cert
cert-1
cert-2

Pass Juniper JN0-364 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
JN0-364 Exam - Verified By Experts
JN0-364 Premium File

JN0-364 Premium File

$69.99
$76.99
  • Premium File 69 Questions & Answers. Last Update: Nov 06, 2026

Whats Included:

  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
 
$76.99
$69.99
accept 11 downloads in the last 7 days
block-screenshots
Juniper JN0-364 Practice Test 32

Question 310

A provider network team identifies this situation: Clients can communicate inside VLAN220 but cannot reach their configured gateway. Which engineering decision BEST fits the stated requirement? Choose ONE best answer.

  1. Use root protection to prevent an unintended downstream bridge from becoming STP root
  2. Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation
  3. Use IRB interfaces when authorized L3 routing is needed between distinct VLAN broadcast domains
  4. Diagnose Ethernet MAC learning by VLAN and ingress port before changing bridge forwarding policy

Explanation

Correct Answer

C:

Use IRB interfaces when authorized L3 routing is needed between distinct VLAN broadcast domains is the best technical design or decision for this Junos service-provider case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. Technical basis: An IRB interface represents an L3 gateway associated with a VLAN while Layer2 bridging remains within that VLAN.

Incorrect Answers

A:

That option concerns Root protection policy. An IRB interface represents an L3 gateway associated with a VLAN while Layer2 bridging remains within that VLAN.

B:

Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported technical design or decision for this precise case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. the best answer here is: Use IRB interfaces when authorized L3 routing is needed between distinct VLAN broadcast domains.

D:

Diagnose Ethernet MAC learning by VLAN and ingress port before changing bridge forwarding policy is relevant to the different engineering topic "MAC-address dynamic learning", but it is not the most directly supported technical design or decision for this precise case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. the best answer here is: Use IRB interfaces when authorized L3 routing is needed between distinct VLAN broadcast domains.

Question 311

A provider network team identifies this situation: Clients can communicate inside VLAN220 but cannot reach their configured gateway. Which implementation or troubleshooting step is MOST APPROPRIATE here? Choose ONE best answer.

  1. Check NDP entries, interface status and address scope
  2. Check the learning history and topology before disabling the port
  3. Inspect whether the interface uses a swap or push operation
  4. Inspect IRB unit, VLAN association and L3 address

Explanation

Correct Answer

D:

Inspect IRB unit, VLAN association and L3 address is the best implementation and troubleshooting step for this Junos service-provider case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. Technical basis: An IRB interface represents an L3 gateway associated with a VLAN while Layer2 bridging remains within that VLAN.

Incorrect Answers

A:

That option concerns IPv6 neighbor discovery. An IRB interface represents an L3 gateway associated with a VLAN while Layer2 bridging remains within that VLAN.

B:

Check the learning history and topology before disabling the port is relevant to the different engineering topic "MAC-address dynamic learning", but it is not the most directly supported implementation and troubleshooting step for this precise case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. the best answer here is: Inspect IRB unit, VLAN association and L3 address.

C:

Inspect whether the interface uses a swap or push operation is relevant to the different engineering topic "VLAN translation distinction", but it is not the most directly supported implementation and troubleshooting step for this precise case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. the best answer here is: Inspect IRB unit, VLAN association and L3 address.

Question 312

A provider network team identifies this situation: Clients can communicate inside VLAN220 but cannot reach their configured gateway. What verification evidence MOST CLEARLY demonstrates the solution is working? Choose ONE best answer.

  1. The forwarding entry maps the MAC to the actual active customer handoff
  2. Only the intended tag replacement is applied
  3. The IRB responds for its gateway address on the intended VLAN
  4. The forwarding label is consistent with the resolved segment rather than a guessed number

Explanation

Correct Answer

C:

The IRB responds for its gateway address on the intended VLAN is the best operational verification evidence for this Junos service-provider case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. Technical basis: An IRB interface represents an L3 gateway associated with a VLAN while Layer2 bridging remains within that VLAN.

Incorrect Answers

A:

The forwarding entry maps the MAC to the actual active customer handoff is relevant to the different engineering topic "MAC-address dynamic learning", but it is not the most directly supported operational verification evidence for this precise case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. the best answer here is: The IRB responds for its gateway address on the intended VLAN.

B:

Only the intended tag replacement is applied is relevant to the different engineering topic "VLAN translation distinction", but it is not the most directly supported operational verification evidence for this precise case: Clients can communicate inside VLAN220 but cannot reach their configured gateway. the best answer here is: The IRB responds for its gateway address on the intended VLAN.

D:

That option concerns Segment-routing MPLS prefix SIDs. An IRB interface represents an L3 gateway associated with a VLAN while Layer2 bridging remains within that VLAN.

Question 313

A Junos service-provider engineer is reviewing this operational case: A metro provider must keep two customer L2 circuits logically separate. Which technical approach MOST DIRECTLY addresses the issue? Select ONE best answer.

  1. Interpret root, designated and alternate port roles relative to the elected bridge
  2. Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains
  3. Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass
  4. Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains

Explanation

Correct Answer

B:

Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains is the best technical design or decision for this Junos service-provider case: A metro provider must keep two customer L2 circuits logically separate. Technical basis: Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Incorrect Answers

A:

That option concerns STP root and designated port roles. Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

C:

Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass is relevant to the different engineering topic "Native VLAN and untagged trunk behavior", but it is not the most directly supported technical design or decision for this precise case: A metro provider must keep two customer L2 circuits logically separate. the best answer here is: Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains.

D:

Enable permitted 802.1Q VLAN tags on a trunk only for intended tenant broadcast domains is relevant to the different engineering topic "Trunk tagging and VLAN allowlist", but it is not the most directly supported technical design or decision for this precise case: A metro provider must keep two customer L2 circuits logically separate. the best answer here is: Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains.

Question 314

A Junos service-provider engineer is reviewing this operational case: A metro provider must keep two customer L2 circuits logically separate. What specific configuration or diagnostic action BEST implements the intended response? Select ONE best answer.

  1. Assign interfaces and bridge domains to the intended virtual-switch contexts
  2. Review full-mesh or supported route-reflection design rather than changing EBGP ASNs
  3. Configure supported VLAN-to-IRB associations and appropriate routes
  4. Inspect show vlans and show ethernet-switching table with port membership

Explanation

Correct Answer

A:

Assign interfaces and bridge domains to the intended virtual-switch contexts is the best implementation and troubleshooting step for this Junos service-provider case: A metro provider must keep two customer L2 circuits logically separate. Technical basis: Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Incorrect Answers

B:

That option concerns IBGP route propagation constraints. Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

C:

Configure supported VLAN-to-IRB associations and appropriate routes is relevant to the different engineering topic "Integrated routing and bridging", but it is not the most directly supported implementation and troubleshooting step for this precise case: A metro provider must keep two customer L2 circuits logically separate. the best answer here is: Assign interfaces and bridge domains to the intended virtual-switch contexts.

D:

Inspect show vlans and show ethernet-switching table with port membership is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported implementation and troubleshooting step for this precise case: A metro provider must keep two customer L2 circuits logically separate. the best answer here is: Assign interfaces and bridge domains to the intended virtual-switch contexts.

Question 315

A Junos service-provider engineer is reviewing this operational case: A metro provider must keep two customer L2 circuits logically separate. Which observation would MOST RELIABLY verify the intended outcome? Select ONE best answer.

  1. The intended prefix segments appear in the forwarding state
  2. Both allowed VLANs pass while VLAN700 is absent
  3. MAC learning and flooding remain isolated by customer context
  4. The VLAN and learned endpoint mapping match the service design

Explanation

Correct Answer

C:

MAC learning and flooding remain isolated by customer context is the best operational verification evidence for this Junos service-provider case: A metro provider must keep two customer L2 circuits logically separate. Technical basis: Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Incorrect Answers

A:

That option concerns Segment-routing MPLS prefix SIDs. Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

B:

Both allowed VLANs pass while VLAN700 is absent is relevant to the different engineering topic "Trunk tagging and VLAN allowlist", but it is not the most directly supported operational verification evidence for this precise case: A metro provider must keep two customer L2 circuits logically separate. the best answer here is: MAC learning and flooding remain isolated by customer context.

D:

The VLAN and learned endpoint mapping match the service design is relevant to the different engineering topic "Junos VLAN operational validation", but it is not the most directly supported operational verification evidence for this precise case: A metro provider must keep two customer L2 circuits logically separate. the best answer here is: MAC learning and flooding remain isolated by customer context.

Question 316

A provider network team identifies this situation: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. Which engineering decision BEST fits the stated requirement? Choose ONE best answer.

  1. Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains
  2. Use IRB interfaces when authorized L3 routing is needed between distinct VLAN broadcast domains
  3. Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass
  4. Use graceful Routing Engine switchover where supported to preserve forwarding across a control-plane transition

Explanation

Correct Answer

A:

Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains is the best technical design or decision for this Junos service-provider case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. Technical basis: Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Incorrect Answers

B:

Use IRB interfaces when authorized L3 routing is needed between distinct VLAN broadcast domains is relevant to the different engineering topic "Integrated routing and bridging", but it is not the most directly supported technical design or decision for this precise case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. the best answer here is: Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains.

C:

Treat the trunk native VLAN as a deliberate untagged-frame mapping, not a generic security bypass is relevant to the different engineering topic "Native VLAN and untagged trunk behavior", but it is not the most directly supported technical design or decision for this precise case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. the best answer here is: Use a virtual-switch or bridge-domain context to isolate eligible L2 customer switching domains.

D:

That option concerns GRES Routing Engine failover. Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Question 317

A provider network team identifies this situation: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. Which implementation or troubleshooting step is MOST APPROPRIATE here? Choose ONE best answer.

  1. Check both ends for matching VLAN allowlists and tags
  2. Review routing-instance membership and bridge-domain configuration
  3. Compare native VLAN configuration on each side
  4. Inspect policy and the route selection order before attributing the result to MED

Explanation

Correct Answer

B:

Review routing-instance membership and bridge-domain configuration is the best implementation and troubleshooting step for this Junos service-provider case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. Technical basis: Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Incorrect Answers

A:

Check both ends for matching VLAN allowlists and tags is relevant to the different engineering topic "Trunk tagging and VLAN allowlist", but it is not the most directly supported implementation and troubleshooting step for this precise case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. the best answer here is: Review routing-instance membership and bridge-domain configuration.

C:

Compare native VLAN configuration on each side is relevant to the different engineering topic "Native VLAN and untagged trunk behavior", but it is not the most directly supported implementation and troubleshooting step for this precise case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. the best answer here is: Review routing-instance membership and bridge-domain configuration.

D:

That option concerns BGP MED and peer comparison. Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Question 318

A provider network team identifies this situation: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. What verification evidence MOST CLEARLY demonstrates the solution is working? Choose ONE best answer.

  1. The corrected context learns only authorized MAC addresses
  2. Unknown unicast is contained within the intended broadcast domain
  3. The IRB responds for its gateway address on the intended VLAN
  4. DR changes only as defined by normal election or controlled topology events

Explanation

Correct Answer

A:

The corrected context learns only authorized MAC addresses is the best operational verification evidence for this Junos service-provider case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. Technical basis: Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Incorrect Answers

B:

That option concerns Unknown unicast and flooding. Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

C:

The IRB responds for its gateway address on the intended VLAN is relevant to the different engineering topic "Integrated routing and bridging", but it is not the most directly supported operational verification evidence for this precise case: An interface is assigned to the wrong virtual-switch and learns unintended customer MACs. the best answer here is: The corrected context learns only authorized MAC addresses.

D:

That option concerns OSPF DR/BDR priority election. Junos virtual-switch instances provide separate switching contexts and VLAN bridge domains on suitable platforms.

Question 319

A Junos service-provider engineer is reviewing this operational case: A tagged customer handoff fails while adjacent VLANs remain healthy. Which technical approach MOST DIRECTLY addresses the issue? Select ONE best answer.

  1. Understand unknown-destination unicast flooding within a bridge domain until learning occurs
  2. Apply BGP's ordered path-selection criteria rather than selecting routes by one attribute in isolation
  3. Assign single-VLAN untagged endpoint traffic to the correct access VLAN on Junos switches
  4. Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation

Explanation

Correct Answer

D:

Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation is the best technical design or decision for this Junos service-provider case: A tagged customer handoff fails while adjacent VLANs remain healthy. Technical basis: VLAN interface state and learned MAC entries reveal different parts of the access-to-trunk forwarding path.

Incorrect Answers

A:

Understand unknown-destination unicast flooding within a bridge domain until learning occurs is relevant to the different engineering topic "Unknown unicast and flooding", but it is not the most directly supported technical design or decision for this precise case: A tagged customer handoff fails while adjacent VLANs remain healthy. the best answer here is: Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation.

B:

That option concerns BGP best-path selection order. VLAN interface state and learned MAC entries reveal different parts of the access-to-trunk forwarding path.

C:

Assign single-VLAN untagged endpoint traffic to the correct access VLAN on Junos switches is relevant to the different engineering topic "Access port VLAN membership", but it is not the most directly supported technical design or decision for this precise case: A tagged customer handoff fails while adjacent VLANs remain healthy. the best answer here is: Inspect VLAN membership and Ethernet-switching MAC tables to confirm layer-2 implementation.

Question 320

A Junos service-provider engineer is reviewing this operational case: A tagged customer handoff fails while adjacent VLANs remain healthy. What specific configuration or diagnostic action BEST implements the intended response? Select ONE best answer.

  1. Inspect the MAC forwarding table for the relevant VLAN and physical interface
  2. Configure an approved VLAN tag mapping without changing unrelated services
  3. Inspect roles and path costs across both uplinks
  4. Inspect show vlans and show ethernet-switching table with port membership

Explanation

Correct Answer

D:

Inspect show vlans and show ethernet-switching table with port membership is the best implementation and troubleshooting step for this Junos service-provider case: A tagged customer handoff fails while adjacent VLANs remain healthy. Technical basis: VLAN interface state and learned MAC entries reveal different parts of the access-to-trunk forwarding path.

Incorrect Answers

A:

Inspect the MAC forwarding table for the relevant VLAN and physical interface is relevant to the different engineering topic "MAC-address dynamic learning", but it is not the most directly supported implementation and troubleshooting step for this precise case: A tagged customer handoff fails while adjacent VLANs remain healthy. the best answer here is: Inspect show vlans and show ethernet-switching table with port membership.

B:

Configure an approved VLAN tag mapping without changing unrelated services is relevant to the different engineering topic "VLAN translation distinction", but it is not the most directly supported implementation and troubleshooting step for this precise case: A tagged customer handoff fails while adjacent VLANs remain healthy. the best answer here is: Inspect show vlans and show ethernet-switching table with port membership.

C:

That option concerns STP root and designated port roles. VLAN interface state and learned MAC entries reveal different parts of the access-to-trunk forwarding path.

Service Provider Routing and Switching, Specialist (JNCIS-SP) (JN0-364) Practice Tests