Juniper Networks Certified Professional, Data Center (JNCIP-DC) Exam Prep
Free practice questions

Free JNCIP-DC Practice Questions

10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.

Start the free practice test → ★★★★★4.9/5 from 2,400+ candidates · No signup

The JNCIP-DC exam has 65 questions and runs 1 hours 30 minutes.

These 10 free JNCIP-DC questions are organized by exam domain, so you can see how each part of the Juniper Networks Certified Professional, Data Center (JNCIP-DC) blueprint is tested. Reveal the answer and explanation under each question.

Domain 1: Data Center Deployment and Management

Question 1

The ZTP file service has moved from 192.0.2.20 to 192.0.2.30; the DHCP service has not moved. A newly connected QFX switch obtains an IPv4 lease but requests leaf17.conf from the old file server, which returns HTTP 404. Its DHCP ACK contains option 150 = 192.0.2.20, option 66 = 192.0.2.30, and option 43 suboption 01 = leaf17.conf. HTTP is supported, and the file is available at the new server. Which DHCP change directs the next provisioning attempt to the intended file server?

Show answer & explanation

Correct answer: D - Set option 150 to 192.0.2.30 while retaining the configuration filename.

Question 2

A 10-Gb/s egress interface reports 8,500,000,000 transmitted octets at 10:00:00 and 12,250,000,000 at 10:00:30. The counter neither resets nor wraps. During those same 30 seconds, queue telemetry records repeated near-full occupancy peaks and 1,900 additional tail-dropped packets; physical error and carrier-transition counters remain unchanged. Which interpretation accounts for both the traffic rate and the loss?

Show answer & explanation

Correct answer: B - 10% average utilization; short congestion bursts can still exhaust the available egress queue space.

Domain 2: Layer 3 Fabrics

Question 3

A packet capture shows a congested fabric switch changing a RoCEv2 packet's ECN field to 11. The packet then reaches the destination NIC without being dropped. RoCEv2 congestion control is enabled at both endpoints. Which event completes the expected congestion-feedback path?

Show answer & explanation

Correct answer: A - The receiver sends a congestion notification packet to the original sender.

Question 4

After a RoCEv2 rack is moved onto untagged routed fabric links, its packets appear in the best-effort queue during congestion. The hosts still mark them DSCP 26. The switch supports DSCP-based PFC; its attached PFC profiles, DSCP 26 to PFC priority 3 mapping, RDMA no-loss queue, and peer settings are correct. The new ingress ports, however, apply only an IEEE 802.1p classifier. Which change restores the intended RDMA treatment while keeping ordinary traffic in its own class?

Show answer & explanation

Correct answer: B - Classify ingress DSCP 26 into the RDMA forwarding class.

Domain 3: VXLAN

Question 5

Two hosts in the same subnet exchange traffic through an IPv4 VXLAN tunnel. A routed spine between their VTEPs performs no VXLAN termination or tenant routing. Captures on the ingress and egress sides of that spine are compared for the same packet. How should the two IPv4 TTL fields change?

Show answer & explanation

Correct answer: B - Only the outer IP TTL decreases.

Domain 4: EVPN-VXLAN Signaling

Question 6

A QFX leaf delivers same-subnet unicast to a remote host when the local test host has a static ARP entry. After that test entry is removed, the initial ARP request is flooded despite ARP suppression being enabled. The remote Type 2 route reports MAC length 48 and IP-address length 0; the leaf's EVPN ARP table has no entry for the target IP. These observations indicate that:

Show answer & explanation

Correct answer: C - Bridging works, but ARP suppression lacks the required IP-to-MAC binding.

Question 7

A server uses one LACP bundle across two EVPN leaves in all-active mode. Both leaves advertise the same Ethernet segment identifier. Leaf-A is the designated forwarder; Leaf-B is non-DF. Captures show different known-unicast flows reaching the server through both leaves, while network-originated broadcasts reach it only through Leaf-A. An operator proposes disabling Leaf-B's server-facing link to prevent a loop. How should this proposal be assessed?

Show answer & explanation

Correct answer: C - Keep both links active; the observed forwarding is consistent with all-active operation.

Question 8

In a symmetric-IRB tenant, a host on Leaf-A in L2 VNI 5010 sends to another subnet on Leaf-B in L2 VNI 5020. Both leaves use tenant L3 VNI 50000; the required routes and neighbor entries are installed. Predict the VNI carried across the fabric and the operation performed when Leaf-B receives the packet.

Show answer & explanation

Correct answer: C - VNI 50000; perform a tenant IP lookup, then bridge toward the host.

Domain 5: Data Center Interconnect

Question 9

Review this selective DCI configuration: DC-A must retain local VNI 50120, DC-B must retain local VNI 60120, and only the ANALYTICS service may span the WAN. Both gateways set translation-vni 90120, but each interconnected-vni-list contains only its local VNI. Other services already have translation mappings but must remain local. The underlay, EVPN sessions, and route-target policies are correct. What should appear in each gateway's interconnected-vni-list?

Show answer & explanation

Correct answer: D - Only the common WAN VNI, 90120.

Domain 6: Data Center Multitenancy and Security

Question 10

During an isolation incident, tenant A begins reaching tenant B's 10.44.0.0/24 through a newly imported EVPN Type 5 route carrying target:65000:200. That is A's only route to the subnet, while B's other sites depend on the same exported route. A's own routes use target:65000:100, and required shared services use target:65000:900; its import policy now accepts all three. The tenants have distinct route distinguishers. Which immediate change removes the unauthorized reachability while preserving both tenants' legitimate traffic?

Show answer & explanation

Correct answer: A - Remove A's import of target:65000:200 and withdraw the imported route from A.

That's 10 of 1,030

The full bank has 1,020 more JNCIP-DC questions with explanations.

Continue in the free practice test →

View plans