McAfee-Secured Website

Exam Code: JN0-664

Exam Name: Service Provider Routing and Switching, Professional (JNCIP-SP)

Certification Provider: Juniper

Corresponding Certification: JNCIP-SP

100% Juniper JN0-664 Guaranteed Success With Testking Training Materials

Get Real JN0-664 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

96 Questions & Answers with Testing Engine

"Service Provider Routing and Switching, Professional (JNCIP-SP) Exam", also known as JN0-664 exam, is a Juniper certification exam.

Pass your tests with the always up-to-date JN0-664 Exam Engine. Your JN0-664 training materials keep you at the head of the pack!

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Was: $137.49
Now: $124.99

Juniper JN0-664 Practice Test 65

Question 640

A customer's two CEs announce identical prefixes to a PE. Observed: The VPN intermittently chooses the slower CE even though the primary is healthy. Which change-acceptance control is most relevant to preventing this exact failure?

  1. For each approved related change, verify that eligible CE prefixes enter the correct VRF and appear in remote VPN sites. Flag recurrence if the PE does not export the agreed customer prefixes into its VRF.
  2. For each approved related change, verify that vPN packets are forwarded successfully over each eligible transport path. Flag recurrence if the remote PE sees valid VPN reachability but data plane drops occur after ECMP change.
  3. For each approved related change, verify that allowed tenant traffic traverses the inspection service with symmetric return paths. Flag recurrence if one tenant bypasses inspection due to a direct imported route.
  4. For each approved related change, verify that the VPN picks the correct site under normal and simulated failure. Flag recurrence if the VPN intermittently chooses the slower CE even though the primary is healthy.

Explanation

Correct Answer

D:

The control is specific to the initial failure. It requires the result The VPN picks the correct site under normal and simulated failure. and treats The VPN intermittently chooses the slower CE even though the primary is healthy. as a failure signal. The causal concern is pe inbound route preference does not reflect the customer's intended ce priority.

Incorrect Answers

A:

The proposed control is tied to the ce-facing import policy is not accepting those routes, typically observed when the PE does not export the agreed customer prefixes into its VRF. Here the target is pe inbound route preference does not reflect the customer's intended ce priority; monitor the VPN picks the correct site under normal and simulated failure.

B:

It is valid for another service scenario but checks the remote pe sees valid vpn reachability but data plane drops occur after ecmp change. This case instead needs a gate for the vpn intermittently chooses the slower ce even though the primary is healthy and evidence that the VPN picks the correct site under normal and simulated failure.

C:

This gate monitors a different failure, one tenant bypasses inspection due to a direct imported route. It would not detect the current problem: The VPN intermittently chooses the slower CE even though the primary is healthy. The appropriate check requires the VPN picks the correct site under normal and simulated failure.

Question 641

An L3VPN uses VRF table labels with multipath transport. Observed: The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. What should the routing engineer change first to address this particular symptom?

  1. Check labels and forwarding entries across all ECMP transport next hops and repair the fault.
  2. Correct VRF label association and inspect MPLS service-label forwarding state.
  3. Remove unintended master-table import and implement a scoped VPN-only default.
  4. Enable the proper VPN family and permitted route reflection policy.

Explanation

Correct Answer

A:

The decisive evidence is that The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. This follows from service-label forwarding and transport next-hop resolution disagree on one path. The focused remedy is to check labels and forwarding entries across all ECMP transport next hops and repair the fault. Confirm improvement when vPN packets are forwarded successfully over each eligible transport path. Validate on an approved lab or change window before touching production.

Incorrect Answers

B:

This remediates the service label maps to an unexpected forwarding table or vrf, normally indicated by Customer VPN packets arrive with a valid label but are dropped during VRF lookup. It would leave the observed problem (The remote PE sees valid VPN reachability but data plane drops occur after ECMP change) unresolved. Address it with check labels and forwarding entries across all ECMP transport next hops and repair the fault.

C:

The option may be useful when core transit traffic starts following a customer Internet gateway, but that is not the current evidence. Here, the remote PE sees valid VPN reachability but data plane drops occur after ECMP change, indicating service-label forwarding and transport next-hop resolution disagree on one path. The targeted action is Check labels and forwarding entries across all ECMP transport next hops and repair the fault.

D:

This change belongs to a different Layer 3 VPNs issue: The reflector does not redistribute one customer's VPN NLRI to other PEs. That issue involves the reflector's vpn address family or customer route filtering is incomplete. The current symptom is The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. It instead requires check labels and forwarding entries across all ECMP transport next hops and repair the fault.

Question 642

An L3VPN uses VRF table labels with multipath transport. Observed: The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. Which acceptance observation best confirms that the proposed change worked?

  1. VPN packets are forwarded successfully over each eligible transport path.
  2. Inbound labeled packets resolve into the intended customer's VRF.
  3. All authorized PEs receive the customer's VPN NLRI with valid RTs.
  4. Core routing stays independent and tenant Internet access follows its authorized path.

Explanation

Correct Answer

A:

This acceptance criterion tests the actual fault. The source evidence was The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. The correction addresses service-label forwarding and transport next-hop resolution disagree on one path; success requires vPN packets are forwarded successfully over each eligible transport path.

Incorrect Answers

B:

This result is useful in another case with evidence Customer VPN packets arrive with a valid label but are dropped during VRF lookup. It does not test recovery from the remote pe sees valid vpn reachability but data plane drops occur after ecmp change. Check instead whether vPN packets are forwarded successfully over each eligible transport path.

C:

It confirms an unrelated service correction: The reflector's VPN address family or customer route filtering is incomplete. The present case reports The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. Its completion test is VPN packets are forwarded successfully over each eligible transport path.

D:

That observation would verify a separate fault involving a route leak was configured in the wrong direction between master and tenant vrfs. Its symptom is Core transit traffic starts following a customer Internet gateway. For this case the actual issue is service-label forwarding and transport next-hop resolution disagree on one path, and the relevant success signal is VPN packets are forwarded successfully over each eligible transport path.

Question 643

An L3VPN uses VRF table labels with multipath transport. Observed: The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. What is the most likely source of the observed routing or service failure?

  1. The service label maps to an unexpected forwarding table or VRF.
  2. The reflector's VPN address family or customer route filtering is incomplete.
  3. Service-label forwarding and transport next-hop resolution disagree on one path.
  4. A route leak was configured in the wrong direction between master and tenant VRFs.

Explanation

Correct Answer

C:

This explanation is the closest match to the observed symptom: The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. The specified root issue is Service-label forwarding and transport next-hop resolution disagree on one path. Repair it through check labels and forwarding entries across all ECMP transport next hops and repair the fault, then check vPN packets are forwarded successfully over each eligible transport path.

Incorrect Answers

A:

That explanation fits another condition: Customer VPN packets arrive with a valid label but are dropped during VRF lookup. The evidence here is The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. Its closer root cause is Service-label forwarding and transport next-hop resolution disagree on one path.

B:

The reflector's VPN address family or customer route filtering is incomplete. would normally be accompanied by the reflector does not redistribute one customer's vpn nlri to other pes. The observed symptom is different: The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. The likely cause is Service-label forwarding and transport next-hop resolution disagree on one path.

D:

The stated cause is possible elsewhere but explains core transit traffic starts following a customer internet gateway, not the remote pe sees valid vpn reachability but data plane drops occur after ecmp change. This incident is better attributed to service-label forwarding and transport next-hop resolution disagree on one path.

Question 644

An L3VPN uses VRF table labels with multipath transport. Observed: The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. What operational check best guards against this problem returning?

  1. For each approved related change, verify that all authorized PEs receive the customer's VPN NLRI with valid RTs. Flag recurrence if the reflector does not redistribute one customer's VPN NLRI to other PEs.
  2. For each approved related change, verify that core routing stays independent and tenant Internet access follows its authorized path. Flag recurrence if core transit traffic starts following a customer Internet gateway.
  3. For each approved related change, verify that vPN packets are forwarded successfully over each eligible transport path. Flag recurrence if the remote PE sees valid VPN reachability but data plane drops occur after ECMP change.
  4. For each approved related change, verify that inbound labeled packets resolve into the intended customer's VRF. Flag recurrence if customer VPN packets arrive with a valid label but are dropped during VRF lookup.

Explanation

Correct Answer

C:

This control asks for the same recovery evidence (VPN packets are forwarded successfully over each eligible transport path) and flags recurrence of the same failure (The remote PE sees valid VPN reachability but data plane drops occur after ECMP change). It targets the underlying issue, service-label forwarding and transport next-hop resolution disagree on one path, rather than a different service problem. The exact cadence must be agreed with operations.

Incorrect Answers

A:

This gate monitors a different failure, the reflector does not redistribute one customer's vpn nlri to other pes. It would not detect the current problem: The remote PE sees valid VPN reachability but data plane drops occur after ECMP change. The appropriate check requires vPN packets are forwarded successfully over each eligible transport path.

B:

The proposed control is tied to a route leak was configured in the wrong direction between master and tenant vrfs, typically observed when core transit traffic starts following a customer Internet gateway. Here the target is service-label forwarding and transport next-hop resolution disagree on one path; monitor vPN packets are forwarded successfully over each eligible transport path.

D:

It is valid for another service scenario but checks customer vpn packets arrive with a valid label but are dropped during vrf lookup. This case instead needs a gate for the remote pe sees valid vpn reachability but data plane drops occur after ecmp change and evidence that vPN packets are forwarded successfully over each eligible transport path.

Question 645

A PE exports customer routes to an MP-BGP route reflector. Observed: The reflector does not redistribute one customer's VPN NLRI to other PEs. Which targeted remediation is most appropriate for the observed condition?

  1. Configure approved option B VPN route exchange and valid labeled next-hop rewrite as designed.
  2. Tighten tenant VRF RT/prefix filters to reject infrastructure destinations.
  3. Enable the proper VPN family and permitted route reflection policy.
  4. Configure supported inet6 VPN family and per-VRF IPv6 routing policies.

Explanation

Correct Answer

C:

This fix addresses the stated cause rather than an unrelated protocol. The reported symptom—The reflector does not redistribute one customer's VPN NLRI to other PEs—is consistent with the reflector's vpn address family or customer route filtering is incomplete. Use the specified correction, then verify: All authorized PEs receive the customer's VPN NLRI with valid RTs. Preserve existing policy and tenant isolation.

Incorrect Answers

A:

This remediates asbr mp-bgp labeled vpn route handling and next-hop resolution are incomplete, normally indicated by Customer VPN prefixes reach the ASBR but fail beyond the boundary. It would leave the observed problem (The reflector does not redistribute one customer's VPN NLRI to other PEs) unresolved. Address it with enable the proper VPN family and permitted route reflection policy.

B:

The option may be useful when provider-wide BGP policy accidentally imports the provider loopback into a customer VRF, but that is not the current evidence. Here, the reflector does not redistribute one customer's VPN NLRI to other PEs, indicating the reflector's vpn address family or customer route filtering is incomplete. The targeted action is Enable the proper VPN family and permitted route reflection policy.

D:

This change belongs to a different Layer 3 VPNs issue: IPv4 L3VPN works but VPNv6 routes do not reach remote PEs. That issue involves mp-bgp vpnv6 family and vrf ipv6 route exchange were not enabled consistently. The current symptom is The reflector does not redistribute one customer's VPN NLRI to other PEs. It instead requires enable the proper VPN family and permitted route reflection policy.

Question 646

A PE exports customer routes to an MP-BGP route reflector. Observed: The reflector does not redistribute one customer's VPN NLRI to other PEs. What evidence would validate recovery from this precise failure mode?

  1. Customer route tables exclude core loopbacks while customer service remains intact.
  2. Far-side PEs import intended VPN routes and customer packets traverse the AS boundary.
  3. VPNv6 reachability appears only at authorized remote IPv6 sites.
  4. All authorized PEs receive the customer's VPN NLRI with valid RTs.

Explanation

Correct Answer

D:

The intended result is All authorized PEs receive the customer's VPN NLRI with valid RTs. It specifically verifies recovery from the reflector's vpn address family or customer route filtering is incomplete, which produced the original symptom: The reflector does not redistribute one customer's VPN NLRI to other PEs. It is stronger evidence than a generic interface-up indicator.

Incorrect Answers

A:

That observation would verify a separate fault involving the import policy lacks explicit provider-infrastructure prefix exclusion. Its symptom is Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. For this case the actual issue is the reflector's vpn address family or customer route filtering is incomplete, and the relevant success signal is All authorized PEs receive the customer's VPN NLRI with valid RTs.

B:

This result is useful in another case with evidence Customer VPN prefixes reach the ASBR but fail beyond the boundary. It does not test recovery from the reflector does not redistribute one customer's vpn nlri to other pes. Check instead whether all authorized PEs receive the customer's VPN NLRI with valid RTs.

C:

It confirms an unrelated service correction: MP-BGP VPNv6 family and VRF IPv6 route exchange were not enabled consistently. The present case reports The reflector does not redistribute one customer's VPN NLRI to other PEs. Its completion test is All authorized PEs receive the customer's VPN NLRI with valid RTs.

Question 647

A PE exports customer routes to an MP-BGP route reflector. Observed: The reflector does not redistribute one customer's VPN NLRI to other PEs. What underlying protocol or service configuration problem best explains the evidence?

  1. MP-BGP VPNv6 family and VRF IPv6 route exchange were not enabled consistently.
  2. The reflector's VPN address family or customer route filtering is incomplete.
  3. ASBR MP-BGP labeled VPN route handling and next-hop resolution are incomplete.
  4. The import policy lacks explicit provider-infrastructure prefix exclusion.

Explanation

Correct Answer

B:

Because the reflector does not redistribute one customer's VPN NLRI to other PEs, the likely cause is the reflector's vpn address family or customer route filtering is incomplete. It is testable: Enable the proper VPN family and permitted route reflection policy. Expected follow-up: All authorized PEs receive the customer's VPN NLRI with valid RTs.

Incorrect Answers

A:

MP-BGP VPNv6 family and VRF IPv6 route exchange were not enabled consistently. would normally be accompanied by ipv4 l3vpn works but vpnv6 routes do not reach remote pes. The observed symptom is different: The reflector does not redistribute one customer's VPN NLRI to other PEs. The likely cause is The reflector's VPN address family or customer route filtering is incomplete.

C:

That explanation fits another condition: Customer VPN prefixes reach the ASBR but fail beyond the boundary. The evidence here is The reflector does not redistribute one customer's VPN NLRI to other PEs. Its closer root cause is The reflector's VPN address family or customer route filtering is incomplete.

D:

The stated cause is possible elsewhere but explains provider-wide bgp policy accidentally imports the provider loopback into a customer vrf, not the reflector does not redistribute one customer's vpn nlri to other pes. This incident is better attributed to the reflector's vpn address family or customer route filtering is incomplete.

Question 648

A PE exports customer routes to an MP-BGP route reflector. Observed: The reflector does not redistribute one customer's VPN NLRI to other PEs. Which ongoing validation gate would best detect a recurrence of this problem?

  1. For each approved related change, verify that customer route tables exclude core loopbacks while customer service remains intact. Flag recurrence if provider-wide BGP policy accidentally imports the provider loopback into a customer VRF.
  2. For each approved related change, verify that all authorized PEs receive the customer's VPN NLRI with valid RTs. Flag recurrence if the reflector does not redistribute one customer's VPN NLRI to other PEs.
  3. For each approved related change, verify that vPNv6 reachability appears only at authorized remote IPv6 sites. Flag recurrence if iPv4 L3VPN works but VPNv6 routes do not reach remote PEs.
  4. For each approved related change, verify that far-side PEs import intended VPN routes and customer packets traverse the AS boundary. Flag recurrence if customer VPN prefixes reach the ASBR but fail beyond the boundary.

Explanation

Correct Answer

B:

A useful regression gate tests whether all authorized PEs receive the customer's VPN NLRI with valid RTs and alerts when the reflector does not redistribute one customer's VPN NLRI to other PEs. This directly checks the technical weakness: The reflector's VPN address family or customer route filtering is incomplete. The gate is derived from the fictional incident and is not an independent Juniper engineer signoff.

Incorrect Answers

A:

The proposed control is tied to the import policy lacks explicit provider-infrastructure prefix exclusion, typically observed when provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. Here the target is the reflector's vpn address family or customer route filtering is incomplete; monitor all authorized PEs receive the customer's VPN NLRI with valid RTs.

C:

This gate monitors a different failure, ipv4 l3vpn works but vpnv6 routes do not reach remote pes. It would not detect the current problem: The reflector does not redistribute one customer's VPN NLRI to other PEs. The appropriate check requires all authorized PEs receive the customer's VPN NLRI with valid RTs.

D:

It is valid for another service scenario but checks customer vpn prefixes reach the asbr but fail beyond the boundary. This case instead needs a gate for the reflector does not redistribute one customer's vpn nlri to other pes and evidence that all authorized PEs receive the customer's VPN NLRI with valid RTs.

Question 649

A customer VRF contains two prefixes that overlap with a provider loopback. Observed: Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. Which change most directly corrects the failure while respecting the existing service boundary?

  1. Tighten tenant VRF RT/prefix filters to reject infrastructure destinations.
  2. Add a controlled Internet-service VRF/default route import with security enforcement.
  3. Match the supported MVPN transport profile and customer multicast state.
  4. Apply distinct route-target import policies for the separate VPNs.

Explanation

Correct Answer

A:

The observed condition is Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. That indicates the import policy lacks explicit provider-infrastructure prefix exclusion. Applying the proposed remedy directly changes that condition. A concrete completion check is: Customer route tables exclude core loopbacks while customer service remains intact.

Incorrect Answers

B:

The option may be useful when remote branches can reach each other but not the public Internet, but that is not the current evidence. Here, provider-wide BGP policy accidentally imports the provider loopback into a customer VRF, indicating the import policy lacks explicit provider-infrastructure prefix exclusion. The targeted action is Tighten tenant VRF RT/prefix filters to reject infrastructure destinations.

C:

This remediates mvpn provider-tunnel encapsulation or multicast transport mapping is inconsistent, normally indicated by Customer multicast control signaling exists but payload delivery fails at a remote PE. It would leave the observed problem (Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF) unresolved. Address it with tighten tenant VRF RT/prefix filters to reject infrastructure destinations.

D:

This change belongs to a different Layer 3 VPNs issue: Traffic from one customer appears in the other's routing table. That issue involves the pe imported vpn routes using shared route targets instead of isolated tenant membership. The current symptom is Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. It instead requires tighten tenant VRF RT/prefix filters to reject infrastructure destinations.

Question 650

A customer VRF contains two prefixes that overlap with a provider loopback. Observed: Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. After the correction, which result would most convincingly show that this fault is resolved?

  1. Each VRF receives only the customer routes authorized for its service.
  2. Customer route tables exclude core loopbacks while customer service remains intact.
  3. Receivers in the remote VPN get the correct multicast stream without cross-tenant delivery.
  4. Branch Internet flows use the approved breakout without cross-VPN leakage.

Explanation

Correct Answer

B:

After tighten tenant VRF RT/prefix filters to reject infrastructure destinations, inspect whether customer route tables exclude core loopbacks while customer service remains intact. This closes the loop between the reported observation (Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF) and the underlying issue (The import policy lacks explicit provider-infrastructure prefix exclusion).

Incorrect Answers

A:

It confirms an unrelated service correction: The PE imported VPN routes using shared route targets instead of isolated tenant membership. The present case reports Provider-wide BGP policy accidentally imports the provider loopback into a customer VRF. Its completion test is Customer route tables exclude core loopbacks while customer service remains intact.

C:

This result is useful in another case with evidence Customer multicast control signaling exists but payload delivery fails at a remote PE. It does not test recovery from provider-wide bgp policy accidentally imports the provider loopback into a customer vrf. Check instead whether customer route tables exclude core loopbacks while customer service remains intact.

D:

That observation would verify a separate fault involving no authorized internet route leak or default path exists for the branch vrfs. Its symptom is Remote branches can reach each other but not the public Internet. For this case the actual issue is the import policy lacks explicit provider-infrastructure prefix exclusion, and the relevant success signal is Customer route tables exclude core loopbacks while customer service remains intact.

Service Provider Routing and Switching, Professional (JNCIP-SP) (JN0-664) Practice Tests