREE factors should be considered when planning MTU size for traffic traversing a GRE tunnel? (Choose three)
Medium98An administrator configures a new VLAN ID 300 on an EX Series switch but forgets to assign any interfaces to it. What is the operational status of this VLAN?
Easy99You are configuring OSPF on a Juniper router. The router must not generate any OSPF packets or form adjacencies on interface ge-0/0/1, but the interface must remain in the OSPF configuration for future use. Which configuration statement accomplishes this?
Medium100Which TWO BGP message types are responsible for maintaining session state or reporting errors without carrying routing information? (Choose two)
Medium101Which command is used to clear the Dynamic ARP Inspection violation counters on an EX Series switch?
Easy102Which TWO mechanisms are utilized by RSTP to achieve rapid convergence compared to legacy 802.1D STP? (Choose two.)
Hard103Which command is used on a Junos device to clear the OSPF database and force a re-synchronization with neighbors?
Easy104You are configuring VRRP between two EX4600 switches to provide a default gateway for a VLAN. To ensure that the switch with the higher physical interface capacity assumes the master role, what parameter should you adjust?
Medium105When a topology change occurs in an RSTP network, how are MAC address forwarding table entries affected across the switches?
Medium106Which TWO states are valid OSPF operational adjacency states seen in Junos operational outputs? (Choose two)
Easy107What is the primary purpose of the Hello timer in RSTP?
Easy108Which THREE conditions must be met to successfully execute an In-Service Software Upgrade (ISSU) on a dual-RE Juniper routing platform? (Choose three)
Medium109What is the primary function of the OSPF Designated Router (DR) on a broadcast network segment?
Easy110Which TWO commands are valid Junos configuration hierarchy paths for setting up RSTP? (Choose two.)
Easy111When configuring Layer 2 firewall filters on an EX Series switch, which THREE statements are correct regarding filter structure and application? (Choose three)
Hard112An administrator notices that CPU utilization on the Routing Engine spikes when a high volume of transit traffic is directed through a locally terminated GRE tunnel on an MX router without inline services configured. What is the cause?
Hard113An administrator configures filter-based forwarding. The firewall filter uses the action 'then routing-instance custom-vr'. Where must the custom-vr routing instance be defined for the filter to accept this configuration without committing errors?
Hard114Which CLI command is used to manually initiate a Routing Engine switchover on an MX series router configured with GRES?
Easy115You are configuring a new eBGP session between two Juniper routers in different autonomous systems. The physical link is up and you can ping the remote interface, but the BGP session remains in the Active state. Reviewing the configuration, you notice that the neighbor statement on both routers specifies the loopback address of the peer, but no additional configuration is present. What is the most likely cause of the problem?
Medium116An administrator configures a Layer 2 firewall filter to drop broadcast packets while permitting unicast traffic on an access VLAN. Which THREE configuration elements are required to implement this filter properly? (Choose three)
Hard117You are deploying a new access switch in a campus network. The security policy requires that all ARP packets received on untrusted access ports be validated against the DHCP snooping database, and that any ARP packet with an invalid IP-to-MAC binding be dropped and logged. You configure DHCP snooping on VLAN 100 and enable the appropriate feature on the untrusted ports. Which Junos OS feature must you enable to meet the policy requirement?
Medium118An enterprise network uses private VLANs. A server connected to an isolated port needs to send traffic out of the primary VLAN. Which statement accurately describes how traffic forwarding operates for an isolated port in Junos?
Hard119While examining a BGP routing table, you notice a route with an ORIGIN attribute set to 'Incomplete'. What does this indicate about the origin of the route?
Hard120What is the default bridge priority value assigned to Juniper EX Series switches when RSTP is enabled?
Easy121When configuring MSTP, how is the regional maximum hop count enforced across switches within the same MST region?
Hard122Which THREE statements describe the behavior and requirements of DHCP snooping? (Choose three)
Medium123Which routing-instance type is specifically designed to support Layer 3 VPNs (L3VPNs) utilizing BGP as the-peering protocol and MP-BGP for VPN route distribution?
Easy124An administrator has configured a forwarding-type routing instance to perform filter-based forwarding. Which configuration statement is mandatory under the routing-instances hierarchy to properly define this instance type?
Hard125An engineer is troubleshooting a BGP session between two routers and notices that the connection is stuck in the Active state. What does the Active state indicate about the BGP finite state machine?
Easy126Which Junos operational mode command is used to verify the operational status and packet statistics of configured GRE tunnel interfaces?
Easy127An administrator needs to configure a basic GRE tunnel between two Junos devices across a routed IP network. Which interface family must be enabled on the physical transit interface to allow the GRE encapsulated packets to traverse the network?
Easy128An administrator runs 'show vlans' and notices that a particular VLAN has the status 'Active' but no interfaces listed under it. What does this indicate?
Easy129An organization runs MSTP with multiple instances. A packet belonging to a VLAN that is not explicitly mapped to any MST instance is processed in which manner?
Hard130What is the primary function of a Junos routing instance of type 'forwarding'?
Easy131A Junos router is configured as a BGP route reflector. It learns a route from a client and reflects it to a non-client and another client. Which attribute does the route reflector modify or add to prevent routing loops?
Hard132Which TWO statements are true regarding Junos tunnel interface naming conventions? (Choose two)
Easy133You are configuring a BGP session between two Juniper routers. You want to ensure that the session can be established and that routes are exchanged correctly. Which two statements are true about BGP message types? (Choose two.)
Medium134An OSPF area contains routers running Junos OS where external routes must be imported into the OSPF domain from a BGP core. However, the area must not accept external AS-external LSAs (Type 5) from other areas, but must allow routers within this area to originate external routes themselves. Which area type fulfills this requirement?
Hard135An administrator is configuring VRRP on an EX4300 switch and wants to ensure that when the primary router recovers from a failure, it immediately reclaims the master role from the backup router. Which VRRP configuration parameter controls this behavior?
Medium136What is the effect of changing the reference bandwidth in IS-IS?
Medium137An administrator needs to configure an OSPF stub area on a Juniper router. Which THREE characteristics apply to a standard OSPF stub area? (Choose three.)
Hard138Which TWO attributes distinguish direct routes from static routes in Junos OS? (Choose two)
Medium139An EX4300 Virtual Chassis has GRES enabled. During a primary Routing Engine failure, what happens to the backup Routing Engine?
Medium140Which traffic rate-limiting mechanism is primarily used by storm control to protect switch CPU and interfaces from broadcast and multicast storms?
Easy141You are troubleshooting an OSPF adjacency issue on a Junos router. The neighbor state is stuck in 'ExStart'. You have verified that the interfaces are up and IP connectivity exists. Which configuration mismatch is most likely causing this problem?
Hard142You are troubleshooting an aggregate route that is not being advertised to BGP peers. You verify that contributing routes are active in the routing table. What command should you use to check if the aggregate route itself is successfully generated and active in the local routing table?
Medium143An administrator configures root protection on a designated port. If that port subsequently receives a superior BPDU from another switch, what exact state does the port transition into?
Hard144Why would you set an interface to 'passive' in IS-IS?
Medium145Which statement best describes the behavior of a local route in Junos OS?
Easy146Which TWO features help protect an RSTP topology from unauthorized switches or misconfigurations on access ports? (Choose two.)
Easy147Which TCP port is used by BGP to establish communication between peers?
Easy148During the establishment of an OSPF adjacency, two routers exchange Database Description (DBD) packets. What is the primary purpose of the DBD packet exchange in the OSPF protocol sequence?
Easy149Which CLI command displays the operational status and roles of all members in a Juniper EX Series Virtual Chassis?
Easy150An administrator wants to prevent a malicious user from flooding an EX Series switch with a high volume of broadcast traffic from an untrusted end-user device. Which feature should be configured?
Easy151Which TWO port roles are defined in Rapid Spanning Tree Protocol (RSTP) but did not exist in legacy 802.1D STP? (Choose two.)
Hard152You are configuring OSPF on a Juniper router and need to control which router becomes the Designated Router (DR) on a broadcast network. Which two statements about OSPF DR election on Junos are true? (Choose two.)
Medium153You notice that an access switch running RSTP is continually dropping user traffic because a connected end-user device is sending inferior BPDUs that trigger topology changes. Which Juniper feature should you configure on the access ports to protect against this behavior?
Medium154A network administrator needs to modify the Local Preference path attribute for all routes received from a specific external BGP peer using a routing policy on Junos. Under which configuration hierarchy should the routing policy be applied?
Medium155Which TWO commands can be used to view spanning tree information on a Juniper EX Series switch? (Choose two.)
Easy156You have configured a static route with a next-hop of 10.0.0.1 and a preference of 10. Another static route to the same destination has a next-hop of 10.0.0.2 and a preference of 5. Both next-hops are reachable. Which route will be active in the routing table?
Medium157Which operational command allows you to view the real-time status of LACP packet exchanges and partner system IDs for an aggregated interface on a Junos switch?
Easy158What is the primary function of the BGP OPEN message?
Medium159Which level is enabled by default in Junos when configuring IS-IS on an interface?
Easy160Which THREE statements describe the function of the Designated Port in RSTP? (Choose three.)
Medium161An EX Series switch running MSTP receives a BPDU from an upstream switch in a different MST region. How does the receiving switch identify the boundary between the two regions?
Hard162An EX4300 Virtual Chassis experiences a split-brain condition due to a failure of all stacking cables between members 0/1 and members 2/3. How does Junos handle this scenario by default?
Medium163In a multi-access network, which PDU is responsible for the DIS election?
Medium164An administrator is configuring OSPF on a Junos device and notices that two routers on a broadcast segment are stuck in the 2-Way state. What is the most likely cause of this behavior on a broadcast network?
Easy165Which TWO parameters are included when a Junos switch calculates the MST configuration digest? (Choose two.)
Medium166You are troubleshooting a Dynamic ARP Inspection (DAI) deployment on an EX4300 switch. Clients on VLAN 20 are experiencing intermittent loss of connectivity. You run 'show arp inspection statistics' and notice dropped packets due to 'invalid-ip'. What is the most likely cause of these drops?
Hard167Which THREE statements accurately describe the behavior and configuration of VRRP tracking on Junos devices? (Choose three)
Hard168When configuring VRRP on a Juniper router, what IP address must be assigned as the virtual IP address for the group?
Easy169Which THREE parameters can be tuned under the VRRP hierarchy in Junos to customize failover timing and behavior? (Choose three)
Medium170When implementing Layer 2 firewall filters on an EX Series switch, which packet characteristic can be matched in a filter term?
Easy171When troubleshooting a non-functional GRE tunnel on a Junos device, which TWO operational commands or verification steps are most effective for diagnosing the root cause? (Choose two)
Hard172You need to modify the bridge priority of an EX Series switch running RSTP to ensure it becomes the root bridge. Which configuration command correctly sets the bridge priority to 4096?
Medium173You want to ensure that a static route is only installed in the routing table when a specific tracked object or ping test succeeds. Which Junos feature should you pair with the static route?
Medium174When calculating OSPF path costs in a network containing high-speed links (such as 10Gbps and 40Gbps interfaces), what default reference bandwidth does Junos use, and what configuration adjustment is typically required to differentiate costs accurately?
Hard175Which THREE actions occur when a BGP speaker receives a Notification message from a peer? (Choose three.)
Hard176You are running BGP between two routers. One router has a 4-byte ASN (e.g., ASN 65536). The remote router only supports 2-byte ASNs. How does BGP handle this compatibility issue?
Hard177An operator executes the command 'show bridge mac-table' on an EX Series switch running Junos OS. Which information is displayed in the output of this command?
Easy178When configuring a GRE tunnel on Junos, which two parameters are mandatory under the specific gr- interface hierarchy to establish the tunnel endpoint connectivity?
Easy179In an OSPF NSSA configuration on a Junos device, which router is specifically responsible for translating Type 7 LSAs into Type 5 LSAs when propagating routes out of the NSSA into the backbone?
Hard180You are troubleshooting an OSPF network and notice that a router's OSPF state is stuck in 'ExStart'. What is the most common reason for this adjacency state issue?
Medium181An administrator wants to protect against MAC flooding attacks on an EX Series switch access port. The port should learn a maximum of 5 MAC addresses and drop frames with unknown source MAC addresses after that limit is reached. Which feature should be configured?
Easy182An enterprise network runs OSPF across multiple areas. A Junos routing device receives an LSA with an aging timer approaching MaxAge (3600 seconds). Under what condition does a router purge or flush an LSA from its link-state database?
Hard183When planning an In-Service Software Upgrade (ISSU) on a Juniper routing platform, what is the behavior of the Routing Engines during the execution of the upgrade command?
Hard184You are tasked with tuning OSPF convergence times on a Juniper EX Series switch. Which configuration command hierarchy allows you to modify the OSPF Hello and Dead intervals on a specific interface?
Medium185An engineer configures multiple static routes to the same destination with different preference values. When all paths are up, how does Junos select which route is active in the routing table?
Hard186You are analyzing a core Juniper MX router after an ISSU upgrade procedure completed. You notice that BGP sessions dropped immediately after the final routing engine rebooted. What post-upgrade verification step should have been performed to prevent unexpected protocol drops during ISSU?
Hard187An engineer is deploying Private VLANs on an EX Series switch and needs to verify proper operational status and traffic isolation. Which THREE tasks or verification checks should be performed? (Choose three.)
Hard188Which TWO parameters can be modified within a static route configuration to control path selection and backup behavior? (Choose two)
Medium189An engineer configures an aggregate route for 172.16.0.0/16 on a Junos device. However, the aggregate route is not active in the routing table. What is the primary requirement for an aggregate route to become active?
Hard190Which TWO statements describe characteristics of BGP path attributes? (Choose two.)
Medium191Which TWO tools or commands can be used on Junos to verify the operational packet flow through a tunnel interface? (Choose two)
Easy192You are troubleshooting an OSPF network where an ASBR is injecting external routes. Routers in other areas need to reach this ASBR. Which LSA type provides the reachability information to the ASBR itself?
Medium193An administrator needs to delete an entire VLAN configuration named 'guest' along with its VLAN ID and associated properties. Which configuration command should be executed?
Easy194You are troubleshooting a VRRP deployment where two EX4600 switches are acting as redundant gateways for several VLANs. Clients on VLAN 10 report intermittent gateway unreachability. You notice that VRRP mastership frequently flips between Switch A and Switch B. What is the most effective way to stabilize VRRP mastership?
Hard195Which TWO items are required when configuring VRRP on a Juniper router interface? (Choose two)
Easy196You need to ensure that BGP sessions fail over within sub-second intervals if a link degrades or goes down. Which protocol should you integrate with BGP on your Junos router?
Medium197Which THREE parameters are typically verified when troubleshooting a missing MAC address entry in the bridge table of a Juniper switch? (Choose three.)
Medium198You are configuring BGP on a Juniper SRX Series firewall. You want to influence inbound traffic from an eBGP peer for a specific prefix. You have applied an export policy that prepends your AS multiple times. Which two statements are true about AS path prepending in this scenario? (Choose two.)
Medium199You are troubleshooting a Layer 2 connectivity problem where a trunk port is dropping tagged traffic for VLAN 50. Which TWO configuration checks should be performed? (Choose two.)
Medium200You are configuring OSPF route summarization on an ABR in a Junos environment. You want to summarize routes from Area 1 into Area 0. Which Junos configuration hierarchy is used to define this summary?
Hard201Which TWO characteristics describe the behavior and properties of Level 1 and Level 2 routing in IS-IS? (Choose two)
Easy202You want to disable spanning tree protocol entirely on a specific access interface (ge-0/0/10.0) of an EX Series switch while keeping RSTP active globally. Which configuration command achieves this?
Medium203Which TWO actions must be performed when configuring a functional GRE tunnel between two Junos devices over an intermediate IP network? (Choose two.)
Hard204Which Junos command displays the active DHCP snooping binding database entries on an EX Series switch?
Easy205How does an IS-IS router identify the DIS in its hello packets?
Hard206An engineer must inspect the BGP state and verify the received prefix counts from a specific neighbor on an MX Series router. Which operational command should be used?
Easy207You have configured a GRE tunnel, and you want to verify that the tunnel source and destination parameters match what is expected. Which command shows the configured tunnel source and destination addresses?
Medium208An administrator configures a static route with a next-hop that points to an indirect (recursive) address. What condition must be met for this static route to become active in the inet.0 routing table?
Hard209An enterprise network uses MSTP. What is the function of the Internal Root in an MST region?
Hard210You are troubleshooting a Link Aggregation Group (LAG) between an EX4300 switch and a third-party switch. Member links are flapping intermittently. Examination of system logs reveals LACP timeout errors. What is the most likely cause?
Hard211An administrator configures a Layer 2 firewall filter to drop all ARP packets with a specific invalid sender hardware address. The filter is applied to a VLAN interface. What special consideration must be taken when applying Layer 2 filters to VLANs in Junos?
Hard212When configuring load balancing in Junos OS, which THREE header fields can be included in the hashing algorithm to compute the ECMP path? (Choose three)
Hard213Which THREE statements regarding IP-IP tunnels on Junos devices are accurate? (Choose three)
Medium214Which THREE criteria are evaluated by Junos when electing the primary Routing Engine in an EX Series Virtual Chassis? (Choose three)
Medium215When configuring an IP-IP tunnel on a Junos device, what happens to the source and destination IP addresses of the original packet when it is encapsulated?
Hard216An engineer needs to verify which BGP routes are currently installed in the forwarding table (FIB). Which command should be used?
Easy217An administrator configures link aggregation (ae0) using LACP between two EX Series switches running RSTP. How does RSTP treat the aggregated interface ae0?
Hard218Which LSA type is originated by a Designated Router (DR) on a broadcast or NBMA network to describe all the routers attached to that multi-access segment?
Easy219Which command is used to display all configured static routes along with their active/inactive status in Junos?
Easy220A network engineer wants to inject external routes into an OSPF domain using Junos OS. The routes originate from an external BGP process. Which OSPF LSA type is generated by the ASBR to describe these external destinations?
Medium221An administrator wants to configure load balancing across multiple static routes. Which THREE configuration elements are required to successfully implement ECMP load balancing for static routes in Junos? (Choose three)
Hard222An administrator needs to configure MSTP on a group of EX Series switches. Which three parameters must be identical across all switches in the same MST region?
Hard223Which OSPF area is mandatory in any multi-area OSPF routing architecture?
Easy224Which of the following is required for two routers to form a Level 2 adjacency?
Easy225You are asked to implement a Layer 2 security feature that prevents a user from connecting a small unmanaged switch to an access port and generating traffic from multiple MAC addresses. The solution should limit the number of MAC addresses learned on the port to one. Which Junos OS feature should you configure?
Easy226A BGP speaker receives an UPDATE message containing a malformed attribute. According to BGP specifications, which action does the receiving router take?
Hard227Which TWO statements accurately describe the behavior and characteristics of a routing instance of type 'forwarding'? (Choose two)
Medium228You are configuring a Link Aggregation Group (LAG) with LACP on an EX3400 switch. You want to ensure that the interface bundle drops traffic if fewer than two active member links are operational. Which feature configuration achieves this?
Medium229An administrator is configuring VLANs on a Junos EX Series switch. Which TWO tasks must be performed to successfully assign a physical interface as an access port for a newly created VLAN? (Choose two.)
Easy230When should you consider increasing the 'csnp-interval'?
Hard231Which interface naming convention is used by Junos OS to identify a generic routing encapsulation (GRE) tunnel interface?
Easy232An administrator implements port security on a switch stack. A user moves their IP phone (which has an integrated PC attached to it) to a port configured with a MAC limit of one. Only the IP phone works, and the PC is blocked. What feature should be configured to allow multiple authenticated MAC addresses behind a single port securely?
Hard233Which TWO statements are true regarding IP Source Guard? (Choose two)
Easy234An administrator is configuring a new EX Series switch running Junos OS and needs to assign an access port to VLAN finance. Which configuration hierarchy is used to assign an interface to a specific VLAN?
Easy235What is the primary benefit of enabling edge port configuration on switch access ports connected to end devices?
Easy236While examining an RSTP topology, you notice that a designated port has suddenly stopped receiving BPDUs from its upstream neighbor, causing the port to transition into a discarding state to prevent potential loops. Which feature is actively providing this protection?
Medium237Which command displays the IS-IS interface parameters?
Easy238You are troubleshooting an issue where an EX4300 Virtual Chassis fails to boot after adding a new switch member. The system console displays errors regarding incompatible Junos images and hardware mismatch on the Virtual Chassis ports. What is the correct procedure to recover and integrate the new member?
Hard239What is the default preference value for a direct route in Junos OS?
Easy240What action does the 'set protocols rstp max-age <seconds>' command perform on a Juniper switch?
Easy241Which TWO statements are true regarding BGP communities in Junos? (Choose two)
Medium242An engineer deploys MACsec across an untrusted Metro Ethernet Layer 2 transport circuit. After enabling MACsec, packets larger than 1500 bytes fail to pass through the link. What is the most likely cause of this issue?
Hard243Which of the following are valid IS-IS PDU types? (Choose THREE)
Medium244An administrator implements filter-based forwarding and applies a firewall filter on the ingress interface. However, traffic matching the filter is dropped rather than routed to the alternate routing instance. Upon investigation, what is the most likely cause of this issue?
Hard245Which THREE parameters must match between two peer devices to successfully establish a MACsec secure session using pre-shared keys (PSK)? (Choose three)
Hard246You are configuring OSPF on a Juniper EX Series switch. You want to change the OSPF hello interval and dead interval on a specific interface to improve convergence. Which configuration hierarchy should you use?
Easy247A network engineer wants to verify IS-IS link-state database entries, specifically checking for TLVs that carry extended IP reachability information with wide metrics. Which Junos operational command should be used?
Medium248Which statement is true regarding the behavior of storm control when the traffic rate exceeds the configured threshold?
Easy249An administrator implements OSPF on a Junos router with virtual links to span a disconnected non-backbone area across a non-backbone transit area to reach Area 0. What is a key design best practice regarding OSPF virtual links in enterprise networks?
Hard250You are troubleshooting a connectivity issue between an EX4300 switch access port and an end-host. The port is configured as an access port for VLAN 100, but the host cannot communicate. You run 'show ethernet-switching interface ge-0/0/1' and notice the port status is down/down. Which underlying reason most likely explains this state?
Medium251Which TWO actions occur when a Junos BGP routing policy includes the 'next policy' action? (Choose two)
Medium252An engineer is troubleshooting IS-IS adjacency formation failures on a Junos device. Which THREE parameters must match or be compatible between neighboring routers to successfully establish an IS-IS adjacency? (Choose three)
Medium253You configure port security on a switch interface and set the violation action to 'restrict'. What happens when a port security violation occurs under this setting?
Medium254An administrator is setting up VRRP tracking on an EX4300 switch interface. If the uplink interface monitoring the core network fails, what should happen to the VRRP priority on the gateway interface?
Medium255Which TWO options represent valid benefits of configuring Link Aggregation Groups (LAG)? (Choose two)
Easy256A Juniper EX4300 Virtual Chassis has four members. You want to ensure that if the master Routing Engine fails, the backup takes over and the new master is reachable through the same management IP address without any manual intervention. Which statement describes the correct behavior?
Hard257Which THREE statements are true regarding IP-IP encapsulation in Junos OS? (Choose three.)
Medium258When using authentication in IS-IS, where can you apply the password?
Hard259You are configuring a static route to a destination and want to ensure that the route is not redistributed into OSPF. Which configuration statement should you use?
Medium260What is the primary function of a Junos tunnel interface when used in conjunction with routing protocols?
Easy261Which OSPF packet type is responsible for discovering neighbors and maintaining adjacencies on a Junos device?
Easy262Which Junos configuration hierarchy is used to configure secure access port features such as DHCP snooping and Dynamic ARP Inspection?
Easy263Which TWO statements are correct regarding the operation of MSTP instance 0 (CIST)? (Choose two.)
Hard264While reviewing BGP updates, you notice an attribute type code of 3 with a value representing an IP address. Which well-known mandatory path attribute is this?
Hard265You are configuring Multi-Chassis Link Aggregation (MC-LAG) across two Juniper switches acting as separate control plane devices. Which protocol is used between the peer switches to synchronize state and ensure MAC address table consistency across the MC-LAG domain?
Hard266Which TWO statements accurately describe the behavior of the BGP AS_PATH attribute? (Choose two)
Medium267An engineer is configuring a trunk port on an EX Series switch and needs to ensure that untagged and priority-tagged frames are handled correctly. Which TWO configuration actions are required? (Choose two.)
Medium268An EX4300 switch is configured with a trunk port that carries VLAN 10 and VLAN 20. The trunk is connected to a third-party switch that uses a native VLAN of 1 for untagged traffic. You notice that untagged frames from the third-party switch are being dropped on the EX4300. Which configuration change resolves this issue?
Hard269What is the function of the DIS in an IS-IS broadcast network?
Medium270An administrator configures IP Source Guard on an access switch port. When a client connects, its traffic is dropped even though it acquired an IP via DHCP. Reviewing logs shows no DHCP snooping binding. What is the root cause?
Hard271During OSPF database synchronization, two Junos routers exchange Database Description (DBD) packets. One router repeatedly sends DBD packets with the master/slave bit set incorrectly or encounters sequence number mismatches, causing the adjacency to loop in the Exchange state. Which OSPF packet type is immediately sent by a router to request missing link-state information once the ExStart/Exchange transition completes?
Hard272You need to configure authentication for a BGP peering session on a Junos device to prevent spoofing attacks. Where is the MD5 authentication key configured?
Medium273An administrator needs to verify the exact BGP timers negotiated with an eBGP peer on a Junos device. Which operational command should be used?
Easy274An engineer is configuring static routes in Junos OS and wants to ensure high availability. Which TWO features can be implemented with static routes to achieve path redundancy? (Choose two)
Medium275Which operational command displays the configured member IDs, priorities, and roles in an EX Series Virtual Chassis?
Easy276You are configuring a GRE tunnel between two Juniper routers to carry OSPF traffic. The tunnel is up, but OSPF adjacencies are not forming. Which two actions would you take to troubleshoot and resolve this issue? (Choose two.)
Hard277Which command allows you to inspect the active forwarding table entries and verify next-hops on a Junos router?
Easy278Which TWO traffic conditions will trigger storm control drops on a configured switch interface? (Choose two)
Easy279You are configuring a GRE tunnel between two Juniper routers. The tunnel interface is gr-0/0/0, and you have configured the tunnel source as ge-0/0/0.0 and the tunnel destination as 192.0.2.2. You notice that the tunnel interface is up, but traffic sent through the tunnel is being dropped. Which action would you take to resolve this issue?
Medium280You are configuring OSPF on a Junos device and notice that Type 3 LSAs are not being generated or propagated into a specific area. When examining the configuration under protocols ospf, you see that the area is defined with the no-summaries parameter. Which area type has been configured?
Medium281An administrator needs to create a VLAN named 'voice' with a VLAN ID of 50 on a Junos EX Series switch. Which configuration path achieves this?
Easy282You have an EX Series switch running RSTP. You notice that a port connected to a server is flapping between forwarding and discarding states. The server NIC is configured for teaming but is not sending BPDUs. You have configured the port as an edge port using 'set protocols rstp interface ge-0/0/5 edge'. However, the port still flaps. What is the most likely cause?
Hard283You are troubleshooting an RSTP network. You notice that a port on an EX Series switch is flapping between Discarding and Forwarding states. You suspect a BPDU inconsistency. Which command would you use to check for BPDU inconsistencies on the switch?
Hard284An administrator configures MACsec on a point-to-point link between two EX switches. Encrypted frames are received by the remote switch, but decryption fails, and packets are dropped. What is the most likely reason for this decryption failure?
Hard285What is the role of the Root Port in an RSTP topology?
Easy286When configuring a routing instance of type 'virtual-router', what is required to allow communication between the virtual router instance and the default routing instance?
Easy287You are troubleshooting an OSPF adjacency issue between two Juniper EX Series switches. One switch logs an error stating 'OSPF packet received with mismatched area ID'. Where in the Junos CLI should you check and correct this parameter?
Medium288Which THREE attributes are optional transitive BGP path attributes? (Choose three)
Hard289An administrator is configuring Selective QinQ on an EX Series switch using VLAN translation. Which THREE components are required to successfully rewrite inner and outer VLAN tags? (Choose three.)
Hard290Which TWO features rely on the DHCP snooping binding database to function properly? (Choose two)
Easy291Which configuration command enables Graceful Routing Engine Switchover (GRES) globally on a Juniper routing platform?
Easy292An engineer configures a LAG between an EX4300 switch and a server. The server uses static LAG mode (no LACP). How must the Junos switch interface be configured to successfully form the bundle?
Medium293Which Junos configuration statement defines the destination address of a GRE tunnel?
Easy294An administrator wants to gracefully restart a BGP routing daemon without dropping the underlying TCP session or causing traffic loss. Which Junos feature should be enabled?
Easy295You configure a GRE tunnel between two routers. Router A can ping Router B's tunnel IP address successfully, but devices behind Router A cannot ping devices behind Router B across the tunnel. What is the most likely cause?
Medium296What is the purpose of the 'lsp-lifetime' command?
Hard297An enterprise network uses a GRE tunnel to connect two sites running OSPF. OSPF neighbor adjacencies fail to form over the GRE tunnel even though unicast pings between the tunnel endpoints succeed. Upon inspecting interface configurations, you notice that OSPF hellos are not being received by the peer. What is the most likely cause of this issue?
Hard298When configuring MSTP, what purpose does the regional configuration digest serve?
Hard299What is the official protocol number assigned in the outer IP header for GRE encapsulation?
Easy300Which TWO commands are used to verify link aggregation and LACP operational status on a Juniper switch? (Choose two)
Easy301An operator executes the 'show ospf database' command on a Junos device and notices multiple Type 2 Network LSAs. Under which specific network topology condition are Type 2 LSAs generated?
Hard302An administrator wants to deploy MACsec between two EX Series switches using MKA with pre-shared keys. Which THREE configuration steps must be performed on both switches? (Choose three)
Hard303Which THREE features are part of the secure access port feature set on Juniper EX Series switches? (Choose three)
Hard304An administrator wants to configure an OSPF Not-So-Stubby Area (NSSA) on a Junos router. Which THREE characteristics distinguish an NSSA from a standard OSPF Stub Area? (Choose three)
Hard305You are configuring a Link Aggregation Group (LAG) on an EX series switch. Which statement is correct regarding LACP active mode?
Easy306By default, what is the Junos routing protocol preference value assigned to static routes?
Easy307When configuring Filter-Based Forwarding (FBF), which THREE components are absolutely mandatory for successful operation? (Choose three)
Hard308Which CLI command displays the packet statistics, errors, and drop counters for a Link Aggregation Group (LAG) named ae0?
Easy309When configuring a GRE tunnel source and destination address on a Junos device, which configuration hierarchy is used?
Easy310You are configuring OSPF on a Junos device and need to ensure that the router prefers internal OSPF intra-area paths over inter-area paths, and inter-area paths over external paths. According to OSPF route preference rules, what is the evaluation order?
Medium311Which feature is required to be enabled on an access switch to populate the DHCP snooping database binding table with legitimate client IP-to-MAC address mappings?
Easy312You are verifying BGP Graceful Restart helper mode on a Juniper router. A peering router restarts its control plane. What output or verification command confirms that your router is acting as a Graceful Restart helper for the peer?
Hard313Which Junos routing instance type is best suited when you want to run MPLS L3VPNs on a Provider Edge (PE) router?
Easy314You have configured multiple static routes to the same destination with different preference values. When does Junos install a static route into the forwarding table (FIB)?
Medium315An administrator configures a Link Aggregation Group (LAG) using LACP between two EX series switches. The link fails to aggregate, and the log shows 'LACP status: Expired'. What does the 'Expired' state indicate?
Medium316Which TWO methods are used to connect switches in a Juniper EX Series Virtual Chassis? (Choose two)
Easy317Which THREE states are defined in Rapid Spanning Tree Protocol (RSTP)? (Choose three.)
Medium318You are configuring a static route on a Junos device to a remote network reachable via a point-to-point interface. After committing, you notice the route appears in the routing table but is marked as hidden. Which of the following is the most likely cause?
Medium319You need to configure a static floating route that will only become active if the primary dynamic route learned via OSPF fails. Which configuration parameter must be adjusted to achieve this behavior?
Medium320Which of the following are true about IS-IS Level-1 and Level-2 areas? (Choose TWO)
MediumOther domains
All JNCIS-ENT exam domains
Frequently asked questions
- What does the troubleshooting domain cover on the JNCIS-ENT exam?
- troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 320 troubleshooting questions in the JNCIS-ENT question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only troubleshooting questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.