Juniper Enterprise Routing and Switching, Specialist JN0-352 JNCIS-ENT Exam Questions

Answer : A

A link aggregation group bundles multiple physical Ethernet links into a single logical interface (an ae interface) specifically to provide both increased aggregate bandwidth and link-level redundancy. By default, the aeX interface remains operationally up as long as at least one member link within the bundle remains active and passing traffic; the LAG does not require every member link to be functional to continue operating. When one of the four 1-GbE member links in this scenario fails, LACP (if in use) or the underlying link-status monitoring detects the failure, removes that specific link from the active forwarding set, and redistributes traffic hashing across the three remaining healthy member links automatically and without operator intervention. End devices and upper-layer protocols continue to see a single, continuously up ae interface throughout this process, experiencing only a proportional reduction in available aggregate bandwidth rather than any interruption in connectivity. This default behavior is precisely why LAG is a foundational building block for resilient EX Series switch interconnects in enterprise and data center designs, since it allows individual optic, cable, or transceiver failures to be absorbed transparently. None of the distractor behaviors --- full administrative shutdown of the bundle, forwarding limited to broadcast traffic only, or a temporary disabling of all member links during renegotiation --- reflect actual Junos LAG behavior, which is designed explicitly to avoid any such disruption. Reference topics: Junos Enterprise Switching -- Layer 2 Switching, Link Aggregation Group Resiliency.

Answer : C

Once the two candidate routes have equal route preference and equal local preference (both defaulting to 100 unless modified by policy), the Junos BGP algorithm proceeds to its third decision step, which compares the length of each candidate's AS path attribute and selects whichever path carries the shortest AS path, since a shorter path is interpreted as traversing fewer autonomous system hops to reach the origin. This step occurs well before the algorithm ever reaches the specific EBGP-over-IBGP preference rule, which is only evaluated later, after local preference, AS path length, origin type, and MED have all already been compared and found equal between the candidates; because an IBGP-learned copy of a route typically retains the identical AS path that was originally received from the external AS (IBGP does not prepend the local AS number the way crossing an AS boundary does), it is entirely possible, and often the deciding scenario, for AS path length to differ between competing paths well before the algorithm would ever need to fall back on the IBGP-versus-EBGP tiebreak. Selecting a route purely because it was 'learned through IBGP' is not a rule that exists anywhere in the algorithm and would in fact typically be the opposite of Junos's later EBGP-preference tiebreak. Neither next-hop IP address value nor router ID value is compared with a 'highest wins' rule at any point in the standard path selection sequence --- where router ID is used at all, Junos prefers the lowest value, not the highest, making both of those distractors doubly incorrect. Reference topics: Junos Enterprise Routing -- BGP, Path Selection Order: AS Path Length Precedes EBGP/IBGP Preference.

Answer : C

GRE is fundamentally a stateless encapsulation protocol: the encapsulating router simply wraps the passenger packet in a GRE header and an outer delivery IP header and forwards it based on ordinary IP routing table lookups toward the configured tunnel destination address. For that forwarding to succeed, the underlying (global or routing-instance) routing table on each endpoint must contain a valid, reachable route to the far-end tunnel address; without such a route, the tunnel interface will not come up or will be unable to deliver traffic, since GRE relies entirely on the existing IP infrastructure rather than any tunnel-specific signaling to establish reachability. Because GRE has no built-in state machine or session negotiation, it does not natively track whether the remote endpoint is alive --- that requires an optional add-on such as GRE keepalives or BFD, neither of which is enabled by default; an operator must explicitly configure them if failure detection is required. GRE is also protocol-agnostic rather than IPv4-only: it can encapsulate IPv4, IPv6, MPLS, and other network-layer protocols as the passenger, which is one of its defining advantages over IP-in-IP tunneling. Finally, because GRE keeps no per-session state about the peer, it cannot detect or report tunnel failures on its own, reinforcing why route reachability is the one true prerequisite for tunnel operation. Reference topics: Junos Enterprise Routing -- Tunneling, Understanding Generic Routing Encapsulation.

Answer : B

Because root bridge election is decided primarily by comparing bridge priority values --- with the switch advertising the numerically lowest priority always winning, and MAC address serving only as a fallback tiebreaker when priorities are tied --- the only deterministic, reliable way to guarantee that a specific switch is elected root regardless of any other switch's hardware characteristics is to explicitly configure that switch with a lower bridge priority than every other participating switch in the topology. Relying on MAC address alone, as the first distractor suggests, is fundamentally unreliable: MAC addresses are burned in at the factory, cannot be predicted or controlled by the administrator, and any future hardware replacement or newly introduced switch with a numerically lower MAC address could unexpectedly seize the root role since MAC comparison only comes into play at equal priority in the first place, meaning a 'highest MAC' strategy does not even align with how the tiebreak actually favors the lowest value. Port priority and port cost are entirely separate STP parameters that influence which port on a non-root switch is selected as its root port, or which port is selected as designated versus blocking on a given segment; neither parameter has any bearing whatsoever on which switch is elected root bridge for the whole topology, since that decision is made purely from the Bridge ID comparison, independent of any per-port settings. Explicitly and deliberately lowering Switch 1's configured bridge priority is the only correct, industry-standard method. Reference topics: Junos Enterprise Switching -- Spanning Tree Protocols, Guaranteeing Root Bridge Placement via Bridge Priority.

Answer : A, D

IS-IS (Intermediate System to Intermediate System) was designed by ISO as a link-state Interior Gateway Protocol for routing within a single autonomous system, functioning on a hierarchical two-level model conceptually similar to OSPF's areas, which makes the first statement unambiguously correct. Within that hierarchy, Level 1 routers maintain detailed topology information only for their own local area and use a default route toward the nearest Level 2 or Level 1/Level 2 router to reach destinations outside the area; they explicitly do not carry inter-area topology information and therefore cannot route traffic between areas on their own. Routers that participate in both levels simultaneously --- Level 1/Level 2 (L1/L2) routers --- sit at the area boundary, maintaining a Level 1 database for their local area and a Level 2 database for the backbone, and it is specifically these dual-level routers that stitch inter-area traffic together, forwarding packets from the local area into the Level 2 backbone and vice versa, which confirms the second correct statement. Regarding route preference, Junos assigns distinct default preference (administrative distance) values of 15 for IS-IS Level 1 routes and 18 for IS-IS Level 2 routes --- neither of which is 20 --- so the preference-value statement is factually incorrect and included as a distractor testing precise knowledge of Junos default protocol preferences. Reference topics: Junos Enterprise Routing -- IS-IS, Level 1, Level 2, and L1/L2 Router Roles; Default Route Preference Values.

Answer : C

Root protection (root guard) must always be applied on the ports of the switches you trust to remain root-bridge-eligible, specifically on the interfaces facing away from the legitimate root and toward parts of the network where an untrusted or rogue device could plausibly appear and begin transmitting superior BPDUs. In this topology, Switch-1 is the intended, permanent root bridge (lowest priority, 4k), and Switch-2 is its aggregation-layer peer; both sit above the access layer, where Switch-3 and Switch-4 connect downstream toward end-user-facing infrastructure and where an accidental or malicious rogue switch is realistically most likely to be introduced. The ge-0/0/6 and ge-0/0/8 interfaces on Switch-1 and Switch-2 are precisely the downlink ports facing that access layer, meaning they are the exact points at which a rogue switch's superior BPDU (one advertising a lower priority than the legitimate root) would first be received if such a device appeared beneath Switch-3 or Switch-4. Applying root protection on those specific interfaces causes Junos to immediately block (move to a root-inconsistent, discarding state) any port that receives a superior BPDU, preventing the rogue device from ever being accepted as root, while normal, non-superior BPDUs continue to be processed without disruption. Applying root guard on Switch-1 and Switch-2's peer link (ge-0/0/12/13) would be inappropriate, since that link legitimately connects two trusted, root-eligible switches. Reference topics: Junos Enterprise Switching -- Spanning Tree Protocols, Root Protection Placement Strategy.

Answer : B, C

OSPF relies on two IANA-reserved multicast addresses to distribute its control-plane traffic across broadcast and NBMA network types, and Link State Update (LSU) packets, which carry the actual LSAs being flooded, are addressed to one or the other depending on the role of the sending router. The address 224.0.0.5, designated AllSPFRouters, is used when any OSPF router --- including a router that is itself the Designated Router or Backup Designated Router --- needs to flood an LSU to every OSPF-speaking router on the segment; this is the address used for Hello packets universally and for LSU flooding directed at the entire segment. The address 224.0.0.6, designated AllDRouters, is used specifically by non-DR, non-BDR routers (DROthers) when they need to send an LSU or other update destined for the DR and BDR only, since only the DR and BDR actually listen on this address; the DR then takes responsibility for reflooding that information to the rest of the segment using 224.0.0.5. This two-address design is central to how OSPF achieves flooding efficiency on multi-access networks by funneling updates through the DR rather than requiring full-mesh flooding among every router pair. The addresses 224.0.0.8 and 224.0.0.9 are not used by OSPF at all; 224.0.0.9 is in fact reserved for RIPv2 multicast updates, making it a plausible-looking but incorrect distractor. Reference topics: Junos Enterprise Routing -- OSPF, Multicast Addressing for Hello and Link State Update Packets.