An engineer needs to apply a configuration change to all interfaces except the management interface (fxp0). Which approach is most efficient?
apply-groups-except allows selective exclusion from a group.
Why this answer
Option C is correct because configuration groups with apply-groups-except allow you to define a common configuration template (e.g., all interfaces) and then selectively exclude specific interfaces (e.g., fxp0) from inheriting those settings. This approach is efficient, scalable, and avoids manual per-interface configuration or risky regex patterns that might inadvertently match unintended interfaces.
Exam trap
The trap here is that candidates may think Junos supports regex-based exclusion in wildcard set commands (like Cisco IOS does with 'interface range' and 'exclude'), but Junos wildcard set only supports simple prefix/suffix matching and cannot exclude specific interfaces, making configuration groups with apply-groups-except the correct and intended method.
How to eliminate wrong answers
Option A is wrong because manually configuring each interface individually is inefficient, error-prone, and does not scale for large numbers of interfaces. Option B is wrong because wildcard set with regex to match all interfaces except fxp0 is not supported in Junos; the wildcard set command only allows simple patterns with asterisks and cannot perform negative matching or regex exclusions. Option D is wrong because disabling the management interface (fxp0) would break out-of-band management access, and the approach does not actually exclude fxp0 from the configuration changes—it simply disables it, which is not the goal.