- The JN0-683 Exam at a Glance
- How the Six Domains Are Published
- Domain 1: Data Center Deployment and Management
- Domain 2: Layer 3 Fabrics
- Domain 3: VXLAN
- Domain 4: EVPN-VXLAN Signaling
- Domain 5: Data Center Interconnect
- Domain 6: Data Center Multitenancy and Security
- Sequencing the Domains Across Your Prep
- Registration, Delivery and Renewal Mechanics
- Frequently Asked Questions
- JN0-683 has 65 multiple-choice questions in 90 minutes, tested against Junos OS 23.4.
- Six published domains exist, but Juniper publishes no official percentage weights for them.
- An active JNCIS-DC or JNCIS-ENT is required before you can sit the exam.
- Domains 2, 3 and 4 form one dependency chain: underlay, then data plane, then control plane.
The JN0-683 Exam at a Glance
The Juniper Networks Certified Professional, Data Center credential (JNCIP-DC) is earned by passing exam JN0-683, which launched on July 15, 2024. Pearson VUE delivers the English-language written exam. It contains 65 multiple-choice questions and allows 90 minutes, which works out to a little under 90 seconds per question. The tested software baseline is Junos OS 23.4, so configuration syntax and operational command output in questions should be read against that release.
Juniper's certification program was renamed the HPE Networking Certification Program on September 15, 2026, so you will see both names in current materials. The credential itself is the same. If you are brand new to the certification, start with what JNCIP-DC is and the JNCIP-DC eligibility requirements before diving into the objectives below.
The prerequisite is an active JNCIS-DC or JNCIS-ENT. That matters for how you read the domains: the exam assumes associate-level data center and routing fluency and spends its questions on professional-level design, configuration and troubleshooting of EVPN-VXLAN fabrics.
How the Six Domains Are Published
Juniper's published exam objectives list six content areas. The lines on this page reproduce the issuer's headings exactly:
- Data Center Deployment and Management
- Layer 3 Fabrics
- VXLAN
- EVPN-VXLAN Signaling
- Data Center Interconnect
- Data Center Multitenancy and Security
Another point of confusion: the recommended preparation course, Implementing Data Center Fabric with EVPN and VXLAN, has its own chapter structure. Those chapters are unweighted preparation curriculum, not additional official exam domains, and they do not guarantee exhaustive exam coverage. The course (Revision 26A) describes five training days and Junos OS 25.2R1.8, but that does not change the exam's 90-minute duration or its Junos OS 23.4 baseline. Training is optional; see our overview of JNCIP-DC training options for how candidates weigh it.
Domain 1: Data Center Deployment and Management
Data Center Deployment and Management
This domain covers how a fabric is stood up and kept running. Expect questions that treat the data center as an operated system rather than a pile of protocol stanzas.
- Fabric architecture choices: how spine-and-leaf designs are laid out and which device roles fit which positions.
- Provisioning approaches: manual Junos configuration versus automated or zero-touch style deployment workflows.
- Operational verification: using Junos operational commands to confirm interface, routing and fabric state after changes.
- Lifecycle management: configuration management, change validation and rollback habits that Junos makes easy through commit-based workflows.
Candidates often underestimate this domain because it sounds administrative. In practice, it is where scenario questions begin: a fabric is described, something is wrong or missing, and you must pick the correct deployment or management action. Comfort with commit-confirmed, rollback, configuration groups and structured show output saves time in every other domain, because later questions present command output and expect you to read it quickly.
Domain 2: Layer 3 Fabrics
Layer 3 Fabrics
The routed underlay is the foundation everything else rides on. If the underlay is wrong, VXLAN tunnels and EVPN routes fail in ways that look unrelated.
- IP Clos design: point-to-point addressing, loopback reachability and why equal-cost paths matter.
- Underlay routing protocol selection and configuration, including eBGP-based and IGP-based approaches and the trade-offs between them.
- ECMP and load balancing behavior across the fabric, including what has to be configured in Junos for multipath to actually install.
- Troubleshooting underlay adjacency and reachability problems from route tables and protocol state.
Because VXLAN encapsulates traffic between loopback addresses, every later domain assumes the leaf loopbacks are reachable. A frequent exam pattern is a symptom described at the overlay (hosts cannot communicate) whose root cause sits in the underlay (a missing loopback advertisement or an export policy that filters it). Train yourself to check Layer 3 reachability first.
Domain 3: VXLAN
VXLAN
This domain is the data plane: how Ethernet frames are wrapped, carried across the IP fabric and unwrapped at the far end.
- VXLAN encapsulation: VNIs, VTEPs and how the outer IP/UDP header relates to the inner frame.
- Mapping VLANs to VNIs and what bridging between local ports and tunnels looks like on a leaf.
- Handling of BUM traffic: how broadcast, unknown unicast and multicast are replicated across the fabric.
- Gateway placement and inter-VNI routing concepts, including the difference between Layer 2 and Layer 3 gateway functions.
Questions here reward precision about what is encapsulated and where. Know which device performs encapsulation, what the source and destination of the outer header are, and what changes if a packet must be routed between VNIs rather than merely bridged. Static VXLAN versus a control-plane-driven approach is a natural contrast, and it leads directly into the next domain.
Domain 4: EVPN-VXLAN Signaling
EVPN-VXLAN Signaling
EVPN is the BGP-based control plane that replaces flood-and-learn behavior with advertised reachability. This is the conceptual heart of the certification.
- EVPN route types and what each one carries, including MAC/IP advertisement and IP prefix routes.
- Route distinguishers and route targets, and how they control which routes land in which instance.
- BGP configuration for EVPN signaling, including the underlay/overlay split and route reflection or peering models.
- Host mobility, MAC learning and ARP suppression behavior driven by the control plane.
- Reading EVPN database and route output to explain why a MAC or prefix is or is not present.
Expect the most output-interpretation questions here. A typical item shows a snippet of BGP or EVPN state and asks what it implies or what is missing. If you can describe, for each route type, who originates it, what it advertises and which problem it solves, you will handle most variants. For a sense of how candidates rate the difficulty of this material, see how hard the JNCIP-DC exam is.
Domain 5: Data Center Interconnect
Data Center Interconnect
DCI extends Layer 2 and Layer 3 services between separate fabrics or sites, and it introduces design constraints that a single fabric never faces.
- DCI models for stretching tenants between sites, and when each is appropriate.
- How EVPN-VXLAN fabrics are stitched or connected across a WAN or dark-fiber transport.
- Gateway and border device roles that terminate or translate between fabric and interconnect.
- Failure and scale considerations: limiting flooding across sites, handling multihoming and avoiding loops across the interconnect.
DCI questions tend to be design-flavored: given two sites and a requirement, which approach satisfies it with the least complexity? Review the trade-offs rather than memorizing a single recipe, and keep in mind that the exam is scoped to the objectives Juniper lists, not to every possible interconnect architecture in the field.
Domain 6: Data Center Multitenancy and Security
Data Center Multitenancy and Security
Real data centers host multiple customers, business units or application tiers on shared hardware, and this domain tests how isolation and policy are built into the fabric.
- Tenant separation using routing instances, VRFs and the Layer 2/Layer 3 service constructs available in an EVPN-VXLAN design.
- Controlled route leaking and inter-tenant communication where it is intentionally permitted.
- Security enforcement points: where filtering or firewalling sits relative to tenant boundaries.
- Segmentation and policy concepts that keep one tenant's failures and traffic from affecting another.
This domain ties the rest together. Multitenancy is built from EVPN instances (Domain 4), mapped to VNIs (Domain 3), across the routed fabric (Domain 2), and deployed through the operational practices of Domain 1. Practice describing one tenant end to end, from access port to VNI to route target to gateway, and the integration questions become straightforward.
Sequencing the Domains Across Your Prep
Since there are no published weights, order your study by dependency. The timeline below is a template you can stretch or compress; it is tied to the domain chain rather than to generic study theory.
Domain 1 and Domain 2
- Build a small spine-and-leaf lab and bring up the underlay.
- Practice verification commands until output reading is fast.
Domain 3 and Domain 4
- Layer VXLAN on the underlay, then replace static behavior with EVPN signaling.
- Memorize each EVPN route type by originator, content and purpose.
Domain 5 and Domain 6
- Design and diagram a two-site interconnect and a multi-tenant service.
- Run timed question sets across all six domains and review every miss.
For a fuller plan, see the JNCIP-DC study guide, and keep the JNCIP-DC cheat sheet handy for last-week review. The official practice exam uses a 70% threshold, but that is a preparation setting and explicitly not necessarily the live exam's passing score. Use timed sets on our JNCIP-DC practice tests to find weak domains early.
Registration, Delivery and Renewal Mechanics
The official Juniper Networks JNCIP exam voucher is listed at US$400 through Pearson VUE; the JNCIP-DC certification cost breakdown covers the surrounding expenses. Scheduling, management and launch of proctored written exams start through Alpine CertMetrics using an hpe.com login. Both test-center and OnVUE remote delivery are available. For remote delivery you need a compatible computer, webcam, microphone, one display, a successful system test, a private testing space and matching government-issued photo ID. Personal books and notes are prohibited. Timing details are covered in JNCIP-DC exam dates and scheduling.
The live passing threshold is set statistically and is not publicly published. Your score report supplies the applicable threshold and section results, and initial written results are provisional pending validation. No issuer-published aggregate pass rate was verified, so treat any quoted figure with caution; our passing score explainer and pass rate analysis go into what is and is not known.
Once certified, the credential remains active for three years. You can renew by passing the same-track professional exam, earning JNCIE-DC, or completing an eligible mapped instructor-led or On-Demand Data Center course. Open Learning courses do not qualify for course-based recertification.
Key Takeaway
Treat the six domains as one connected system: operate it (1), route it (2), tunnel it (3), signal it (4), extend it (5) and partition it (6). Candidates who can narrate a single packet through all six stages are the ones best prepared for scenario questions. To judge whether the credential pays off for your goals, read the JNCIP-DC ROI analysis.
Frequently Asked Questions
The published objectives for JN0-683 list six: Data Center Deployment and Management, Layer 3 Fabrics, VXLAN, EVPN-VXLAN Signaling, Data Center Interconnect, and Data Center Multitenancy and Security.
No. The current exam overview and the linked official outline do not publish per-domain percentage weights, so you should prepare all six areas rather than rely on third-party percentages.
The exam has 65 multiple-choice questions to be completed in 90 minutes, delivered by Pearson VUE in English and based on Junos OS 23.4.
You need an active JNCIS-DC or JNCIS-ENT certification. Recommended training is optional and does not replace that prerequisite.
No. The course chapters are unweighted preparation curriculum, not additional official exam domains, and they do not guarantee exhaustive exam coverage. Use the six published domains as your authoritative checklist.