Click the Exhibit button.Which campus fabric architecture is shown in the exhibit?
Answer(s): D
The exhibit shows:L2 gateways (blue dots) positioned at the distribution layer.L3 gateways (red dots) positioned at the core layer.EVPN/VXLAN providing fabric connectivity between layers. Access switches forwarding traffic into the fabric without acting as gateways.This directly maps to the centrally-routed bridging (CRB) model, where:Bridging occurs at the access/distribution layer.Routing (L3 gateway) occurs centrally at the core layer. "In the core-distribution CRB model, Layer 2 gateways are deployed at the distribution switches, and Layer 3 gateways are deployed centrally at the core switches." Option A (ERB) is incorrect because ERB places the L3 gateway at the edge/access. Option B (5-stage IP Clos) is incorrect -- that topology has a leaf/spine architecture, not core/distribution.Option C (3-stage IP Clos) is incorrect -- that eliminates the distribution layer. Option D (CRB) is correct, matching the diagram exactly.
Juniper Mist AI for Wired Campus Fabric Architecture Guide Juniper Validated Design Campus Fabric EVPN-VXLAN Deployment Models Junos OS EVPN Campus Deployment Examples
A company has a Mist campus fabric with a single VRF and must configure group-based policy (GBP) tags to isolate different types of endpoints.What would be an appropriate solution for this scenario?
Answer(s): B
Juniper Mist AI for Wired uses group-based policy (GBP) to enforce segmentation within a single VRF, without requiring separate VRFs per user group. GBP tags classify endpoints logically (e.g., employees, guests, IoT devices) and enforce security rules across the EVPN-VXLAN fabric."Group-Based Policy (GBP) provides scalable segmentation by assigning tags to endpoints based on attributes such as user type, role, or device type. These GBP tags are then used in policies to control communication between groups."Option A is inefficient: assigning unique tags per endpoint is not scalable.Option C is incorrect: GBP is identity-based segmentation, not location-based.Option D is incorrect: assigning a single tag defeats the purpose of segmentation.Option B is correct: the best practice is to assign GBP tags based on endpoint type (e.g., servers, staff, IoT, guests), which then drives policy enforcement.
Juniper Mist AI for Wired Group-Based Policy (GBP) Configuration GuideJuniper Validated Design GBP with EVPN-VXLAN in Campus Fabrics
Which subscription is required to use Marvis?
Answer(s): C
Marvis is Juniper's Virtual Network Assistant (VNA) that leverages AI to provide natural language queries, anomaly detection, and proactive troubleshooting across wireless, wired, and WAN networks."Marvis, the AI-driven Virtual Network Assistant, requires a Virtual Network Assistant subscription. The subscription enables Marvis to provide insights, recommendations, and natural language queries for Mist-managed networks."Option A (Access Assurance) is related to NAC/802.1X enforcement.Option B (IoT Assurance) applies to profiling and securing IoT devices.Option D (Wired Assurance) enables switch telemetry, onboarding, and assurance, but does not unlock Marvis.Option C (Virtual Network Assistant) is correct -- this subscription is required to enable Marvis AI.
Juniper Mist Subscriptions GuideJuniper Mist AI for Wired Marvis Virtual Network Assistant OverviewJuniper Licensing and Subscription Matrix
Which statement is correct about the VXLAN data plane?
VXLAN (Virtual Extensible LAN) uses an overlay encapsulation method to carry Layer-2 frames over an IP underlay. This functionality is part of the data plane, which is responsible for packet forwarding and encapsulation/decapsulation."In an EVPN-VXLAN fabric, the control plane (via BGP EVPN) learns and advertises MAC and IP information, while the data plane encapsulates and forwards traffic using VXLAN tunnels between VTEPs."Option A is incorrect: IP learning happens in the control plane, not the data plane.Option B is incorrect: MAC advertisement is done in the control plane through EVPN route types.Option D is incorrect: MAC learning is handled by EVPN control plane, not the VXLAN data plane.Option C is correct: the VXLAN data plane encapsulates the traffic in UDP tunnels between VTEPs.
Juniper Mist AI for Wired EVPN-VXLAN OverviewJuniper Validated Design EVPN-VXLAN Control and Data Plane SeparationJunos OS EVPN-VXLAN Deployment Guide
What are two unique advantages about configuration automation in Wired Assurance? (Choose two.)
Answer(s): A,C
Wired Assurance in Mist Cloud provides automated configuration for Juniper EX Series switches. The automation is built on open APIs and supports programmable workflows, which allow seamless integration with external systems and reduce manual configuration errors."Wired Assurance leverages 100% open APIs, enabling integration with third-party automation and orchestration tools. Combined with programmable workflows, this provides a consistent and scalable automation framework for switch deployment and management."Option A (100% open APIs): Correct -- APIs enable automation and external integration.Option C (programmable workflows): Correct -- workflows automate repetitive tasks and provisioning.Option B (client SLEs): Incorrect -- this is part of user experience monitoring, not automation.Option D (switch insights): Incorrect -- this relates to telemetry and visibility, not automation.
Juniper Mist AI for Wired Wired Assurance OverviewJuniper Mist AI for Wired Switch Automation and APIs GuideJuniper Validated Design Mist Wired Automation Best Practices
Post your Comments and Discuss Juniper JN0-460 exam prep with other Community members: