Cisco®
Oracle
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
All Vendors
  2. Home
  3. Exams
  4. Juniper
  5. JN0-460

Free Juniper JN0-460 Exam Questions (page: 2)

Page 2 of 10
PDF with 69 Questions

Which statement is correct about a 3-stage campus fabric IP Clos?

  1. The distribution layer is connected to the access layer.
  2. The distribution layer is connected to the core layer.
  3. The core layer is connected to the access layer.
  4. The core layer devices are connected to each other.

Answer(s): C

Explanation:

Juniper's official Campus Fabric IP Clos design for Mist Wired Assurance defines that the 3-stage IP Clos topology eliminates the traditional distribution layer entirely. This architecture is intended for smaller campus environments that do not need an intermediate distribution layer between the access and core.
"Juniper's Wired Assurance supports 3-Stage and 5-Stage IP Clos deployments. The 3-Stage IP Clos is targeted towards deployments that do not require a Distribution Layer and have smaller scale requirements."
Because the distribution layer is not present, the only hierarchical connection in a 3-stage campus fabric is between the core and access layers. Traffic is routed directly at the access layer, and each access switch acts as a Layer-3 gateway (IRB) for its VLANs. "In a campus fabric IP Clos architecture, Mist provisions Layer-3 (L3) integrated routing and bridging (IRB) interfaces on the access layer. All the access switches are configured with the same IP address for each L3 subnet."

Additionally, the Juniper documentation explains that point-to-point links are configured between layers, and in the case of the 3-stage design (with no distribution), this means between the core and access devices:
"The point-to-point links between each layer utilize /31 addressing to conserve addresses." Therefore, the correct statement is C: The core layer is connected to the access layer. Options A and B incorrectly mention a distribution layer that does not exist in this topology. Option D is incorrect because core (spine) devices in a Clos fabric are not interconnected with each other.


Reference:

Juniper Mist AI for Wired ­ Campus Fabric IP Clos Architecture Guide Juniper Mist AI for Wired ­ Campus Fabric IP Clos Workflow Juniper Mist AI for Wired ­ Configure Campus Fabric IP Clos

Juniper Validated Design ­ Campus Fabric IP Clos Deployment Types



Which three steps should be part of the campus fabric deployment? (Choose three.)

  1. Define the physical connections.
  2. Define the networks of interest.
  3. Configure the DNS server.
  4. Choose the topology.
  5. Configure the group-based policy (GBP) tag.

Answer(s): A,B,D

Explanation:

According to the Juniper Mist AI for Wired ­ Campus Fabric IP Clos Deployment Workflow, deploying a campus fabric involves a defined sequence of planning and configuration steps within the Mist Cloud interface. The key stages include:
"To deploy a campus fabric, you must first define the topology type, identify the physical connections between devices, and define the networks of interest that will be extended across the fabric." Breaking this down:
Choose the topology (D): Selecting the correct fabric type (3-Stage or 5-Stage IP Clos) determines how access, distribution, and core switches will interconnect. Define the physical connections (A): This step involves specifying the uplink and downlink relationships between switches so that Mist can auto-generate EVPN-VXLAN and routing configurations.
Define the networks of interest (B): These are the VLANs and subnets that need to be extended across the fabric for user and device connectivity.
Steps such as configuring DNS servers or defining GBP tags are not part of the campus fabric deployment workflow in Mist Wired; they are optional or separate configurations outside the main deployment flow.


Reference:

Juniper Mist AI for Wired ­ Campus Fabric IP Clos Deployment Workflow Juniper Mist AI for Wired ­ Configure Campus Fabric IP Clos Juniper Validated Design ­ Campus Fabric Overview



What is the primary benefit of using switch configuration templates?

  1. They improve the performance of switches.
  2. They reduce Junos OS upgrade times.
  3. They make it easier to make switch-specific configuration changes.
  4. They provide a consistent configuration for all switches in an organization.

Answer(s): D

Explanation:

In Juniper Mist AI for Wired, configuration templates are a foundational part of switch onboarding and management. The primary purpose of these templates is to ensure configuration consistency across all switches that belong to a specific site or organization. "Switch configuration templates allow administrators to define a standard configuration that is automatically applied to all switches within a site or organization, ensuring consistency and reducing configuration errors."
Templates can contain base configuration parameters such as NTP, syslog, VLANs, port profiles, and authentication settings.
When new switches are onboarded to the Mist Cloud, they automatically inherit the template's configuration, ensuring uniform behavior across the network fabric. Option A is incorrect -- templates do not directly impact hardware performance. Option B is incorrect -- templates are not related to upgrade times. Option C is incorrect -- templates are used for uniformity, not for switch-specific changes. Option D correctly describes their main benefit -- ensuring consistent configuration across all switches.


Reference:

Juniper Mist AI for Wired ­ Switch Configuration Templates Guide Juniper Mist AI for Wired ­ Wired Assurance Administration Guide Juniper Validated Design ­ Mist Wired Configuration Best Practices



Referring to the exhibit, what is the purpose of the Save button in the upper-right corner of the Mist dashboard?

  1. It generates a backup of the current port configuration.
  2. It resets the port configuration to its default settings.
  3. It previews the impact of the port configuration changes before applying them.
  4. It applies the port configuration changes to the switch.

Answer(s): D

Explanation:

In the Juniper Mist AI for Wired dashboard, administrators can select one or more switch ports (as shown in the exhibit, e.g., port ge-0/0/25 on an EX4100-48MP). Once configuration changes are made -- such as VLAN assignment, port profiles, PoE settings, or administrative state -- the Save button must be clicked to confirm and apply those changes to the device. "When making configuration changes in the Mist switch interface, the Save button must be used to confirm the modifications. Clicking Save applies the selected port settings to the switch through Mist Cloud."
Option A is incorrect: saving does not create a backup. Backups and snapshots are handled through Mist's configuration archive, not via the Save button. Option B is incorrect: Save does not reset configuration; instead, it commits changes. Option C is incorrect: there is no preview function tied to Save. Option D is correct: the Save button is explicitly for applying configuration changes to the selected switch or port(s).


Reference:

Juniper Mist AI for Wired ­ Switch Port Configuration Guide Juniper Mist AI for Wired ­ Wired Assurance Administration Guide Juniper Mist Documentation ­ Managing Switch Interfaces



You have two sites connected to an EVPN network. Each site is using the 172.16.1.0/24 network for its own respective site.
How does EVPN prevent overlap in this scenario?

  1. It elects a designated forwarder.
  2. It uses a Layer 2 gateway.
  3. It uses a route distinguisher.
  4. It uses an Ethernet segment identifier (ESI).

Answer(s): C

Explanation:

EVPN, when used with VXLAN, leverages BGP MPLS/VXLAN control plane mechanisms. To prevent overlapping IP prefixes between different tenants or sites, EVPN uses a Route Distinguisher (RD).

"In EVPN-VXLAN, the route distinguisher (RD) makes routes unique when overlapping IP prefixes or MAC addresses are advertised between multiple tenants or sites." Option A (designated forwarder) applies to multi-homing in EVPN, not prefix uniqueness. Option B (Layer 2 gateway) does not prevent IP overlap; it bridges VLANs. Option D (ESI) is used for identifying multi-homed Ethernet segments, not to differentiate overlapping subnets.
Option C (Route Distinguisher) is correct, as it uniquely identifies routes even if the IP addresses are the same across sites.


Reference:

Juniper Mist AI for Wired ­ EVPN-VXLAN Overview
Juniper Validated Design ­ EVPN-VXLAN Fundamentals
Junos OS EVPN Configuration Guide



Click the Exhibit button.



Which campus fabric architecture is shown in the exhibit?

  1. core-distribution ­ edge-routed bridging (ERB)
  2. 5-stage IP Clos
  3. 3-stage IP Clos
  4. core-distribution ­ centrally-routed bridging (CRB)

Answer(s): D

Explanation:

The exhibit shows:
L2 gateways (blue dots) positioned at the distribution layer.
L3 gateways (red dots) positioned at the core layer.
EVPN/VXLAN providing fabric connectivity between layers. Access switches forwarding traffic into the fabric without acting as gateways.

This directly maps to the centrally-routed bridging (CRB) model, where:
Bridging occurs at the access/distribution layer.
Routing (L3 gateway) occurs centrally at the core layer. "In the core-distribution CRB model, Layer 2 gateways are deployed at the distribution switches, and Layer 3 gateways are deployed centrally at the core switches." Option A (ERB) is incorrect because ERB places the L3 gateway at the edge/access. Option B (5-stage IP Clos) is incorrect -- that topology has a leaf/spine architecture, not core/distribution.
Option C (3-stage IP Clos) is incorrect -- that eliminates the distribution layer. Option D (CRB) is correct, matching the diagram exactly.


Reference:

Juniper Mist AI for Wired ­ Campus Fabric Architecture Guide Juniper Validated Design ­ Campus Fabric EVPN-VXLAN Deployment Models Junos OS EVPN Campus Deployment Examples



A company has a Mist campus fabric with a single VRF and must configure group-based policy (GBP) tags to isolate different types of endpoints.
What would be an appropriate solution for this scenario?

  1. Assign a separate GBP tag to each endpoint.
  2. Assign GBP tags based on endpoint type.
  3. Assign GBP tags based on endpoint location.
  4. Assign a single GBP tag to all endpoints.

Answer(s): B

Explanation:

Juniper Mist AI for Wired uses group-based policy (GBP) to enforce segmentation within a single VRF, without requiring separate VRFs per user group. GBP tags classify endpoints logically (e.g., employees, guests, IoT devices) and enforce security rules across the EVPN-VXLAN fabric.

"Group-Based Policy (GBP) provides scalable segmentation by assigning tags to endpoints based on attributes such as user type, role, or device type. These GBP tags are then used in policies to control communication between groups."

Option A is inefficient: assigning unique tags per endpoint is not scalable.

Option C is incorrect: GBP is identity-based segmentation, not location-based.

Option D is incorrect: assigning a single tag defeats the purpose of segmentation.

Option B is correct: the best practice is to assign GBP tags based on endpoint type (e.g., servers, staff, IoT, guests), which then drives policy enforcement.


Reference:

Juniper Mist AI for Wired ­ Group-Based Policy (GBP) Configuration Guide

Juniper Validated Design ­ GBP with EVPN-VXLAN in Campus Fabrics



Which subscription is required to use Marvis?

  1. Access Assurance
  2. IoT Assurance
  3. Virtual Network Assistant
  4. Wired Assurance

Answer(s): C

Explanation:

Marvis is Juniper's Virtual Network Assistant (VNA) that leverages AI to provide natural language queries, anomaly detection, and proactive troubleshooting across wireless, wired, and WAN networks.

"Marvis, the AI-driven Virtual Network Assistant, requires a Virtual Network Assistant subscription. The subscription enables Marvis to provide insights, recommendations, and natural language queries for Mist-managed networks."

Option A (Access Assurance) is related to NAC/802.1X enforcement.

Option B (IoT Assurance) applies to profiling and securing IoT devices.

Option D (Wired Assurance) enables switch telemetry, onboarding, and assurance, but does not unlock Marvis.

Option C (Virtual Network Assistant) is correct -- this subscription is required to enable Marvis AI.


Reference:

Juniper Mist Subscriptions Guide

Juniper Mist AI for Wired ­ Marvis Virtual Network Assistant Overview

Juniper Licensing and Subscription Matrix



Viewing page 2 of 10



Post your Comments and Discuss Juniper JN0-460 exam prep with other Community members:

JN0-460 Exam Discussions & Posts