New (2026) Download free JN0-352 PDF for Juniper Practice Tests
100% Free JN0-352 Files For passing the exam Quickly
NEW QUESTION # 42
Which statement is correct about the exhibit?
- A. All routes from inet.0 will be imported into first.inet.0 and second.inet.0.
- B. Only the interface routes from first.inet.0 and second.inet.0 will be imported into inet.0.
- C. All the routes from first.inet.0 and second.inet.0 will be imported into inet.0.
- D. Only the interface routes from inet.0 will be imported into both first.inet.0 and second.inet.0.
Answer: D
NEW QUESTION # 43
Which statement is correct about IP-IP tunnels?
- A. IP-IP tunnels only support encapsulating non-IP traffic.
- B. The TTL in the inner packet is decremented during transit to the tunnel endpoint.
- C. IP-IP tunnels only support encapsulating IP traffic.
- D. There are 24 bytes of overhead with IP-IP encapsulation.
Answer: C
Explanation:
"The ENCAPSULATOR does not change the inner IP header, except to decrement the TTL and it remains unchanged during its deliver to the endpoint" - only router that encapsulates the inner packet decrements its TTL - during transit, the inner packet is unchanged.
NEW QUESTION # 44
Which two BGP attributes must be supported by all BGP implementations and must be included in every update? (Choose two.)
- A. community
- B. AS path
- C. next hop
- D. MED
Answer: B,C
Explanation:
BGP attributes are properties that BGP uses for route advertisement, path selection, and loop prevention. There are four categories of BGP attributes:
Well-known mandatory: Must be recognized by all BGP routers, present in all BGP updates, and passed on to other BGP routers.
Well-known discretionary: Supported by all BGP implementations, and are optionally included in BGP updates.
Optional transitive: May not be supported by all implementations of BGP.
Optional non-transitive: May not be supported by all implementations of BGP. The well-known mandatory attributes must be supported by all BGP implementations and must be included in every update. These include the AS path and next hop attributes.
NEW QUESTION # 45
A new network requires multiple topology support. You decide to use IS-IS in this situation. Which three protocol topologies are supported in this scenario? (Choose three.)
- A. IPv6
- B. IPv4
- C. anycast
- D. IPsec
- E. multicast
Answer: A,B,E
Explanation:
IS-IS (Intermediate System to Intermediate System) is a routing protocol that is designed to move information efficiently within a computer network. It supports multiple protocol topologies, including IPv4, IPv6, and multicast.
NEW QUESTION # 46
Which two statements about redundant trunk groups on EX Series switches are correct? (Choose two.)
- A. Redundant trunk groups use spanning tree to provide loop-free redundant uplinks.
- B. If the active link fails, then the secondary link automatically takes over.
- C. Layer 2 control traffic is permitted on the secondary link.
- D. Redundant trunk groups load balance traffic across two designated uplink interfaces.
Answer: B,C
Explanation:
Redundant trunk groups are designed to provide link redundancy. If the primary link fails, the secondary link will automatically take over to ensure continued connectivity.
In redundant trunk groups, while regular data traffic is sent over the primary link, Layer 2 control traffic (such as STP, LACP, etc.) is allowed on the secondary link to maintain network stability and protocol operations.
https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/redundant-trunk-groups.html
NEW QUESTION # 47
You are creating an aggregated Ethernet bundle using LACP on your Juniper Networks EX Series device.
In this scenario, which statement is correct?
- A. LACP active mode is required on both sides of the bundle.
- B. LACP active mode is required on at least one side of the bundle.
- C. You must use different LACP system priorities for each switch.
- D. By default, LACP is in active mode on aggregated Ethernet interfaces.
Answer: B
Explanation:
IEEE 802.3ad LACP defines two distinct negotiation modes, active and passive, and the standard's fundamental requirement for successful negotiation is that at least one end of the point-to-point link must be configured in active mode; an actively configured device initiates LACPDU transmission on its own, while a passively configured device waits and only responds once it receives an LACPDU from its peer. If both ends of the bundle were left in passive mode simultaneously, neither side would ever initiate the exchange, and no negotiation - and therefore no functioning aggregated bundle - would ever occur; at least one active participant is therefore mandatory, though having both sides active (active-active) is also fully valid and is in fact the most common production deployment. Junos does not enable LACP automatically on aggregated Ethernet interfaces; unlike some competing platforms, LACP must be explicitly configured under the aggregated-ether-options lacp hierarchy, and specifying no LACP configuration at all results in a 'static' LAG that relies purely on physical link-state rather than any protocol negotiation - there is no implicit default active mode. There is likewise no requirement to configure differing LACP system priority values between the two peer switches; system priority is used only to determine which side of the link controls port selection during negotiation and has no bearing on whether the bundle can form. Both sides being mandatorily active is a stricter requirement than the actual standard specifies. Reference topics: Junos Enterprise Switching - Link Aggregation, LACP Active and Passive Mode Negotiation.
NEW QUESTION # 48
You have configured OSPF routing as shown in the exhibit. You notice that all interfaces have formed full adjacencies, with the exception of the interfaces connecting R3 and R4 with a status of 2Way.
What is the reason for this status?
- A. DROther routers will not form a full adjacency with each other.
- B. The interface-type is not configured as p2p.
- C. The two routers must be configured in different areas.
- D. The two routers must both be configured as DR routers.
Answer: A
NEW QUESTION # 49
Which three protocols support BFD? (Choose three.)
- A. BGP
- B. LACP
- C. OSPF
- D. RSTP
- E. FTP
Answer: A,B,C
Explanation:
https://www.juniper.net/documentation/us/en/software/junos/high-availability/topics/topic-map/bfd-configuring.html
NEW QUESTION # 50
Referring to the exhibit, which router will become the OSPF BDR if all routers are powered on at the same time?
- A. R3
- B. R1
- C. R2
- D. R4
Answer: A
Explanation:
Priority set to 0 will never become DR or BDR so R1 is excluded.
Higher priority is better in OSPF so R2 is lowest than both R3 and R4.
R3 and R4 has the same priority so RID will decide.
R4 has the highest RID so it will become DR and R3 will then become BDR.
NEW QUESTION # 51
On Juniper devices, which statement correctly describes a basic characteristic of a GRE tunnel?
- A. GRE tunnels require the tunnel endpoints to have a valid route to each other.
- B. GRE tunnels maintain session state information about the remote endpoint.
- C. GRE tunnels need keepalives configured by default to stay operational.
- D. GRE tunnels support only IPv4 payload encapsulation.
Answer: A
Explanation:
GRE is fundamentally a stateless encapsulation protocol: the encapsulating router simply wraps the passenger packet in a GRE header and an outer delivery IP header and forwards it based on ordinary IP routing table lookups toward the configured tunnel destination address. For that forwarding to succeed, the underlying (global or routing-instance) routing table on each endpoint must contain a valid, reachable route to the far-end tunnel address; without such a route, the tunnel interface will not come up or will be unable to deliver traffic, since GRE relies entirely on the existing IP infrastructure rather than any tunnel-specific signaling to establish reachability. Because GRE has no built-in state machine or session negotiation, it does not natively track whether the remote endpoint is alive - that requires an optional add-on such as GRE keepalives or BFD, neither of which is enabled by default; an operator must explicitly configure them if failure detection is required. GRE is also protocol-agnostic rather than IPv4-only: it can encapsulate IPv4, IPv6, MPLS, and other network-layer protocols as the passenger, which is one of its defining advantages over IP-in-IP tunneling.
Finally, because GRE keeps no per-session state about the peer, it cannot detect or report tunnel failures on its own, reinforcing why route reachability is the one true prerequisite for tunnel operation. Reference topics:
Junos Enterprise Routing - Tunneling, Understanding Generic Routing Encapsulation.
NEW QUESTION # 52
Referring to the output shown in the exhibit, which statement is correct?
- A. 11.0.0.102/32 is being per-packet load-balanced
- B. 11.0.0.108/32 is being per-flow load-balanced
- C. 11.0.0.102/32 is being per-flow load-balanced
- D. 11.0.0.108/32 is being per-packet load-balanced
Answer: D
NEW QUESTION # 53
Which two statements describe OSPF DR and BDR behavior? (Choose two.)
- A. The BDR becomes the DR if the DR fails.
- B. The BDR by default generates Type-2 Network LSAs to describe the multi-access segment.
- C. The DR by default generates Type-2 Network LSAs to describe the multi-access segment.
- D. The DR elects the area border router for each area.
Answer: A,C
Explanation:
The Backup Designated Router exists specifically to provide immediate failover redundancy for the Designated Router role on a multi-access broadcast or NBMA segment: the BDR maintains full adjacencies with every other router on the segment concurrently with the DR, precisely so that if the DR ever fails or is withdrawn, the BDR can be promoted directly to DR essentially instantaneously, without needing to wait through a fresh, full DR/BDR election process, and a new BDR election then takes place separately among the remaining DROther routers to fill the now-vacant backup role. This immediate promotion behavior confirms the first statement as correct. The Designated Router's other core responsibility on the segment is originating the Type 2 Network LSA, which describes the multi-access network itself as a pseudonode, listing every router attached to that segment; this LSA type exists specifically to avoid the full-mesh explosion of Router LSA adjacency listings that would otherwise be needed to describe a shared broadcast segment, and only the DR - never the BDR, and never any DROther - is responsible for generating and maintaining this particular LSA under normal, stable conditions, which confirms the third statement while directly ruling out the fourth. There is no such thing as the DR 'electing' an area border router; ABR status is instead a role a router acquires organically by having interfaces in more than one OSPF area, entirely independent of any DR
/BDR election process on any individual segment. Reference topics: Junos Enterprise Routing - OSPF, DR
/BDR Roles and Type 2 Network LSA Origination.
NEW QUESTION # 54
What are two characteristics of IS-IS? (Choose two.)
- A. IS-IS is an interior gateway protocol.
- B. IS-IS routes use a default preference of 20.
- C. IS-IS L1/L2 routers route traffic between areas.
- D. IS-IS L1 routers route traffic between areas.
Answer: A,C
Explanation:
IS-IS (Intermediate System to Intermediate System) was designed by ISO as a link-state Interior Gateway Protocol for routing within a single autonomous system, functioning on a hierarchical two-level model conceptually similar to OSPF's areas, which makes the first statement unambiguously correct. Within that hierarchy, Level 1 routers maintain detailed topology information only for their own local area and use a default route toward the nearest Level 2 or Level 1/Level 2 router to reach destinations outside the area; they explicitly do not carry inter-area topology information and therefore cannot route traffic between areas on their own. Routers that participate in both levels simultaneously - Level 1/Level 2 (L1/L2) routers - sit at the area boundary, maintaining a Level 1 database for their local area and a Level 2 database for the backbone, and it is specifically these dual-level routers that stitch inter-area traffic together, forwarding packets from the local area into the Level 2 backbone and vice versa, which confirms the second correct statement. Regarding route preference, Junos assigns distinct default preference (administrative distance) values of 15 for IS-IS Level 1 routes and 18 for IS-IS Level 2 routes - neither of which is 20 - so the preference-value statement is factually incorrect and included as a distractor testing precise knowledge of Junos default protocol preferences. Reference topics: Junos Enterprise Routing - IS-IS, Level 1, Level 2, and L1/L2 Router Roles; Default Route Preference Values.
NEW QUESTION # 55
You are configuring an IS-IS IGP network and do not see the IS-IS adjacencies established. In this scenario, what are two reasons for this problem? (Choose two.)
- A. The lo0 interface is not included as an IS-IS interface.
- B. IP subnets are not a /30 address.
- C. The Level 2 routers have mismatched areas.
- D. MTU is not at least 1492 bytes.
Answer: A,D
Explanation:
Option A suggests that the MTU is not at least 1492 bytes. This is correct because IS-IS requires a minimum MTU of 1492 bytes to establish adjacencies. If the MTU is less than this, IS-IS adjacencies will not be established.
Option D suggests that the lo0 interface is not included as an IS-IS interface. This is also correct because the loopback interface (lo0) is typically used as the router ID in IS-IS. If the loopback interface is not included in IS-IS, it could prevent IS-IS adjacencies from being established.
NEW QUESTION # 56
Your GRE tunnel is not transitioning to the Upstatus. What would be the first step in troubleshooting the problem?
- A. Verify tunnel endpoint reachability.
- B. Verify the status of the management routing instance.
- C. Verify that the routing instance for GRE tunnels is created.
- D. Verify that the status of the management interface is up.
Answer: A
NEW QUESTION # 57
Your BGP neighbors, one in the USA and one in France, are not establishing a connection with each other.
Referring to the exhibit, which statement is correct?
- A. The BFD liveness is set too high.
- B. The BFD liveness must be configured on the BGP group.
- C. The BFD liveness is set too low.
- D. The BFD liveness must be configured on the BGP neighbor.
Answer: D
Explanation:
In the configuration shown, BFD (Bidirectional Forwarding Detection) liveness detection is globally configured, but for BFD to work with specific BGP neighbors, it must be configured under each BGP neighbor or BGP group. Without specific BFD configuration at the neighbor or group level, BFD will not be used to monitor the BGP sessions, which might be causing the BGP neighbors not to establish a connection.
NEW QUESTION # 58
An update to your organization's network security requirements document requires management traffic to be isolated in a non-default routing-instance. You want to implement this requirement on your Junos-based devices.
Which two commands enable this behavior? (Choose two.)
- A. set routing--instances mgmt_junos interface em1
- B. set routing--instances mgmt_junos
- C. set routing--instances mgmtjunoa interface ge-0/0/0.0
- D. set system management--instance
Answer: B,D
Explanation:
To isolate management traffic in a non-default routing-instance on Junos-based devices, you can use the set system management-instance and set routing-instances mgmt_junos commands. set system management-instance: This command associates the management interface (usually named fxp0 or em0 for Junos OS, or re0:mgmt-* or re1:mgmt-* for Junos OS Evolved) with the non- default virtual routing and forwarding (VRF) instance. After you configure the non-default management VRF instance, management traffic no longer has to share a routing table with other control traffic or protocol traffic.
set routing-instances mgmt_junos: This command creates a new routing instance named mgmt_junos. The name of the dedicated management VRF instance is reserved and hardcoded as mgmt_junos; you cannot configure any other routing instance by the name mgmt_junos.
Therefore, options C and D are correct. Options A and B are not correct because they attempt to assign an interface to the mgmt_junos routing instance, which is not necessary for isolating management traffic.
NEW QUESTION # 59
You are troubleshooting a Layer 2 topology issue in a campus network. The switches are running RSTP. You need to verify which switch is currently acting as the root bridge and identify the root port on the local device.
Which operational command should the administrator use to view this information?
- A. show spanning-tree bridge
- B. show ethernet-switching interface
- C. show ethernet-switching table
- D. show spanning-tree interface
Answer: A
Explanation:
The show spanning-tree bridge command is specifically designed to surface exactly the two pieces of information required in this scenario within a single output. Its Root ID field reports the full Bridge Identifier (priority and MAC address) of whichever switch has been elected root bridge for the spanning-tree instance in question, immediately answering which switch in the campus network is currently acting as root, regardless of whether that happens to be the local device or a remote one. In the same output, the command's Root port field explicitly names the specific local interface (for example, ge-0/0/1.0) that the local switch has selected as its path toward that root bridge, directly answering the second part of the requirement without needing to cross-reference a separate command. Together, these two fields give a complete, immediate picture of both root bridge identity and local root port selection from one operational command. show spanning-tree interface instead presents a per-interface breakdown of STP role (root, designated, alternate, backup) and state across all local ports, which can indirectly reveal the root port by looking for the 'Root' role, but it does not directly report the Root ID/root bridge identity in the same structured way that show spanning-tree bridge does. show ethernet-switching table and show ethernet-switching interface pertain entirely to MAC address learning and switching-specific interface configuration respectively, and neither surfaces any spanning-tree topology or root bridge information at all. Reference topics: Junos Enterprise Switching - Spanning Tree Protocols, Verifying Root Bridge and Root Port with show spanning-tree bridge.
NEW QUESTION # 60
......
JN0-352 Premium Exam Engine - Download Free PDF Questions: https://torrentvce.certkingdompdf.com/JN0-352-latest-certkingdom-dumps.html