McAfee-Secured Website

Exam Code: JN0-664

Exam Name: Service Provider Routing and Switching, Professional (JNCIP-SP)

Certification Provider: Juniper

Corresponding Certification: JNCIP-SP

100% Juniper JN0-664 Guaranteed Success With Testking Training Materials

Get Real JN0-664 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

96 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Professional (JNCIP-SP) Exam", also known as JN0-664 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-664 Exam Engine. Your JN0-664 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-664 Practice Test 37

Question 360

A provider installs ECMP over two internal iBGP peers. Observed: Equal NLRI from different originators causes inconsistent distribution. Which ongoing validation gate would best detect a recurrence of this problem?

  1. For each approved related change, verify that the session's TCP endpoint addresses match the planned loopback addresses. Flag recurrence if one router silently sources TCP from a physical interface instead of its loopback.
  2. For each approved related change, verify that mED differs only on targeted routes and unrelated announcements remain unchanged. Flag recurrence if policy unexpectedly modifies MED for every customer route.
  3. For each approved related change, verify that the upstream confirms the intended tagged route receives the agreed action. Flag recurrence if the upstream does not apply the agreed blackhole policy.
  4. For each approved related change, verify that both permitted paths become active only when their attributes qualify. Flag recurrence if equal NLRI from different originators causes inconsistent distribution.

Explanation

Correct Answer

D:

A useful regression gate tests whether both permitted paths become active only when their attributes qualify and alerts when equal NLRI from different originators causes inconsistent distribution. This directly checks the technical weakness: Required BGP multipath attributes are not sufficiently equivalent for multipath. The gate is derived from the fictional incident and is not an independent Juniper engineer signoff.

Incorrect Answers

A:

This gate monitors a different failure, one router silently sources tcp from a physical interface instead of its loopback. It would not detect the current problem: Equal NLRI from different originators causes inconsistent distribution. The appropriate check requires both permitted paths become active only when their attributes qualify.

B:

The proposed control is tied to a broad routing-policy term matches routes outside its intended customer prefix list, typically observed when policy unexpectedly modifies MED for every customer route. Here the target is required bgp multipath attributes are not sufficiently equivalent for multipath; monitor both permitted paths become active only when their attributes qualify.

C:

It is valid for another service scenario but checks the upstream does not apply the agreed blackhole policy. This case instead needs a gate for equal nlri from different originators causes inconsistent distribution and evidence that both permitted paths become active only when their attributes qualify.

Question 361

An edge router receives IPv4 route changes from a route server. Observed: Policy unexpectedly modifies MED for every customer route. Which change most directly corrects the failure while respecting the existing service boundary?

  1. Evaluate Junos BGP attributes and policy ordering rather than importing another vendor's model.
  2. Require authenticated allowed-prefix and specificity checks before community-triggered discard.
  3. Use supported large-community attributes and matching import/export policy.
  4. Restrict the MED mutation term to the agreed prefixes and peer communities.

Explanation

Correct Answer

D:

The observed condition is Policy unexpectedly modifies MED for every customer route. That indicates a broad routing-policy term matches routes outside its intended customer prefix list. Applying the proposed remedy directly changes that condition. A concrete completion check is: MED differs only on targeted routes and unrelated announcements remain unchanged.

Incorrect Answers

A:

The option may be useful when an operator assumes weight should decide the path on a Junos router, but that is not the current evidence. Here, policy unexpectedly modifies MED for every customer route, indicating a broad routing-policy term matches routes outside its intended customer prefix list. The targeted action is Restrict the MED mutation term to the agreed prefixes and peer communities.

B:

This remediates the policy does not verify source authorization or maximum route specificity, normally indicated by The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. It would leave the observed problem (Policy unexpectedly modifies MED for every customer route) unresolved. Address it with restrict the MED mutation term to the agreed prefixes and peer communities.

C:

This change belongs to a different BGP issue: A 32-bit community representation cannot encode the required triple of values. That issue involves standard communities do not provide the three-field large-community semantics. The current symptom is Policy unexpectedly modifies MED for every customer route. It instead requires restrict the MED mutation term to the agreed prefixes and peer communities.

Question 362

An edge router receives IPv4 route changes from a route server. Observed: Policy unexpectedly modifies MED for every customer route. After the correction, which result would most convincingly show that this fault is resolved?

  1. The receiver sees the complete three-part community and classifies it correctly.
  2. The selected best path matches valid Junos preference and BGP decision rules.
  3. MED differs only on targeted routes and unrelated announcements remain unchanged.
  4. Only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

Explanation

Correct Answer

C:

After restrict the MED mutation term to the agreed prefixes and peer communities, inspect whether mED differs only on targeted routes and unrelated announcements remain unchanged. This closes the loop between the reported observation (Policy unexpectedly modifies MED for every customer route) and the underlying issue (A broad routing-policy term matches routes outside its intended customer prefix list).

Incorrect Answers

A:

It confirms an unrelated service correction: Standard communities do not provide the three-field large-community semantics. The present case reports Policy unexpectedly modifies MED for every customer route. Its completion test is MED differs only on targeted routes and unrelated announcements remain unchanged.

B:

That observation would verify a separate fault involving vendor-specific nonportable bgp weight behavior was conflated with junos route preference. Its symptom is An operator assumes weight should decide the path on a Junos router. For this case the actual issue is a broad routing-policy term matches routes outside its intended customer prefix list, and the relevant success signal is MED differs only on targeted routes and unrelated announcements remain unchanged.

D:

This result is useful in another case with evidence The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. It does not test recovery from policy unexpectedly modifies med for every customer route. Check instead whether mED differs only on targeted routes and unrelated announcements remain unchanged.

Question 363

An edge router receives IPv4 route changes from a route server. Observed: Policy unexpectedly modifies MED for every customer route. Which root cause is most consistent with this symptom?

  1. A broad routing-policy term matches routes outside its intended customer prefix list.
  2. Vendor-specific nonportable BGP weight behavior was conflated with Junos route preference.
  3. Standard communities do not provide the three-field large-community semantics.
  4. The policy does not verify source authorization or maximum route specificity.

Explanation

Correct Answer

A:

The reported evidence—Policy unexpectedly modifies MED for every customer route—supports a broad routing-policy term matches routes outside its intended customer prefix list. The appropriate intervention is to restrict the MED mutation term to the agreed prefixes and peer communities, with confirmation from mED differs only on targeted routes and unrelated announcements remain unchanged. Other causes require actual device-state verification.

Incorrect Answers

B:

The stated cause is possible elsewhere but explains an operator assumes weight should decide the path on a junos router, not policy unexpectedly modifies med for every customer route. This incident is better attributed to a broad routing-policy term matches routes outside its intended customer prefix list.

C:

Standard communities do not provide the three-field large-community semantics. would normally be accompanied by a 32-bit community representation cannot encode the required triple of values. The observed symptom is different: Policy unexpectedly modifies MED for every customer route. The likely cause is A broad routing-policy term matches routes outside its intended customer prefix list.

D:

That explanation fits another condition: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. The evidence here is Policy unexpectedly modifies MED for every customer route. Its closer root cause is A broad routing-policy term matches routes outside its intended customer prefix list.

Question 364

An edge router receives IPv4 route changes from a route server. Observed: Policy unexpectedly modifies MED for every customer route. Which change-acceptance control is most relevant to preventing this exact failure?

  1. For each approved related change, verify that only allowed attack destinations are suppressed and legitimate prefixes remain forwarding. Flag recurrence if the provider edge accepts a blackhole community with a customer-controlled unbounded prefix.
  2. For each approved related change, verify that the receiver sees the complete three-part community and classifies it correctly. Flag recurrence if a 32-bit community representation cannot encode the required triple of values.
  3. For each approved related change, verify that the selected best path matches valid Junos preference and BGP decision rules. Flag recurrence if an operator assumes weight should decide the path on a Junos router.
  4. For each approved related change, verify that mED differs only on targeted routes and unrelated announcements remain unchanged. Flag recurrence if policy unexpectedly modifies MED for every customer route.

Explanation

Correct Answer

D:

The control is specific to the initial failure. It requires the result MED differs only on targeted routes and unrelated announcements remain unchanged. and treats Policy unexpectedly modifies MED for every customer route. as a failure signal. The causal concern is a broad routing-policy term matches routes outside its intended customer prefix list.

Incorrect Answers

A:

It is valid for another service scenario but checks the provider edge accepts a blackhole community with a customer-controlled unbounded prefix. This case instead needs a gate for policy unexpectedly modifies med for every customer route and evidence that mED differs only on targeted routes and unrelated announcements remain unchanged.

B:

This gate monitors a different failure, a 32-bit community representation cannot encode the required triple of values. It would not detect the current problem: Policy unexpectedly modifies MED for every customer route. The appropriate check requires mED differs only on targeted routes and unrelated announcements remain unchanged.

C:

The proposed control is tied to vendor-specific nonportable bgp weight behavior was conflated with junos route preference, typically observed when an operator assumes weight should decide the path on a Junos router. Here the target is a broad routing-policy term matches routes outside its intended customer prefix list; monitor mED differs only on targeted routes and unrelated announcements remain unchanged.

Question 365

A customer asks for a BGP blackhole route during an attack. Observed: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. What should the routing engineer change first to address this particular symptom?

  1. Remove the accidental AS-path loop or redesign the session without broad allow-as loops.
  2. Align neighbor addresses and peer AS configuration with the authorized session design.
  3. Require authenticated allowed-prefix and specificity checks before community-triggered discard.
  4. Rewrite and test the policy expression against permitted and blocked AS paths.

Explanation

Correct Answer

C:

The decisive evidence is that The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. This follows from the policy does not verify source authorization or maximum route specificity. The focused remedy is to require authenticated allowed-prefix and specificity checks before community-triggered discard. Confirm improvement when only allowed attack destinations are suppressed and legitimate prefixes remain forwarding. Validate on an approved lab or change window before touching production.

Incorrect Answers

A:

This remediates as-loop prevention correctly rejects a path containing the local autonomous system, normally indicated by The next router drops it because its own AS is present in the path. It would leave the observed problem (The provider edge accepts a blackhole community with a customer-controlled unbounded prefix) unresolved. Address it with require authenticated allowed-prefix and specificity checks before community-triggered discard.

B:

This change belongs to a different BGP issue: BGP remains Idle even though next-hop IPs respond to ping. That issue involves the remote neighbor ip or expected autonomous-system setting does not match the peering contract. The current symptom is The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. It instead requires require authenticated allowed-prefix and specificity checks before community-triggered discard.

D:

The option may be useful when the filter matches unrelated longer AS-path sequences and rejects legitimate traffic, but that is not the current evidence. Here, the provider edge accepts a blackhole community with a customer-controlled unbounded prefix, indicating the policy does not verify source authorization or maximum route specificity. The targeted action is Require authenticated allowed-prefix and specificity checks before community-triggered discard.

Question 366

A customer asks for a BGP blackhole route during an attack. Observed: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. Which acceptance observation best confirms that the proposed change worked?

  1. The intended external BGP session establishes and the agreed routes appear.
  2. An authorized loop-free path is accepted and no repeated AS numbers cause rejection.
  3. Only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.
  4. Only the intended AS-path patterns trigger the route filter.

Explanation

Correct Answer

C:

This acceptance criterion tests the actual fault. The source evidence was The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. The correction addresses the policy does not verify source authorization or maximum route specificity; success requires only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

Incorrect Answers

A:

It confirms an unrelated service correction: The remote neighbor IP or expected autonomous-system setting does not match the peering contract. The present case reports The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. Its completion test is Only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

B:

This result is useful in another case with evidence The next router drops it because its own AS is present in the path. It does not test recovery from the provider edge accepts a blackhole community with a customer-controlled unbounded prefix. Check instead whether only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

D:

That observation would verify a separate fault involving the regex was not anchored to the intended as path boundaries. Its symptom is The filter matches unrelated longer AS-path sequences and rejects legitimate traffic. For this case the actual issue is the policy does not verify source authorization or maximum route specificity, and the relevant success signal is Only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

Question 367

A customer asks for a BGP blackhole route during an attack. Observed: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. What is the most likely source of the observed routing or service failure?

  1. The regex was not anchored to the intended AS path boundaries.
  2. The policy does not verify source authorization or maximum route specificity.
  3. The remote neighbor IP or expected autonomous-system setting does not match the peering contract.
  4. AS-loop prevention correctly rejects a path containing the local autonomous system.

Explanation

Correct Answer

B:

This explanation is the closest match to the observed symptom: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. The specified root issue is The policy does not verify source authorization or maximum route specificity. Repair it through require authenticated allowed-prefix and specificity checks before community-triggered discard, then check only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

Incorrect Answers

A:

The stated cause is possible elsewhere but explains the filter matches unrelated longer as-path sequences and rejects legitimate traffic, not the provider edge accepts a blackhole community with a customer-controlled unbounded prefix. This incident is better attributed to the policy does not verify source authorization or maximum route specificity.

C:

The remote neighbor IP or expected autonomous-system setting does not match the peering contract. would normally be accompanied by bgp remains idle even though next-hop ips respond to ping. The observed symptom is different: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. The likely cause is The policy does not verify source authorization or maximum route specificity.

D:

That explanation fits another condition: The next router drops it because its own AS is present in the path. The evidence here is The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. Its closer root cause is The policy does not verify source authorization or maximum route specificity.

Question 368

A customer asks for a BGP blackhole route during an attack. Observed: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. What operational check best guards against this problem returning?

  1. For each approved related change, verify that the intended external BGP session establishes and the agreed routes appear. Flag recurrence if bGP remains Idle even though next-hop IPs respond to ping.
  2. For each approved related change, verify that only the intended AS-path patterns trigger the route filter. Flag recurrence if the filter matches unrelated longer AS-path sequences and rejects legitimate traffic.
  3. For each approved related change, verify that an authorized loop-free path is accepted and no repeated AS numbers cause rejection. Flag recurrence if the next router drops it because its own AS is present in the path.
  4. For each approved related change, verify that only allowed attack destinations are suppressed and legitimate prefixes remain forwarding. Flag recurrence if the provider edge accepts a blackhole community with a customer-controlled unbounded prefix.

Explanation

Correct Answer

D:

This control asks for the same recovery evidence (Only allowed attack destinations are suppressed and legitimate prefixes remain forwarding) and flags recurrence of the same failure (The provider edge accepts a blackhole community with a customer-controlled unbounded prefix). It targets the underlying issue, the policy does not verify source authorization or maximum route specificity, rather than a different service problem. The exact cadence must be agreed with operations.

Incorrect Answers

A:

This gate monitors a different failure, bgp remains idle even though next-hop ips respond to ping. It would not detect the current problem: The provider edge accepts a blackhole community with a customer-controlled unbounded prefix. The appropriate check requires only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

B:

The proposed control is tied to the regex was not anchored to the intended as path boundaries, typically observed when the filter matches unrelated longer AS-path sequences and rejects legitimate traffic. Here the target is the policy does not verify source authorization or maximum route specificity; monitor only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

C:

It is valid for another service scenario but checks the next router drops it because its own as is present in the path. This case instead needs a gate for the provider edge accepts a blackhole community with a customer-controlled unbounded prefix and evidence that only allowed attack destinations are suppressed and legitimate prefixes remain forwarding.

Question 369

A service PE carries enterprise voice and bulk backups on the same uplink. Observed: Voice jitter rises during backup bursts although interface errors are zero. Which targeted remediation is most appropriate for the observed condition?

  1. Map ingress forwarding class to the intended MPLS traffic-class marking consistently.
  2. Apply equivalent scoped classification filters to both intended ingress interfaces.
  3. Apply the correct DSCP classification mapping on the ingress logical interface.
  4. Classify approved voice flows into a suitable forwarding class and assign a protected scheduler.

Explanation

Correct Answer

D:

This fix addresses the stated cause rather than an unrelated protocol. The reported symptom—Voice jitter rises during backup bursts although interface errors are zero—is consistent with the default forwarding class treats latency-sensitive voice like best-effort traffic. Use the specified correction, then verify: Voice delay and jitter stay within the service objective during measured backup load. Preserve existing policy and tenant isolation.

Incorrect Answers

A:

This remediates ip classification was configured but mpls exp or traffic-class encoding was omitted, normally indicated by The core no longer preserves premium treatment across label-switched paths. It would leave the observed problem (Voice jitter rises during backup bursts although interface errors are zero) unresolved. Address it with classify approved voice flows into a suitable forwarding class and assign a protected scheduler.

B:

This change belongs to a different Class of Service (CoS) issue: Traffic is classified correctly only on one interface even though both see identical flows. That issue involves the firewall filter class action is attached on one ingress path but not the other. The current symptom is Voice jitter rises during backup bursts although interface errors are zero. It instead requires classify approved voice flows into a suitable forwarding class and assign a protected scheduler.

C:

The option may be useful when traffic with a valid voice DSCP enters the default best-effort queue, but that is not the current evidence. Here, voice jitter rises during backup bursts although interface errors are zero, indicating the default forwarding class treats latency-sensitive voice like best-effort traffic. The targeted action is Classify approved voice flows into a suitable forwarding class and assign a protected scheduler.

Question 370

A service PE carries enterprise voice and bulk backups on the same uplink. Observed: Voice jitter rises during backup bursts although interface errors are zero. What evidence would validate recovery from this precise failure mode?

  1. Voice delay and jitter stay within the service objective during measured backup load.
  2. Counters show voice packets in the intended forwarding class before egress scheduling.
  3. Core label captures and queue counters show the intended premium treatment.
  4. Matching application flows receive the same forwarding class regardless of incoming port.

Explanation

Correct Answer

A:

The intended result is Voice delay and jitter stay within the service objective during measured backup load. It specifically verifies recovery from the default forwarding class treats latency-sensitive voice like best-effort traffic, which produced the original symptom: Voice jitter rises during backup bursts although interface errors are zero. It is stronger evidence than a generic interface-up indicator.

Incorrect Answers

B:

That observation would verify a separate fault involving a dscp classifier is not bound to the ingress traffic interface. Its symptom is Traffic with a valid voice DSCP enters the default best-effort queue. For this case the actual issue is the default forwarding class treats latency-sensitive voice like best-effort traffic, and the relevant success signal is Voice delay and jitter stay within the service objective during measured backup load.

C:

This result is useful in another case with evidence The core no longer preserves premium treatment across label-switched paths. It does not test recovery from voice jitter rises during backup bursts although interface errors are zero. Check instead whether voice delay and jitter stay within the service objective during measured backup load.

D:

It confirms an unrelated service correction: The firewall filter class action is attached on one ingress path but not the other. The present case reports Voice jitter rises during backup bursts although interface errors are zero. Its completion test is Voice delay and jitter stay within the service objective during measured backup load.

Service Provider Routing and Switching, Professional (JNCIP-SP) (JN0-664) Practice Tests