Free practice · No sign-up required

JNCIE-DC free practice test

15 questions with answer explanations. Choose an answer below to begin.

Question 1 of 15

What is the primary purpose of a spine-leaf topology in a data center network?

Show hint

Describe common data center network topologies and their characteristics.

0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.

Learn by doing

Put your answers into practice

Use official documentation and hands-on labs to work through topics you missed.

Explore all study resources →

All questions and explanations

Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.

  1. What is the primary purpose of a spine-leaf topology in a data center network?

    1. To provide non-blocking, high-bandwidth east-west connectivity

    2. To replace core-distribution-aggregation layers with a single device

    3. To prioritize north-south traffic over east-west traffic

    4. To simplify management by using only Layer 2 forwarding

    Show answer and explanation

    Correct answer

    • To provide non-blocking, high-bandwidth east-west connectivity

    Spine-leaf designs create a Clos network that delivers uniform latency and high bisection bandwidth between any leaf switches. This architecture is optimized for server-to-server communication within the data center.

  2. Which routing protocol is commonly used between spine and leaf devices in an underlay network?

    1. OSPF

    2. BGP

    3. IS-IS

    4. RIP

    Show answer and explanation

    Correct answer

    • IS-IS

    IS-IS is frequently chosen for underlay routing in large-scale data centers due to its scalability and efficiency in handling flat anycast topologies. It supports fast convergence and integrates well with EVPN overlays.

  3. What does VXLAN stand for in the context of data center networking?

    1. Virtual eXtensible Local Area Network

    2. Virtualized eXternal Link Access Network

    3. Virtual eXchange Layer Aggregation Node

    4. Virtual eXtended Link Overlay Network

    Show answer and explanation

    Correct answer

    • Virtual eXtensible Local Area Network

    VXLAN is a network virtualization technology that encapsulates Layer 2 frames within Layer 3 UDP packets to extend Layer 2 segments across Layer 3 boundaries. It helps overcome VLAN ID limitations and supports multi-tenancy.

  4. Which feature is used to synchronize time across all devices in a Juniper data center switch?

    1. NTP

    2. PTP

    3. SNMP

    4. Syslog

    Show answer and explanation

    Correct answer

    • NTP

    Network Time Protocol (NTP) is used to ensure all devices share a consistent time reference, which is critical for logging, troubleshooting, and coordinated operations. Precision Time Protocol (PTP) is also supported for sub-microsecond accuracy in specific applications.

  5. What is the role of an EVPN control plane in a Juniper data center solution?

    1. To distribute MAC and IP reachability information across the fabric

    2. To encrypt traffic between spine and leaf devices

    3. To replace the need for Layer 3 gateways

    4. To manage physical cable connections between devices

    Show answer and explanation

    Correct answer

    • To distribute MAC and IP reachability information across the fabric

    Ethernet VPN (EVPN) uses BGP to advertise MAC and IP prefixes, enabling efficient host mobility and redundancy without relying on flooding. It provides a scalable control plane for Layer 2 and Layer 3 services in the data center.

  6. Which command would you use to check the status of a physical interface on a Juniper switch?

    1. show interfaces terse

    2. display interface status

    3. check interface operational

    4. list interfaces brief

    Show answer and explanation

    Correct answer

    • show interfaces terse

    The operational command 'show interfaces terse' provides a concise overview of interface states, including link status and error counters. This is a common troubleshooting step for verifying physical connectivity.

  7. What does the term 'anycast gateway' refer to in a data center network?

    1. A single IP address shared by multiple devices for redundancy

    2. A gateway that supports both IPv4 and IPv6 simultaneously

    3. A gateway located in any geographic location

    4. A gateway that routes traffic to the least loaded server

    Show answer and explanation

    Correct answer

    • A single IP address shared by multiple devices for redundancy

    Anycast gateway allows multiple devices to share the same IP address, typically used for default gateways in Layer 3 host communication. The network directs hosts to the nearest or most appropriate device providing the service.

  8. Which protocol is used for host reachability and MAC address advertisement in an EVPN-based data center?

    1. BGP

    2. OSPF

    3. IS-IS

    4. RIP

    Show answer and explanation

    Correct answer

    • BGP

    BGP is the protocol used to carry EVPN routes, including MAC and IP reachability information, across the fabric. This allows for efficient host learning and mobility without relying on Layer 2 flooding.

  9. What is the purpose of a link aggregation group (LAG) in a data center switch?

    1. To combine multiple physical links into a single logical link for increased bandwidth and redundancy

    2. To isolate broadcast domains between different VLANs

    3. To provide a dedicated management path separate from user traffic

    4. To replace the need for routing protocols in the underlay

    Show answer and explanation

    Correct answer

    • To combine multiple physical links into a single logical link for increased bandwidth and redundancy

    LAG bundles multiple physical ports to act as a single logical connection, improving throughput and providing failover in case of a link failure. It is commonly used between servers and switches or between switches.

  10. Question 10

    Link to question

    Which feature enables a Juniper switch to automatically detect and classify traffic applications?

    1. Application Recognition (App-ID)

    2. Flow Monitoring (sFlow)

    3. NetFlow Export

    4. Port Mirroring (SPAN)

    Show answer and explanation

    Correct answer

    • Application Recognition (App-ID)

    Application Recognition, often referred to as App-ID, allows the device to identify applications regardless of port number, enabling policy enforcement based on application type rather than just port usage.

  11. Question 11

    Link to question

    What is the primary benefit of using VLANs in a data center network?

    1. To logically segment traffic and improve security and manageability

    2. To increase the physical speed of network links

    3. To eliminate the need for routing between subnets

    4. To replace the need for firewalls

    Show answer and explanation

    Correct answer

    • To logically segment traffic and improve security and manageability

    VLANs provide logical segmentation of broadcast domains, which enhances security by isolating traffic and simplifies management by grouping devices with similar requirements. This is essential in multi-tenant data center environments.

  12. Question 12

    Link to question

    Which command is used to view the MAC address table on a Juniper switch?

    1. show mac table

    2. display mac-learning

    3. show l2fib extensive

    4. list arp entries

    Show answer and explanation

    Correct answer

    • show l2fib extensive

    The command 'show l2fib extensive' displays the Layer 2 forwarding information base, including MAC addresses learned on each interface. This is useful for troubleshooting connectivity and host placement within the network.

  13. Question 13

    Link to question

    What does STP stand for in the context of Ethernet networks?

    1. Spanning Tree Protocol

    2. Shortest Tree Path

    3. Secure Transport Protocol

    4. Switch Trunking Protocol

    Show answer and explanation

    Correct answer

    • Spanning Tree Protocol

    Spanning Tree Protocol prevents loops in Layer 2 networks by logically disabling redundant paths while providing backup paths in case of link failure. Juniper switches support STP and its rapid variants like RSTP and MSTP.

  14. Question 14

    Link to question

    Which configuration element is required to enable inter-VLAN routing on a Juniper switch?

    1. VLAN interface with an IP address

    2. Physical interface assigned to a VLAN

    3. Static route to the VLAN subnet

    4. Dynamic routing protocol enabled globally

    Show answer and explanation

    Correct answer

    • VLAN interface with an IP address

    To route between VLANs, you must configure a VLAN interface (also known as a SVI) with an IP address and assign it to the appropriate VLAN. This provides a Layer 3 gateway for hosts in each VLAN.

  15. Question 15

    Link to question

    What is the purpose of a management plane in a network device?

    1. To handle device configuration, monitoring, and out-of-band management traffic

    2. To forward user data packets at wire speed

    3. To provide physical connectivity for console access

    4. To optimize data plane packet processing performance

    Show answer and explanation

    Correct answer

    • To handle device configuration, monitoring, and out-of-band management traffic

    The management plane is responsible for device administration tasks such as SSH access, SNMP polling, and configuration changes. It is typically separated from the data plane to ensure control traffic does not interfere with user traffic.

Read all flashcards

Recall the answer before opening each card.

What is the main advantage of spine-leaf topology?

It provides non-blocking, high-bandwidth east-west connectivity by creating a Clos network with uniform latency and high bisection bandwidth.

Which underlay routing protocol is commonly used in Juniper data centers?

IS-IS is frequently chosen for its scalability, fast convergence, and ability to support flat anycast topologies.

What does VXLAN stand for?

Virtual eXtensible Local Area Network. It encapsulates Layer 2 frames in UDP packets to extend Layer 2 segments across Layer 3 boundaries.

How is time synchronized across Juniper data center switches?

Network Time Protocol (NTP) is used to ensure all devices share a consistent time reference for logging and coordinated operations.

What does EVPN control plane distribute?

EVPN uses BGP to distribute MAC and IP reachability information across the fabric, enabling efficient host mobility and redundancy.

Which command shows interface status concisely?

'show interfaces terse' provides a quick overview of interface states, including link status and error counters.

What is an anycast gateway?

A single IP address shared by multiple devices for redundancy. The network directs hosts to the nearest or most appropriate device.

Which protocol carries EVPN routes?

BGP carries EVPN routes, including MAC and IP reachability information, across the fabric.

Why use a link aggregation group (LAG)?

LAG combines multiple physical links into a single logical link for increased bandwidth and redundancy in case of link failure.

What feature auto-detects application traffic on Juniper switches?

Application Recognition (App-ID) identifies applications regardless of port number, enabling application-based policy enforcement.

What is a key benefit of VLANs?

VLANs logically segment traffic to improve security and manageability by isolating broadcast domains and grouping devices.

Which command displays the MAC address table?

'show l2fib extensive' shows the Layer 2 forwarding information base, including MAC addresses learned on each interface.

What does STP prevent?

Spanning Tree Protocol prevents loops in Layer 2 networks by logically disabling redundant paths while providing backup paths.

What is needed for inter-VLAN routing?

A VLAN interface (SVI) with an IP address must be configured and assigned to the VLAN to provide a Layer 3 gateway.

What does the management plane handle?

The management plane handles device configuration, monitoring, and out-of-band management traffic like SSH and SNMP.

What is the purpose of VXLAN in data centers?

VXLAN extends Layer 2 segments across Layer 3 boundaries by encapsulating Ethernet frames in UDP tunnels, supporting 16 million segments.

How does EVPN improve host learning?

EVPN uses BGP to advertise MAC and IP prefixes, eliminating reliance on flooding and allowing efficient host mobility.

What command shows LAG member details?

'show lacp interfaces' displays LACP status for member links and bundle health, while 'show interfaces terse' shows aggregate interface status.

What is the role of IS-IS in underlay?

IS-IS provides scalable, fast-converging routing for spine-leaf topologies, supporting flat addressing and anycast gateway.

How does App-ID identify applications?

App-ID inspects packet payloads to identify applications by their signatures, not just port numbers, enabling precise policy enforcement.

Active recall deck

Practice JNCIE-DC with real flashcards

Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.

20 free cards

Card 1 of 20

1 reviewed this session

Connect the concepts

Your JNCIE-DC study mind map

Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.

JNCIE-DC15 questions in this practice set
Describe common data center network topologies and their characteristics.(1)
Identify appropriate routing protocols for data center underlay networks.(1)
Explain network virtualization technologies and their benefits.(1)
Configure and verify time synchronization methods on network devices.(1)
Understand the function of EVPN in modern data center fabrics.(1)
Use Juniper CLI to monitor and verify interface status.(1)
Explain high availability and redundancy mechanisms using anycast addressing.(1)
Identify the control plane protocol used for EVPN route distribution.(1)
Explain link aggregation concepts and benefits in data center designs.(1)
Use traffic identification and classification features for policy enforcement.(1)
Understand the role of VLANs in network segmentation and security.(1)
Verify Layer 2 forwarding state and MAC address learning.(1)
More practice connections(3)
Exam-focused analysis

What this JNCIE-DC practice set measures

This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.

Topology & Underlay

The practice bank tests foundational underlay concepts and scalable topologies. Spine-leaf (Clos) architectures provide non-blocking east-west traffic, which is critical for data center performance. IS-IS is highlighted as a preferred underlay routing protocol due to its scalability and fast convergence. Link aggregation (LAG) combines physical links for bandwidth and redundancy. Understanding these elements is key to building a robust physical and IP fabric. The questions also touch on VLAN logical segmentation and STP loop prevention, though in modern DCN fabrics these are often supplemented by overlay technologies.

  • Spine-leaf topology offers non-blocking, high-bandwidth east-west connectivity.
  • IS-IS is commonly used for underlay routing in large-scale data centers.
  • LAG increases bandwidth and provides link redundancy.
  • VLANs logically segment traffic for security and manageability.
  • STP prevents Layer 2 loops but is often replaced by fabric technologies.

Overlay & Virtualization

The overlay section focuses on VXLAN and EVPN, which are central to modern data center fabrics. VXLAN extends Layer 2 segments across Layer 3 boundaries using UDP encapsulation. The EVPN control plane uses BGP to distribute MAC and IP reachability, enabling host mobility and reducing flooding. Anycast gateway allows multiple leaf switches to share a default gateway IP for redundancy. These technologies are essential for multi-tenant environments and fabric-based architectures like Juniper's VCF. Understanding their interaction is critical for JNCIE-DC candidates.

  • VXLAN encapsulates Layer 2 frames in UDP packets to cross Layer 3 networks.
  • EVPN uses BGP to advertise MAC and IP prefixes in the control plane.
  • Anycast gateway provides a shared IP for redundant default gateway service.
  • BGP carries EVPN routes for efficient host reachability.

Operational Verification & Troubleshooting

This section covers essential commands for verifying and troubleshooting a data center network. 'show interfaces terse' provides a quick overview of interface status, while 'show l2fib extensive' displays the MAC address table. NTP synchronization ensures consistent timestamps for logs and events. The practice bank emphasizes practical CLI usage for monitoring and diagnostics. Candidates should be comfortable with these commands to validate configurations and isolate issues in both physical and virtualized environments.

  • 'show interfaces terse' displays concise interface status and link state.
  • 'show l2fib extensive' shows learned MAC addresses and forwarding state.
  • NTP synchronizes time across devices for accurate logging.
  • These commands are vital for initial troubleshooting steps.

Device Management & Security

Management plane topics include configuration, monitoring, and out-of-band access. The management plane is separate from data and control planes, ensuring administrative traffic does not impact data forwarding. App-ID (Application Recognition) enables policy based on application type rather than port. Inter-VLAN routing requires a VLAN interface (SVI) with an IP address. Understanding these features helps in deploying secure, manageable data center switches. The practice bank reinforces the distinction between planes and automation of classification.

  • The management plane handles SSH, SNMP, and configuration changes.
  • App-ID identifies traffic applications for granular policy enforcement.
  • Inter-VLAN routing is configured via VLAN interfaces (SVIs).
  • Separating management traffic ensures stability of data forwarding.

Study workflow

Turn one JNCIE-DC attempt into a study plan

  1. 1

    Build a Spine-Leaf Lab

    Set up two spine switches and four leaf switches in a Clos topology. Configure IS-IS on all underlay interfaces using Juniper CLI. Verify adjacency with 'show isis adjacency'. This step reinforces underlay connectivity and protocol fundamentals.

  2. 2

    Configure VXLAN with EVPN

    Implement VXLAN overlays on the leaf switches using EVPN as the control plane. Define VLANs and configure route distinguishers (RDs) and route targets (RTs). Use BGP sessions between spines and leaves to exchange EVPN routes. Verify with 'show evpn database'.

  3. 3

    Test Anycast Gateway

    Configure an anycast IP address on two leaf switches for the same VLAN. Set the same virtual MAC address using 'virtual-gateway-address'. Attach a host and verify connectivity; shut down one leaf interface and confirm fast failover using 'show arp'.

  4. 4

    Monitor using Operational Commands

    Practice 'show interfaces terse', 'show l2fib extensive', and 'show ntp associations' to diagnose issues. For example, check a down link with 'show interfaces terse' and MAC learning with 'show l2fib extensive'. Document expected outputs for each scenario.

  5. 5

    Implement App-ID Policies

    Enable Application Recognition (App-ID) on a Juniper switch and create a firewall filter that permits only specific applications (e.g., HTTP, HTTPS). Apply it to a VLAN interface. Test by generating traffic and using 'show security policies' to confirm classification.

FAQ

Questions about this JNCIE-DC practice page

Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.

Why is IS-IS preferred over OSPF in data center underlays?+

IS-IS is often chosen for its scalability in flat topologies, fast convergence, and native support for CLNS. It does not require IP connectivity to form adjacencies, which simplifies initial deployment. Juniper devices also support extended metrics and multi-topology routing, making IS-IS ideal for large spine-leaf fabrics.

How does VXLAN differ from traditional VLANs?+

VLANs use a 12-bit ID (4096 maximum) and are confined to a single Layer 2 domain. VXLAN uses a 24-bit segment ID (16 million), allowing massively scalable Layer 2 overlays across Layer 3 networks. VXLAN encapsulates Ethernet frames in UDP packets, enabling tenant isolation and VM mobility across data centers.

What is the role of BGP in an EVPN data center?+

BGP serves as the control plane protocol for EVPN, carrying MAC and IP routes between leaf switches. It advertises Type 2 (MAC/IP) and Type 5 (IP prefix) routes, enabling efficient host learning, mobility, and redundancy. BGP also supports multi-homing and load balancing through EVPN all-active mode.

Can I use 'show interfaces terse' to verify LAG status?+

Yes, 'show interfaces terse' displays aggregated interfaces as ae0, ae1 etc., and shows their status. For detailed LAG health, use 'show lacp interfaces' to check member links and bundle status. The terse command is a quick way to see if the LAG is up or down.

How does App-ID improve security in a data center?+

App-ID identifies applications by inspecting packet payloads, not just ports. This prevents policy bypass by applications using non-standard ports. For example, it can block peer-to-peer traffic even if it runs on port 80. In a data center, it helps enforce compliance and micro-segmentation policies.

Keep studying

Build the next review session

Browse another free bank or use the study strategy guide to turn your misses into spaced review.