JN0-281 Exam Dumps - Juniper JNCIA-DC Questions and Answers

Nonstop active routing is the Junos high availability feature designed to keep routing protocol operation and routing information continuous across a Routing Engine switchover on platforms with redundant Routing Engines. With NSR enabled, the control-plane routing state is replicated so that protocol sessions and routing information can remain stable when the device transitions from the primary to the backup Routing Engine. The goal is a transparent switchover that minimizes or eliminates routing reconvergence caused by a Routing Engine failure.

This is especially important in data center environments where routing stability underpins EVPN VXLAN control-plane operation, underlay BGP or OSPF adjacencies, and service reachability. By maintaining the routing protocol process state across the switchover, NSR helps prevent neighbor resets and reduces churn in the routing table, which directly protects application traffic paths from disruption that would otherwise occur during a control-plane restart.

GRES is closely related but has a different focus: it preserves forwarding and certain kernel and interface states so that packet forwarding can continue, but by itself it does not preserve the full routing protocol control plane. That is why NSR is the best match when the requirement explicitly includes routing information continuity in addition to traffic continuity. LACP and BFD are valuable availability tools, but they address link bundling and fast failure detection, not Routing Engine stateful failover.

In Junos-based data center switching, an IRB interface is the Layer 3 gateway that is logically associated with a Layer 2 VLAN or bridge domain. The VLAN provides Layer 2 bridging inside the broadcast domain, while the IRB interface provides the routed interface that enables hosts in that VLAN to reach destinations outside their local subnet. This is the standard mechanism used for inter-VLAN routing on Juniper switches and for providing default gateway services to servers connected to access ports or VLAN-tagged trunks.

Operationally, endpoints in a VLAN use the IRB interface IP address as their default gateway. Frames destined to a remote subnet are bridged at Layer 2 to the IRB gateway MAC address, and then the packet is routed at Layer 3 based on the routing table. This allows a single device to perform both bridging within the VLAN and routing between VLANs or to other routed interfaces, which is why the concept is called integrated routing and bridging.

IRB does not encrypt traffic and does not provide NAT by itself; those functions are typically associated with security services features and firewall platforms. IRB is also not the mechanism that performs pure bridging within the same VLAN, because bridging is handled by the VLAN or bridge domain and the Ethernet switching table.

Aggregate routes and generated routes are used to create summarized routes in Junos, but they behave differently in terms of forwarding.

Step-by-Step Breakdown:

Aggregate Routes:

An aggregate route summarizes a set of more specific routes, but it does not have a direct forwarding next hop. Instead, it points to the more specific routes for actual packet forwarding.

Generated Routes:

A generated route also summarizes specific routes, but it has a forwarding next hop that is determined based on the availability of contributing routes. The generated route can be used to directly forward traffic.

Juniper Reference:

Aggregate and Generated Routes: In Junos, aggregate routes rely on more specific routes for forwarding, while generated routes can forward traffic directly based on their next-hop information.

On Junos Ethernet switching platforms, the Layer 2 forwarding decision is based on a MAC address lookup table. Juniper commonly refers to this as the Ethernet switching table, which contains learned source MAC addresses mapped to an ingress interface and a VLAN or bridge domain context. This table is built dynamically through normal Layer 2 learning, and it is what allows the switch to forward known unicast frames to the correct egress interface instead of flooding within the broadcast domain.

In Juniper terminology, the forwarding plane also maintains a forwarding database used to program hardware forwarding entries. While the term forwarding information base is most often associated with Layer 3 forwarding for IP prefixes, many training and operational contexts use FIB language when describing the programmed forwarding state in the data plane, including the entries that result from Ethernet switching learning. The key idea is that the control plane and switching processes populate forwarding state, and the forwarding plane uses that state to make fast, deterministic forwarding decisions at line rate.

Options inet.0 and RIB are Layer 3 constructs. inet.0 is the main IPv4 routing table, and the RIB is the routing information base that stores routes before they are programmed into forwarding. Neither represents the Layer 2 MAC learning table.

Qualified next hop is the Junos mechanism that lets you configure more than one next hop for the same static route and control which one is preferred. This is most commonly used to build primary and backup forwarding behavior with deterministic selection. You configure a primary next hop and then add one or more qualified next hops with a different preference value. The route installs the best, lowest preference next hop as active, while keeping the alternate next hop available as standby. If the primary next hop becomes unusable, Junos can switch to the qualified next hop so traffic continues to flow.

This approach is widely used in data center edge and services routing, for example toward management networks, service appliances, or external gateways where you want a static default or summary route with predictable failover. It is not the same as resolving a non-directly-connected next hop. That scenario is handled by recursive resolution behavior, not by qualification. Qualified next hop also does not depend on any specific routing protocol, and it is not limited to link-state environments.

Finally, qualified next hop does not rely on sending pings to test reachability. Health tracking can be achieved through other mechanisms such as interface state, next hop resolution changes, or integration with failure detection features, but the qualified next hop feature itself is about preference-ranked redundancy for static routes.

In Junos, the default export policy for OSPF is to reject all routes from being exported.

Step-by-Step Breakdown:

Default Export Policy:By default, OSPF in Junos does not export any routes to other routing protocols or neighbors. This is a safety mechanism to prevent unintended route advertisements.

Custom Export Policies:

If you need to export routes, you must create a custom export policy that explicitly defines which routes to advertise.

Example: You can create an export policy to redistribute static or connected routes into OSPF.

Juniper Reference:

OSPF Export Behavior: In Juniper devices, the default policy for OSPF is to reject route advertisements unless explicitly configured otherwise through custom policies.

Link aggregation groups, implemented on Junos as aggregated Ethernet interfaces, allow multiple physical Ethernet links to operate as one logical Layer 2 interface. This increases available bandwidth and provides link level resiliency because member links can fail without taking down the logical interface, as long as at least one member remains operational. In data center leaf spine designs, link aggregation is commonly used for server dual homing, uplinks to appliances, or inter switch connectivity where parallel links are desired with a single logical adjacency.

From a forwarding perspective, the device distributes traffic across member links using a hashing algorithm based on packet header fields so that individual flows remain in order while the aggregate uses multiple links. Control plane operation can be static or negotiated with LACP. With LACP, both sides exchange protocol information to ensure consistent bundling and to remove failed or miswired members automatically. This makes link aggregation a core high availability building block at the link layer, independent of Routing Engine redundancy features.

Graceful Routing Engine switchover, nonstop bridging, and nonstop active routing are control plane redundancy features. They are designed to minimize disruption during Routing Engine failover or preserve protocol state, but they do not combine multiple physical Ethernet interfaces into one logical link layer interface.

Verification sources from Juniper documentation

https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet/topics/topic-map/understanding-lacp.html

https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet/topics/topic-map/aggregated-ethernet-interfaces-overview.html

In Junos Ethernet switching, a VLAN is a Layer 2 broadcast domain and can include any set of switch ports that you assign to it. There is no generic rule that limits a VLAN to only half of a switch’s physical ports. Practically, a single VLAN can include all physical ports on the switch if that is how the environment is designed, for example in a flat Layer 2 segment for a specific purpose or during a migration. This makes statement C correct.

For interface mode behavior, access mode is the default expectation for endpoint-facing Layer 2 ports where traffic is normally untagged. In Junos, when an interface is configured for Ethernet switching and no explicit trunk configuration is applied, the operational intent aligns with access behavior: the port is associated with a single VLAN and forwards frames as untagged on the wire. Trunk mode must be explicitly configured when the link needs to carry multiple VLANs using 802.1Q tagging, such as switch-to-switch uplinks or server connections that tag multiple VLANs. Therefore, statement D is correct and statement A is incorrect because trunk mode is not the default behavior.

This distinction is important in data center operations because misidentifying an access port as a trunk can lead to dropped traffic, VLAN mismatch, or unexpected flooding behavior.

Verification sources from Juniper documentation

https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/bridging-and-vlans.html

https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/task/interfaces-configuring-ethernet-switching-access.html

An IP fabric underlay is the routed foundation of a modern leaf-spine data center. Its purpose is to provide scalable, deterministic Layer 3 reachability between all fabric nodes, typically using point-to-point routed links between leaves and spines. In this design, EBGP is commonly used as an underlay routing protocol because it scales well, supports clear policy boundaries, and enables fast convergence and operational simplicity. Each leaf forms EBGP sessions to each spine, advertising loopback addresses and link subnets so that overlay endpoints and control plane services can reach one another reliably.

RSTP is a Layer 2 spanning tree mechanism and is not the standard protocol for a routed underlay. EVPN is an overlay control plane used to distribute tenant reachability and multihoming information; it is not the underlay routing protocol itself. VXLAN is a data plane encapsulation used by the overlay to transport Layer 2 segments across a Layer 3 fabric; it also is not the underlay routing protocol.

In Juniper data center architectures, the underlay is intentionally kept simple and purely routed, while overlays such as EVPN VXLAN deliver multi-tenant Layer 2 and Layer 3 services on top of that underlay. EBGP fits the underlay requirement among the provided options.

The configuration is applied under the routing-options hierarchy and specifically under graceful-restart with the statement disable. In Junos, routing-options graceful-restart is the global control point used to enable or manage graceful restart behavior at the system routing level. When graceful restart is enabled, the router can continue forwarding and temporarily suppress certain routing protocol update behavior during a routing process restart or control-plane event, allowing the network to avoid unnecessary reconvergence and route churn.

Placing disable under routing-options graceful-restart turns off graceful restart globally. This means the device will not attempt to use graceful restart mechanisms for routing protocols at the global level. Protocol-specific graceful restart configuration exists under each routing protocol hierarchy, but the exhibit shows the global routing-options location, which impacts overall graceful restart behavior for the routing subsystem.

Option A is incorrect because disabling BGP graceful restart only would be done under the BGP protocol hierarchy, not routing-options. Option C is incorrect because graceful restart is a routing protocol restart behavior, not something applied only to static routes. Option D is also incorrect because the setting is not scoped to specific route statements under routing-options; it disables the graceful restart feature itself, not individual routes.

In data center environments, globally disabling graceful restart may be chosen when an operator prefers deterministic, immediate reconvergence behavior or when interoperability testing indicates graceful restart helper or restart behavior is undesired with specific peers.