McAfee-Secured Website

Exam Code: JN0-664

Exam Name: Service Provider Routing and Switching, Professional (JNCIP-SP)

Certification Provider: Juniper

Corresponding Certification: JNCIP-SP

100% Juniper JN0-664 Guaranteed Success With Testking Training Materials

Get Real JN0-664 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

96 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Professional (JNCIP-SP) Exam", also known as JN0-664 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-664 Exam Engine. Your JN0-664 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-664 Practice Test 59

Question 580

A hub-and-spoke enterprise VPN should prevent direct spoke connectivity. Observed: Two spoke sites unexpectedly exchange routes without the central hub. Which change-acceptance control is most relevant to preventing this exact failure?

  1. For each approved related change, verify that spokes communicate through the hub without direct route import between spokes. Flag recurrence if two spoke sites unexpectedly exchange routes without the central hub.
  2. For each approved related change, verify that all full-mesh sites exchange permitted prefixes with the new CE. Flag recurrence if the new VRF learns only one existing site after provisioning.
  3. For each approved related change, verify that the multihomed site's prefix remains stable without reimport looping. Flag recurrence if both PEs advertise the same CE prefix with inconsistent site-of-origin tags.
  4. For each approved related change, verify that the authorized VPN subnet is learned across the AS boundary without tenant mixing. Flag recurrence if a customer subnet is absent on the far side while local sites exchange correctly.

Explanation

Correct Answer

A:

The control is specific to the initial failure. It requires the result Spokes communicate through the hub without direct route import between spokes. and treats Two spoke sites unexpectedly exchange routes without the central hub. as a failure signal. The causal concern is spoke import/export rt policy grants direct spoke route membership.

Incorrect Answers

B:

It is valid for another service scenario but checks the new vrf learns only one existing site after provisioning. This case instead needs a gate for two spoke sites unexpectedly exchange routes without the central hub and evidence that spokes communicate through the hub without direct route import between spokes.

C:

The proposed control is tied to site-of-origin extended-community filtering is missing and can cause routing feedback, typically observed when both PEs advertise the same CE prefix with inconsistent site-of-origin tags. Here the target is spoke import/export rt policy grants direct spoke route membership; monitor spokes communicate through the hub without direct route import between spokes.

D:

This gate monitors a different failure, a customer subnet is absent on the far side while local sites exchange correctly. It would not detect the current problem: Two spoke sites unexpectedly exchange routes without the central hub. The appropriate check requires spokes communicate through the hub without direct route import between spokes.

Question 581

A provider expands a full-mesh L3VPN to a new site. Observed: The new VRF learns only one existing site after provisioning. What should the routing engineer change first to address this particular symptom?

  1. Remove shared RT membership and use a controlled firewall/service-exchange VRF if justified.
  2. Configure the supported hierarchical labeled transport service end to end.
  3. Add the approved VPN membership RT set while retaining unrelated route filtering.
  4. Align the OSPF domain and supported VPN OSPF route handling settings.

Explanation

Correct Answer

C:

The decisive evidence is that The new VRF learns only one existing site after provisioning. This follows from the new site imports an incomplete set of route targets for the vpn. The focused remedy is to add the approved VPN membership RT set while retaining unrelated route filtering. Confirm improvement when all full-mesh sites exchange permitted prefixes with the new CE. Validate on an approved lab or change window before touching production.

Incorrect Answers

A:

This remediates cross-service route-target import is too permissive for overlapping partner addresses, normally indicated by A route received through one partner is installed in the other's VRF. It would leave the observed problem (The new VRF learns only one existing site after provisioning) unresolved. Address it with add the approved VPN membership RT set while retaining unrelated route filtering.

B:

The option may be useful when an interprovider labeled packet cannot be forwarded through the upstream core, but that is not the current evidence. Here, the new VRF learns only one existing site after provisioning, indicating the new site imports an incomplete set of route targets for the vpn. The targeted action is Add the approved VPN membership RT set while retaining unrelated route filtering.

D:

This change belongs to a different Layer 3 VPNs issue: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. That issue involves mp-bgp ospf domain or extended-community treatment differs across provider edges. The current symptom is The new VRF learns only one existing site after provisioning. It instead requires add the approved VPN membership RT set while retaining unrelated route filtering.

Question 582

A provider expands a full-mesh L3VPN to a new site. Observed: The new VRF learns only one existing site after provisioning. Which acceptance observation best confirms that the proposed change worked?

  1. The downstream carrier can forward its labeled traffic across the upstream core.
  2. Remote CE sees the intended route type and stable preference.
  3. Partner routes remain isolated except through explicitly approved exchange paths.
  4. All full-mesh sites exchange permitted prefixes with the new CE.

Explanation

Correct Answer

D:

This acceptance criterion tests the actual fault. The source evidence was The new VRF learns only one existing site after provisioning. The correction addresses the new site imports an incomplete set of route targets for the vpn; success requires all full-mesh sites exchange permitted prefixes with the new CE.

Incorrect Answers

A:

That observation would verify a separate fault involving the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution. Its symptom is An interprovider labeled packet cannot be forwarded through the upstream core. For this case the actual issue is the new site imports an incomplete set of route targets for the vpn, and the relevant success signal is All full-mesh sites exchange permitted prefixes with the new CE.

B:

It confirms an unrelated service correction: MP-BGP OSPF domain or extended-community treatment differs across provider edges. The present case reports The new VRF learns only one existing site after provisioning. Its completion test is All full-mesh sites exchange permitted prefixes with the new CE.

C:

This result is useful in another case with evidence A route received through one partner is installed in the other's VRF. It does not test recovery from the new vrf learns only one existing site after provisioning. Check instead whether all full-mesh sites exchange permitted prefixes with the new CE.

Question 583

A provider expands a full-mesh L3VPN to a new site. Observed: The new VRF learns only one existing site after provisioning. What is the most likely source of the observed routing or service failure?

  1. The carrier-of-carriers design lacks compatible labeled route distribution and transport resolution.
  2. Cross-service route-target import is too permissive for overlapping partner addresses.
  3. The new site imports an incomplete set of route targets for the VPN.
  4. MP-BGP OSPF domain or extended-community treatment differs across provider edges.

Explanation

Correct Answer

C:

This explanation is the closest match to the observed symptom: The new VRF learns only one existing site after provisioning. The specified root issue is The new site imports an incomplete set of route targets for the VPN. Repair it through add the approved VPN membership RT set while retaining unrelated route filtering, then check all full-mesh sites exchange permitted prefixes with the new CE.

Incorrect Answers

A:

The stated cause is possible elsewhere but explains an interprovider labeled packet cannot be forwarded through the upstream core, not the new vrf learns only one existing site after provisioning. This incident is better attributed to the new site imports an incomplete set of route targets for the vpn.

B:

That explanation fits another condition: A route received through one partner is installed in the other's VRF. The evidence here is The new VRF learns only one existing site after provisioning. Its closer root cause is The new site imports an incomplete set of route targets for the VPN.

D:

MP-BGP OSPF domain or extended-community treatment differs across provider edges. would normally be accompanied by routes appear as interarea paths at a remote ce rather than expected intra-area continuation. The observed symptom is different: The new VRF learns only one existing site after provisioning. The likely cause is The new site imports an incomplete set of route targets for the VPN.

Question 584

A provider expands a full-mesh L3VPN to a new site. Observed: The new VRF learns only one existing site after provisioning. What operational check best guards against this problem returning?

  1. For each approved related change, verify that partner routes remain isolated except through explicitly approved exchange paths. Flag recurrence if a route received through one partner is installed in the other's VRF.
  2. For each approved related change, verify that all full-mesh sites exchange permitted prefixes with the new CE. Flag recurrence if the new VRF learns only one existing site after provisioning.
  3. For each approved related change, verify that the downstream carrier can forward its labeled traffic across the upstream core. Flag recurrence if an interprovider labeled packet cannot be forwarded through the upstream core.
  4. For each approved related change, verify that remote CE sees the intended route type and stable preference. Flag recurrence if routes appear as interarea paths at a remote CE rather than expected intra-area continuation.

Explanation

Correct Answer

B:

This control asks for the same recovery evidence (All full-mesh sites exchange permitted prefixes with the new CE) and flags recurrence of the same failure (The new VRF learns only one existing site after provisioning). It targets the underlying issue, the new site imports an incomplete set of route targets for the vpn, rather than a different service problem. The exact cadence must be agreed with operations.

Incorrect Answers

A:

It is valid for another service scenario but checks a route received through one partner is installed in the other's vrf. This case instead needs a gate for the new vrf learns only one existing site after provisioning and evidence that all full-mesh sites exchange permitted prefixes with the new CE.

C:

The proposed control is tied to the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution, typically observed when an interprovider labeled packet cannot be forwarded through the upstream core. Here the target is the new site imports an incomplete set of route targets for the vpn; monitor all full-mesh sites exchange permitted prefixes with the new CE.

D:

This gate monitors a different failure, routes appear as interarea paths at a remote ce rather than expected intra-area continuation. It would not detect the current problem: The new VRF learns only one existing site after provisioning. The appropriate check requires all full-mesh sites exchange permitted prefixes with the new CE.

Question 585

A customer uses CE-to-PE OSPF routing across an L3VPN. Observed: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. Which targeted remediation is most appropriate for the observed condition?

  1. Implement a supported OSPF sham link where the service design requires equal intra-area semantics.
  2. Scope RT and prefix exchange through the shared-services VRF to the DNS service only.
  3. Restore the intended per-VRF primary/backup BGP route policy.
  4. Align the OSPF domain and supported VPN OSPF route handling settings.

Explanation

Correct Answer

D:

This fix addresses the stated cause rather than an unrelated protocol. The reported symptom—Routes appear as interarea paths at a remote CE rather than expected intra-area continuation—is consistent with mp-bgp ospf domain or extended-community treatment differs across provider edges. Use the specified correction, then verify: Remote CE sees the intended route type and stable preference. Preserve existing policy and tenant isolation.

Incorrect Answers

A:

The option may be useful when sham-link connectivity is missing and a customer backdoor link becomes preferred, but that is not the current evidence. Here, routes appear as interarea paths at a remote CE rather than expected intra-area continuation, indicating mp-bgp ospf domain or extended-community treatment differs across provider edges. The targeted action is Align the OSPF domain and supported VPN OSPF route handling settings.

B:

This change belongs to a different Layer 3 VPNs issue: Customer VRFs can reach shared DNS but also import other tenants' direct routes. That issue involves the shared-services exchange uses transit rts that permit uncontrolled customer-to-customer reachability. The current symptom is Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. It instead requires align the OSPF domain and supported VPN OSPF route handling settings.

C:

This remediates the vpn import policy modifies best-path attributes inconsistently, normally indicated by A remote PE selects the backup site because the route policy overwrote local preference. It would leave the observed problem (Routes appear as interarea paths at a remote CE rather than expected intra-area continuation) unresolved. Address it with align the OSPF domain and supported VPN OSPF route handling settings.

Question 586

A customer uses CE-to-PE OSPF routing across an L3VPN. Observed: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. What evidence would validate recovery from this precise failure mode?

  1. The customer selects the intended VPN path under controlled backdoor tests.
  2. Only the shared DNS prefixes traverse service VRFs and tenants stay isolated.
  3. VPN best path favors the primary and moves to backup during failure.
  4. Remote CE sees the intended route type and stable preference.

Explanation

Correct Answer

D:

The intended result is Remote CE sees the intended route type and stable preference. It specifically verifies recovery from mp-bgp ospf domain or extended-community treatment differs across provider edges, which produced the original symptom: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. It is stronger evidence than a generic interface-up indicator.

Incorrect Answers

A:

That observation would verify a separate fault involving the provider path appears less preferable to the direct intra-area backdoor path. Its symptom is Sham-link connectivity is missing and a customer backdoor link becomes preferred. For this case the actual issue is mp-bgp ospf domain or extended-community treatment differs across provider edges, and the relevant success signal is Remote CE sees the intended route type and stable preference.

B:

It confirms an unrelated service correction: The shared-services exchange uses transit RTs that permit uncontrolled customer-to-customer reachability. The present case reports Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. Its completion test is Remote CE sees the intended route type and stable preference.

C:

This result is useful in another case with evidence A remote PE selects the backup site because the route policy overwrote local preference. It does not test recovery from routes appear as interarea paths at a remote ce rather than expected intra-area continuation. Check instead whether remote CE sees the intended route type and stable preference.

Question 587

A customer uses CE-to-PE OSPF routing across an L3VPN. Observed: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. What underlying protocol or service configuration problem best explains the evidence?

  1. The shared-services exchange uses transit RTs that permit uncontrolled customer-to-customer reachability.
  2. MP-BGP OSPF domain or extended-community treatment differs across provider edges.
  3. The provider path appears less preferable to the direct intra-area backdoor path.
  4. The VPN import policy modifies best-path attributes inconsistently.

Explanation

Correct Answer

B:

Because routes appear as interarea paths at a remote CE rather than expected intra-area continuation, the likely cause is mp-bgp ospf domain or extended-community treatment differs across provider edges. It is testable: Align the OSPF domain and supported VPN OSPF route handling settings. Expected follow-up: Remote CE sees the intended route type and stable preference.

Incorrect Answers

A:

The shared-services exchange uses transit RTs that permit uncontrolled customer-to-customer reachability. would normally be accompanied by customer vrfs can reach shared dns but also import other tenants' direct routes. The observed symptom is different: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. The likely cause is MP-BGP OSPF domain or extended-community treatment differs across provider edges.

C:

The stated cause is possible elsewhere but explains sham-link connectivity is missing and a customer backdoor link becomes preferred, not routes appear as interarea paths at a remote ce rather than expected intra-area continuation. This incident is better attributed to mp-bgp ospf domain or extended-community treatment differs across provider edges.

D:

That explanation fits another condition: A remote PE selects the backup site because the route policy overwrote local preference. The evidence here is Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. Its closer root cause is MP-BGP OSPF domain or extended-community treatment differs across provider edges.

Question 588

A customer uses CE-to-PE OSPF routing across an L3VPN. Observed: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. Which ongoing validation gate would best detect a recurrence of this problem?

  1. For each approved related change, verify that only the shared DNS prefixes traverse service VRFs and tenants stay isolated. Flag recurrence if customer VRFs can reach shared DNS but also import other tenants' direct routes.
  2. For each approved related change, verify that remote CE sees the intended route type and stable preference. Flag recurrence if routes appear as interarea paths at a remote CE rather than expected intra-area continuation.
  3. For each approved related change, verify that the customer selects the intended VPN path under controlled backdoor tests. Flag recurrence if sham-link connectivity is missing and a customer backdoor link becomes preferred.
  4. For each approved related change, verify that vPN best path favors the primary and moves to backup during failure. Flag recurrence if a remote PE selects the backup site because the route policy overwrote local preference.

Explanation

Correct Answer

B:

A useful regression gate tests whether remote CE sees the intended route type and stable preference and alerts when routes appear as interarea paths at a remote CE rather than expected intra-area continuation. This directly checks the technical weakness: MP-BGP OSPF domain or extended-community treatment differs across provider edges. The gate is derived from the fictional incident and is not an independent Juniper engineer signoff.

Incorrect Answers

A:

This gate monitors a different failure, customer vrfs can reach shared dns but also import other tenants' direct routes. It would not detect the current problem: Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. The appropriate check requires remote CE sees the intended route type and stable preference.

C:

The proposed control is tied to the provider path appears less preferable to the direct intra-area backdoor path, typically observed when sham-link connectivity is missing and a customer backdoor link becomes preferred. Here the target is mp-bgp ospf domain or extended-community treatment differs across provider edges; monitor remote CE sees the intended route type and stable preference.

D:

It is valid for another service scenario but checks a remote pe selects the backup site because the route policy overwrote local preference. This case instead needs a gate for routes appear as interarea paths at a remote ce rather than expected intra-area continuation and evidence that remote CE sees the intended route type and stable preference.

Question 589

An L3VPN reuses the same OSPF domain ID across overlapping services. Observed: Sham-link connectivity is missing and a customer backdoor link becomes preferred. Which change most directly corrects the failure while respecting the existing service boundary?

  1. Implement a supported OSPF sham link where the service design requires equal intra-area semantics.
  2. Temporarily accept both RTs during a controlled migration then remove the old one.
  3. Restore transport label distribution and add appropriate next-hop tracking.
  4. Adjust customer-specific CE-to-PE route admission and VRF propagation policy.

Explanation

Correct Answer

A:

The observed condition is Sham-link connectivity is missing and a customer backdoor link becomes preferred. That indicates the provider path appears less preferable to the direct intra-area backdoor path. Applying the proposed remedy directly changes that condition. A concrete completion check is: The customer selects the intended VPN path under controlled backdoor tests.

Incorrect Answers

B:

This change belongs to a different Layer 3 VPNs issue: Existing remote PEs stop importing routes before the new target is installed. That issue involves export and import route-target changes were not staged compatibly. The current symptom is Sham-link connectivity is missing and a customer backdoor link becomes preferred. It instead requires implement a supported OSPF sham link where the service design requires equal intra-area semantics.

C:

The option may be useful when vPN route remains active at PEs despite loss of the underlying labeled transport, but that is not the current evidence. Here, sham-link connectivity is missing and a customer backdoor link becomes preferred, indicating the provider path appears less preferable to the direct intra-area backdoor path. The targeted action is Implement a supported OSPF sham link where the service design requires equal intra-area semantics.

D:

This remediates the ce-facing import policy is not accepting those routes, normally indicated by The PE does not export the agreed customer prefixes into its VRF. It would leave the observed problem (Sham-link connectivity is missing and a customer backdoor link becomes preferred) unresolved. Address it with implement a supported OSPF sham link where the service design requires equal intra-area semantics.

Question 590

An L3VPN reuses the same OSPF domain ID across overlapping services. Observed: Sham-link connectivity is missing and a customer backdoor link becomes preferred. After the correction, which result would most convincingly show that this fault is resolved?

  1. Eligible CE prefixes enter the correct VRF and appear in remote VPN sites.
  2. The customer selects the intended VPN path under controlled backdoor tests.
  3. VPN forwarding recovers and unsafe routes withdraw when transport is unavailable.
  4. Every site remains reachable through migration and converges on the new RT.

Explanation

Correct Answer

B:

After implement a supported OSPF sham link where the service design requires equal intra-area semantics, inspect whether the customer selects the intended VPN path under controlled backdoor tests. This closes the loop between the reported observation (Sham-link connectivity is missing and a customer backdoor link becomes preferred) and the underlying issue (The provider path appears less preferable to the direct intra-area backdoor path).

Incorrect Answers

A:

This result is useful in another case with evidence The PE does not export the agreed customer prefixes into its VRF. It does not test recovery from sham-link connectivity is missing and a customer backdoor link becomes preferred. Check instead whether the customer selects the intended VPN path under controlled backdoor tests.

C:

That observation would verify a separate fault involving mp-bgp control-plane reachability is out of sync with mpls transport forwarding. Its symptom is VPN route remains active at PEs despite loss of the underlying labeled transport. For this case the actual issue is the provider path appears less preferable to the direct intra-area backdoor path, and the relevant success signal is The customer selects the intended VPN path under controlled backdoor tests.

D:

It confirms an unrelated service correction: Export and import route-target changes were not staged compatibly. The present case reports Sham-link connectivity is missing and a customer backdoor link becomes preferred. Its completion test is The customer selects the intended VPN path under controlled backdoor tests.

Service Provider Routing and Switching, Professional (JNCIP-SP) (JN0-664) Practice Tests