JNCIE-DC Free Practice Questions
This practice bank covers fundamental data center networking concepts essential for the JNCIE-DC certification. Topics include spine-leaf topology benefits, underlay routing with IS-IS, VXLAN encapsulation, EVPN control plane using BGP, anycast gateway redundancy, link aggregation, VLAN segmentation, STP, inter-VLAN routing, and management plane functions. Operational commands like 'show interfaces terse' and 'show l2fib extensive' are tested. The bank emphasizes both theoretical understanding and practical CLI verification, preparing candidates for real-world troubleshooting and design decisions in Juniper environments.
What this JNCIE-DC practice set measures
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
Topology & Underlay
The practice bank tests foundational underlay concepts and scalable topologies. Spine-leaf (Clos) architectures provide non-blocking east-west traffic, which is critical for data center performance. IS-IS is highlighted as a preferred underlay routing protocol due to its scalability and fast convergence. Link aggregation (LAG) combines physical links for bandwidth and redundancy. Understanding these elements is key to building a robust physical and IP fabric. The questions also touch on VLAN logical segmentation and STP loop prevention, though in modern DCN fabrics these are often supplemented by overlay technologies.
- Spine-leaf topology offers non-blocking, high-bandwidth east-west connectivity.
- IS-IS is commonly used for underlay routing in large-scale data centers.
- LAG increases bandwidth and provides link redundancy.
- VLANs logically segment traffic for security and manageability.
- STP prevents Layer 2 loops but is often replaced by fabric technologies.
Overlay & Virtualization
The overlay section focuses on VXLAN and EVPN, which are central to modern data center fabrics. VXLAN extends Layer 2 segments across Layer 3 boundaries using UDP encapsulation. The EVPN control plane uses BGP to distribute MAC and IP reachability, enabling host mobility and reducing flooding. Anycast gateway allows multiple leaf switches to share a default gateway IP for redundancy. These technologies are essential for multi-tenant environments and fabric-based architectures like Juniper's VCF. Understanding their interaction is critical for JNCIE-DC candidates.
- VXLAN encapsulates Layer 2 frames in UDP packets to cross Layer 3 networks.
- EVPN uses BGP to advertise MAC and IP prefixes in the control plane.
- Anycast gateway provides a shared IP for redundant default gateway service.
- BGP carries EVPN routes for efficient host reachability.
Operational Verification & Troubleshooting
This section covers essential commands for verifying and troubleshooting a data center network. 'show interfaces terse' provides a quick overview of interface status, while 'show l2fib extensive' displays the MAC address table. NTP synchronization ensures consistent timestamps for logs and events. The practice bank emphasizes practical CLI usage for monitoring and diagnostics. Candidates should be comfortable with these commands to validate configurations and isolate issues in both physical and virtualized environments.
- 'show interfaces terse' displays concise interface status and link state.
- 'show l2fib extensive' shows learned MAC addresses and forwarding state.
- NTP synchronizes time across devices for accurate logging.
- These commands are vital for initial troubleshooting steps.
Device Management & Security
Management plane topics include configuration, monitoring, and out-of-band access. The management plane is separate from data and control planes, ensuring administrative traffic does not impact data forwarding. App-ID (Application Recognition) enables policy based on application type rather than port. Inter-VLAN routing requires a VLAN interface (SVI) with an IP address. Understanding these features helps in deploying secure, manageable data center switches. The practice bank reinforces the distinction between planes and automation of classification.
- The management plane handles SSH, SNMP, and configuration changes.
- App-ID identifies traffic applications for granular policy enforcement.
- Inter-VLAN routing is configured via VLAN interfaces (SVIs).
- Separating management traffic ensures stability of data forwarding.
Practice JNCIE-DC with real flashcards
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Static practice bank
Start the 15-question diagnostic
The complete question bank is embedded in this pre-rendered page. There is no database request or second content download when you begin.
What is the primary purpose of a spine-leaf topology in a data center network?
Show hint
Describe common data center network topologies and their characteristics.
Study workflow
Turn one JNCIE-DC attempt into a study plan
- 1
Build a Spine-Leaf Lab
Set up two spine switches and four leaf switches in a Clos topology. Configure IS-IS on all underlay interfaces using Juniper CLI. Verify adjacency with 'show isis adjacency'. This step reinforces underlay connectivity and protocol fundamentals.
- 2
Configure VXLAN with EVPN
Implement VXLAN overlays on the leaf switches using EVPN as the control plane. Define VLANs and configure route distinguishers (RDs) and route targets (RTs). Use BGP sessions between spines and leaves to exchange EVPN routes. Verify with 'show evpn database'.
- 3
Test Anycast Gateway
Configure an anycast IP address on two leaf switches for the same VLAN. Set the same virtual MAC address using 'virtual-gateway-address'. Attach a host and verify connectivity; shut down one leaf interface and confirm fast failover using 'show arp'.
- 4
Monitor using Operational Commands
Practice 'show interfaces terse', 'show l2fib extensive', and 'show ntp associations' to diagnose issues. For example, check a down link with 'show interfaces terse' and MAC learning with 'show l2fib extensive'. Document expected outputs for each scenario.
- 5
Implement App-ID Policies
Enable Application Recognition (App-ID) on a Juniper switch and create a firewall filter that permits only specific applications (e.g., HTTP, HTTPS). Apply it to a VLAN interface. Test by generating traffic and using 'show security policies' to confirm classification.
FAQ
Questions about this JNCIE-DC practice page
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
Why is IS-IS preferred over OSPF in data center underlays?+
IS-IS is often chosen for its scalability in flat topologies, fast convergence, and native support for CLNS. It does not require IP connectivity to form adjacencies, which simplifies initial deployment. Juniper devices also support extended metrics and multi-topology routing, making IS-IS ideal for large spine-leaf fabrics.
How does VXLAN differ from traditional VLANs?+
VLANs use a 12-bit ID (4096 maximum) and are confined to a single Layer 2 domain. VXLAN uses a 24-bit segment ID (16 million), allowing massively scalable Layer 2 overlays across Layer 3 networks. VXLAN encapsulates Ethernet frames in UDP packets, enabling tenant isolation and VM mobility across data centers.
What is the role of BGP in an EVPN data center?+
BGP serves as the control plane protocol for EVPN, carrying MAC and IP routes between leaf switches. It advertises Type 2 (MAC/IP) and Type 5 (IP prefix) routes, enabling efficient host learning, mobility, and redundancy. BGP also supports multi-homing and load balancing through EVPN all-active mode.
Can I use 'show interfaces terse' to verify LAG status?+
Yes, 'show interfaces terse' displays aggregated interfaces as ae0, ae1 etc., and shows their status. For detailed LAG health, use 'show lacp interfaces' to check member links and bundle status. The terse command is a quick way to see if the LAG is up or down.
How does App-ID improve security in a data center?+
App-ID identifies applications by inspecting packet payloads, not just ports. This prevents policy bypass by applications using non-standard ports. For example, it can block peer-to-peer traffic even if it runs on port 80. In a data center, it helps enforce compliance and micro-segmentation policies.
Build the next review session
Browse another free bank or use the study strategy guide to turn your misses into spaced review.