McAfee-Secured Website

Exam Code: JN0-664

Exam Name: Service Provider Routing and Switching, Professional (JNCIP-SP)

Certification Provider: Juniper

Corresponding Certification: JNCIP-SP

100% Juniper JN0-664 Guaranteed Success With Testking Training Materials

Get Real JN0-664 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

96 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Professional (JNCIP-SP) Exam", also known as JN0-664 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-664 Exam Engine. Your JN0-664 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-664 Practice Test 27

Question 260

A BGP import filter includes a regular expression for customer AS paths. Observed: The filter matches unrelated longer AS-path sequences and rejects legitimate traffic. What operational check best guards against this problem returning?

  1. For each approved related change, verify that iPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable. Flag recurrence if the IPv4 BGP session is Established but IPv6 route exchange never starts.
  2. For each approved related change, verify that only the intended AS-path patterns trigger the route filter. Flag recurrence if the filter matches unrelated longer AS-path sequences and rejects legitimate traffic.
  3. For each approved related change, verify that an authorized loop-free path is accepted and no repeated AS numbers cause rejection. Flag recurrence if the next router drops it because its own AS is present in the path.
  4. For each approved related change, verify that mED differs only on targeted routes and unrelated announcements remain unchanged. Flag recurrence if policy unexpectedly modifies MED for every customer route.

Explanation

Correct Answer

B:

This control asks for the same recovery evidence (Only the intended AS-path patterns trigger the route filter) and flags recurrence of the same failure (The filter matches unrelated longer AS-path sequences and rejects legitimate traffic). It targets the underlying issue, the regex was not anchored to the intended as path boundaries, rather than a different service problem. The exact cadence must be agreed with operations.

Incorrect Answers

A:

This gate monitors a different failure, the ipv4 bgp session is established but ipv6 route exchange never starts. It would not detect the current problem: The filter matches unrelated longer AS-path sequences and rejects legitimate traffic. The appropriate check requires only the intended AS-path patterns trigger the route filter.

C:

The proposed control is tied to as-loop prevention correctly rejects a path containing the local autonomous system, typically observed when the next router drops it because its own AS is present in the path. Here the target is the regex was not anchored to the intended as path boundaries; monitor only the intended AS-path patterns trigger the route filter.

D:

It is valid for another service scenario but checks policy unexpectedly modifies med for every customer route. This case instead needs a gate for the filter matches unrelated longer as-path sequences and rejects legitimate traffic and evidence that only the intended AS-path patterns trigger the route filter.

Question 261

A provider carries IPv6 unicast through MP-BGP sessions. Observed: The IPv4 BGP session is Established but IPv6 route exchange never starts. Which targeted remediation is most appropriate for the observed condition?

  1. Enable the intended multiprotocol IPv6 unicast family on both neighbors.
  2. Enable compatible BGP labeled-unicast advertisement and the required label resolution.
  3. Require authenticated allowed-prefix and specificity checks before community-triggered discard.
  4. Explicitly permit only authorized customer announcements and reject internal infrastructure routes.

Explanation

Correct Answer

A:

This fix addresses the stated cause rather than an unrelated protocol. The reported symptom—The IPv4 BGP session is Established but IPv6 route exchange never starts—is consistent with ipv6 address-family activation is missing for that neighbor. Use the specified correction, then verify: IPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable. Preserve existing policy and tenant isolation.

Incorrect Answers

B:

The option may be useful when routes arrive without usable labels in the intended labeled address family, but that is not the current evidence. Here, the IPv4 BGP session is Established but IPv6 route exchange never starts, indicating ipv6 address-family activation is missing for that neighbor. The targeted action is Enable the intended multiprotocol IPv6 unicast family on both neighbors.

C:

This change belongs to a different BGP issue: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. That issue involves the policy does not verify source authorization or maximum route specificity. The current symptom is The IPv4 BGP session is Established but IPv6 route exchange never starts. It instead requires enable the intended multiprotocol IPv6 unicast family on both neighbors.

D:

This remediates bgp export policy is too broad for the neighbor's contractual prefix set, normally indicated by The transit edge begins advertising an infrastructure loopback to an external customer. It would leave the observed problem (The IPv4 BGP session is Established but IPv6 route exchange never starts) unresolved. Address it with enable the intended multiprotocol IPv6 unicast family on both neighbors.

Question 262

A provider carries IPv6 unicast through MP-BGP sessions. Observed: The IPv4 BGP session is Established but IPv6 route exchange never starts. What evidence would validate recovery from this precise failure mode?

  1. Routes carry valid labels and forwarding resolves through the expected labeled path.
  2. Only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.
  3. IPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.
  4. Remote customer sees its contracted prefixes without provider loopbacks.

Explanation

Correct Answer

C:

The intended result is IPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable. It specifically verifies recovery from ipv6 address-family activation is missing for that neighbor, which produced the original symptom: The IPv4 BGP session is Established but IPv6 route exchange never starts. It is stronger evidence than a generic interface-up indicator.

Incorrect Answers

A:

That observation would verify a separate fault involving neighbor family negotiation or labeled-unicast export policy is incomplete. Its symptom is Routes arrive without usable labels in the intended labeled address family. For this case the actual issue is ipv6 address-family activation is missing for that neighbor, and the relevant success signal is IPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.

B:

It confirms an unrelated service correction: The policy does not verify source authorization or maximum route specificity. The present case reports The IPv4 BGP session is Established but IPv6 route exchange never starts. Its completion test is IPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.

D:

This result is useful in another case with evidence The transit edge begins advertising an infrastructure loopback to an external customer. It does not test recovery from the ipv4 bgp session is established but ipv6 route exchange never starts. Check instead whether iPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.

Question 263

A provider carries IPv6 unicast through MP-BGP sessions. Observed: The IPv4 BGP session is Established but IPv6 route exchange never starts. What underlying protocol or service configuration problem best explains the evidence?

  1. Neighbor family negotiation or labeled-unicast export policy is incomplete.
  2. The policy does not verify source authorization or maximum route specificity.
  3. BGP export policy is too broad for the neighbor's contractual prefix set.
  4. IPv6 address-family activation is missing for that neighbor.

Explanation

Correct Answer

D:

Because the IPv4 BGP session is Established but IPv6 route exchange never starts, the likely cause is ipv6 address-family activation is missing for that neighbor. It is testable: Enable the intended multiprotocol IPv6 unicast family on both neighbors. Expected follow-up: IPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.

Incorrect Answers

A:

The stated cause is possible elsewhere but explains routes arrive without usable labels in the intended labeled address family, not the ipv4 bgp session is established but ipv6 route exchange never starts. This incident is better attributed to ipv6 address-family activation is missing for that neighbor.

B:

The policy does not verify source authorization or maximum route specificity. would normally be accompanied by the provider edge accepts a blackhole community with a customer-controlled unbounded prefix. The observed symptom is different: The IPv4 BGP session is Established but IPv6 route exchange never starts. The likely cause is IPv6 address-family activation is missing for that neighbor.

C:

That explanation fits another condition: The transit edge begins advertising an infrastructure loopback to an external customer. The evidence here is The IPv4 BGP session is Established but IPv6 route exchange never starts. Its closer root cause is IPv6 address-family activation is missing for that neighbor.

Question 264

A provider carries IPv6 unicast through MP-BGP sessions. Observed: The IPv4 BGP session is Established but IPv6 route exchange never starts. Which ongoing validation gate would best detect a recurrence of this problem?

  1. For each approved related change, verify that remote customer sees its contracted prefixes without provider loopbacks. Flag recurrence if the transit edge begins advertising an infrastructure loopback to an external customer.
  2. For each approved related change, verify that routes carry valid labels and forwarding resolves through the expected labeled path. Flag recurrence if routes arrive without usable labels in the intended labeled address family.
  3. For each approved related change, verify that iPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable. Flag recurrence if the IPv4 BGP session is Established but IPv6 route exchange never starts.
  4. For each approved related change, verify that only allowed attack destinations are suppressed and legitimate prefixes remain forwarding. Flag recurrence if the provider edge accepts a blackhole community with a customer-controlled unbounded prefix.

Explanation

Correct Answer

C:

A useful regression gate tests whether iPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable and alerts when the IPv4 BGP session is Established but IPv6 route exchange never starts. This directly checks the technical weakness: IPv6 address-family activation is missing for that neighbor. The gate is derived from the fictional incident and is not an independent Juniper engineer signoff.

Incorrect Answers

A:

It is valid for another service scenario but checks the transit edge begins advertising an infrastructure loopback to an external customer. This case instead needs a gate for the ipv4 bgp session is established but ipv6 route exchange never starts and evidence that iPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.

B:

The proposed control is tied to neighbor family negotiation or labeled-unicast export policy is incomplete, typically observed when routes arrive without usable labels in the intended labeled address family. Here the target is ipv6 address-family activation is missing for that neighbor; monitor iPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.

D:

This gate monitors a different failure, the provider edge accepts a blackhole community with a customer-controlled unbounded prefix. It would not detect the current problem: The IPv4 BGP session is Established but IPv6 route exchange never starts. The appropriate check requires iPv6 NLRI appears with reachable IPv6 next hops while IPv4 remains stable.

Question 265

A service provider receives BGP labeled-unicast prefixes for a transit service. Observed: Routes arrive without usable labels in the intended labeled address family. Which change most directly corrects the failure while respecting the existing service boundary?

  1. Apply an agreed maximum-prefix threshold and protect recovery behavior.
  2. Enable compatible BGP labeled-unicast advertisement and the required label resolution.
  3. Reinstate the agreed route family and prefix export policy with validation.
  4. Align neighbor addresses and peer AS configuration with the authorized session design.

Explanation

Correct Answer

B:

The observed condition is Routes arrive without usable labels in the intended labeled address family. That indicates neighbor family negotiation or labeled-unicast export policy is incomplete. Applying the proposed remedy directly changes that condition. A concrete completion check is: Routes carry valid labels and forwarding resolves through the expected labeled path.

Incorrect Answers

A:

This remediates bgp prefix-limit protection was not configured for this customer session, normally indicated by The routing table grows beyond contracted limits after a misconfiguration. It would leave the observed problem (Routes arrive without usable labels in the intended labeled address family) unresolved. Address it with enable compatible BGP labeled-unicast advertisement and the required label resolution.

C:

This change belongs to a different BGP issue: Specific destination prefixes disappear from the customer route table. That issue involves a peer export policy was accidentally changed to advertise default only. The current symptom is Routes arrive without usable labels in the intended labeled address family. It instead requires enable compatible BGP labeled-unicast advertisement and the required label resolution.

D:

The option may be useful when bGP remains Idle even though next-hop IPs respond to ping, but that is not the current evidence. Here, routes arrive without usable labels in the intended labeled address family, indicating neighbor family negotiation or labeled-unicast export policy is incomplete. The targeted action is Enable compatible BGP labeled-unicast advertisement and the required label resolution.

Question 266

A service provider receives BGP labeled-unicast prefixes for a transit service. Observed: Routes arrive without usable labels in the intended labeled address family. After the correction, which result would most convincingly show that this fault is resolved?

  1. Excess announcements trigger the intended safety action before resource exhaustion.
  2. The customer receives exactly the contracted specific prefixes and default behavior.
  3. The intended external BGP session establishes and the agreed routes appear.
  4. Routes carry valid labels and forwarding resolves through the expected labeled path.

Explanation

Correct Answer

D:

After enable compatible BGP labeled-unicast advertisement and the required label resolution, inspect whether routes carry valid labels and forwarding resolves through the expected labeled path. This closes the loop between the reported observation (Routes arrive without usable labels in the intended labeled address family) and the underlying issue (Neighbor family negotiation or labeled-unicast export policy is incomplete).

Incorrect Answers

A:

This result is useful in another case with evidence The routing table grows beyond contracted limits after a misconfiguration. It does not test recovery from routes arrive without usable labels in the intended labeled address family. Check instead whether routes carry valid labels and forwarding resolves through the expected labeled path.

B:

It confirms an unrelated service correction: A peer export policy was accidentally changed to advertise default only. The present case reports Routes arrive without usable labels in the intended labeled address family. Its completion test is Routes carry valid labels and forwarding resolves through the expected labeled path.

C:

That observation would verify a separate fault involving the remote neighbor ip or expected autonomous-system setting does not match the peering contract. Its symptom is BGP remains Idle even though next-hop IPs respond to ping. For this case the actual issue is neighbor family negotiation or labeled-unicast export policy is incomplete, and the relevant success signal is Routes carry valid labels and forwarding resolves through the expected labeled path.

Question 267

A service provider receives BGP labeled-unicast prefixes for a transit service. Observed: Routes arrive without usable labels in the intended labeled address family. Which root cause is most consistent with this symptom?

  1. BGP prefix-limit protection was not configured for this customer session.
  2. A peer export policy was accidentally changed to advertise default only.
  3. Neighbor family negotiation or labeled-unicast export policy is incomplete.
  4. The remote neighbor IP or expected autonomous-system setting does not match the peering contract.

Explanation

Correct Answer

C:

The reported evidence—Routes arrive without usable labels in the intended labeled address family—supports neighbor family negotiation or labeled-unicast export policy is incomplete. The appropriate intervention is to enable compatible BGP labeled-unicast advertisement and the required label resolution, with confirmation from routes carry valid labels and forwarding resolves through the expected labeled path. Other causes require actual device-state verification.

Incorrect Answers

A:

That explanation fits another condition: The routing table grows beyond contracted limits after a misconfiguration. The evidence here is Routes arrive without usable labels in the intended labeled address family. Its closer root cause is Neighbor family negotiation or labeled-unicast export policy is incomplete.

B:

A peer export policy was accidentally changed to advertise default only. would normally be accompanied by specific destination prefixes disappear from the customer route table. The observed symptom is different: Routes arrive without usable labels in the intended labeled address family. The likely cause is Neighbor family negotiation or labeled-unicast export policy is incomplete.

D:

The stated cause is possible elsewhere but explains bgp remains idle even though next-hop ips respond to ping, not routes arrive without usable labels in the intended labeled address family. This incident is better attributed to neighbor family negotiation or labeled-unicast export policy is incomplete.

Question 268

A service provider receives BGP labeled-unicast prefixes for a transit service. Observed: Routes arrive without usable labels in the intended labeled address family. Which change-acceptance control is most relevant to preventing this exact failure?

  1. For each approved related change, verify that excess announcements trigger the intended safety action before resource exhaustion. Flag recurrence if the routing table grows beyond contracted limits after a misconfiguration.
  2. For each approved related change, verify that the customer receives exactly the contracted specific prefixes and default behavior. Flag recurrence if specific destination prefixes disappear from the customer route table.
  3. For each approved related change, verify that the intended external BGP session establishes and the agreed routes appear. Flag recurrence if bGP remains Idle even though next-hop IPs respond to ping.
  4. For each approved related change, verify that routes carry valid labels and forwarding resolves through the expected labeled path. Flag recurrence if routes arrive without usable labels in the intended labeled address family.

Explanation

Correct Answer

D:

The control is specific to the initial failure. It requires the result Routes carry valid labels and forwarding resolves through the expected labeled path. and treats Routes arrive without usable labels in the intended labeled address family. as a failure signal. The causal concern is neighbor family negotiation or labeled-unicast export policy is incomplete.

Incorrect Answers

A:

It is valid for another service scenario but checks the routing table grows beyond contracted limits after a misconfiguration. This case instead needs a gate for routes arrive without usable labels in the intended labeled address family and evidence that routes carry valid labels and forwarding resolves through the expected labeled path.

B:

This gate monitors a different failure, specific destination prefixes disappear from the customer route table. It would not detect the current problem: Routes arrive without usable labels in the intended labeled address family. The appropriate check requires routes carry valid labels and forwarding resolves through the expected labeled path.

C:

The proposed control is tied to the remote neighbor ip or expected autonomous-system setting does not match the peering contract, typically observed when bGP remains Idle even though next-hop IPs respond to ping. Here the target is neighbor family negotiation or labeled-unicast export policy is incomplete; monitor routes carry valid labels and forwarding resolves through the expected labeled path.

Question 269

An edge router imports thousands of overlapping customer prefixes. Observed: The routing table grows beyond contracted limits after a misconfiguration. What should the routing engineer change first to address this particular symptom?

  1. Lower backup desirability via a consistent local policy and test withdrawal.
  2. Coordinate a matched BGP authentication key change on both peers.
  3. Implement scoped prefix filters and approved validation mechanisms for the peering.
  4. Apply an agreed maximum-prefix threshold and protect recovery behavior.

Explanation

Correct Answer

D:

The decisive evidence is that The routing table grows beyond contracted limits after a misconfiguration. This follows from bgp prefix-limit protection was not configured for this customer session. The focused remedy is to apply an agreed maximum-prefix threshold and protect recovery behavior. Confirm improvement when excess announcements trigger the intended safety action before resource exhaustion. Validate on an approved lab or change window before touching production.

Incorrect Answers

A:

The option may be useful when backup path is preferred when an origin prefix first appears, but that is not the current evidence. Here, the routing table grows beyond contracted limits after a misconfiguration, indicating bgp prefix-limit protection was not configured for this customer session. The targeted action is Apply an agreed maximum-prefix threshold and protect recovery behavior.

B:

This remediates tcp md5 authentication keys differ between the two bgp endpoints, normally indicated by Logs record authentication failures immediately after a key rotation. It would leave the observed problem (The routing table grows beyond contracted limits after a misconfiguration) unresolved. Address it with apply an agreed maximum-prefix threshold and protect recovery behavior.

C:

This change belongs to a different BGP issue: Thousands of leaked more-specific prefixes are accepted without validation. That issue involves import policy lacks authorized prefix and route-origin controls. The current symptom is The routing table grows beyond contracted limits after a misconfiguration. It instead requires apply an agreed maximum-prefix threshold and protect recovery behavior.

Question 270

An edge router imports thousands of overlapping customer prefixes. Observed: The routing table grows beyond contracted limits after a misconfiguration. Which acceptance observation best confirms that the proposed change worked?

  1. Excess announcements trigger the intended safety action before resource exhaustion.
  2. Session reaches Established with no continuing TCP authentication errors.
  3. Unauthorized leaked prefixes are rejected while legitimate transit announcements remain.
  4. Primary path wins normally and backup activates on controlled failure.

Explanation

Correct Answer

A:

This acceptance criterion tests the actual fault. The source evidence was The routing table grows beyond contracted limits after a misconfiguration. The correction addresses bgp prefix-limit protection was not configured for this customer session; success requires excess announcements trigger the intended safety action before resource exhaustion.

Incorrect Answers

B:

This result is useful in another case with evidence Logs record authentication failures immediately after a key rotation. It does not test recovery from the routing table grows beyond contracted limits after a misconfiguration. Check instead whether excess announcements trigger the intended safety action before resource exhaustion.

C:

It confirms an unrelated service correction: Import policy lacks authorized prefix and route-origin controls. The present case reports The routing table grows beyond contracted limits after a misconfiguration. Its completion test is Excess announcements trigger the intended safety action before resource exhaustion.

D:

That observation would verify a separate fault involving import policy assigns the backup a higher preference or local preference. Its symptom is Backup path is preferred when an origin prefix first appears. For this case the actual issue is bgp prefix-limit protection was not configured for this customer session, and the relevant success signal is Excess announcements trigger the intended safety action before resource exhaustion.

Service Provider Routing and Switching, Professional (JNCIP-SP) (JN0-664) Practice Tests