Exam Code : JN0-664
Prerequisite Certification : JNCIS-SP
Exam Length : 90 minutes
Exam Type : 65 multiple-choice questions
Software Versions : Junos OS 22.3
Recertification :
Juniper certifications are valid for three years. For more information, please see Recertification.

The Service Provider Routing and Switching track enables you to demonstrate a thorough understanding of networking technology in general and Juniper Networks service provider routing and switching platforms. JNCIP-SP, the professional-level certification in this track, is designed for networking professionals with advanced knowledge of routing and switching implementations in Junos. The written exam verifies your basic understanding of advanced routing technologies and related platform configuration and troubleshooting skills.

This track contains four certifications:
JNCIA-Junos: Junos, Associate. For details, see JNCIA-Junos.
JNCIS-SP: Service Provider Routing and Switching, Specialist. For details, see JNCIS-SP.
JNCIP-SP: Service Provider Routing and Switching, Professional. For details, see the sections below.
JNCIE-SP: Service Provider Routing and Switching, Expert. For details, see JNCIE-SP.

Examkingdom Juniper JN0-664 Exam pdf,

Best Juniper JN0-664 Free downloads , Juniper JN0-664 Dumps at Certkingdom.com

Exam Preparation
We recommend the following resources to help you prepare for your exam. However, these resources aren’t required, and using them doesn’t guarantee you’ll pass the exam.

Recommended Training
Advanced Junos Service Provider Routing (AJSPR)
Junos Layer 2 VPNs (JL2V)
Junos Layer 3 VPNs (JL3V)

Exam Resources
Industry/product knowledge
Juniper TechLibrary

Additional Preparation
Juniper Learning Portal

Exam Objectives
Here is a high-level view of the skillset required to successfully complete the JNCIP-SP certification exam.

Exam Objective
OSPF

Describe the concepts, operation, or functionality of OSPFv2 and OSPFv3:
OSPF area types and operations
Link-state advertisement (LSA) flooding through an OSPF multi-area network
Designated router/backup designated router operation
Shortest-path-first (SPF) algorithm
Metrics, including external metric types
Summarize and restrict routes
Virtual links
OSPFv2 vs. OSPFv3

Given a scenario, demonstrate knowledge of how to configure or monitor single-area or multi-area OSPF:
Implement OSPF routing policy
IS-IS

Describe the concepts, operation, or functionality of IS-IS:
IS-IS areas/levels and operations
Label-switched path (LSP) flooding through an IS-IS multi- area network
Designated intermediate system (DIS) operation
SPF algorithm
Metrics, including wide metrics
Route summarization and route leaking

Given a scenario, demonstrate knowledge of how to configure or monitor single-area or multi-area IS-IS:
Implement IS-IS routing policy
BGP

Describe the concepts, operation, or functionality of BGP:
BGP route selection process
Next-hop resolution
BGP attributes—concept and operation
BGP communities
Regular expressions
Multipath
Multihop
Load balancing
Advanced BGP options
BGP route damping
BGP flowspec
Multiprotocol BGP

Describe the concepts, operation, or functionality of BGP scaling mechanisms:
Route reflection
Given a scenario, demonstrate knowledge of how to configure or monitor BGP:
Implement BGP routing policy
Class of Service (CoS)

Describe the concepts, operation, or functionality of Junos OS CoS:
CoS processing on Junos OS devices
CoS header fields
Forwarding classes
Classification
Packet loss priority
Policers
Schedulers
Drop profiles
Rewrite rules

Given a scenario, demonstrate knowledge of how to configure or monitor CoS.
IP Multicast

Describe the concepts, operation, or functionality of IP multicast:
Components of IP multicast, including multicast addressing
IP multicast traffic flow
Any-source multicast (ASM) versus source-specific multicast (SSM)
Reverse path forwarding (RPF)—concept and operation
Internet Group Management Protocol (IGMP)
Physical Interface Module (PIM) dense mode and sparse mode
Rendezvous point (RP)—concept, operation, discovery, election
Source-specific multicast (SSM)—requirements, benefits, address ranges
Anycast rendezvous point (RP)

Given a scenario, demonstrate knowledge of how to configure or monitor IGMP, PIM dense mode, or PIM sparse mode (including SSM):
Implement IP multicast routing policy
Layer 3 VPNs

Describe the concepts, operation, or functionality of Layer 3 VPNs:
Traffic flow—control and data planes
Full mesh versus hub-and-spoke topology
VPN-IPv4 addressing
Route distinguishers
Route targets
Route distribution
Site of origin
Sham links
Virtual routing and forwarding (VRF) table-label
Next-generation multicast virtual private networks (MVPNs)
Flow of control and data traffic in a MVPN
Layer 3 VPN scaling
IPv6 Layer 3 VPNs
Layer 3 VPN Internet access options

Given a scenario, demonstrate knowledge of how to configure or monitor the components of Layer 3 VPNs.
Describe Junos OS support for carrier-of-carriers or inter-provider VPN models.
Layer 2 VPNs


Describe the concepts, operation, or functionality of BGP Layer 2 VPNs:
Traffic flow—control and data planes
Forwarding tables
Connection mapping
Layer 2 VPN network layer reachability information (NLRI)
Route distinguishers
Route targets
Layer 2 VPN scaling

Describe the concepts, operation, or functionality of LDP Layer 2 circuits:
Traffic flow—control and data planes
Virtual circuit label
Autodiscovery (AD)
Layer 2 interworking

Describe the concepts, operation, or functionality of virtual private LAN service (VPLS):
Traffic flow—control and data planes
BGP VPLS label distribution
LDP VPLS label distribution
Route targets
VPLS multihoming
Site IDs

Describe the concepts, operation, or functionality of EVPN:
Traffic flow—control and data planes
Media access control (MAC) learning and distribution
Ethernet VPN (EVPN) multihoming
BGP EVPN label distribution

Given a scenario, demonstrate knowledge of how to configure, monitor, or troubleshoot Layer 2 VPNs:
BGP Layer 2 VPNs
LDP Layer 2 circuits
EVPNs
VPLS

Exam Details
Exam questions are derived from the recommended training and the exam resources listed above. Pass/fail status is available immediately after taking the exam. The exam is only provided in English.

QUESTION 1
Exhibit.
Referring to the exhibit; the 10.0.0.0 EBGP route is received on R5; however, the route is being hidden.
What are two solutions that will solve this problem? (Choose two.)

A. On R4, create a policy to change the BGP next hop to itself and apply it to IBGP as an export policy
B. Add the external interface prefix to the IGP routing tables
C. Add the internal interface prefix to the BGP routing tables.
D. On R4, create a policy to change the BGP next hop to 172.16.1.1 and apply it to IBGP as an export policy

Answer: AB

Explanation:
the default behavior for iBGP is to propagate EBGP-learned prefixes without changing the next-hop.
This can cause issues if the next-hop is not reachable via the IGP. One solution is to use the next-hop
self command on R4, which will change the next-hop attribute to its own loopback address. This way,
R5 can reach the next-hop via the IGP and install the route in its routing table.
Another solution is to add the external interface prefix (120.0.4.16) to the IGP routing tables of R4
and R5. This will also make the next-hop reachable via the IGP and allow R5 to use the
route. According to 2, this is a possible workaround for a pure IP network, but it may not work well
for an MPLS network.

QUESTION 2
You are responding to an RFP for a new MPLS VPN implementation. The solution must use LDP for
signaling and support Layer 2 connectivity without using BGP The solution must be scalable and
support multiple VPN connections over a single MPLS LSP The customer wants to maintain all routing
for their Private network
In this scenario, which solution do you propose?

A. circuit cross-connect
B. BGP Layer 2 VPN
C. LDP Layer 2 circuit
D. translational cross-connect

Answer: C

Explanation:
AToM (Any Transport over MPLS) is a framework that supports various Layer 2 transport types over
an MPLS network core. One of the transport types supported by AToM is LDP Layer 2 circuit, which is
a point-to-point Layer 2 connection that uses LDP for signaling and MPLS for forwarding. LDP Layer 2
circuit can support Layer 2 connectivity without using BGP and can be scalable and efficient by using
a single MPLS LSP for multiple VPN connections. The customer can maintain all routing for their
private network by using their own CE switches.

QUESTION 3
Exhibit.
Referring to the exhib.t, what must be changed to establish a Level 1 adjacency between routers R1 and R2?

A. Change the level l disable parameter under the R1 protocols isis interface lo0.0 hierarchy to the level 2 disable parameter.
B. Remove the level i disable parameter under the R2 protocols isis interface loo . 0 configuration hierarchy.
C. Change the level 1 disable parameter under the R2 protocols isis interface ge-1 .0 hierarchy to the level 2 disable parameter
D. Add IP addresses to the interface ge-l unit 0 family iso hierarchy on both R1 and R2.

Answer: B

Explanation:
IS-IS routers can form Level 1 or Level 2 adjacencies depending on their configuration and network
topology. Level 1 routers are intra-area routers that share the same area address with their
neighbors. Level 2 routers are inter-area routers that can connect different areas. Level 1-2 routers
are both intra-area and inter-area routers that can form adjacencies with any other router.
In the exhibit, R1 and R2 are in different areas (49.0001 and 49.0002), so they cannot form a Level 1
adjacency. However, they can form a Level 2 adjacency if they are both configured as Level 1-2
routers. R1 is already configured as a Level 1-2 router, but R2 is configured as a Level 1 router only,
because of the level 1 disable command under the lo0.0 interface. This command disables Level 2
routing on the loopback interface, which is used as the router ID for IS-IS.
Therefore, to establish a Level 1 adjacency between R1 and R2, the level 1 disable command under
the R2 protocols isis interface lo0.0 hierarchy must be removed. This will enable Level 2 routing on
R2 and allow it to form a Level 2 adjacency with R1.

QUESTION 4
You are asked to protect your company’s customers from amplification attacks. In this scenario, what is Juniper’s recommended protection method?

A. ASN prepending
B. BGP FlowSpec
C. destination-based Remote Triggered Black Hole
D. unicast Reverse Path Forwarding

Answer: C

Explanation:
amplification attacks are a type of distributed denial-of-service (DDoS) attack that exploit the
characteristics of certain protocols to amplify the traffic sent to a victim. For example, an attacker can
send a small DNS query with a spoofed source IP address to a DNS server, which will reply with a
much larger response to the victim. This way, the attacker can generate a large amount of traffic with

Exam Details
Exam questions are derived from the recommended training and the exam resources listed above. Pass/fail status is available immediately after taking the exam. The exam is only provided in English.

Exam Code JN0-636
Prerequisite Certification JNCIS-SEC
Exam Length 90 minutes
Exam Type 65 multiple-choice questions
Software Versions Junos OS 22.2 – SD 22.1

The Security enables you to demonstrate a thorough understanding of security technology in general and Junos OS software for SRX Series devices. JNCIP-SEC, the professional-level certification in this track, is designed for networking professionals with advanced knowledge of the Juniper Networks Junos OS for SRX Series devices. The written exam verifies your understanding of advanced security technologies and related platform configuration and troubleshooting skills.

This track contains four certifications:
JNCIA-SEC: Security, Associate. For details, see JNCIA-SEC.
JNCIS-SEC: Security, Specialist. For details, see JNCIS-SEC.
JNCIP-SEC: Security, Professional. For details, see the sections below.
JNCIE-SEC: Security, Expert. For details, see JNCIE-SEC.

Exam Preparation
We recommend the following resources to help you prepare for your exam. However, these resources aren’t required, and using them doesn’t guarantee you’ll pass the exam.

Recommended Training : Advanced Juniper Security
Exam Resources Industry/product knowledge Juniper TechLibrary
Additional Preparation Juniper Learning Portal
 
Exam Objectives
Here’s a high-level view of the skillset required to successfully complete the JNCIP-Sec certification exam.

Examkingdom Juniper JN0-636 Exam pdf,

Best Juniper JN0-636 Free downloads , Juniper JN0-636 Dumps at Certkingdom.com

QUESTION 1
SRX Series device enrollment with Policy Enforcer fails To debug further, the user issues the following command show configuration services security—intelligence url
https : //cloudfeeds . argon . juniperaecurity . net/api/manifeat. xml and receives the following output:
What is the problem in this scenario?

A. The device is directly enrolled with Juniper ATP Cloud.
B. The device is already enrolled with Policy Enforcer.
C. The SRX Series device does not have a valid license.
D. Junos Space does not have matching schema based on the

Answer: C

QUESTION 2
You are asked to deploy filter-based forwarding on your SRX Series device for incoming traffic sourced from the 10.10 100 0 network in this scenario, which three statements are correct? (Choose three.)

A. You must create a forwarding-type routing instance.
B. You must create and apply a firewall filter that matches on the source address 10.10.100.0 and then sends this traffic to your routing
C. You must create and apply a firewall filter that matches on the destination address 10 10.100.0 and then sends this traffic to your routing instance.
D. You must create a RIB group that adds interface routes to your routing instance.
E. You must create a VRF-type routing instance.

Answer: BCE

QUESTION 3
You are connecting two remote sites to your corporate headquarters site. You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?

A. IPsec ADVPN
B. hub-and-spoke IPsec VPN
C. Layer 2 VPN
D. full mesh Layer 3 VPN with EBGP

Answer: B

QUESTION 4
You are asked to detect domain generation algorithms
Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

A. Define an advanced-anti-malware policy under [edit services].
B. Attach the security-metadata-streaming policy to a security
C. Define a security-metadata-streaming policy under [edit
D. Attach the advanced-anti-malware policy to a security policy.

Answer: AD

QUESTION 5
In Juniper ATP Cloud, what are two different actions available in a threat prevention policy to deal with an infected host? (Choose two.)

A. Send a custom message
B. Close the connection.
C. Drop the connection silently.
D. Quarantine the host.

Answer: CD

The Cloud track enables you to demonstrate competence with cloud networking architectures such as multiclouds, software-defined networking, SD-WAN, and other cloud technologies. JNCIA-Cloud, the associate-level certification in this track, is designed for networking professionals with introductory-level knowledge of Juniper Networks cloud-based networking architectures, theory, and best practices. The written exam verifies your understanding of cloud-based networking principles and technologies.

This track includes four certifications:
JNCIA-Cloud: Cloud, Associate. For details, see the sections below.
JNCIS-Cloud: Cloud, Specialist. For details, see JNCIS-Cloud.
JNCIP-Cloud: Cloud, Professional. For details, see JNCIP-Cloud.
JNCIE-Cloud: Cloud, Expert. For details, see JNCIE-Cloud.

Exam Preparation
We recommend the following resources to help you prepare for your exam. However, these resources aren’t required, and using them doesn’t guarantee you’ll pass the exam.

Exam Code : JN0-212
Prerequisite Certification : None
Delivered by : Pearson VUE
Exam Length : 90 minutes
Exam Type : 65 multiple-choice questions
Software Versions : Contrail 22.1, OpenStack Wallaby, Kubernetes 1.21
Recertification : Juniper certifications are valid for three years. For more information, see Recertification.

Examkingdom Juniper JN0-212 Exam pdf,

Best Juniper JN0-212 Free downloads , Juniper JNCDS-SP JN0-212 Dumps at Certkingdom.com

Exam Details
Exam questions are derived from the recommended training and the exam resources listed above. Pass/fail status is available immediately after taking the exam. The exam is only provided in English.

Exam Objectives
Here’s a high-level view of the skillset required to successfully complete the JNCIA-Cloud certification exam.

QUESTION 1
According to the juniper network, what is the recommended external routing protocol for the underlay network?

A. IS-IS
B. EGP
C. OSPF
D. BGP

Answer: D

QUESTION 2
Which two capabilities are supported with the cSRX firewall?(choose two)

A. IPS
B. routing instances
C. chassis clustering
D. Layer 2 deployment

Answer: A, B

QUESTION 3
Which cloud CPE component manages the end-to-end path from the CPE to the central office or to another CPE?

A. service orchestration
B. infrastructure orchestration
C. physica telco cloud infrastructure
D. virtual network functions

Answer: A

QUESTION 4
What are two objectives of SDN?(choose two)

A. centralization of control plane
B. physical separation of the control plane from the data plane
C. centralization of the forwarding plane
D. centralization of the services plane

Answer: A, B

QUESTION 5
What is an advantage of the Junos Telemetry Interface(JTI) over SNMP?

A. JTI can pull data more frequently
B. JTI always transfers data over HTTP
C. JTI never transfers data over UDP
D. JTI can push data more frequently

Answer: D

Exam Code : JN0-682
Prerequisite Certification: JNCIS-DC or JNCIS-ENT
Delivered by : Pearson VUE
Exam Length : 90 minutes
Exam Type : 65 multiple-choice questions
Software Versions : Junos OS: 21.3

Exam Details
Exam questions are derived from the recommended training and the exam resources listed above. Pass/fail status is available immediately after taking the exam. The exam is only provided in English.

Examkingdom Juniper JN0-682 Exam pdf, Certkingdom Juniper JN0-682 Exam PDF

Best Juniper JN0-682 Certification, Juniper JN0-682 PDF Training at Certkingdom.com

Exam Objectives
Here’s a high-level view of the skillset required to successfully complete the JNCIP-DC certification exam.

The Data Center track enables you to demonstrate competence with advanced data center technologies and related configuration and troubleshooting skills. JNCIP-DC, the professional-level certification in this track, is designed for experienced data center networking professionals with advanced knowledge of the Juniper Networks Junos software and data center devices. The written exam verifies your understanding of data center technologies, related platform configuration, and troubleshooting skills.

This track includes four certifications:
JNCIA-DC: Data Center, Associate. For details, see JNCIA-DC.
JNCIS-DC: Data Center, Specialist. For details, see JNCIS-DC.
JNCIP-DC: Data Center, Professional. For details, see the sections below.
JNCIE-DC: Data Center, Expert. For details, see JNCIE-DC.

Exam Preparation
We recommend the following resources to help you prepare for your exam. However, these resources aren’t required, and using them doesn’t guarantee you’ll pass the exam.

Recommended Training
Data Center Fabric with EVPN and VXLAN

Exam Resources : Industry/product knowledge
Juniper TechLibrary : Additional Preparation
Juniper Learning Portal

Exam Objectives
Here’s a high-level view of the skillset required to successfully complete the JNCIP-DC certification exam.

Data Center Deployment or Management

Describe data center deployment concepts:
Zero Touch provisioning
DHCP
Implementation
 
Describe data center management concepts:
Monitoring
Analytics

Layer 3 Fabrics
Describe IP Fabric concepts:
IP Fabric architecture
IP Fabric routing
IP Fabric scaling
IP Fabric best practices

Demonstrate knowledge of configuring, monitoring, or troubleshooting IP Fabrics
VXLAN

Describe VXLAN concepts:
VXLAN control planes
Data plane

Demonstrate knowledge of configuring, monitoring, or troubleshooting VXLAN
EVPN VXLAN Signaling

Describe EVPN concepts:
Route types
EVPN multicast
Multiprotocol BGP
EVPN architectures, including Centrally-Routed Bridging (CRB) and Edge-Routed Bridging (ERB)
MAC Learning

Demonstrate knowledge of configuring, monitoring, or troubleshooting EVPNs

Data Center Interconnect

Describe DCI concepts:
Interconnect network types
Layer 2 to L3 stretching
Stitching
EVPN-signaled VXLAN for DCI

Demonstrate knowledge of configuring, monitoring, or troubleshooting DCI

Data Center Architecture and Security

Describe single-tenant and multi-tenant architectures:
Traffic isolation
Multitenancy (routing instances)

Describe data center security concepts:
Filter-based forwarding
 

QUESTION 1
Which two statements are correct about VXLANs? (Choose two.)

A. VXLANs have smaller broadcast domains than VLANs.
B. VXLANs have a smaller logical network identifier than VLANs.
C. VXLANs can have a theoretical maximum of 16 million unique networks.
D. VXLANs are an overlay technology.

Answer: CD

QUESTION 2
You are required to create an IP fabric for your new data center. In this scenario, which protocol would be used to support EVPN?

A. IS-IS with correct TLVs enabled
B. MP-BGP
C. OSPF
D. any protocol with the appropriate APIs

Answer: B

QUESTION 3
Which device provides microsegmentation in a data center network?

A. vSRX
B. EX4300
C. vMX
D. QFX5100

Answer: A

QUESTION 4
You are building an IP fabric underlay network for your new data center. You must ensure that you have predictable load-balancing behavior throughout your network. According to Juniper Networks, what are two best practices that should be followed in this scenario? (Choose two.)

A. All leaf devices must be identical to the spine device models including the same installed line cards.
B. All spine devices should be identical models including the same installed line cards.
C. Every leaf device should have an identical uplink to every other leaf device.
D. Every leaf device should have an identical uplink to every spine device.

Answer: BD

QUESTION 5
Which two statements are correct about VXLAN domains? (Choose two.)

A. With Layer 2 traffic, the VLAN ID is discarded before the packet is sent.
B. With Layer 3 traffic, the VLAN ID is discarded before the packet is sent.
C. With Layer 2 traffic, the VLAN ID is transmitted within the packet.
D. With Layer 3 traffic, the VLAN ID is transmitted within the packet.

Answer: AB