McAfee-Secured Website

Exam Code: JN0-664

Exam Name: Service Provider Routing and Switching, Professional (JNCIP-SP)

Certification Provider: Juniper

Corresponding Certification: JNCIP-SP

100% Juniper JN0-664 Guaranteed Success With Testking Training Materials

Get Real JN0-664 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

96 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Professional (JNCIP-SP) Exam", also known as JN0-664 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-664 Exam Engine. Your JN0-664 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-664 Practice Test 63

Question 620

A provider uses inter-AS VPN option A at a boundary. Observed: A customer subnet is absent on the far side while local sites exchange correctly. What operational check best guards against this problem returning?

  1. For each approved related change, verify that global and tenant IPv6 RIBs remain separate and allowed customer routes work. Flag recurrence if iPv6 routes leak into the global IPv6 table instead of the tenant's inet6 VRF.
  2. For each approved related change, verify that the VPN route resolves both transport and service labels and data flows successfully. Flag recurrence if remote PE imports the route but forwarding fails on the core transit.
  3. For each approved related change, verify that the downstream carrier can forward its labeled traffic across the upstream core. Flag recurrence if an interprovider labeled packet cannot be forwarded through the upstream core.
  4. For each approved related change, verify that the authorized VPN subnet is learned across the AS boundary without tenant mixing. Flag recurrence if a customer subnet is absent on the far side while local sites exchange correctly.

Explanation

Correct Answer

D:

This control asks for the same recovery evidence (The authorized VPN subnet is learned across the AS boundary without tenant mixing) and flags recurrence of the same failure (A customer subnet is absent on the far side while local sites exchange correctly). It targets the underlying issue, the inter-as per-vrf ebgp exchange is missing a route export or prefix permission, rather than a different service problem. The exact cadence must be agreed with operations.

Incorrect Answers

A:

The proposed control is tied to the customer interface or routing family is associated with the wrong routing instance, typically observed when iPv6 routes leak into the global IPv6 table instead of the tenant's inet6 VRF. Here the target is the inter-as per-vrf ebgp exchange is missing a route export or prefix permission; monitor the authorized VPN subnet is learned across the AS boundary without tenant mixing.

B:

It is valid for another service scenario but checks remote pe imports the route but forwarding fails on the core transit. This case instead needs a gate for a customer subnet is absent on the far side while local sites exchange correctly and evidence that the authorized VPN subnet is learned across the AS boundary without tenant mixing.

C:

This gate monitors a different failure, an interprovider labeled packet cannot be forwarded through the upstream core. It would not detect the current problem: A customer subnet is absent on the far side while local sites exchange correctly. The appropriate check requires the authorized VPN subnet is learned across the AS boundary without tenant mixing.

Question 621

A carrier-of-carriers VPN transports a downstream provider's routes. Observed: An interprovider labeled packet cannot be forwarded through the upstream core. Which targeted remediation is most appropriate for the observed condition?

  1. Restore the intended per-VRF primary/backup BGP route policy.
  2. Configure the supported hierarchical labeled transport service end to end.
  3. Redesign spoke RTs to enforce hub-only exchange and maintain required return paths.
  4. Apply compatible SOO tagging and route rejection on re-entry.

Explanation

Correct Answer

B:

This fix addresses the stated cause rather than an unrelated protocol. The reported symptom—An interprovider labeled packet cannot be forwarded through the upstream core—is consistent with the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution. Use the specified correction, then verify: The downstream carrier can forward its labeled traffic across the upstream core. Preserve existing policy and tenant isolation.

Incorrect Answers

A:

The option may be useful when a remote PE selects the backup site because the route policy overwrote local preference, but that is not the current evidence. Here, an interprovider labeled packet cannot be forwarded through the upstream core, indicating the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution. The targeted action is Configure the supported hierarchical labeled transport service end to end.

C:

This change belongs to a different Layer 3 VPNs issue: Two spoke sites unexpectedly exchange routes without the central hub. That issue involves spoke import/export rt policy grants direct spoke route membership. The current symptom is An interprovider labeled packet cannot be forwarded through the upstream core. It instead requires configure the supported hierarchical labeled transport service end to end.

D:

This remediates site-of-origin extended-community filtering is missing and can cause routing feedback, normally indicated by Both PEs advertise the same CE prefix with inconsistent site-of-origin tags. It would leave the observed problem (An interprovider labeled packet cannot be forwarded through the upstream core) unresolved. Address it with configure the supported hierarchical labeled transport service end to end.

Question 622

A carrier-of-carriers VPN transports a downstream provider's routes. Observed: An interprovider labeled packet cannot be forwarded through the upstream core. What evidence would validate recovery from this precise failure mode?

  1. The multihomed site's prefix remains stable without reimport looping.
  2. VPN best path favors the primary and moves to backup during failure.
  3. The downstream carrier can forward its labeled traffic across the upstream core.
  4. Spokes communicate through the hub without direct route import between spokes.

Explanation

Correct Answer

C:

The intended result is The downstream carrier can forward its labeled traffic across the upstream core. It specifically verifies recovery from the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution, which produced the original symptom: An interprovider labeled packet cannot be forwarded through the upstream core. It is stronger evidence than a generic interface-up indicator.

Incorrect Answers

A:

This result is useful in another case with evidence Both PEs advertise the same CE prefix with inconsistent site-of-origin tags. It does not test recovery from an interprovider labeled packet cannot be forwarded through the upstream core. Check instead whether the downstream carrier can forward its labeled traffic across the upstream core.

B:

That observation would verify a separate fault involving the vpn import policy modifies best-path attributes inconsistently. Its symptom is A remote PE selects the backup site because the route policy overwrote local preference. For this case the actual issue is the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution, and the relevant success signal is The downstream carrier can forward its labeled traffic across the upstream core.

D:

It confirms an unrelated service correction: Spoke import/export RT policy grants direct spoke route membership. The present case reports An interprovider labeled packet cannot be forwarded through the upstream core. Its completion test is The downstream carrier can forward its labeled traffic across the upstream core.

Question 623

A carrier-of-carriers VPN transports a downstream provider's routes. Observed: An interprovider labeled packet cannot be forwarded through the upstream core. What underlying protocol or service configuration problem best explains the evidence?

  1. Site-of-origin extended-community filtering is missing and can cause routing feedback.
  2. The carrier-of-carriers design lacks compatible labeled route distribution and transport resolution.
  3. Spoke import/export RT policy grants direct spoke route membership.
  4. The VPN import policy modifies best-path attributes inconsistently.

Explanation

Correct Answer

B:

Because an interprovider labeled packet cannot be forwarded through the upstream core, the likely cause is the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution. It is testable: Configure the supported hierarchical labeled transport service end to end. Expected follow-up: The downstream carrier can forward its labeled traffic across the upstream core.

Incorrect Answers

A:

That explanation fits another condition: Both PEs advertise the same CE prefix with inconsistent site-of-origin tags. The evidence here is An interprovider labeled packet cannot be forwarded through the upstream core. Its closer root cause is The carrier-of-carriers design lacks compatible labeled route distribution and transport resolution.

C:

Spoke import/export RT policy grants direct spoke route membership. would normally be accompanied by two spoke sites unexpectedly exchange routes without the central hub. The observed symptom is different: An interprovider labeled packet cannot be forwarded through the upstream core. The likely cause is The carrier-of-carriers design lacks compatible labeled route distribution and transport resolution.

D:

The stated cause is possible elsewhere but explains a remote pe selects the backup site because the route policy overwrote local preference, not an interprovider labeled packet cannot be forwarded through the upstream core. This incident is better attributed to the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution.

Question 624

A carrier-of-carriers VPN transports a downstream provider's routes. Observed: An interprovider labeled packet cannot be forwarded through the upstream core. Which ongoing validation gate would best detect a recurrence of this problem?

  1. For each approved related change, verify that the multihomed site's prefix remains stable without reimport looping. Flag recurrence if both PEs advertise the same CE prefix with inconsistent site-of-origin tags.
  2. For each approved related change, verify that the downstream carrier can forward its labeled traffic across the upstream core. Flag recurrence if an interprovider labeled packet cannot be forwarded through the upstream core.
  3. For each approved related change, verify that spokes communicate through the hub without direct route import between spokes. Flag recurrence if two spoke sites unexpectedly exchange routes without the central hub.
  4. For each approved related change, verify that vPN best path favors the primary and moves to backup during failure. Flag recurrence if a remote PE selects the backup site because the route policy overwrote local preference.

Explanation

Correct Answer

B:

A useful regression gate tests whether the downstream carrier can forward its labeled traffic across the upstream core and alerts when an interprovider labeled packet cannot be forwarded through the upstream core. This directly checks the technical weakness: The carrier-of-carriers design lacks compatible labeled route distribution and transport resolution. The gate is derived from the fictional incident and is not an independent Juniper engineer signoff.

Incorrect Answers

A:

It is valid for another service scenario but checks both pes advertise the same ce prefix with inconsistent site-of-origin tags. This case instead needs a gate for an interprovider labeled packet cannot be forwarded through the upstream core and evidence that the downstream carrier can forward its labeled traffic across the upstream core.

C:

This gate monitors a different failure, two spoke sites unexpectedly exchange routes without the central hub. It would not detect the current problem: An interprovider labeled packet cannot be forwarded through the upstream core. The appropriate check requires the downstream carrier can forward its labeled traffic across the upstream core.

D:

The proposed control is tied to the vpn import policy modifies best-path attributes inconsistently, typically observed when a remote PE selects the backup site because the route policy overwrote local preference. Here the target is the carrier-of-carriers design lacks compatible labeled route distribution and transport resolution; monitor the downstream carrier can forward its labeled traffic across the upstream core.

Question 625

An L3VPN has two possible VPN routes for the same prefix. Observed: A remote PE selects the backup site because the route policy overwrote local preference. Which change most directly corrects the failure while respecting the existing service boundary?

  1. Remove shared RT membership and use a controlled firewall/service-exchange VRF if justified.
  2. Add the approved VPN membership RT set while retaining unrelated route filtering.
  3. Temporarily accept both RTs during a controlled migration then remove the old one.
  4. Restore the intended per-VRF primary/backup BGP route policy.

Explanation

Correct Answer

D:

The observed condition is A remote PE selects the backup site because the route policy overwrote local preference. That indicates the vpn import policy modifies best-path attributes inconsistently. Applying the proposed remedy directly changes that condition. A concrete completion check is: VPN best path favors the primary and moves to backup during failure.

Incorrect Answers

A:

This change belongs to a different Layer 3 VPNs issue: A route received through one partner is installed in the other's VRF. That issue involves cross-service route-target import is too permissive for overlapping partner addresses. The current symptom is A remote PE selects the backup site because the route policy overwrote local preference. It instead requires restore the intended per-VRF primary/backup BGP route policy.

B:

The option may be useful when the new VRF learns only one existing site after provisioning, but that is not the current evidence. Here, a remote PE selects the backup site because the route policy overwrote local preference, indicating the vpn import policy modifies best-path attributes inconsistently. The targeted action is Restore the intended per-VRF primary/backup BGP route policy.

C:

This remediates export and import route-target changes were not staged compatibly, normally indicated by Existing remote PEs stop importing routes before the new target is installed. It would leave the observed problem (A remote PE selects the backup site because the route policy overwrote local preference) unresolved. Address it with restore the intended per-VRF primary/backup BGP route policy.

Question 626

An L3VPN has two possible VPN routes for the same prefix. Observed: A remote PE selects the backup site because the route policy overwrote local preference. After the correction, which result would most convincingly show that this fault is resolved?

  1. Partner routes remain isolated except through explicitly approved exchange paths.
  2. VPN best path favors the primary and moves to backup during failure.
  3. All full-mesh sites exchange permitted prefixes with the new CE.
  4. Every site remains reachable through migration and converges on the new RT.

Explanation

Correct Answer

B:

After restore the intended per-VRF primary/backup BGP route policy, inspect whether vPN best path favors the primary and moves to backup during failure. This closes the loop between the reported observation (A remote PE selects the backup site because the route policy overwrote local preference) and the underlying issue (The VPN import policy modifies best-path attributes inconsistently).

Incorrect Answers

A:

It confirms an unrelated service correction: Cross-service route-target import is too permissive for overlapping partner addresses. The present case reports A remote PE selects the backup site because the route policy overwrote local preference. Its completion test is VPN best path favors the primary and moves to backup during failure.

C:

That observation would verify a separate fault involving the new site imports an incomplete set of route targets for the vpn. Its symptom is The new VRF learns only one existing site after provisioning. For this case the actual issue is the vpn import policy modifies best-path attributes inconsistently, and the relevant success signal is VPN best path favors the primary and moves to backup during failure.

D:

This result is useful in another case with evidence Existing remote PEs stop importing routes before the new target is installed. It does not test recovery from a remote pe selects the backup site because the route policy overwrote local preference. Check instead whether vPN best path favors the primary and moves to backup during failure.

Question 627

An L3VPN has two possible VPN routes for the same prefix. Observed: A remote PE selects the backup site because the route policy overwrote local preference. Which root cause is most consistent with this symptom?

  1. Export and import route-target changes were not staged compatibly.
  2. The VPN import policy modifies best-path attributes inconsistently.
  3. The new site imports an incomplete set of route targets for the VPN.
  4. Cross-service route-target import is too permissive for overlapping partner addresses.

Explanation

Correct Answer

B:

The reported evidence—A remote PE selects the backup site because the route policy overwrote local preference—supports the vpn import policy modifies best-path attributes inconsistently. The appropriate intervention is to restore the intended per-VRF primary/backup BGP route policy, with confirmation from vPN best path favors the primary and moves to backup during failure. Other causes require actual device-state verification.

Incorrect Answers

A:

That explanation fits another condition: Existing remote PEs stop importing routes before the new target is installed. The evidence here is A remote PE selects the backup site because the route policy overwrote local preference. Its closer root cause is The VPN import policy modifies best-path attributes inconsistently.

C:

The stated cause is possible elsewhere but explains the new vrf learns only one existing site after provisioning, not a remote pe selects the backup site because the route policy overwrote local preference. This incident is better attributed to the vpn import policy modifies best-path attributes inconsistently.

D:

Cross-service route-target import is too permissive for overlapping partner addresses. would normally be accompanied by a route received through one partner is installed in the other's vrf. The observed symptom is different: A remote PE selects the backup site because the route policy overwrote local preference. The likely cause is The VPN import policy modifies best-path attributes inconsistently.

Question 628

An L3VPN has two possible VPN routes for the same prefix. Observed: A remote PE selects the backup site because the route policy overwrote local preference. Which change-acceptance control is most relevant to preventing this exact failure?

  1. For each approved related change, verify that all full-mesh sites exchange permitted prefixes with the new CE. Flag recurrence if the new VRF learns only one existing site after provisioning.
  2. For each approved related change, verify that every site remains reachable through migration and converges on the new RT. Flag recurrence if existing remote PEs stop importing routes before the new target is installed.
  3. For each approved related change, verify that vPN best path favors the primary and moves to backup during failure. Flag recurrence if a remote PE selects the backup site because the route policy overwrote local preference.
  4. For each approved related change, verify that partner routes remain isolated except through explicitly approved exchange paths. Flag recurrence if a route received through one partner is installed in the other's VRF.

Explanation

Correct Answer

C:

The control is specific to the initial failure. It requires the result VPN best path favors the primary and moves to backup during failure. and treats A remote PE selects the backup site because the route policy overwrote local preference. as a failure signal. The causal concern is the vpn import policy modifies best-path attributes inconsistently.

Incorrect Answers

A:

The proposed control is tied to the new site imports an incomplete set of route targets for the vpn, typically observed when the new VRF learns only one existing site after provisioning. Here the target is the vpn import policy modifies best-path attributes inconsistently; monitor vPN best path favors the primary and moves to backup during failure.

B:

It is valid for another service scenario but checks existing remote pes stop importing routes before the new target is installed. This case instead needs a gate for a remote pe selects the backup site because the route policy overwrote local preference and evidence that vPN best path favors the primary and moves to backup during failure.

D:

This gate monitors a different failure, a route received through one partner is installed in the other's vrf. It would not detect the current problem: A remote PE selects the backup site because the route policy overwrote local preference. The appropriate check requires vPN best path favors the primary and moves to backup during failure.

Question 629

A provider rotates the route target value for a customer VPN. Observed: Existing remote PEs stop importing routes before the new target is installed. What should the routing engineer change first to address this particular symptom?

  1. Align the OSPF domain and supported VPN OSPF route handling settings.
  2. Verify bidirectional CE-to-PE routing and VRF export on the new site.
  3. Temporarily accept both RTs during a controlled migration then remove the old one.
  4. Scope RT and prefix exchange through the shared-services VRF to the DNS service only.

Explanation

Correct Answer

C:

The decisive evidence is that Existing remote PEs stop importing routes before the new target is installed. This follows from export and import route-target changes were not staged compatibly. The focused remedy is to temporarily accept both RTs during a controlled migration then remove the old one. Confirm improvement when every site remains reachable through migration and converges on the new RT. Validate on an approved lab or change window before touching production.

Incorrect Answers

A:

This remediates mp-bgp ospf domain or extended-community treatment differs across provider edges, normally indicated by Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. It would leave the observed problem (Existing remote PEs stop importing routes before the new target is installed) unresolved. Address it with temporarily accept both RTs during a controlled migration then remove the old one.

B:

This change belongs to a different Layer 3 VPNs issue: The remote PE sees the updated VPNv4 prefix but CE traffic cannot return. That issue involves return-route exchange from the new site into its local vrf is missing. The current symptom is Existing remote PEs stop importing routes before the new target is installed. It instead requires temporarily accept both RTs during a controlled migration then remove the old one.

D:

The option may be useful when customer VRFs can reach shared DNS but also import other tenants' direct routes, but that is not the current evidence. Here, existing remote PEs stop importing routes before the new target is installed, indicating export and import route-target changes were not staged compatibly. The targeted action is Temporarily accept both RTs during a controlled migration then remove the old one.

Question 630

A provider rotates the route target value for a customer VPN. Observed: Existing remote PEs stop importing routes before the new target is installed. Which acceptance observation best confirms that the proposed change worked?

  1. Traceroute and routing checks confirm two-way customer reachability.
  2. Every site remains reachable through migration and converges on the new RT.
  3. Only the shared DNS prefixes traverse service VRFs and tenants stay isolated.
  4. Remote CE sees the intended route type and stable preference.

Explanation

Correct Answer

B:

This acceptance criterion tests the actual fault. The source evidence was Existing remote PEs stop importing routes before the new target is installed. The correction addresses export and import route-target changes were not staged compatibly; success requires every site remains reachable through migration and converges on the new RT.

Incorrect Answers

A:

It confirms an unrelated service correction: Return-route exchange from the new site into its local VRF is missing. The present case reports Existing remote PEs stop importing routes before the new target is installed. Its completion test is Every site remains reachable through migration and converges on the new RT.

C:

That observation would verify a separate fault involving the shared-services exchange uses transit rts that permit uncontrolled customer-to-customer reachability. Its symptom is Customer VRFs can reach shared DNS but also import other tenants' direct routes. For this case the actual issue is export and import route-target changes were not staged compatibly, and the relevant success signal is Every site remains reachable through migration and converges on the new RT.

D:

This result is useful in another case with evidence Routes appear as interarea paths at a remote CE rather than expected intra-area continuation. It does not test recovery from existing remote pes stop importing routes before the new target is installed. Check instead whether every site remains reachable through migration and converges on the new RT.

Service Provider Routing and Switching, Professional (JNCIP-SP) (JN0-664) Practice Tests