Exam4Training

Juniper JN0-682 Data Center, Professional (JNCIP-DC) Online Training

Question #1

Which two statements are correct about VXLANs? (Choose two.)

  • A . VXLANs have smaller broadcast domains than VLANs.
  • B . VXLANs have a smaller logical network identifier than VLANs.
  • C . VXLANs can have a theoretical maximum of 16 million unique networks.
  • D . VXLANs are an overlay technology.

Reveal Solution Hide Solution

Correct Answer: CD
CD

Explanation:

VXLAN (Virtual Extensible LAN) is an overlay technology designed to support large-scale, multi-tenant environments. Unlike traditional VLANs which are limited to 4096 unique network identifiers, VXLANs can support up to 16 million unique network segments, providing significantly greater scalability. This is achieved through a 24-bit VXLAN Network Identifier (VNI). Additionally, being an overlay technology, VXLAN allows for the creation of virtualized Layer 2 networks over an existing

Layer 3 infrastructure.

Reference: Juniper Networks Documentation, VXLAN Overview.

Question #2

You are required to create an IP fabric for your new data center. In this scenario, which protocol would be used to support EVPN?

  • A . IS-IS with correct TLVs enabled
  • B . MP-BGP
  • C . OSPF
  • D . any protocol with the appropriate APIs

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

In a data center IP fabric scenario, Multi-Protocol Border Gateway Protocol (MP-BGP) is used to support Ethernet VPN (EVPN). EVPN is a next-generation solution for multipoint L2VPN services that combines both Layer 2 and Layer 3 attributes. MP-BGP is essential for EVPN as it provides the control plane for EVPN by advertising MAC addresses, IP address information, and VXLAN information.

Reference: Juniper Networks Documentation, EVPN Overview.

Question #3

Which device provides microsegmentation in a data center network?

  • A . vSRX
  • B . EX4300
  • C . vMX
  • D . QFX5100

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

In a data center network, the vSRX, which is a virtual firewall provided by Juniper, offers microsegmentation capabilities. Microsegmentation is a method of creating secure zones in data centers and cloud deployments to isolate workloads from one another and secure them individually. vSRX is capable of enforcing security policies at a granular level in virtualized environments, which is

essential for effective microsegmentation.

Reference: Juniper Networks vSRX Documentation.

Question #4

You are building an IP fabric underlay network for your new data center. You must ensure that you have predictable load-balancing behavior throughout your network.

According to Juniper Networks, what are two best practices that should be followed in this scenario? (Choose two.)

  • A . All leaf devices must be identical to the spine device models including the same installed line cards.
  • B . All spine devices should be identical models including the same installed line cards.
  • C . Every leaf device should have an identical uplink to every other leaf device.
  • D . Every leaf device should have an identical uplink to every spine device.

Reveal Solution Hide Solution

Correct Answer: BD
BD

Explanation:

For building an IP fabric underlay network in a data center, it is recommended that all spine devices are identical models, including the same installed line cards, to ensure uniformity and predictable performance. Additionally, each leaf device should have an identical uplink to every spine device to ensure consistent and predictable load-balancing behavior across the network. This uniformity in spine and leaf configurations helps in achieving optimal and predictable data paths, thereby enhancing overall

network efficiency and stability.

Reference: Juniper Networks Technical Documentation, Data Center Design Considerations.

Question #5

Which two statements are correct about VXLAN domains? (Choose two.)

  • A . With Layer 2 traffic, the VLAN ID is discarded before the packet is sent.
  • B . With Layer 3 traffic, the VLAN ID is discarded before the packet is sent.
  • C . With Layer 2 traffic, the VLAN ID is transmitted within the packet.
  • D . With Layer 3 traffic, the VLAN ID is transmitted within the packet.

Reveal Solution Hide Solution

Correct Answer: AC
AC

Explanation:

In VXLAN domains, when dealing with Layer 2 traffic, the original VLAN ID of the packet can be either transmitted within the VXLAN packet or discarded, depending on the specific implementation and configuration. When the VLAN ID is preserved, it allows for VLAN transparency, enabling the VXLAN to transport VLAN-tagged frames across the network. On the other hand, discarding the VLAN ID can simplify the encapsulation process but removes the original VLAN information from the packet.

Reference: Juniper Networks VXLAN Implementation Guide.

Question #6

You want to improve network convergence within a data center during link failures. In this scenario, which EVPN-VXLAN feature will accomplish this task?

  • A . storm control
  • B . Ethernet segment auto discovery
  • C . MAC filtering
  • D . MAC mass withdrawal

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

The MAC mass withdrawal feature in EVPN-VXLAN environments significantly improves network convergence during link failures. When a link failure occurs, instead of individually withdrawing each MAC address learned on the failed link, EVPN can send a single, consolidated message indicating that all MAC addresses associated with the Ethernet Segment Identifier (ESI) of the failed link are no longer reachable. This accelerates the convergence process by reducing the amount of control plane traffic needed to update the network state.

Reference: Juniper Networks EVPN-VXLAN Technical Documentation.

Question #7

Which IP fabric underlay protocol provides the highest degree of scalability?

  • A . IS-IS
  • B . RIP
  • C . EBGP
  • D . OSPF

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

Among the listed protocols, External Border Gateway Protocol (EBGP) provides the highest degree of scalability for an IP fabric underlay. EBGP is designed for inter-autonomous system routing and thus is well-suited to handle large-scale network environments with robustness and scalability. It is commonly used in data center fabrics due to its ability to efficiently manage routing information and scale with the network as it grows.

Reference: Juniper Networks Data Center Design – IP Fabric.

Question #8

Referring to the exhibit, which two statements are correct? (Choose two.)

  • A . The local leaf is using the 192.168.100.102 IP address as the local anchor point of the VTEP tunnel.
  • B . The remote leaf is using the 192.168.100.102 IP address as the local anchor point of the VTEP tunnel.
  • C . The remote leaf is using the 192.168.100.101 IP address as the local anchor point of the VTEP tunnel.
  • D . The local leaf is using the 192.168.100.101 IP address as the local anchor point of the VTEP tunnel.

Reveal Solution Hide Solution

Correct Answer: AC
Question #9

Site 1 contains 20+ VMs. The link between Site 1 and Leaf1 goes down.

Referring to the exhibit, which statement is correct?

  • A . Type-1 routes for each VM will expire one at a time.
  • B . Type-1 routes for all VMs in the site will expire all at once.
  • C . Type-1 routes for all VMs in the site will be withdrawn all at once.
  • D . Type-1 routes for each VM will be withdrawn one at a time.

Reveal Solution Hide Solution

Correct Answer: C
Question #10

Referring to the exhibit.

What happens when you initiate ZTP on a QFX5120 switch running Junos 21.3R1.9?

  • A . ZTP skips both the Junos installation and the configuration.
  • B . ZTP performs the Junos installation but skips the configuration.
  • C . ZTP performs both the Junos installation and the configuration.
  • D . ZTP skips the Junos installation but applies the configuration.

Reveal Solution Hide Solution

Correct Answer: D

Question #11

Referring to the exhibit.

You have a data center in which only the spine devices are using EVPN and VXLAN. The leaf nodes are multihomed in active-active mode to the spine nodes through ESI LAG interfaces. In this design, a link failure on the interface connecting the spine nodes would also cause all traffic from the spine to the leaf nodes to drop.

In this scenario, which command configured on which nodes would solve this problem?

  • A . the disable protocols evpn no-core-isolation command on the spine nodes
  • B . the set protocols evpn no-core-isolation command on the spine nodes
  • C . the disable protocols evpn no-core-isolation command on the leaf nodes
  • D . the set protocols evpn no-core-isolation command on the leaf nodes

Reveal Solution Hide Solution

Correct Answer: A
Question #12

You are evaluating which method to use for learning MAC addresses in your VXLAN network.

Which statement is true in this scenario?

  • A . Multicast exchanges MAC addresses through data plane learning and is more reliable than EVPN.
  • B . EVPN exchanges MAC addresses through control plane learning and is more reliable than multicast.
  • C . EVPN exchanges MAC addresses through data plane learning and is more reliable than multicast.
  • D . Multicast exchanges MAC addresses through control plane learning and is not more reliable than EVPN.

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

Ethernet VPN (EVPN) provides control plane-based MAC address learning. This means that MAC addresses are exchanged and learned via BGP messages rather than through traditional data plane flooding. This approach is more scalable and reliable compared to multicast-based MAC address learning, where MAC addresses are learned through data plane flooding. Control plane learning with EVPN is less prone to issues like broadcast storms and provides a more efficient and stable mechanism for MAC address dissemination in large-scale networks.

Reference: Juniper Networks EVPN Overview and Configuration Guide.

Question #13

Referring to the exhibit, which two statements are correct? (Choose two.)

  • A . Seamless EVPN VXLAN stitching is in use.
  • B . Switch01 is a spine device.
  • C . An OTT data center interconnect is in use.
  • D . Switch01 is a leaf device.

Reveal Solution Hide Solution

Correct Answer: AD
Question #14

You are asked to implement a monitoring and telemetry solution for the QFX Series devices in

your IP fabric that uses a push model to collect both system event data and statistical data for your QFX Series devices.

Which technology satisfies your requirements?

  • A . JunosXMLAPI
  • B . REST API
  • C . SNMP
  • D . Junos Telemetry Interface

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

The Junos Telemetry Interface (JTI) is the ideal solution for monitoring and telemetry in an IP fabric using QFX Series devices. JTI uses a push model to stream system event data and statistical data from the devices. It provides real-time, granular monitoring capabilities, which is more efficient and scalable compared to traditional polling methods like SNMP. By pushing data to a telemetry server, JTI allows for more dynamic and immediate insights into network performance and health.

Reference: Juniper Networks QFX Series Documentation – Junos Telemetry Interface.

Question #15

You are configuring an MX Series router to act as a Layer 3 gateway to route traffic between VXLANs in different data centers across a WAN connection.

In this scenario, what must you do to enable this communication?

  • A . Configure route reflectors.
  • B . Change the UDP port used by the VXLANs.
  • C . Configure the IRB interfaces to connect the VXLANs.
  • D . Enable PIM on all interfaces.

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

To enable communication between VXLANs in different data centers across a WAN connection using an MX Series router, Integrated Routing and Bridging (IRB) interfaces must be configured. IRB interfaces provide Layer 3 routing capabilities within a VXLAN overlay network, allowing for inter-VXLAN routing. By configuring IRB interfaces on the MX router, you enable it to act as a Layer 3 gateway, routing traffic between the different VXLANs across the data centers.

Reference: Juniper Networks MX Series Documentation – VXLAN and EVPN Configuration.

Question #16

You are deploying a switch using ZTP.

Which two statements are true in this scenario? (Choose two.)

  • A . If the switch is already running the referenced image, no action is performed and the switch
    moves to the next ZTP step in the ZTP process.
  • B . Using DHCP Option 150. the DHCP server informs the switch of a software image name.
  • C . Using DHCP Option 43 sub option 01, the DHCP server informs the switch of the configuration file name.
  • D . If no configuration file is referenced in DHCP Options, the switch downloads a default configuration file from the storage server.

Reveal Solution Hide Solution

Correct Answer: AC
AC

Explanation:

In Zero Touch Provisioning (ZTP), the process is streamlined to simplify the deployment of new switches in the network. When a switch that supports ZTP boots and does not find a configuration file, it attempts to acquire one using DHCP. If the switch is already running the firmware image specified by the DHCP server (if mentioned), it proceeds to the next step without re-downloading the image. DHCP Option 43 suboption 01 is used by the DHCP server to provide the URL of the configuration file to the switch.

Reference Zero Touch Provisioning

Question #17

You are asked to build a single export policy that can be applied to all devices to advertise only loopback IP addresses in the 172.16.0.0/24 subnet into your EBGP IP fabric.

In this scenario, which two solutions would accomplish this task? (Choose two.)

  • A . Option A
  • B . Option B
  • C . Option C
  • D . Option D

Reveal Solution Hide Solution

Correct Answer: B
Question #18

When considering VRF routing-instances for network segmentation, which two statements are true? (Choose two.)

  • A . A logical interface can participate in multiple VRFs.
  • B . Multiple VRFs on a single device consolidate routing information to a single table.
  • C . VRFs have independent routing tables.
  • D . VRFs support overlapping subnets.

Reveal Solution Hide Solution

Correct Answer: CD
CD

Explanation:

Virtual Routing and Forwarding (VRF) instances allow multiple virtual routing tables to exist on a single physical router. Each VRF has its own independent routing table, which allows network paths to be segmented without interference from other VRFs. This design supports overlapping IP address spaces, enabling the same IP subnet to be used in different VRFs without conflict.

Reference Virtual Routing and Forwarding

Question #19

What are two types of EVPN routes? (Choose two.)

  • A . ES-lmport route target
  • B . Ethernet segment
  • C . MAC mobility
  • D . MAC advertisement

Reveal Solution Hide Solution

Correct Answer: CD
CD

Explanation:

In Ethernet VPN (EVPN), MAC mobility and MAC advertisement are crucial route types. MAC mobility is used to handle the movement of MAC addresses between different network locations, ensuring accurate and efficient traffic forwarding. MAC advertisement routes are used to advertise the presence of MAC addresses, enabling the correct forwarding of Ethernet frames in an EVPN environment.

Reference EVPN Overview

Question #20

You are considering deploying a MAC-VRF type routing instance with a VLAN-bundle service type. In this scenario, which two statements are correct? (Choose two.)

  • A . It can be implemented in a bridge overlay architecture.
  • B . VLAN normalization is supported.
  • C . Multiple VLAN IDs per EVI are supported.
  • D . It can be implemented in an ERB architecture.

Reveal Solution Hide Solution

Correct Answer: AC
AC

Explanation:

A MAC-VRF (MAC Virtual Routing and Forwarding) instance with a VLAN-bundle service type is used in EVPN-VXLAN architectures. It can be implemented in a bridged overlay architecture where Ethernet segments are bridged across the EVPN-VXLAN network. This setup supports multiple VLAN IDs per Ethernet VPN Instance (EVI), enabling the segregation and transport of traffic from different VLANs over the same EVPN-VXLAN infrastructure.

Reference [EVPN-VXLAN Configuration Guide](https://www.juniper.net/documentation/us/en/software/en/software/junos/evpn-vxlan/topics/topic-map/evpn-overview.htm

Question #21

Referring to the exhibit, you have a data center with two PODs. Seamless EVPN-VXLAN stitching is used to facilitate communication between the PODs.

Which three statements are true in this scenario? (Choose three.)

  • A . AVXLAN tunnel can form between L2 and S1.
  • B . A VXLAN tunnel can form between S1 and S2.
  • C . AVXLAN tunnel can form between L1 and L2.
  • D . AVXLAN tunnel can form between L2 and S3.
  • E . AVXLAN tunnel can form between L1 and L4.

Reveal Solution Hide Solution

Correct Answer: ABD
Question #22

A customer wants to connect two data centers on different subnets using EVPN.

What are two implications of using different IP subnets at each site? (Choose two.)

  • A . Using different IP subnets at each site allows Layer 3 gateways to exchange only type-3 routes.
  • B . MAC addresses will need to be advertised between the data centers.
  • C . MAC addresses will not need to be advertised between the data centers.
  • D . Using different IP subnets at each site allows Layer 3 gateways to exchange only type-5 routes.

Reveal Solution Hide Solution

Correct Answer: BD
BD

Explanation:

When connecting two data centers on different subnets using EVPN, MAC addresses need to be advertised between the data centers to maintain Layer 2 connectivity. Using different subnets implies the need for Layer 3 gateways at each site, which typically involve exchanging type-5 routes in an EVPN context.

Reference: EVPN for Data Center Interconnect

Question #23

You want to enable an EBGP-based IP fabric to allow ECMP routes to be populated into the RIB.

In this scenario, which action will accomplish this task?

  • A . Enable the forwarding-options ecmp-do-local-lookup parameter.
  • B . Enable the multipath multiple-as BGP parameter.
  • C . Enable the routing-options multipath global parameter.
  • D . Enable the chassis ecmp-alb parameter.

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

To enable ECMP (Equal-Cost Multi-Path) routes in the Routing Information Base (RIB) in an EBGP-based IP fabric, you should enable the ‘multipath multiple-as’ BGP parameter. This setting allows the use of multiple paths for BGP routes even when they come from different autonomous systems, which is key in a typical EBGP deployment in a data center IP fabric.

Reference: BGP and Multipath Routing

Question #24

Which two statements are true about VRF routing instances? (Choose two.)

  • A . VRF can be used in conjunction with Layer 3 logical interfaces.
  • B . Each logical Layer 3 interface can belong to only one routing instance.
  • C . Each logical Layer 3 interface can belong to multiple routing instances.
  • D . VRF does not enable multitenancy.

Reveal Solution Hide Solution

Correct Answer: AB
AB

Explanation:

VRF (Virtual Routing and Forwarding) instances can be used in conjunction with Layer 3 logical interfaces. Each logical Layer 3 interface can belong to only one VRF, maintaining separation and isolation of routing tables, which is essential for multitenancy and network segmentation.

Reference: VRF Lite Configuration

Question #25

Referring to the exhibit, you want to advertise the IRB routes between both routing instances.

Which two configuration parameters would be applied to accomplish this task? (Choose two.)

  • A . Apply policy irb-A under instance Tenant_c and apply policy irb-c under instance Tenant_A as import policies.
  • B . Configure auto-export under both routing instances.
  • C . Configure vrf-table-label under both routing instances.
  • D . Apply policy irb-A under instance Tenant A and apply policy irb-c under instance Tenant_c as export policies.

Reveal Solution Hide Solution

Correct Answer: AC
Question #26

You have deployed a multitenant EVPN-VXLAN fabric. You must have the routes in the BLUE VRF show up in the RED VRF.

In this scenario, how would you achieve this goal?

  • A . Configure a VRF export policy on the BLUE VRF that matches the RED VRF route target.
  • B . Configure the RED route target in the BLUE VRF.
  • C . Configure the BLUE route target in the RED VRF.
  • D . Configure a VRF import policy on the RED VRF that matches the BLUE VRF route target.

Reveal Solution Hide Solution

Correct Answer: D
Question #27

You are building an IP fabric underlay for your data center. You are asked to ensure that the two spine devices are in the same AS (65000) while the six leaf devices are in a different AS (65512).

In this scenario, which two statements are correct by default? (Choose two.)

  • A . All BGP routes advertised by a leaf device will be accepted on the spine devices.
  • B . A leaf device will accept all BGP routes received from the spine that were originated from another leaf device.
  • C . All BGP routes advertised by a leaf device will be rejected on the spine devices.
  • D . A leaf device will reject all BGP routes received from the spine that were originated from another leaf device.

Reveal Solution Hide Solution

Correct Answer: AB
AB

Explanation:

In an EBGP setup with different AS numbers for spine and leaf devices, all BGP routes advertised by a leaf device will be accepted on the spine devices as they are considered external routes. Additionally, a leaf device will accept all BGP routes received from the spine that were originated from another leaf device, enabling full connectivity within the fabric.

Reference: EBGP Configuration for IP Fabric

Question #28

Which two statements about ZTP are true? (Choose two.)

  • A . The image storage service and the DHCP server can be running on different server hosts.
  • B . When a switch is booted. DHCP requests are sent only through the management Ethernet interface.
  • C . The image storage service must be running on the same server host where the DHCP service is running.
  • D . When a switch is booted, DHCP requests are sent through the management interface as well as attached revenue ports.

Reveal Solution Hide Solution

Correct Answer: AD
AD

Explanation:

In ZTP, the image storage service and the DHCP server can be running on different server hosts, allowing for flexibility in network design. When a switch is booted, DHCP requests are sent through both the management interface and attached revenue ports. This ensures that the switch can retrieve its configuration from the network regardless of how it’s connected.

Reference: Zero Touch Provisioning Guide

Question #29

You are deploying a 3-stage Clos IP fabric in your data center. In this scenario, which statement is correct?

  • A . Each server-facing interface on a leaf node is always three hops away from other server-facing interfaces.
  • B . Each spine node must be physically connected to all other spine nodes.
  • C . There is an eight-spine node limitation.
  • D . No direct physical connections exist between leaf nodes.

Reveal Solution Hide Solution

Correct Answer: D
Question #30

You are deploying an EBGP IP fabric. In this scenario, which statement is true?

  • A . Each spine should peer with every other spine using physical addresses.
  • B . Each spine should peer with each leaf using loopback addresses.
  • C . Each spine should peer with every other spine using loopback addresses.
  • D . Each spine should peer with each leaf using physical addresses.

Reveal Solution Hide Solution

Correct Answer: D

Question #31

You are asked to scale the available bandwidth within your Clos data center network to support more east-west traffic.

In this scenario, what are two ways to accomplish this task? (Choose two.)

  • A . Add leaf devices to increase available paths and bandwidth
  • B . Use aggregated interfaces in the fabric.
  • C . Add spines to increase available paths and bandwidth.
  • D . Interconnect all spines to increase available paths and bandwidth.

Reveal Solution Hide Solution

Correct Answer: AC
AC

Explanation:

In a Clos data center network, scaling the available bandwidth to support more east-west traffic can be effectively achieved by either adding more leaf devices (A) or more spine devices (C). Adding leaf devices increases the total number of endpoints in the network, thereby providing additional paths and bandwidth for east-west traffic. Similarly, adding spine devices increases the interconnectivity within the network, offering more paths for traffic to flow through, which helps in handling higher volumes of east-west traffic. Both approaches work towards enhancing the overall capacity and efficiency of the network.

Reference: Juniper Networks – Understanding Clos Networks

Juniper Networks – Data Center Network Design Considerations

Question #32

Which two statements are correct about a spine and leaf-based IP fabric? (Choose two.)

  • A . Traffic is diverted within the fabric when a device or link fails.
  • B . There is no need for redundancy at the server level.
  • C . Leaf switches broadcast frames to all other leaf devices.
  • D . Clos networks demonstrate good scaling features.

Reveal Solution Hide Solution

Correct Answer: AD
AD

Explanation:

In a spine and leaf-based IP fabric, when a device or link fails, the traffic is rerouted within the fabric (A), ensuring high availability and resiliency. This architecture is designed to dynamically adapt to changes and reroute traffic as needed. Furthermore, Clos networks, which are the basis for spine-leaf architectures, demonstrate good scaling features (D) as they allow for easy expansion of the network by adding more spine or leaf switches without significant changes to the existing infrastructure.

Reference: Juniper Networks – Spine-and-Leaf Architectures

Understanding Spine-and-Leaf Network Topologies

Question #33

You are troubleshooting a traditional Clos Layer 3 IP fabric in your data center.

You are reviewing the BGP configuration for one of your spine devices.

Referring to the exhibit, which statement is correct?

  • A . This spine device will not install multiple next hops for remote destinations in its routing table.
  • B . This spine device will not install any routes for remote destinations in its routing table.
  • C . This spine device has three neighboring leaf devices.
  • D . This spine device has three neighboring spine devices.

Reveal Solution Hide Solution

Correct Answer: C
Question #34

Referring to the exhibit, which statement is correct?

  • A . Leaf1 has not learned any MAC addresses
  • B . Leaf3 is the remote tunnel endpoint.
  • C . One tunnel is servicing multiple VLANs
  • D . Spanning Tree Protocol is disabled

Reveal Solution Hide Solution

Correct Answer: C
Question #35

You are asked to deploy an Ethernet bridging design in a data center with the criteria shown below.

– Routing must occur on the spine devices.

– VTEPs must terminate on the leaf devices.

– Facilitate inter-VLAN communication.

– Layer 2 gateways must be present on spine and leaf devices.

Which architecture should you use in this scenario?

  • A . edge-routed bridging architecture
  • B . centrally-routed bridging architecture
  • C . bridge overlay architecture
  • D . collapsed spine architecture

Reveal Solution Hide Solution

Correct Answer: B
Question #36

The two data centers shown in the exhibit need to be connected using EVPN.

Which two statements are correct in this situation? (Choose two.)

  • A . Hosts in VLAN 10 can communicate with hosts in Data Center 2 using Layer 3.
  • B . Hosts in VLAN 10 can communicate with hosts in Data Center 2 using Layer 2.
  • C . Hosts in VLAN 202 can communicate using Layer 3 between data centers.
  • D . Hosts in VLAN 202 can communicate using Layer 2 between data centers.

Reveal Solution Hide Solution

Correct Answer: AD
Question #37

What is an advantage that EVPN has over VPLS when used for DCI?

  • A . mass MAC withdrawal
  • B . transparent BPDU transport
  • C . active/standby multihoming
  • D . reverse path forwarding

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

One of the primary advantages of EVPN (Ethernet VPN) over VPLS (Virtual Private LAN Service) is the capability of mass MAC withdrawal (A). This feature allows EVPN to quickly remove MAC addresses from the forwarding database when a link or node fails, improving convergence times and network stability. In contrast, VPLS lacks this efficient mechanism for withdrawing MAC addresses en masse, which can lead to slower convergence and potential traffic blackholing in the event of network changes or failures.

Reference: Juniper Networks – EVPN Overview

Understanding EVPN

Question #38

You are asked to enable visibility into your EVPN-VXLAN network traffic by monitoring traffic continuously.

Which two statements are correct in this scenario? (Choose two.)

  • A . You cannot enable sFlow monitoring on each interface individually.
  • B . The sFlow agent is installed by default on your OFX Series switch.
  • C . You must enable sFlow monitoring on each interface individually.
  • D . The sFlow agent needs to be manually installed on your QFX Series switch.

Reveal Solution Hide Solution

Correct Answer: AC
AC

Explanation:

For enabling visibility into EVPN-VXLAN network traffic through continuous monitoring:

You must enable sFlow monitoring on each interface individually (Option C): sFlow is a sampling technology used for monitoring network traffic. In a Juniper environment, sFlow needs to be enabled on individual interfaces to start collecting traffic samples. This allows for granular control over which interfaces are monitored.

You cannot enable sFlow monitoring on each interface individually (Option A): This statement is incorrect, contradicting the above explanation. sFlow can and should be enabled on specific interfaces as needed.

The option stating that the sFlow agent needs to be manually installed on QFX Series switches (Option D) is inaccurate, as the sFlow feature is typically integrated into the Junos OS running on QFX Series switches. The statement about the sFlow agent being installed by default on QFX Series switches (Option B) is partially true but does not directly address the question of enabling visibility into network traffic.

Reference Juniper Networks: Configuring sFlow Technology for Network Monitoring

Question #39

You are troubleshooting a problem with traffic not reaching a remote VTEP.

Referring to the exhibit, what is the reason for the problem?

  • A . A conflict exists with the VLAN-to-VNI mapping.
  • B . The local VTEP is misconfigured with the wrong VNI.
  • C . No VTEP is configured on peer 192.0.2.20.
  • D . The remote VTEP does not have the correct VNI configured.

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

https://www.juniper.net/documentation/us/en/software/junos/ovsdb-vxlan-qfx/topics/example/overlay-ping-traceroute-vxlan.html

Question #40

The configuration shown in the exhibit is intended to set up assisted replication but will not commit.

Which action will create a valid configuration in this situation?

  • A . Change the 10.0 address to 192.168.100.1 primary.
  • B . Change the replicator inet address to 192.168.100.101.
  • C . Delete replicator inet 192.168.100.1.
  • D . Change the replicator inet address to 192.168.100. 51.

Reveal Solution Hide Solution

Correct Answer: B

Question #41

You are configuring a DCI VPN solution between sites that require an L3VPN to work with your EVPN deployment. Your organization’s policy restricts configuring RSVP and LDP on your WAN links. While configuring the solution, you notice that no routes exist in the inet table.

In this scenario, which parameter will solve this problem?

  • A . bgp family inet labeled-unicast per-group-label
  • B . bgp family inet labeled-unicast aggregate-label
  • C . bgp family inet labeled-unicast resolve-vpn
  • D . bgp family evpn signaling

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

In a scenario where RSVP and LDP are restricted, and routes are not appearing in the inet table, the use of "bgp family inet labeled-unicast per-group-label" becomes necessary. This setting is crucial in environments where label distribution protocols like RSVP or LDP are not used. It enables the use of MPLS labels in BGP without relying on these protocols, which is essential for integrating L3VPN with EVPN over WAN links that do not support RSVP or LDP. The “per-group-label” option ensures that a single label is used for all routes exchanged with a BGP neighbor, which simplifies label management and conserves label space.

Reference: Junos OS Routing Protocols Library for Routing Devices

Question #42

You are asked to configure JTI on the QFX Series devices in your data center fabric. You must use sensors with the least amount of latency.

Which type of sensor should you use in this scenario?

  • A . Python sensors
  • B . JTI native sensors
  • C . analog sensors
  • D . JTI OpenConfig sensors

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

JTI (Junos Telemetry Interface) native sensors are used to provide telemetry data with minimal latency. These sensors are embedded in the Junos OS and can provide real-time, granular device and interface statistics. JTI native sensors are preferred in scenarios requiring high-frequency data collection with the least amount of delay, making them ideal for monitoring in fast-paced environments like data center fabrics.

Reference: Junos Telemetry Interface User Guide

Question #43

You are asked to manage multicast traffic in the EVPN-VXLAN environment. You must ensure that multicast traffic is delivered only to the leaf device with interested receivers.

In this scenario, which feature is required on leaf devices to accomplish this task?

  • A . PIM
  • B . IGMP snooping
  • C . MSDP
  • D . DVMRP

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

In an EVPN-VXLAN environment, to ensure that multicast traffic is delivered only to leaf devices with interested receivers, IGMP snooping is required. IGMP snooping enables the leaf devices to listen to IGMP report and leave messages from hosts and make forwarding decisions based on this information. This way, multicast traffic is only forwarded to ports with interested multicast group members, optimizing bandwidth and resource utilization.

Reference: EVPN-VXLAN Configuration Guide

Question #44

An EVPN-signaled VXLAN overlay has been deployed in the network shown in the exhibit. An EVPN LAG has been configured to connect host1 to the network, and device leaf1 has been elected as the designated forwarder.

In this scenario, which statement is true?

  • A . The Ieaf3 device can utilize both leaf1 and Ieaf2 to forward unicast packets from host2 to host1.
  • B . An ICCP control link must be configured between leaf1 and Ieaf2.
  • C . The Ieaf3 device will only receive an advertisement to the LAG segment from leaf1.
  • D . Broadcast packets sent from host2 will not be forwarded to Ieaf2.

Reveal Solution Hide Solution

Correct Answer: C
Question #45

Which statement is true about the route shown in the exhibit?

  • A . The route target on this route is 1000
  • B . The route is an EVPN type-1 route.
  • C . The route uses a type-1 route distinguisher.
  • D . The VNI for this route is 304.

Reveal Solution Hide Solution

Correct Answer: B
Question #46

You are asked to implement VXLAN in your data center network. You must choose between implementing EVPN signaling and multicast signaling.

Which two statements are correct in this scenario? (Choose two.)

  • A . EVPN signaling reduces ARP flooding and multicast signaling does not.
  • B . EVPN signaling propagates MAC addresses across the network and multicast signaling does not.
  • C . EVPN signaling uses a standards-based protocol and multicast signaling does not.
  • D . EVPN signaling enables distributed Layer 3 gateways and multicast signaling does not.

Reveal Solution Hide Solution

Correct Answer: AB
AB

Explanation:

A) EVPN signaling reduces ARP flooding, while multicast signaling does not. EVPN uses BGP to distribute MAC address information, which can also include IP address bindings, thereby eliminating the need for ARP flooding across the VXLAN overlay.

B. EVPN signaling propagates MAC addresses across the network, while multicast signaling does not. In an EVPN environment, MAC address advertisements are distributed via BGP EVPN routes, enabling efficient and scalable MAC address learning and distribution.

Reference: EVPN Overview

Question #47

You have a two spine and four leaf CRB topology and you must ensure that the hosts connected to the leaf devices have reachability to all IRB interface addresses, including the local spine IRB addresses, and the virtual gateway address.

Which two configuration parameters must be used to accomplish this task? (Choose two.)

  • A . Configure a spine-to-spine BGP peering as part of the overlay.
  • B . Configure virtual-gateway-accept-data under the IRB interface.
  • C . Configure a spine-to-spine EVPN peering as part of the routing instance.
  • D . Configure proxy-macip-advertisement under the IRB interface.

Reveal Solution Hide Solution

Correct Answer: BD
BD

Explanation:

B) Configure virtual-gateway-accept-data under the IRB interface. This configuration is necessary to ensure that the IRB interfaces on the spine devices can handle traffic destined to the virtual gateway IP address.

D) Configure proxy-macip-advertisement under the IRB interface. This enables the advertisement of proxy MAC/IP routes to remote VTEPs. This is essential in a CRB (Centralized Routing and Bridging) topology to ensure that all hosts, including those connected to the spine devices, have reachability to all IRB interface addresses.

Reference: Juniper EVPN Configuration Guide

Question #48

You are troubleshooting a connectivity issue across a VXLAN overlay network. In the exhibit, you are using the ping overlay command from a local VTEP residing on a OFX 5120 to a remote VTEP residing on a separate QFX5120.

What is the problem in this situation?

  • A . The VXLAN controller is down.
  • B . VXLAN VN1100 is not configured on the local VTEP
  • C . VXLAN VN1100 is not configured on the remote VTEP.
  • D . VXLAN VN1100 is not configured on both end points.

Reveal Solution Hide Solution

Correct Answer: C
Question #49

Which event triggers the generation of a EVPN type-4 route?

  • A . When unknown unicast traffic is received on an interface.
  • B . When known unicast traffic is received on an interface.
  • C . When a new VNI is configured.
  • D . When a new ESI is configured.

Reveal Solution Hide Solution

Correct Answer: D
D

Explanation:

An EVPN Type-4 route, also known as an Ethernet Segment (ES) route, is generated when a new Ethernet Segment Identifier (ESI) is configured. The ESI represents an Ethernet segment for multi-homing purposes in EVPN. When a new ESI is configured on an interface, it triggers the generation of an EVPN Type-4 route to advertise the Ethernet segment’s existence and its multi-homed state to other VTEPs in the EVPN instance. This helps in providing redundancy and load balancing in a multi-homed EVPN environment.

Reference: EVPN Type 4 Route (Ethernet Segment Route) Explanation

Question #50

A VXLAN has been created between devices leaf1 and Ieaf3.

Referring to the exhibit, which statement is true?

  • A . Traffic sent from host1 to host2 will be dropped on Ieaf3.
  • B . Traffic sent from host1 to host2 will be tagged with VLAN ID 100 when exiting Ieaf3.
  • C . Traffic sent from host1 to host2 will be tagged with VLAN ID 200 when exiting Ieaf3.
  • D . Traffic sent from host1 to host2 will be dropped on leaf1.

Reveal Solution Hide Solution

Correct Answer: B

Question #51

You choose the EBGP design shown in the exhibit as your IP fabric design.

You must ensure that both routes received by the spine nodes will be used for ECMP forwarding.

Which BGP parameter would need to be added to the EBGP configuration of the spine nodes to achieve this goal?

  • A . multipath
  • B . multihop
  • C . add-path
  • D . multipath multiple-as

Reveal Solution Hide Solution

Correct Answer: C
Question #52

Referring to the exhibit, you must advertise the Io0.12 interface as a type-5 route.

Which configuration parameter would be used to accomplish this task?

  • A . Configure auto-export under the routing instance.
  • B . Configure a vrf-export policy to advertise the interface route under the routing instance.
  • C . Configure an export policy to advertise the interface route under protocols evpn.
  • D . Configure vrf-table-label under the routing instance.

Reveal Solution Hide Solution

Correct Answer: C
Question #53

Which two statements about the seamless EVPN-VXLAN stitching interconnect gateways are correct? (Choose two.)

  • A . IBGP is recommended for VXLAN stitching overlays.
  • B . Interconnect gateways will rewrite the route target, route distinguisher. and ESI values for each stretched virtual network.
  • C . All EVPN routes types are forwarded among interconnect gateways in a full-mesh manner.
  • D . The interconnect gateway can reside on the super spine layer of a multi-POD data center.

Reveal Solution Hide Solution

Correct Answer: AD
AD

Explanation:

A) IBGP is recommended for VXLAN stitching overlays because it provides better scalability and stability within the same administrative domain, which is crucial for seamless EVPN-VXLAN stitching.

D) The interconnect gateway can indeed reside on the super spine layer of a multi-POD data center. This placement facilitates interconnectivity and scaling in large, distributed network architectures.

Question #54

Referring to the exhibit, which statement is correct?

  • A . The exhibit shows a 5-stage IP fabric architecture.
  • B . The exhibit shows a collapsed fabric architecture.
  • C . The exhibit does not represent a valid fabric architecture.
  • D . The exhibit shows a 3-stage IP fabric architecture.

Reveal Solution Hide Solution

Correct Answer: B
Question #55

Referring to the exhibit,

What effect does EVPN core isolation have?

  • A . Leaf 1 will send a pause frame to each connected host.
  • B . Leaf 1 will place the interfaces to connected hosts into LACP passive mode.
  • C . Leaf 1 will take down all revenue interfaces.
  • D . Spine 1 will block all traffic.

Reveal Solution Hide Solution

Correct Answer: B
Exit mobile version