Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Juniper
  5. JN0-460

Juniper JN0-460 Exam
Mist AI Wired, Specialist (JNCIS-MistAI-Wired) (Page 3 )

Updated On: 7-Feb-2026
Page 3 of 16
PDF with 72 Questions

Click the Exhibit button.



Which campus fabric architecture is shown in the exhibit?

  1. core-distribution ­ edge-routed bridging (ERB)
  2. 5-stage IP Clos
  3. 3-stage IP Clos
  4. core-distribution ­ centrally-routed bridging (CRB)

Answer(s): D

Explanation:

The exhibit shows:
L2 gateways (blue dots) positioned at the distribution layer.
L3 gateways (red dots) positioned at the core layer.
EVPN/VXLAN providing fabric connectivity between layers. Access switches forwarding traffic into the fabric without acting as gateways.

This directly maps to the centrally-routed bridging (CRB) model, where:
Bridging occurs at the access/distribution layer.
Routing (L3 gateway) occurs centrally at the core layer. "In the core-distribution CRB model, Layer 2 gateways are deployed at the distribution switches, and Layer 3 gateways are deployed centrally at the core switches." Option A (ERB) is incorrect because ERB places the L3 gateway at the edge/access. Option B (5-stage IP Clos) is incorrect -- that topology has a leaf/spine architecture, not core/distribution.
Option C (3-stage IP Clos) is incorrect -- that eliminates the distribution layer. Option D (CRB) is correct, matching the diagram exactly.


Reference:

Juniper Mist AI for Wired ­ Campus Fabric Architecture Guide Juniper Validated Design ­ Campus Fabric EVPN-VXLAN Deployment Models Junos OS EVPN Campus Deployment Examples



A company has a Mist campus fabric with a single VRF and must configure group-based policy (GBP) tags to isolate different types of endpoints.
What would be an appropriate solution for this scenario?

  1. Assign a separate GBP tag to each endpoint.
  2. Assign GBP tags based on endpoint type.
  3. Assign GBP tags based on endpoint location.
  4. Assign a single GBP tag to all endpoints.

Answer(s): B

Explanation:

Juniper Mist AI for Wired uses group-based policy (GBP) to enforce segmentation within a single VRF, without requiring separate VRFs per user group. GBP tags classify endpoints logically (e.g., employees, guests, IoT devices) and enforce security rules across the EVPN-VXLAN fabric.

"Group-Based Policy (GBP) provides scalable segmentation by assigning tags to endpoints based on attributes such as user type, role, or device type. These GBP tags are then used in policies to control communication between groups."

Option A is inefficient: assigning unique tags per endpoint is not scalable.

Option C is incorrect: GBP is identity-based segmentation, not location-based.

Option D is incorrect: assigning a single tag defeats the purpose of segmentation.

Option B is correct: the best practice is to assign GBP tags based on endpoint type (e.g., servers, staff, IoT, guests), which then drives policy enforcement.


Reference:

Juniper Mist AI for Wired ­ Group-Based Policy (GBP) Configuration Guide

Juniper Validated Design ­ GBP with EVPN-VXLAN in Campus Fabrics



Which subscription is required to use Marvis?

  1. Access Assurance
  2. IoT Assurance
  3. Virtual Network Assistant
  4. Wired Assurance

Answer(s): C

Explanation:

Marvis is Juniper's Virtual Network Assistant (VNA) that leverages AI to provide natural language queries, anomaly detection, and proactive troubleshooting across wireless, wired, and WAN networks.

"Marvis, the AI-driven Virtual Network Assistant, requires a Virtual Network Assistant subscription. The subscription enables Marvis to provide insights, recommendations, and natural language queries for Mist-managed networks."

Option A (Access Assurance) is related to NAC/802.1X enforcement.

Option B (IoT Assurance) applies to profiling and securing IoT devices.

Option D (Wired Assurance) enables switch telemetry, onboarding, and assurance, but does not unlock Marvis.

Option C (Virtual Network Assistant) is correct -- this subscription is required to enable Marvis AI.


Reference:

Juniper Mist Subscriptions Guide

Juniper Mist AI for Wired ­ Marvis Virtual Network Assistant Overview

Juniper Licensing and Subscription Matrix



Which statement is correct about the VXLAN data plane?

  1. The data plane learns the IP addresses of end-user devices.
  2. The data plane advertises the MAC addresses of end-user devices.
  3. The data plane encapsulates the traffic.
  4. The data plane learns the MAC addresses of end-user devices.

Answer(s): C

Explanation:

VXLAN (Virtual Extensible LAN) uses an overlay encapsulation method to carry Layer-2 frames over an IP underlay. This functionality is part of the data plane, which is responsible for packet forwarding and encapsulation/decapsulation.

"In an EVPN-VXLAN fabric, the control plane (via BGP EVPN) learns and advertises MAC and IP information, while the data plane encapsulates and forwards traffic using VXLAN tunnels between VTEPs."

Option A is incorrect: IP learning happens in the control plane, not the data plane.

Option B is incorrect: MAC advertisement is done in the control plane through EVPN route types.

Option D is incorrect: MAC learning is handled by EVPN control plane, not the VXLAN data plane.

Option C is correct: the VXLAN data plane encapsulates the traffic in UDP tunnels between VTEPs.


Reference:

Juniper Mist AI for Wired ­ EVPN-VXLAN Overview

Juniper Validated Design ­ EVPN-VXLAN Control and Data Plane Separation

Junos OS EVPN-VXLAN Deployment Guide



What are two unique advantages about configuration automation in Wired Assurance? (Choose two.)

  1. 100% open APIs
  2. client SLEs
  3. programmable workflows
  4. switch insights

Answer(s): A,C

Explanation:

Wired Assurance in Mist Cloud provides automated configuration for Juniper EX Series switches. The automation is built on open APIs and supports programmable workflows, which allow seamless integration with external systems and reduce manual configuration errors.

"Wired Assurance leverages 100% open APIs, enabling integration with third-party automation and orchestration tools. Combined with programmable workflows, this provides a consistent and scalable automation framework for switch deployment and management."

Option A (100% open APIs): Correct -- APIs enable automation and external integration.

Option C (programmable workflows): Correct -- workflows automate repetitive tasks and provisioning.

Option B (client SLEs): Incorrect -- this is part of user experience monitoring, not automation.

Option D (switch insights): Incorrect -- this relates to telemetry and visibility, not automation.


Reference:

Juniper Mist AI for Wired ­ Wired Assurance Overview

Juniper Mist AI for Wired ­ Switch Automation and APIs Guide

Juniper Validated Design ­ Mist Wired Automation Best Practices



Viewing page 3 of 16
Viewing questions 11 - 15 out of 72 questions



Post your Comments and Discuss Juniper JN0-460 exam prep with other Community members:

Join the JN0-460 Discussion