VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

JNCIE-SP Free Sample Questions

12 free sample questions120 in the full practice test

Try simulator

JPR-961 Sample Questions

  1. Question 1

    Advanced

    Core Technologies · Segment routing

    You are the Senior Network Architect for a Service Provider designing a new Segment Routing over MPLS (SR-MPLS) core network. The network uses IS-IS as the IGP. You require a mechanism to steer traffic through a specific sequence of nodes that does not follow the shortest path calculated by the IGP, but you want to avoid maintaining per-flow state on transit routers. Which architectural component and corresponding configuration strategy best satisfies these requirements?

    Answer and explanation

    Correct answer: D

    Segment Routing Traffic Engineering (SR-TE) allows source routing by pushing a stack of labels at the ingress. Using Adjacency-SIDs allows strict path control by specifying the exact links (adjacencies) to traverse. Unlike RSVP-TE, SR-TE does not require signaling or per-flow state on transit routers (mid-point state), satisfying the requirement.

  2. Question 2

    Intermediate

    System Management and Monitoring · Control plane protection

    A customer reports that their Layer 3 VPN traffic is being dropped periodically. During troubleshooting, you notice that the control plane of the PE router is experiencing high CPU utilization due to a DDoS attack targeting the routing engine. You need to implement a stateless protection mechanism that strictly limits specific protocol traffic while allowing legitimate management access. Which configuration applied to the loopback interface is most appropriate?

    Answer and explanation

    Correct answer: D

    Stateless control plane protection is best implemented using a firewall filter applied to the loopback interface (lo0) in the input direction. This filter operates in hardware (ASIC) before traffic reaches the Routing Engine CPU, effectively dropping unwanted traffic and rate-limiting valid traffic if policers are attached.

  3. Question 3

    Intermediate

    Edge Services · Interprovider VPN

    You are configuring an Inter-Provider Layer 3 VPN (Option B) between AS 65100 and AS 65200. The Autonomous System Border Routers (ASBRs) are directly connected. You have established an MP-EBGP session between the ASBRs. However, the VPN routes are hidden on the receiving ASBR. What is the most likely cause of this issue?

    Answer and explanation

    Correct answer: A

    In Inter-AS Option B, the ASBRs exchange labeled VPN-IPv4 routes. For the ASBR to accept and process MPLS packets on the interface connecting to the peer ASBR, the interface must be configured with the appropriate MPLS family (usually family mpls). If the BGP session negotiates inet-vpn but the interface doesn't support MPLS, or if the family inet-vpn signaling is present but the route is hidden, it is often due to the lack of an MPLS data path or next-hop resolution failure. However, a common specific Junos requirement for Option B is that the BGP session must be MP-BGP, and the routes are kept in bgp.l3vpn.0. If the ASBR doesn't have family mpls on the physical link, it can't install the forwarding entry.

  4. Question 4

    Advanced

    Edge Services · EVPN

    In a Junos EVPN-MPLS environment, you need to ensure that when a CE device is multi-homed to two PE routers (PE1 and PE2) in an All-Active mode, traffic from the remote PE is load-balanced to both PE1 and PE2. Which EVPN route type is primarily responsible for advertising the multi-homing capability and the Ethernet Segment Identifier (ESI) to the remote PEs?

    Answer and explanation

    Correct answer: C

    Type 1 routes (Ethernet Auto-Discovery) are used to advertise the ESI and the MPLS label associated with the Ethernet Segment. They facilitate mass withdrawal and aliasing (load balancing). The remote PE uses Type 1 routes to learn that the ESI is reachable via multiple PEs, enabling ECMP toward the multi-homed segment.

  5. Question 5

    IntermediateMultiple answers

    System Management and Monitoring · Junos Telemetry Interface

    You are implementing a sophisticated telemetry solution using Junos Telemetry Interface (JTI). You want to stream data using the gRPC protocol with Protocol Buffers encoding. Which two configuration steps are required to enable the gRPC server on the Junos device? (Select TWO)

    Answer and explanation

    Correct answers: B, C

    While clear-text or ssl enables the service, defining the connection parameters within the extension-service hierarchy is the standard method for activating the gRPC interface for JTI.

    To enable the internal gRPC server, you must configure the extension-service under system services. This allows the device to listen for incoming subscription requests via gRPC.

  6. Question 6

    Beginner

    Core Technologies · IS-IS

    True or False: In an IS-IS network, setting the overload bit on a router stops that router from sending any IS-IS Hello PDUs, effectively removing it from the topology entirely.

    Answer and explanation

    Correct answer: B

    The overload bit prevents the router from being used as a transit node for traffic destined to other parts of the network, but it continues to form adjacencies and advertise its own directly connected prefixes (IP and CLNS addresses). It does NOT stop sending Hello PDUs.

Register free for 6 more questions

Or unlock all 120 JPR-961 questions with explanations, timed mode and flashcards.

Related practice tests

All Juniper practice exams