McAfee-Secured Website

Exam Code: JN0-664

Exam Name: Service Provider Routing and Switching, Professional (JNCIP-SP)

Certification Provider: Juniper

Corresponding Certification: JNCIP-SP

100% Juniper JN0-664 Guaranteed Success With Testking Training Materials

Get Real JN0-664 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

96 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Professional (JNCIP-SP) Exam", also known as JN0-664 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-664 Exam Engine. Your JN0-664 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-664 Practice Test 57

Question 560

An ISP allocates several multicast group ranges for different tenants. Observed: One tenant receives another tenant's IPTV stream on a shared access segment. What operational check best guards against this problem returning?

  1. For each approved related change, verify that rPF counter increments stop and stream continuity returns. Flag recurrence if pIM RPF discards increase when routing chooses the other uplink.
  2. For each approved related change, verify that receivers obtain only their authorized groups and cross-tenant traffic ceases. Flag recurrence if one tenant receives another tenant's IPTV stream on a shared access segment.
  3. For each approved related change, verify that receiver joins build a shared tree and receive source packets. Flag recurrence if sources transmit packets but receivers see none until a static join is added.
  4. For each approved related change, verify that source registration and receiver joins converge on the same live RP. Flag recurrence if source registers continue to reach the old RP while receivers use the new RP.

Explanation

Correct Answer

B:

This control asks for the same recovery evidence (Receivers obtain only their authorized groups and cross-tenant traffic ceases) and flags recurrence of the same failure (One tenant receives another tenant's IPTV stream on a shared access segment). It targets the underlying issue, multicast group isolation and igmp membership controls are not scoped by tenant, rather than a different service problem. The exact cadence must be agreed with operations.

Incorrect Answers

A:

The proposed control is tied to the incoming interface differs from the preferred unicast reverse path to the source, typically observed when pIM RPF discards increase when routing chooses the other uplink. Here the target is multicast group isolation and igmp membership controls are not scoped by tenant; monitor receivers obtain only their authorized groups and cross-tenant traffic ceases.

C:

This gate monitors a different failure, sources transmit packets but receivers see none until a static join is added. It would not detect the current problem: One tenant receives another tenant's IPTV stream on a shared access segment. The appropriate check requires receivers obtain only their authorized groups and cross-tenant traffic ceases.

D:

It is valid for another service scenario but checks source registers continue to reach the old rp while receivers use the new rp. This case instead needs a gate for one tenant receives another tenant's iptv stream on a shared access segment and evidence that receivers obtain only their authorized groups and cross-tenant traffic ceases.

Question 561

Two customers use overlapping RFC1918 prefixes through one MPLS provider. Observed: Traffic from one customer appears in the other's routing table. Which targeted remediation is most appropriate for the observed condition?

  1. Apply distinct route-target import policies for the separate VPNs.
  2. Configure supported inet6 VPN family and per-VRF IPv6 routing policies.
  3. Enable the proper VPN family and permitted route reflection policy.
  4. Correct the receiving VRF import target or the originating export target according to service policy.

Explanation

Correct Answer

A:

This fix addresses the stated cause rather than an unrelated protocol. The reported symptom—Traffic from one customer appears in the other's routing table—is consistent with the pe imported vpn routes using shared route targets instead of isolated tenant membership. Use the specified correction, then verify: Each VRF receives only the customer routes authorized for its service. Preserve existing policy and tenant isolation.

Incorrect Answers

B:

This remediates mp-bgp vpnv6 family and vrf ipv6 route exchange were not enabled consistently, normally indicated by IPv4 L3VPN works but VPNv6 routes do not reach remote PEs. It would leave the observed problem (Traffic from one customer appears in the other's routing table) unresolved. Address it with apply distinct route-target import policies for the separate VPNs.

C:

This change belongs to a different Layer 3 VPNs issue: The reflector does not redistribute one customer's VPN NLRI to other PEs. That issue involves the reflector's vpn address family or customer route filtering is incomplete. The current symptom is Traffic from one customer appears in the other's routing table. It instead requires apply distinct route-target import policies for the separate VPNs.

D:

The option may be useful when the customer route has a VPNv4 NLRI but is missing on a remote PE, but that is not the current evidence. Here, traffic from one customer appears in the other's routing table, indicating the pe imported vpn routes using shared route targets instead of isolated tenant membership. The targeted action is Apply distinct route-target import policies for the separate VPNs.

Question 562

Two customers use overlapping RFC1918 prefixes through one MPLS provider. Observed: Traffic from one customer appears in the other's routing table. What evidence would validate recovery from this precise failure mode?

  1. The remote VRF imports only the intended VPN prefix and the site becomes reachable.
  2. VPNv6 reachability appears only at authorized remote IPv6 sites.
  3. All authorized PEs receive the customer's VPN NLRI with valid RTs.
  4. Each VRF receives only the customer routes authorized for its service.

Explanation

Correct Answer

D:

The intended result is Each VRF receives only the customer routes authorized for its service. It specifically verifies recovery from the pe imported vpn routes using shared route targets instead of isolated tenant membership, which produced the original symptom: Traffic from one customer appears in the other's routing table. It is stronger evidence than a generic interface-up indicator.

Incorrect Answers

A:

That observation would verify a separate fault involving the remote vrf does not import the route's export route target. Its symptom is The customer route has a VPNv4 NLRI but is missing on a remote PE. For this case the actual issue is the pe imported vpn routes using shared route targets instead of isolated tenant membership, and the relevant success signal is Each VRF receives only the customer routes authorized for its service.

B:

This result is useful in another case with evidence IPv4 L3VPN works but VPNv6 routes do not reach remote PEs. It does not test recovery from traffic from one customer appears in the other's routing table. Check instead whether each VRF receives only the customer routes authorized for its service.

C:

It confirms an unrelated service correction: The reflector's VPN address family or customer route filtering is incomplete. The present case reports Traffic from one customer appears in the other's routing table. Its completion test is Each VRF receives only the customer routes authorized for its service.

Question 563

Two customers use overlapping RFC1918 prefixes through one MPLS provider. Observed: Traffic from one customer appears in the other's routing table. What underlying protocol or service configuration problem best explains the evidence?

  1. The reflector's VPN address family or customer route filtering is incomplete.
  2. The PE imported VPN routes using shared route targets instead of isolated tenant membership.
  3. MP-BGP VPNv6 family and VRF IPv6 route exchange were not enabled consistently.
  4. The remote VRF does not import the route's export route target.

Explanation

Correct Answer

B:

Because traffic from one customer appears in the other's routing table, the likely cause is the pe imported vpn routes using shared route targets instead of isolated tenant membership. It is testable: Apply distinct route-target import policies for the separate VPNs. Expected follow-up: Each VRF receives only the customer routes authorized for its service.

Incorrect Answers

A:

The reflector's VPN address family or customer route filtering is incomplete. would normally be accompanied by the reflector does not redistribute one customer's vpn nlri to other pes. The observed symptom is different: Traffic from one customer appears in the other's routing table. The likely cause is The PE imported VPN routes using shared route targets instead of isolated tenant membership.

C:

That explanation fits another condition: IPv4 L3VPN works but VPNv6 routes do not reach remote PEs. The evidence here is Traffic from one customer appears in the other's routing table. Its closer root cause is The PE imported VPN routes using shared route targets instead of isolated tenant membership.

D:

The stated cause is possible elsewhere but explains the customer route has a vpnv4 nlri but is missing on a remote pe, not traffic from one customer appears in the other's routing table. This incident is better attributed to the pe imported vpn routes using shared route targets instead of isolated tenant membership.

Question 564

Two customers use overlapping RFC1918 prefixes through one MPLS provider. Observed: Traffic from one customer appears in the other's routing table. Which ongoing validation gate would best detect a recurrence of this problem?

  1. For each approved related change, verify that the remote VRF imports only the intended VPN prefix and the site becomes reachable. Flag recurrence if the customer route has a VPNv4 NLRI but is missing on a remote PE.
  2. For each approved related change, verify that each VRF receives only the customer routes authorized for its service. Flag recurrence if traffic from one customer appears in the other's routing table.
  3. For each approved related change, verify that vPNv6 reachability appears only at authorized remote IPv6 sites. Flag recurrence if iPv4 L3VPN works but VPNv6 routes do not reach remote PEs.
  4. For each approved related change, verify that all authorized PEs receive the customer's VPN NLRI with valid RTs. Flag recurrence if the reflector does not redistribute one customer's VPN NLRI to other PEs.

Explanation

Correct Answer

B:

A useful regression gate tests whether each VRF receives only the customer routes authorized for its service and alerts when traffic from one customer appears in the other's routing table. This directly checks the technical weakness: The PE imported VPN routes using shared route targets instead of isolated tenant membership. The gate is derived from the fictional incident and is not an independent Juniper engineer signoff.

Incorrect Answers

A:

The proposed control is tied to the remote vrf does not import the route's export route target, typically observed when the customer route has a VPNv4 NLRI but is missing on a remote PE. Here the target is the pe imported vpn routes using shared route targets instead of isolated tenant membership; monitor each VRF receives only the customer routes authorized for its service.

C:

It is valid for another service scenario but checks ipv4 l3vpn works but vpnv6 routes do not reach remote pes. This case instead needs a gate for traffic from one customer appears in the other's routing table and evidence that each VRF receives only the customer routes authorized for its service.

D:

This gate monitors a different failure, the reflector does not redistribute one customer's vpn nlri to other pes. It would not detect the current problem: Traffic from one customer appears in the other's routing table. The appropriate check requires each VRF receives only the customer routes authorized for its service.

Question 565

A managed L3VPN spans several PE routers. Observed: The customer route has a VPNv4 NLRI but is missing on a remote PE. Which change most directly corrects the failure while respecting the existing service boundary?

  1. Tighten tenant VRF RT/prefix filters to reject infrastructure destinations.
  2. Correct the receiving VRF import target or the originating export target according to service policy.
  3. Use route targets for import/export policy and RDs only for uniqueness as appropriate.
  4. Add a controlled Internet-service VRF/default route import with security enforcement.

Explanation

Correct Answer

B:

The observed condition is The customer route has a VPNv4 NLRI but is missing on a remote PE. That indicates the remote vrf does not import the route's export route target. Applying the proposed remedy directly changes that condition. A concrete completion check is: The remote VRF imports only the intended VPN prefix and the site becomes reachable.

Incorrect Answers

A:

The option may be useful when provider-wide BGP policy accidentally imports the provider loopback into a customer VRF, but that is not the current evidence. Here, the customer route has a VPNv4 NLRI but is missing on a remote PE, indicating the remote vrf does not import the route's export route target. The targeted action is Correct the receiving VRF import target or the originating export target according to service policy.

C:

This remediates a route distinguisher provides nlri uniqueness, not import-policy membership, normally indicated by Operators expect the RD itself to enforce customer route isolation. It would leave the observed problem (The customer route has a VPNv4 NLRI but is missing on a remote PE) unresolved. Address it with correct the receiving VRF import target or the originating export target according to service policy.

D:

This change belongs to a different Layer 3 VPNs issue: Remote branches can reach each other but not the public Internet. That issue involves no authorized internet route leak or default path exists for the branch vrfs. The current symptom is The customer route has a VPNv4 NLRI but is missing on a remote PE. It instead requires correct the receiving VRF import target or the originating export target according to service policy.

Question 566

A managed L3VPN spans several PE routers. Observed: The customer route has a VPNv4 NLRI but is missing on a remote PE. After the correction, which result would most convincingly show that this fault is resolved?

  1. Customer isolation follows the configured RT membership even where IPv4 prefixes overlap.
  2. The remote VRF imports only the intended VPN prefix and the site becomes reachable.
  3. Branch Internet flows use the approved breakout without cross-VPN leakage.
  4. Customer route tables exclude core loopbacks while customer service remains intact.

Explanation

Correct Answer

B:

After correct the receiving VRF import target or the originating export target according to service policy, inspect whether the remote VRF imports only the intended VPN prefix and the site becomes reachable. This closes the loop between the reported observation (The customer route has a VPNv4 NLRI but is missing on a remote PE) and the underlying issue (The remote VRF does not import the route's export route target).

Incorrect Answers

A:

This result is useful in another case with evidence Operators expect the RD itself to enforce customer route isolation. It does not test recovery from the customer route has a vpnv4 nlri but is missing on a remote pe. Check instead whether the remote VRF imports only the intended VPN prefix and the site becomes reachable.

C:

It confirms an unrelated service correction: No authorized Internet route leak or default path exists for the branch VRFs. The present case reports The customer route has a VPNv4 NLRI but is missing on a remote PE. Its completion test is The remote VRF imports only the intended VPN prefix and the site becomes reachable.

D:

That observation would verify a separate fault involving the import policy lacks explicit provider-infrastructure prefix exclusion. Its symptom is Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. For this case the actual issue is the remote vrf does not import the route's export route target, and the relevant success signal is The remote VRF imports only the intended VPN prefix and the site becomes reachable.

Question 567

A managed L3VPN spans several PE routers. Observed: The customer route has a VPNv4 NLRI but is missing on a remote PE. Which root cause is most consistent with this symptom?

  1. The import policy lacks explicit provider-infrastructure prefix exclusion.
  2. The remote VRF does not import the route's export route target.
  3. No authorized Internet route leak or default path exists for the branch VRFs.
  4. A route distinguisher provides NLRI uniqueness, not import-policy membership.

Explanation

Correct Answer

B:

The reported evidence—The customer route has a VPNv4 NLRI but is missing on a remote PE—supports the remote vrf does not import the route's export route target. The appropriate intervention is to correct the receiving VRF import target or the originating export target according to service policy, with confirmation from the remote VRF imports only the intended VPN prefix and the site becomes reachable. Other causes require actual device-state verification.

Incorrect Answers

A:

The stated cause is possible elsewhere but explains provider-wide bgp policy accidentally imports the provider loopback into a customer vrf, not the customer route has a vpnv4 nlri but is missing on a remote pe. This incident is better attributed to the remote vrf does not import the route's export route target.

C:

No authorized Internet route leak or default path exists for the branch VRFs. would normally be accompanied by remote branches can reach each other but not the public internet. The observed symptom is different: The customer route has a VPNv4 NLRI but is missing on a remote PE. The likely cause is The remote VRF does not import the route's export route target.

D:

That explanation fits another condition: Operators expect the RD itself to enforce customer route isolation. The evidence here is The customer route has a VPNv4 NLRI but is missing on a remote PE. Its closer root cause is The remote VRF does not import the route's export route target.

Question 568

A managed L3VPN spans several PE routers. Observed: The customer route has a VPNv4 NLRI but is missing on a remote PE. Which change-acceptance control is most relevant to preventing this exact failure?

  1. For each approved related change, verify that customer route tables exclude core loopbacks while customer service remains intact. Flag recurrence if provider-wide BGP policy accidentally imports the provider loopback into a customer VRF.
  2. For each approved related change, verify that the remote VRF imports only the intended VPN prefix and the site becomes reachable. Flag recurrence if the customer route has a VPNv4 NLRI but is missing on a remote PE.
  3. For each approved related change, verify that branch Internet flows use the approved breakout without cross-VPN leakage. Flag recurrence if remote branches can reach each other but not the public Internet.
  4. For each approved related change, verify that customer isolation follows the configured RT membership even where IPv4 prefixes overlap. Flag recurrence if operators expect the RD itself to enforce customer route isolation.

Explanation

Correct Answer

B:

The control is specific to the initial failure. It requires the result The remote VRF imports only the intended VPN prefix and the site becomes reachable. and treats The customer route has a VPNv4 NLRI but is missing on a remote PE. as a failure signal. The causal concern is the remote vrf does not import the route's export route target.

Incorrect Answers

A:

The proposed control is tied to the import policy lacks explicit provider-infrastructure prefix exclusion, typically observed when provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. Here the target is the remote vrf does not import the route's export route target; monitor the remote VRF imports only the intended VPN prefix and the site becomes reachable.

C:

This gate monitors a different failure, remote branches can reach each other but not the public internet. It would not detect the current problem: The customer route has a VPNv4 NLRI but is missing on a remote PE. The appropriate check requires the remote VRF imports only the intended VPN prefix and the site becomes reachable.

D:

It is valid for another service scenario but checks operators expect the rd itself to enforce customer route isolation. This case instead needs a gate for the customer route has a vpnv4 nlri but is missing on a remote pe and evidence that the remote VRF imports only the intended VPN prefix and the site becomes reachable.

Question 569

A provider L3VPN design uses identical route distinguishers for two sites. Observed: Operators expect the RD itself to enforce customer route isolation. What should the routing engineer change first to address this particular symptom?

  1. Repair PE loopback IGP reachability and labeled transport to the remote PE.
  2. Scope Internet default RT membership to contracted tenant VRFs only.
  3. Use route targets for import/export policy and RDs only for uniqueness as appropriate.
  4. Match the supported MVPN transport profile and customer multicast state.

Explanation

Correct Answer

C:

The decisive evidence is that Operators expect the RD itself to enforce customer route isolation. This follows from a route distinguisher provides nlri uniqueness, not import-policy membership. The focused remedy is to use route targets for import/export policy and RDs only for uniqueness as appropriate. Confirm improvement when customer isolation follows the configured RT membership even where IPv4 prefixes overlap. Validate on an approved lab or change window before touching production.

Incorrect Answers

A:

This change belongs to a different Layer 3 VPNs issue: Remote PE imports the route but forwarding fails on the core transit. That issue involves the vpn bgp next hop lacks a resolvable mpls labeled transport path. The current symptom is Operators expect the RD itself to enforce customer route isolation. It instead requires use route targets for import/export policy and RDs only for uniqueness as appropriate.

B:

The option may be useful when one customer's default route is accidentally propagated to every tenant, but that is not the current evidence. Here, operators expect the RD itself to enforce customer route isolation, indicating a route distinguisher provides nlri uniqueness, not import-policy membership. The targeted action is Use route targets for import/export policy and RDs only for uniqueness as appropriate.

D:

This remediates mvpn provider-tunnel encapsulation or multicast transport mapping is inconsistent, normally indicated by Customer multicast control signaling exists but payload delivery fails at a remote PE. It would leave the observed problem (Operators expect the RD itself to enforce customer route isolation) unresolved. Address it with use route targets for import/export policy and RDs only for uniqueness as appropriate.

Question 570

A provider L3VPN design uses identical route distinguishers for two sites. Observed: Operators expect the RD itself to enforce customer route isolation. Which acceptance observation best confirms that the proposed change worked?

  1. Receivers in the remote VPN get the correct multicast stream without cross-tenant delivery.
  2. The VPN route resolves both transport and service labels and data flows successfully.
  3. Only subscribed customers receive the shared breakout route.
  4. Customer isolation follows the configured RT membership even where IPv4 prefixes overlap.

Explanation

Correct Answer

D:

This acceptance criterion tests the actual fault. The source evidence was Operators expect the RD itself to enforce customer route isolation. The correction addresses a route distinguisher provides nlri uniqueness, not import-policy membership; success requires customer isolation follows the configured RT membership even where IPv4 prefixes overlap.

Incorrect Answers

A:

This result is useful in another case with evidence Customer multicast control signaling exists but payload delivery fails at a remote PE. It does not test recovery from operators expect the rd itself to enforce customer route isolation. Check instead whether customer isolation follows the configured RT membership even where IPv4 prefixes overlap.

B:

It confirms an unrelated service correction: The VPN BGP next hop lacks a resolvable MPLS labeled transport path. The present case reports Operators expect the RD itself to enforce customer route isolation. Its completion test is Customer isolation follows the configured RT membership even where IPv4 prefixes overlap.

C:

That observation would verify a separate fault involving broad rt import/export policy exposed the default across unrelated vpns. Its symptom is One customer's default route is accidentally propagated to every tenant. For this case the actual issue is a route distinguisher provides nlri uniqueness, not import-policy membership, and the relevant success signal is Customer isolation follows the configured RT membership even where IPv4 prefixes overlap.

Service Provider Routing and Switching, Professional (JNCIP-SP) (JN0-664) Practice Tests