McAfee-Secured Website

Exam Code: JN0-664

Exam Name: Service Provider Routing and Switching, Professional (JNCIP-SP)

Certification Provider: Juniper

Corresponding Certification: JNCIP-SP

100% Juniper JN0-664 Guaranteed Success With Testking Training Materials

Get Real JN0-664 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

96 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Professional (JNCIP-SP) Exam", also known as JN0-664 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-664 Exam Engine. Your JN0-664 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-664 Practice Test 28

Question 270

An edge router imports thousands of overlapping customer prefixes. Observed: The routing table grows beyond contracted limits after a misconfiguration. Which acceptance observation best confirms that the proposed change worked?

  1. Excess announcements trigger the intended safety action before resource exhaustion.
  2. Session reaches Established with no continuing TCP authentication errors.
  3. Unauthorized leaked prefixes are rejected while legitimate transit announcements remain.
  4. Primary path wins normally and backup activates on controlled failure.

Explanation

Correct Answer

A:

This acceptance criterion tests the actual fault. The source evidence was The routing table grows beyond contracted limits after a misconfiguration. The correction addresses bgp prefix-limit protection was not configured for this customer session; success requires excess announcements trigger the intended safety action before resource exhaustion.

Incorrect Answers

B:

This result is useful in another case with evidence Logs record authentication failures immediately after a key rotation. It does not test recovery from the routing table grows beyond contracted limits after a misconfiguration. Check instead whether excess announcements trigger the intended safety action before resource exhaustion.

C:

It confirms an unrelated service correction: Import policy lacks authorized prefix and route-origin controls. The present case reports The routing table grows beyond contracted limits after a misconfiguration. Its completion test is Excess announcements trigger the intended safety action before resource exhaustion.

D:

That observation would verify a separate fault involving import policy assigns the backup a higher preference or local preference. Its symptom is Backup path is preferred when an origin prefix first appears. For this case the actual issue is bgp prefix-limit protection was not configured for this customer session, and the relevant success signal is Excess announcements trigger the intended safety action before resource exhaustion.

Question 271

An edge router imports thousands of overlapping customer prefixes. Observed: The routing table grows beyond contracted limits after a misconfiguration. What is the most likely source of the observed routing or service failure?

  1. Import policy lacks authorized prefix and route-origin controls.
  2. TCP MD5 authentication keys differ between the two BGP endpoints.
  3. Import policy assigns the backup a higher preference or local preference.
  4. BGP prefix-limit protection was not configured for this customer session.

Explanation

Correct Answer

D:

This explanation is the closest match to the observed symptom: The routing table grows beyond contracted limits after a misconfiguration. The specified root issue is BGP prefix-limit protection was not configured for this customer session. Repair it through apply an agreed maximum-prefix threshold and protect recovery behavior, then check excess announcements trigger the intended safety action before resource exhaustion.

Incorrect Answers

A:

Import policy lacks authorized prefix and route-origin controls. would normally be accompanied by thousands of leaked more-specific prefixes are accepted without validation. The observed symptom is different: The routing table grows beyond contracted limits after a misconfiguration. The likely cause is BGP prefix-limit protection was not configured for this customer session.

B:

That explanation fits another condition: Logs record authentication failures immediately after a key rotation. The evidence here is The routing table grows beyond contracted limits after a misconfiguration. Its closer root cause is BGP prefix-limit protection was not configured for this customer session.

C:

The stated cause is possible elsewhere but explains backup path is preferred when an origin prefix first appears, not the routing table grows beyond contracted limits after a misconfiguration. This incident is better attributed to bgp prefix-limit protection was not configured for this customer session.

Question 272

An edge router imports thousands of overlapping customer prefixes. Observed: The routing table grows beyond contracted limits after a misconfiguration. What operational check best guards against this problem returning?

  1. For each approved related change, verify that unauthorized leaked prefixes are rejected while legitimate transit announcements remain. Flag recurrence if thousands of leaked more-specific prefixes are accepted without validation.
  2. For each approved related change, verify that primary path wins normally and backup activates on controlled failure. Flag recurrence if backup path is preferred when an origin prefix first appears.
  3. For each approved related change, verify that session reaches Established with no continuing TCP authentication errors. Flag recurrence if logs record authentication failures immediately after a key rotation.
  4. For each approved related change, verify that excess announcements trigger the intended safety action before resource exhaustion. Flag recurrence if the routing table grows beyond contracted limits after a misconfiguration.

Explanation

Correct Answer

D:

This control asks for the same recovery evidence (Excess announcements trigger the intended safety action before resource exhaustion) and flags recurrence of the same failure (The routing table grows beyond contracted limits after a misconfiguration). It targets the underlying issue, bgp prefix-limit protection was not configured for this customer session, rather than a different service problem. The exact cadence must be agreed with operations.

Incorrect Answers

A:

This gate monitors a different failure, thousands of leaked more-specific prefixes are accepted without validation. It would not detect the current problem: The routing table grows beyond contracted limits after a misconfiguration. The appropriate check requires excess announcements trigger the intended safety action before resource exhaustion.

B:

The proposed control is tied to import policy assigns the backup a higher preference or local preference, typically observed when backup path is preferred when an origin prefix first appears. Here the target is bgp prefix-limit protection was not configured for this customer session; monitor excess announcements trigger the intended safety action before resource exhaustion.

C:

It is valid for another service scenario but checks logs record authentication failures immediately after a key rotation. This case instead needs a gate for the routing table grows beyond contracted limits after a misconfiguration and evidence that excess announcements trigger the intended safety action before resource exhaustion.

Question 273

A full-route Internet edge loses connectivity during a route leak. Observed: Thousands of leaked more-specific prefixes are accepted without validation. Which targeted remediation is most appropriate for the observed condition?

  1. Implement scoped prefix filters and approved validation mechanisms for the peering.
  2. Set a reachable eBGP next hop under the permitted export policy.
  3. Investigate CPU pressure and tune supported session resilience after addressing root load.
  4. Set compatible source loopback and multihop reachability for the authorized design.

Explanation

Correct Answer

A:

This fix addresses the stated cause rather than an unrelated protocol. The reported symptom—Thousands of leaked more-specific prefixes are accepted without validation—is consistent with import policy lacks authorized prefix and route-origin controls. Use the specified correction, then verify: Unauthorized leaked prefixes are rejected while legitimate transit announcements remain. Preserve existing policy and tenant isolation.

Incorrect Answers

B:

The option may be useful when the route appears locally but its next-hop address fails the remote peer's reachability checks, but that is not the current evidence. Here, thousands of leaked more-specific prefixes are accepted without validation, indicating import policy lacks authorized prefix and route-origin controls. The targeted action is Implement scoped prefix filters and approved validation mechanisms for the peering.

C:

This remediates control-plane processing stalls long enough to miss bgp keepalives, normally indicated by Hold-time expiration precedes every outage while underlying link stays Up. It would leave the observed problem (Thousands of leaked more-specific prefixes are accepted without validation) unresolved. Address it with implement scoped prefix filters and approved validation mechanisms for the peering.

D:

This change belongs to a different BGP issue: The BGP session cannot form across the connected transport. That issue involves the multi-hop ebgp transport and update-source configuration are incomplete. The current symptom is Thousands of leaked more-specific prefixes are accepted without validation. It instead requires implement scoped prefix filters and approved validation mechanisms for the peering.

Question 274

A full-route Internet edge loses connectivity during a route leak. Observed: Thousands of leaked more-specific prefixes are accepted without validation. What evidence would validate recovery from this precise failure mode?

  1. The loopback peering establishes over the approved routed path.
  2. Hold timer expirations cease and the session remains Established through workload tests.
  3. Unauthorized leaked prefixes are rejected while legitimate transit announcements remain.
  4. Remote neighbor installs and forwards through the authorized next hop.

Explanation

Correct Answer

C:

The intended result is Unauthorized leaked prefixes are rejected while legitimate transit announcements remain. It specifically verifies recovery from import policy lacks authorized prefix and route-origin controls, which produced the original symptom: Thousands of leaked more-specific prefixes are accepted without validation. It is stronger evidence than a generic interface-up indicator.

Incorrect Answers

A:

It confirms an unrelated service correction: The multi-hop eBGP transport and update-source configuration are incomplete. The present case reports Thousands of leaked more-specific prefixes are accepted without validation. Its completion test is Unauthorized leaked prefixes are rejected while legitimate transit announcements remain.

B:

This result is useful in another case with evidence Hold-time expiration precedes every outage while underlying link stays Up. It does not test recovery from thousands of leaked more-specific prefixes are accepted without validation. Check instead whether unauthorized leaked prefixes are rejected while legitimate transit announcements remain.

D:

That observation would verify a separate fault involving the exported next-hop attribute is inappropriate for the external path. Its symptom is The route appears locally but its next-hop address fails the remote peer's reachability checks. For this case the actual issue is import policy lacks authorized prefix and route-origin controls, and the relevant success signal is Unauthorized leaked prefixes are rejected while legitimate transit announcements remain.

Question 275

A full-route Internet edge loses connectivity during a route leak. Observed: Thousands of leaked more-specific prefixes are accepted without validation. What underlying protocol or service configuration problem best explains the evidence?

  1. The multi-hop eBGP transport and update-source configuration are incomplete.
  2. The exported next-hop attribute is inappropriate for the external path.
  3. Import policy lacks authorized prefix and route-origin controls.
  4. Control-plane processing stalls long enough to miss BGP keepalives.

Explanation

Correct Answer

C:

Because thousands of leaked more-specific prefixes are accepted without validation, the likely cause is import policy lacks authorized prefix and route-origin controls. It is testable: Implement scoped prefix filters and approved validation mechanisms for the peering. Expected follow-up: Unauthorized leaked prefixes are rejected while legitimate transit announcements remain.

Incorrect Answers

A:

The multi-hop eBGP transport and update-source configuration are incomplete. would normally be accompanied by the bgp session cannot form across the connected transport. The observed symptom is different: Thousands of leaked more-specific prefixes are accepted without validation. The likely cause is Import policy lacks authorized prefix and route-origin controls.

B:

The stated cause is possible elsewhere but explains the route appears locally but its next-hop address fails the remote peer's reachability checks, not thousands of leaked more-specific prefixes are accepted without validation. This incident is better attributed to import policy lacks authorized prefix and route-origin controls.

D:

That explanation fits another condition: Hold-time expiration precedes every outage while underlying link stays Up. The evidence here is Thousands of leaked more-specific prefixes are accepted without validation. Its closer root cause is Import policy lacks authorized prefix and route-origin controls.

Question 276

A full-route Internet edge loses connectivity during a route leak. Observed: Thousands of leaked more-specific prefixes are accepted without validation. Which ongoing validation gate would best detect a recurrence of this problem?

  1. For each approved related change, verify that the loopback peering establishes over the approved routed path. Flag recurrence if the BGP session cannot form across the connected transport.
  2. For each approved related change, verify that hold timer expirations cease and the session remains Established through workload tests. Flag recurrence if hold-time expiration precedes every outage while underlying link stays Up.
  3. For each approved related change, verify that remote neighbor installs and forwards through the authorized next hop. Flag recurrence if the route appears locally but its next-hop address fails the remote peer's reachability checks.
  4. For each approved related change, verify that unauthorized leaked prefixes are rejected while legitimate transit announcements remain. Flag recurrence if thousands of leaked more-specific prefixes are accepted without validation.

Explanation

Correct Answer

D:

A useful regression gate tests whether unauthorized leaked prefixes are rejected while legitimate transit announcements remain and alerts when thousands of leaked more-specific prefixes are accepted without validation. This directly checks the technical weakness: Import policy lacks authorized prefix and route-origin controls. The gate is derived from the fictional incident and is not an independent Juniper engineer signoff.

Incorrect Answers

A:

This gate monitors a different failure, the bgp session cannot form across the connected transport. It would not detect the current problem: Thousands of leaked more-specific prefixes are accepted without validation. The appropriate check requires unauthorized leaked prefixes are rejected while legitimate transit announcements remain.

B:

It is valid for another service scenario but checks hold-time expiration precedes every outage while underlying link stays up. This case instead needs a gate for thousands of leaked more-specific prefixes are accepted without validation and evidence that unauthorized leaked prefixes are rejected while legitimate transit announcements remain.

C:

The proposed control is tied to the exported next-hop attribute is inappropriate for the external path, typically observed when the route appears locally but its next-hop address fails the remote peer's reachability checks. Here the target is import policy lacks authorized prefix and route-origin controls; monitor unauthorized leaked prefixes are rejected while legitimate transit announcements remain.

Question 277

An eBGP exchange has a route that the neighbor refuses to accept. Observed: The route appears locally but its next-hop address fails the remote peer's reachability checks. Which change most directly corrects the failure while respecting the existing service boundary?

  1. Design appropriate secondary route visibility or add-path where supported.
  2. Set a reachable eBGP next hop under the permitted export policy.
  3. Configure intentional reflector client groups or the necessary supplementary sessions.
  4. Configure the intended MP-BGP family between valid PE and reflector peers.

Explanation

Correct Answer

B:

The observed condition is The route appears locally but its next-hop address fails the remote peer's reachability checks. That indicates the exported next-hop attribute is inappropriate for the external path. Applying the proposed remedy directly changes that condition. A concrete completion check is: Remote neighbor installs and forwards through the authorized next hop.

Incorrect Answers

A:

This remediates the reflector has no alternate path because add-path or path-diversity strategy is absent, normally indicated by Another iBGP router receives the path but loses it when the originating client flaps. It would leave the observed problem (The route appears locally but its next-hop address fails the remote peer's reachability checks) unresolved. Address it with set a reachable eBGP next hop under the permitted export policy.

C:

The option may be useful when some nonclient speakers still cannot learn routes from other nonclients, but that is not the current evidence. Here, the route appears locally but its next-hop address fails the remote peer's reachability checks, indicating the exported next-hop attribute is inappropriate for the external path. The targeted action is Set a reachable eBGP next hop under the permitted export policy.

D:

This change belongs to a different BGP issue: Route-monitor output shows no VPNv4 capabilities agreed. That issue involves multiprotocol capabilities are not negotiated consistently. The current symptom is The route appears locally but its next-hop address fails the remote peer's reachability checks. It instead requires set a reachable eBGP next hop under the permitted export policy.

Question 278

An eBGP exchange has a route that the neighbor refuses to accept. Observed: The route appears locally but its next-hop address fails the remote peer's reachability checks. After the correction, which result would most convincingly show that this fault is resolved?

  1. All intended iBGP speakers receive the eligible reflected NLRI.
  2. A valid alternate becomes available during controlled primary route withdrawal.
  3. Remote neighbor installs and forwards through the authorized next hop.
  4. VPNv4 prefixes and their route targets appear at authorized receivers.

Explanation

Correct Answer

C:

After set a reachable eBGP next hop under the permitted export policy, inspect whether remote neighbor installs and forwards through the authorized next hop. This closes the loop between the reported observation (The route appears locally but its next-hop address fails the remote peer's reachability checks) and the underlying issue (The exported next-hop attribute is inappropriate for the external path).

Incorrect Answers

A:

That observation would verify a separate fault involving route reflection only propagates paths according to client and nonclient advertisement rules. Its symptom is Some nonclient speakers still cannot learn routes from other nonclients. For this case the actual issue is the exported next-hop attribute is inappropriate for the external path, and the relevant success signal is Remote neighbor installs and forwards through the authorized next hop.

B:

This result is useful in another case with evidence Another iBGP router receives the path but loses it when the originating client flaps. It does not test recovery from the route appears locally but its next-hop address fails the remote peer's reachability checks. Check instead whether remote neighbor installs and forwards through the authorized next hop.

D:

It confirms an unrelated service correction: Multiprotocol capabilities are not negotiated consistently. The present case reports The route appears locally but its next-hop address fails the remote peer's reachability checks. Its completion test is Remote neighbor installs and forwards through the authorized next hop.

Question 279

An eBGP exchange has a route that the neighbor refuses to accept. Observed: The route appears locally but its next-hop address fails the remote peer's reachability checks. Which root cause is most consistent with this symptom?

  1. The exported next-hop attribute is inappropriate for the external path.
  2. Route reflection only propagates paths according to client and nonclient advertisement rules.
  3. Multiprotocol capabilities are not negotiated consistently.
  4. The reflector has no alternate path because add-path or path-diversity strategy is absent.

Explanation

Correct Answer

A:

The reported evidence—The route appears locally but its next-hop address fails the remote peer's reachability checks—supports the exported next-hop attribute is inappropriate for the external path. The appropriate intervention is to set a reachable eBGP next hop under the permitted export policy, with confirmation from remote neighbor installs and forwards through the authorized next hop. Other causes require actual device-state verification.

Incorrect Answers

B:

The stated cause is possible elsewhere but explains some nonclient speakers still cannot learn routes from other nonclients, not the route appears locally but its next-hop address fails the remote peer's reachability checks. This incident is better attributed to the exported next-hop attribute is inappropriate for the external path.

C:

Multiprotocol capabilities are not negotiated consistently. would normally be accompanied by route-monitor output shows no vpnv4 capabilities agreed. The observed symptom is different: The route appears locally but its next-hop address fails the remote peer's reachability checks. The likely cause is The exported next-hop attribute is inappropriate for the external path.

D:

That explanation fits another condition: Another iBGP router receives the path but loses it when the originating client flaps. The evidence here is The route appears locally but its next-hop address fails the remote peer's reachability checks. Its closer root cause is The exported next-hop attribute is inappropriate for the external path.

Question 280

An eBGP exchange has a route that the neighbor refuses to accept. Observed: The route appears locally but its next-hop address fails the remote peer's reachability checks. Which change-acceptance control is most relevant to preventing this exact failure?

  1. For each approved related change, verify that all intended iBGP speakers receive the eligible reflected NLRI. Flag recurrence if some nonclient speakers still cannot learn routes from other nonclients.
  2. For each approved related change, verify that remote neighbor installs and forwards through the authorized next hop. Flag recurrence if the route appears locally but its next-hop address fails the remote peer's reachability checks.
  3. For each approved related change, verify that vPNv4 prefixes and their route targets appear at authorized receivers. Flag recurrence if route-monitor output shows no VPNv4 capabilities agreed.
  4. For each approved related change, verify that a valid alternate becomes available during controlled primary route withdrawal. Flag recurrence if another iBGP router receives the path but loses it when the originating client flaps.

Explanation

Correct Answer

B:

The control is specific to the initial failure. It requires the result Remote neighbor installs and forwards through the authorized next hop. and treats The route appears locally but its next-hop address fails the remote peer's reachability checks. as a failure signal. The causal concern is the exported next-hop attribute is inappropriate for the external path.

Incorrect Answers

A:

The proposed control is tied to route reflection only propagates paths according to client and nonclient advertisement rules, typically observed when some nonclient speakers still cannot learn routes from other nonclients. Here the target is the exported next-hop attribute is inappropriate for the external path; monitor remote neighbor installs and forwards through the authorized next hop.

C:

This gate monitors a different failure, route-monitor output shows no vpnv4 capabilities agreed. It would not detect the current problem: The route appears locally but its next-hop address fails the remote peer's reachability checks. The appropriate check requires remote neighbor installs and forwards through the authorized next hop.

D:

It is valid for another service scenario but checks another ibgp router receives the path but loses it when the originating client flaps. This case instead needs a gate for the route appears locally but its next-hop address fails the remote peer's reachability checks and evidence that remote neighbor installs and forwards through the authorized next hop.

Service Provider Routing and Switching, Professional (JNCIP-SP) (JN0-664) Practice Tests