JNCIA Juniper Networks Certified Internet Associate Exam — Questions and Answers

Question 1: What is the Routing Engine (RE) responsible for in Junos architecture?

Forwarding packets at line rate
Running routing protocols, managing configuration, and maintaining the routing table (Correct answer)
Managing physical interface transceivers
Processing firewall filters in hardware

Correct answer: Running routing protocols, managing configuration, and maintaining the routing table

The Routing Engine runs the Junos OS kernel, executes routing protocols (OSPF, BGP), maintains the routing and MPLS tables, and handles management plane functions.

Question 2: In Junos, what is the purpose of a routing policy 'term' order?

Term order only matters for BGP, not OSPF
All terms are evaluated and the best match wins
Terms are evaluated in order from first to last; the first matching term's action is applied and evaluation stops (Correct answer)
Terms are evaluated alphabetically

Correct answer: Terms are evaluated in order from first to last; the first matching term's action is applied and evaluation stops

In Junos routing policies, terms are evaluated sequentially. The first term that matches all conditions executes its action and stops further evaluation, making term order critical to policy correctness.

Question 3: What is the role of a policer when referenced within a Junos firewall filter term?

It marks packets with a DSCP value for quality-of-service classification
It sends matching packets to the Routing Engine for inspection
It logs all packets matching the term to a file
It enforces a rate limit on traffic matching the term's conditions (Correct answer)

Correct answer: It enforces a rate limit on traffic matching the term's conditions

A policer referenced in a firewall filter term enforces bandwidth limits on matching traffic, dropping or remarking packets that exceed the configured rate.

Question 4: Which Junos feature allows multiple configuration changes to be grouped and committed together?

Candidate configuration (Correct answer)
Commit scripts
Event policies
Rescue configuration

Correct answer: Candidate configuration

The candidate configuration allows operators to stage multiple changes simultaneously. All edits are held in a candidate configuration until a 'commit' is issued, applying them atomically.

Question 5: What is the 'penultimate hop popping' (PHP) mechanism in Junos MPLS?

PHP is a security mechanism to prevent label spoofing
The last LSR pops the label and re-routes based on IP
PHP eliminates the need for an egress LSR in MPLS
The second-to-last LSR pops the label before the egress LSR, so the egress processes the IP packet directly without needing to look up the MPLS label (Correct answer)

Correct answer: The second-to-last LSR pops the label before the egress LSR, so the egress processes the IP packet directly without needing to look up the MPLS label

PHP allows the penultimate (second-to-last) LSR to remove the MPLS label before forwarding to the egress LSR. This saves one label lookup on the egress LSR, which only needs to do an IP lookup.

Question 6: What does the Packet Forwarding Engine (PFE) do in Junos?

Forwards transit packets at line rate using the forwarding table programmed by the Routing Engine (Correct answer)
Manages the candidate configuration
Handles system login and authentication
Runs routing protocols

Correct answer: Forwards transit packets at line rate using the forwarding table programmed by the Routing Engine

The PFE is the data plane component that performs high-speed packet forwarding using Application-Specific Integrated Circuits (ASICs), using the FIB programmed by the Routing Engine.

Question 7: What is the BGP attribute 'LOCAL_PREF' used for?

To set the weight of a BGP route for inbound traffic
To configure the BGP community for route filtering
To define the AS path length for external BGP routes
To influence outbound routing decisions within an AS by preferring routes with higher LOCAL_PREF values (Correct answer)

Correct answer: To influence outbound routing decisions within an AS by preferring routes with higher LOCAL_PREF values

LOCAL_PREF is a BGP well-known discretionary attribute shared among iBGP peers within the same AS. Higher LOCAL_PREF values are preferred, influencing which exit point is used for outbound traffic.

Question 8: Which approach is recommended for implementing troubleshooting methods changes?

Making all changes at once without testing
Skipping documentation to save time
Following a structured change management process with testing (Correct answer)
Implementing changes only during peak hours

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 9: What is a Route Distinguisher (RD) in the context of Junos L3VPN?

A security token for VPN authentication
A routing metric used to prefer one VPN path over another
A 64-bit value prepended to customer IPv4 prefixes to create unique VPNv4 routes in MP-BGP, allowing the same IP prefix to exist in multiple VRFs (Correct answer)
A tag that identifies the service provider's AS

Correct answer: A 64-bit value prepended to customer IPv4 prefixes to create unique VPNv4 routes in MP-BGP, allowing the same IP prefix to exist in multiple VRFs

The Route Distinguisher makes customer IPv4 routes globally unique in the BGP table. The same prefix (e.g., 10.0.0.0/8) can exist in multiple customer VRFs without conflict because each VRF has a different RD prepended.

Question 10: When planning IP addressing for a Junos network, which RFC defines private IPv4 address ranges?

RFC 1918 — 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 (Correct answer)
RFC 791 — The original IPv4 addressing standard
RFC 2918 — 10.0.0.0/8 only
RFC 4291 — All private addresses including IPv6

Correct answer: RFC 1918 — 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16

RFC 1918 defines three private IPv4 address blocks: 10.0.0.0/8 (Class A), 172.16.0.0/12 (Class B), and 192.168.0.0/16 (Class C), which are not routed on the public Internet.

Question 11: What is the fundamental principle behind security fundamentals in the context of Juniper Networks Certified Internet Associate?

Maximizing system complexity
Using the most expensive solutions available
Avoiding all system changes
Ensuring reliability, security, and optimal performance (Correct answer)

Correct answer: Ensuring reliability, security, and optimal performance

Security Fundamentals in Juniper Networks Certified Internet Associate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 12: What is a change management window in the context of Junos network operations?

A Juniper support portal for change requests
A time-based commit scheduling feature
A scheduled period of low traffic during which network changes are performed to minimize user impact (Correct answer)
A Junos CLI mode for batch configuration

Correct answer: A scheduled period of low traffic during which network changes are performed to minimize user impact

A change management window is an organizational process — a pre-approved time slot (usually nights/weekends) when network changes can be made with minimal risk to business operations.

Question 13: What is BGP 'communities' and how are they used?

BGP communities are groups of BGP peers in the same AS
BGP communities define OSPF areas for BGP routes
BGP communities are route tags (32-bit values) attached to prefixes to signal routing policies across AS boundaries (Correct answer)
BGP communities are encrypted identifiers for secure routing

Correct answer: BGP communities are route tags (32-bit values) attached to prefixes to signal routing policies across AS boundaries

BGP communities are optional transitive attributes that tag routes with 32-bit values. They are used to signal routing policies between ASes, such as which routes to accept, prefer, or not advertise further.

Question 14: What is the best practice for monitoring network configuration systems?

Implement automated monitoring with alerting thresholds (Correct answer)
Monitor only when users report problems
Rely on vendor notifications exclusively
Check systems manually once a month

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 15: What is EVPN (Ethernet VPN) and what advantages does it have over VPLS?

EVPN only works over IP networks without MPLS
EVPN is limited to point-to-point connections unlike VPLS multipoint
EVPN uses MP-BGP to distribute MAC/IP routes, providing active-active multihoming, faster convergence, and integrated L2/L3 forwarding over MPLS or VXLAN (Correct answer)
EVPN requires proprietary Juniper hardware

Correct answer: EVPN uses MP-BGP to distribute MAC/IP routes, providing active-active multihoming, faster convergence, and integrated L2/L3 forwarding over MPLS or VXLAN

EVPN (RFC 7432) improves on VPLS by using BGP for MAC learning instead of data-plane flooding, enabling active-active multihoming, ARP suppression, integrated IRB routing, and operation over both MPLS and VXLAN overlays.

Question 16: What is the purpose of 'commit check' in Junos?

Tests connectivity after a commit
Verifies hardware compatibility
Validates the candidate configuration for syntax and semantic errors without activating it (Correct answer)
Checks if the configuration can be committed without conflicts

Correct answer: Validates the candidate configuration for syntax and semantic errors without activating it

'commit check' runs Junos's configuration validation engine against the candidate configuration, reporting any errors or warnings, without making any changes to the active configuration.

Question 17: Which approach is recommended for implementing network configuration changes?

Making all changes at once without testing
Following a structured change management process with testing (Correct answer)
Implementing changes only during peak hours
Skipping documentation to save time

Correct answer: Following a structured change management process with testing

A structured change management process with proper testing minimizes risk and ensures successful implementation.

Question 18: What is the purpose of a BGP L3VPN (RFC 4364)?

To provide Layer 2 point-to-point connectivity over MPLS
To provide IP VPN service over an MPLS backbone, separating customer routing with VRFs and using MP-BGP to distribute customer routes between PE routers (Correct answer)
To create a VPN for BGP route reflectors
To encrypt BGP sessions between AS peers

Correct answer: To provide IP VPN service over an MPLS backbone, separating customer routing with VRFs and using MP-BGP to distribute customer routes between PE routers

BGP L3VPN (formerly RFC 2547) uses MPLS labels and MP-BGP with VPNv4 address family to create separate per-customer routing domains (VRFs) connected across an MPLS service provider network.

Question 19: What is the purpose of a 'pre-check' before implementing Junos configuration changes?

Disabling monitoring during the change window
Pre-approving the change with all stakeholders
Collecting baseline state (interface status, BGP summary, OSPF neighbors, route table) to compare against post-change state for rapid issue detection (Correct answer)
Rebooting the device to clear stale state

Correct answer: Collecting baseline state (interface status, BGP summary, OSPF neighbors, route table) to compare against post-change state for rapid issue detection

A pre-check captures the current operational state of the network before changes, enabling direct comparison with post-change state to quickly identify any unintended impacts.

Question 20: What is the Junos 'forwarding table' and how does it differ from the routing table?

The forwarding table contains only static routes
The forwarding table is stored in the RE; the routing table is in the PFE
The forwarding table (FIB) contains only active best routes optimized for hardware lookup; the routing table (RIB) contains all learned routes (Correct answer)
They are two names for the same data structure

Correct answer: The forwarding table (FIB) contains only active best routes optimized for hardware lookup; the routing table (RIB) contains all learned routes

The RIB (Routing Information Base) contains all learned routes from all protocols. The FIB (Forwarding Information Base) in the PFE contains only the active best routes programmed for hardware forwarding.

Question 21: In Junos, what is the maximum number of rollback configurations stored by default?

50 (Correct answer)
100
5
10

Correct answer: 50

Junos stores up to 50 rollback configuration files (rollback 0 through rollback 49), with rollback 0 being the current active configuration and rollback 1 being the previous.

Question 22: What is the purpose of OSPF 'passive' interface configuration in Junos?

Forces the interface to be elected DR
Enables OSPF authentication on the interface
Disables OSPF completely on the interface
Advertises the connected subnet into OSPF without sending or receiving OSPF hellos, preventing neighbor formation (Correct answer)

Correct answer: Advertises the connected subnet into OSPF without sending or receiving OSPF hellos, preventing neighbor formation

A passive OSPF interface advertises its connected subnet into the OSPF domain (via a stub link LSA) but does not send or receive OSPF Hello packets, preventing the formation of OSPF neighbors on that segment.

Question 23: What is a traffic control profile (TCP) in Junos CoS?

A configuration object that specifies shaping rates and scheduler maps for hierarchical CoS, applied to logical interfaces (Correct answer)
A TCP protocol parameter configuration for window sizing
A QoS profile for WAN interfaces
A rate-limiting profile for Transmission Control Protocol sessions

Correct answer: A configuration object that specifies shaping rates and scheduler maps for hierarchical CoS, applied to logical interfaces

In Junos H-CoS, traffic control profiles define aggregate bandwidth constraints (shaping rate, overhead accounting) and reference scheduler maps, providing the building block for multi-level CoS on MX platforms.

Question 24: What is the Junos command to check the status of all OSPF adjacencies?

show ospf adjacency
show protocols ospf neighbors
display ospf peer
show ospf neighbor (Correct answer)

Correct answer: show ospf neighbor

'show ospf neighbor' in Junos operational mode displays all OSPF neighbors, their state (Full, 2-Way, ExStart, etc.), dead interval timer, and interface.

Question 25: What is the Junos command to verify an LDP-signaled MPLS LSP end-to-end?

traceroute mpls ldp [prefix]
show ldp path [prefix]
ping mpls ldp fec [prefix/len] ttl 255 (Correct answer)
debug ldp lsp [prefix]

Correct answer: ping mpls ldp fec [prefix/len] ttl 255

'ping mpls ldp fec [prefix/length]' sends MPLS ping probes along the LDP LSP for the specified FEC, verifying end-to-end LSP connectivity and data-plane forwarding.

Question 26: In Junos L3VPN, what is the purpose of the 'vrf-table-label' command?

Allocates a unique MPLS label per VRF routing table to enable MPLS-based forwarding for traffic arriving from the MPLS core toward CE devices (Correct answer)
Creates a label for each route in the VRF
Enables inter-VRF route leaking
Configures MPLS on CE-facing interfaces

Correct answer: Allocates a unique MPLS label per VRF routing table to enable MPLS-based forwarding for traffic arriving from the MPLS core toward CE devices

'vrf-table-label' in Junos allocates a per-VRF MPLS label that the egress PE uses to identify which VRF should receive incoming labeled traffic, enabling correct VPN traffic separation at the PE.

Question 27: What is the best practice for monitoring security fundamentals systems?

Monitor only when users report problems
Implement automated monitoring with alerting thresholds (Correct answer)
Rely on vendor notifications exclusively
Check systems manually once a month

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 28: What is the significance of the 'inet.0' routing table in Junos?

It is the main IPv4 unicast routing table used for unicast forwarding decisions (Correct answer)
It contains only BGP routes
It stores only static routes
It is the IPv6 routing table

Correct answer: It is the main IPv4 unicast routing table used for unicast forwarding decisions

inet.0 is the default IPv4 unicast routing table in Junos. All IPv4 unicast routing protocols (OSPF, BGP, static, connected) install routes here for forwarding decisions.

Question 29: What command is used to enter configuration mode in Junos OS?

configure (Correct answer)
enable
edit
set

Correct answer: configure

The configure command switches the user from operational mode to configuration mode.

Question 30: How can you access the CLI of a Juniper device remotely?

Using the rescue button
Through SSH or Telnet (Correct answer)
Via a mobile app
By connecting a USB drive

Correct answer: Through SSH or Telnet

SSH (secure) and Telnet (less secure) are common protocols for remote CLI access.

Question 31: What is the Junos command to view detailed BGP route information including all path attributes?

show route bgp detail [prefix]
show route [prefix] detail (Correct answer)
show bgp route [prefix] attributes
display bgp path [prefix]

Correct answer: show route [prefix] detail

'show route [prefix] detail' in Junos displays detailed route information including all BGP attributes: AS path, communities, LOCAL_PREF, MED, ORIGIN, and next-hop.

Question 32: What is the best practice for monitoring system architecture systems?

Monitor only when users report problems
Implement automated monitoring with alerting thresholds (Correct answer)
Rely on vendor notifications exclusively
Check systems manually once a month

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 33: In Junos L3VPN, what is the function of a Route Target (RT)?

Controls which VRFs import which VPNv4 routes, implementing the VPN topology (full-mesh, hub-spoke, extranet) (Correct answer)
Specifies the MPLS label value for the VPN
Sets the routing metric within the VPN
Uniquely identifies each VPN route in the global BGP table

Correct answer: Controls which VRFs import which VPNv4 routes, implementing the VPN topology (full-mesh, hub-spoke, extranet)

Route Targets are BGP extended communities that control VRF route import and export. A VRF exports routes with certain RT values; other VRFs import routes matching specific RT values, defining VPN connectivity topology.

Question 34: What is the best practice for monitoring troubleshooting methods systems?

Implement automated monitoring with alerting thresholds (Correct answer)
Rely on vendor notifications exclusively
Check systems manually once a month
Monitor only when users report problems

Correct answer: Implement automated monitoring with alerting thresholds

Automated monitoring with properly configured alerting thresholds enables proactive identification and resolution of issues.

Question 35: What should you do when troubleshooting a system architecture issue?

Immediately restart all systems
Follow a systematic approach: identify, research, test, implement, verify (Correct answer)
Escalate everything without investigation
Make random changes until the problem goes away

Correct answer: Follow a systematic approach: identify, research, test, implement, verify

A systematic troubleshooting approach ensures the root cause is identified and the fix is verified without creating new issues.

Question 36: What CoS marking does the Expedited Forwarding (EF) per-hop behavior specify?

DSCP value 0 (best-effort)
DSCP value 10 (AF11)
DSCP value 46 (101110 binary) — designed for low-latency, low-jitter, low-loss traffic like VoIP (Correct answer)
DSCP value 32 (CS4)

Correct answer: DSCP value 46 (101110 binary) — designed for low-latency, low-jitter, low-loss traffic like VoIP

EF (Expedited Forwarding) is defined with DSCP value 46 (binary 101110). It is designed for traffic requiring low latency, low jitter, and low packet loss, making it ideal for VoIP and real-time video.

Question 37: What does a 'martian' route mean in Junos troubleshooting context?

A route learned from an untrusted BGP peer
A route that Junos refuses to install because the destination is a reserved or invalid address (e.g., 0.0.0.0/0, 127.x.x.x) (Correct answer)
A route pointing to a null interface
A route with an infinite metric

Correct answer: A route that Junos refuses to install because the destination is a reserved or invalid address (e.g., 0.0.0.0/0, 127.x.x.x)

Martian routes are addresses that should never appear as routable destinations (loopback, link-local, broadcast, multicast used as unicast destinations). Junos drops these to prevent routing anomalies.

Question 38: In Junos, what command enables OSPF on an interface?

set protocols ospf area 0.0.0.0 interface ge-0/0/0.0 (Correct answer)
enable ospf interface ge-0/0/0.0 area 0
set interfaces ge-0/0/0 ospf area 0
set ospf enable interface ge-0/0/0

Correct answer: set protocols ospf area 0.0.0.0 interface ge-0/0/0.0

In Junos, OSPF interfaces are configured by adding them to an OSPF area under the protocols hierarchy: 'set protocols ospf area [area-id] interface [interface]'.

Question 39: What is the primary purpose of a network implementation plan for a Junos deployment?

To configure routing protocols automatically
To document the configuration steps, rollback procedures, and testing criteria before making changes to production (Correct answer)
To document IP addressing only
To purchase hardware from Juniper

Correct answer: To document the configuration steps, rollback procedures, and testing criteria before making changes to production

An implementation plan defines the sequence of configuration changes, pre/post-change verification steps, rollback procedures, and success criteria to reduce risk during network changes.

Question 40: What does the 'reject' action in a Junos firewall filter do differently from 'discard'?

'reject' drops only TCP packets; 'discard' drops all protocols
'reject' sends an ICMP unreachable message to the sender; 'discard' silently drops the packet (Correct answer)
'reject' and 'discard' are functionally identical
'reject' logs the packet; 'discard' does not

Correct answer: 'reject' sends an ICMP unreachable message to the sender; 'discard' silently drops the packet

The 'reject' action drops the packet and sends an ICMP 'destination unreachable' message back to the source, while 'discard' performs a silent drop with no notification.

Question 41: Which Junos mechanism provides In-Service Software Upgrade (ISSU) capability?

ISSU requires the device to be taken offline
ISSU is performed by rebooting individual line cards sequentially
ISSU requires dual Routing Engines and NSR/GRES to upgrade Junos software with minimal forwarding disruption (Correct answer)
ISSU performs upgrades only during maintenance windows with full traffic loss

Correct answer: ISSU requires dual Routing Engines and NSR/GRES to upgrade Junos software with minimal forwarding disruption

Junos ISSU leverages dual-RE architectures with GRES/NSR to upgrade software by upgrading the backup RE first, switching mastership, then upgrading the former primary, with minimal impact on forwarding.

Question 42: What is the function of the Junos 'rescue configuration'?

A configuration snapshot taken automatically every hour
A minimal known-good configuration that can be restored quickly during emergencies (Correct answer)
The factory default configuration
The configuration stored in NVRAM

Correct answer: A minimal known-good configuration that can be restored quickly during emergencies

The rescue configuration is a manually saved minimal configuration that allows operators to recover access to the device quickly if the active configuration becomes problematic.

Question 43: What is the function of 'loss priority' in Junos CoS?

Defines the priority of the interface in STP
Indicates how likely a packet is to be dropped during congestion — high loss priority packets are dropped first (Correct answer)
Sets the routing priority for a packet class
Determines which BGP route is preferred for a traffic class

Correct answer: Indicates how likely a packet is to be dropped during congestion — high loss priority packets are dropped first

Loss priority in Junos CoS indicates a packet's susceptibility to discard during congestion. High loss priority (HL) packets are dropped preferentially before low loss priority (LL) packets in WRED or tail-drop.

Question 44: What is a prefix-list in Junos and how is it used?

A list of BGP neighbors
A list of OSPF areas
A list of allowed management IPs
A named list of IP prefixes used as a match condition in routing policies or firewall filters (Correct answer)

Correct answer: A named list of IP prefixes used as a match condition in routing policies or firewall filters

A prefix-list in Junos is a named set of IP prefixes configured under policy-options. It can be referenced in routing policies (as 'route-filter') and firewall filters as a match condition.

Question 45: What is the fundamental principle behind data management in the context of Juniper Networks Certified Internet Associate?

Maximizing system complexity
Ensuring reliability, security, and optimal performance (Correct answer)
Using the most expensive solutions available
Avoiding all system changes

Correct answer: Ensuring reliability, security, and optimal performance

Data Management in Juniper Networks Certified Internet Associate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 46: What type of routing protocol is OSPF?

Hybrid Exterior Gateway Protocol
Path-Vector Exterior Gateway Protocol
Distance-Vector Interior Gateway Protocol
Link-State Interior Gateway Protocol (Correct answer)

Correct answer: Link-State Interior Gateway Protocol

OSPF (Open Shortest Path First) is a link-state IGP that builds a complete topology map of the network using LSAs and calculates the shortest path using Dijkstra's SPF algorithm.

Question 47: Which Junos CLI command displays the current routing table?

show bgp summary
show ospf neighbor
show interfaces
show route (Correct answer)

Correct answer: show route

The 'show route' command displays the routing table in Junos OS, showing all routes learned via static, connected, and dynamic protocols.

Question 48: What is the fundamental principle behind troubleshooting methods in the context of Juniper Networks Certified Internet Associate?

Maximizing system complexity
Avoiding all system changes
Using the most expensive solutions available
Ensuring reliability, security, and optimal performance (Correct answer)

Correct answer: Ensuring reliability, security, and optimal performance

Troubleshooting Methods in Juniper Networks Certified Internet Associate fundamentally aims to ensure system reliability, security, and optimal performance.

Question 49: In Junos, what command verifies whether a specific prefix is in the routing table?

find route [prefix]
show route [prefix] exact (Correct answer)
display route [prefix]
lookup route [prefix]

Correct answer: show route [prefix] exact

'show route [prefix] exact' checks for an exact match of the specified prefix in the routing table, showing its protocol, next-hop, and metric without returning longer/shorter matches.

Question 50: What does the Junos 'next-hop self' BGP configuration accomplish?

Sets the next-hop to the loopback address for all routes
Changes the next-hop for eBGP routes only
Forces the BGP router to advertise its own address as the next-hop for routes it reflects or re-advertises to iBGP peers (Correct answer)
Enables next-hop tracking for BGP routes

Correct answer: Forces the BGP router to advertise its own address as the next-hop for routes it reflects or re-advertises to iBGP peers

'Next-hop self' is configured on iBGP sessions to ensure that the router sets itself as the next-hop in BGP updates, solving the case where iBGP peers cannot resolve the original eBGP next-hop.

Question 51: What is the purpose of Junos 'traceoptions' in protocol configuration?

Captures packets on all interfaces simultaneously
Traces the route a packet takes
Monitors CPU utilization during protocol convergence
Enables detailed debug logging for specific protocols to a file for troubleshooting (Correct answer)

Correct answer: Enables detailed debug logging for specific protocols to a file for troubleshooting

Traceoptions in Junos configuration enables protocol-level debug logging (e.g., OSPF packet exchange, BGP UPDATE messages) to a specified file in /var/log/ for detailed troubleshooting.

Question 52: What Junos process is responsible for managing routing protocols?

chassisd (Chassis Daemon)
mgd (Management Daemon)
pfed (Packet Forwarding Engine Daemon)
rpd (Routing Protocol Daemon) (Correct answer)

Correct answer: rpd (Routing Protocol Daemon)

The Routing Protocol Daemon (rpd) is the primary process managing all routing protocols including OSPF, IS-IS, BGP, RIP, LDP, RSVP, and PIM in Junos OS.

Question 53: During a Junos upgrade, what is the recommended step before upgrading production devices?

Upgrade during peak traffic hours to detect issues quickly
Upgrade all devices simultaneously
Test the new software version in a lab environment that mirrors production and review the Junos release notes for known issues (Correct answer)
Skip testing to reduce maintenance window duration

Correct answer: Test the new software version in a lab environment that mirrors production and review the Junos release notes for known issues

Testing upgrades in a lab environment and reviewing release notes (for known caveats, changed behaviors, and upgrade paths) minimizes the risk of production issues during a Junos software upgrade.

Question 54: What should you do when troubleshooting a network configuration issue?

Immediately restart all systems
Escalate everything without investigation
Follow a systematic approach: identify, research, test, implement, verify (Correct answer)
Make random changes until the problem goes away

Correct answer: Follow a systematic approach: identify, research, test, implement, verify

A systematic troubleshooting approach ensures the root cause is identified and the fix is verified without creating new issues.

Question 55: What is the purpose of the 'commit confirmed' command in Junos?

Commits configuration and automatically rolls back if not confirmed within a timeout (Correct answer)
Commits configuration permanently without rollback
Saves configuration to a backup file
Previews configuration changes before committing

Correct answer: Commits configuration and automatically rolls back if not confirmed within a timeout

'commit confirmed' activates configuration changes but schedules an automatic rollback after a timeout (default 10 minutes) unless a subsequent 'commit' is issued, providing a safety net.

Question 56: How should you document compliance standards configurations?

Document only when asked by management
Keep all configuration details in personal memory
Maintain up-to-date documentation in a centralized, accessible location (Correct answer)
Store documentation on individual workstations

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 57: Which statement is true about Junos configuration groups?

Groups replace the need for templates
Groups are used only for firewall filters
Groups are stored in a separate database
Groups allow reusable configuration snippets that can be applied with 'apply-groups' (Correct answer)

Correct answer: Groups allow reusable configuration snippets that can be applied with 'apply-groups'

Junos configuration groups define reusable configuration blocks that are applied to the active configuration using the 'apply-groups' directive, reducing repetition.

Question 58: What is the 'inet.3' routing table used for in Junos MPLS?

Stores all IPv4 routes including MPLS labels
Stores MPLS-resolved next-hops for BGP routes, allowing BGP to use MPLS LSPs as next-hops for traffic forwarding over the MPLS backbone (Correct answer)
Stores multicast MPLS routes
Is the backup routing table for inet.0

Correct answer: Stores MPLS-resolved next-hops for BGP routes, allowing BGP to use MPLS LSPs as next-hops for traffic forwarding over the MPLS backbone

inet.3 contains MPLS tunnel next-hops (RSVP-TE LSPs and LDP LSPs). BGP references inet.3 to resolve next-hops through MPLS tunnels, allowing BGP routes to be forwarded using MPLS LSPs rather than direct IP routing.

Question 59: In Junos, what does 'commit synchronize' accomplish in a dual-RE system?

Backs up the configuration to an external server
Synchronizes routing tables between two REs
Merges configurations from both REs
Copies the committed configuration from the master RE to the backup RE to ensure both have identical configurations (Correct answer)

Correct answer: Copies the committed configuration from the master RE to the backup RE to ensure both have identical configurations

'commit synchronize' commits the candidate configuration on the master RE and copies the committed configuration to the backup RE, ensuring configuration consistency for failover scenarios.

Question 60: Which Junos feature provides stateful packet inspection for SRX devices?

Firewall filters
Security policies with zones (Correct answer)
Class of Service schedulers
Routing policies

Correct answer: Security policies with zones

On Junos SRX devices, security policies combined with security zones provide stateful inspection, tracking connection state for TCP, UDP, and ICMP sessions.

Question 61: What is the default behavior of a Junos SRX security policy when no policy matches traffic between two zones?

Traffic is queued for administrator review
Traffic falls through to the default route
Traffic is denied (implicit deny-all at end of policy) (Correct answer)
Traffic is permitted by default

Correct answer: Traffic is denied (implicit deny-all at end of policy)

Junos SRX has an implicit deny-all policy at the end of every security policy list. If no configured policy matches the traffic, it is dropped without notification.

Question 62: In Junos OS, what is the purpose of the 'log' action in a firewall filter?

Records the full packet payload to disk
Stores packet header information in the Routing Engine's firewall log buffer (Correct answer)
Sends a syslog message to an external syslog server
Generates an SNMP trap

Correct answer: Stores packet header information in the Routing Engine's firewall log buffer

The 'log' action in a Junos firewall filter records basic packet information (timestamp, protocol, addresses, ports) in the Routing Engine's local firewall log, viewable with 'show firewall log'.

Question 63: How should you document security fundamentals configurations?

Store documentation on individual workstations
Document only when asked by management
Keep all configuration details in personal memory
Maintain up-to-date documentation in a centralized, accessible location (Correct answer)

Correct answer: Maintain up-to-date documentation in a centralized, accessible location

Centralized, accessible, and current documentation is essential for troubleshooting, disaster recovery, and knowledge sharing.

Question 64: What should you do when troubleshooting a troubleshooting methods issue?

Make random changes until the problem goes away
Immediately restart all systems
Escalate everything without investigation
Follow a systematic approach: identify, research, test, implement, verify (Correct answer)

Correct answer: Follow a systematic approach: identify, research, test, implement, verify

A systematic troubleshooting approach ensures the root cause is identified and the fix is verified without creating new issues.

JNCIA Juniper Networks Certified Internet Associate Exam

The JNCIA Juniper Networks Certified Internet Associate Exam validates foundational Junos networking knowledge including system architecture, security fundamentals, network configuration, troubleshooting methods, implementation planning, routing protocols, class of service, and MPLS/VPNs.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

learningportal.juniper.net — Test delivery, eligibility, exam format, score release, time limit, exam information · verified Nov 2026
juniper.net — Passing score, score validity, renewal · verified Oct 2026