Juniper JN0-352 Practice Exam Questions & Answers

The entire purpose of route aggregation is summarization --- replacing a set of more-specific contributing routes with a single, broader prefix advertised outward --- and this summarization inherently hides internal routing instability from external peers: if one of the underlying contributing /24 blocks within a summarized /16 flaps up and down due to a local link issue, external peers who only see the stable, unchanging /16 aggregate are completely insulated from that churn, since the aggregate itself remains active and advertised as long as at least one contributing route is present, regardless of how much internal fluctuation occurs among the individual contributors. This stability-hiding characteristic is one of the primary operational benefits that motivates using aggregate routes in the first place, confirming that statement as correct. Regarding next-hop behavior, official Juniper documentation is explicit and unambiguous: when an aggregate route is installed in the routing table, Junos assigns it a reject next hop by default, meaning traffic matching only the aggregate (and no more-specific contributor) is dropped and an ICMP unreachable message is returned to the source; a discard next hop is available only as an optional, explicitly configured alternative when silent dropping without ICMP notification is preferred, but it is not the default. Aggregate routes categorically do not advertise their individual contributing routes; suppressing those specific, more-granular prefixes from onward advertisement in favor of the single summary is the aggregate's defining function, directly contradicting the first statement. Reference topics: Junos Enterprise Routing -- Protocol Independent Routing, Default Reject Next Hop and Route Summarization Benefits.

In this configuration, R1's physical interface address (10.10.10.1) is different from the VRRP virtual IP address (10.100.100.1), meaning R1 is operating as a non-owner VRRP master --- it did not originate the virtual address as one of its own real interface addresses. By default, Junos VRRP masters that do not own the virtual address will forward transit traffic destined through that address but will not process or respond to traffic addressed directly to the VIP itself, such as ICMP echo requests, Telnet, or SSH sessions aimed at 10.100.100.1. This is deliberate default behavior intended to prevent ambiguity about which physical device is answering on behalf of a shared virtual identity. To allow the master to accept and respond to packets whose destination is the virtual address itself, the accept-data statement must be explicitly configured under the vrrp-group hierarchy. Once enabled, the elected master will process locally destined traffic sent to the VIP, resolving exactly the symptom described. The track option is used for interface or route-based priority adjustment to influence mastership, advertise-interval tunes the frequency of VRRP hello advertisements, and no-preempt prevents a higher-priority router from reclaiming mastership once a lower-priority router has taken over --- none of these affect whether the master processes traffic destined to the VIP. Reference topics: Junos Enterprise Routing -- High Availability, VRRP accept-data Behavior.

Root bridge election is based on comparing each switch's full Bridge Identifier, which combines the bridge priority value with the switch's MAC address, with priority always evaluated first and MAC address serving strictly as a tiebreaker when two or more switches present identical priority values. In this scenario, the network has been left entirely at the default spanning-tree configuration, meaning every switch is operating at the standard IEEE and Junos default bridge priority of 32768; since all three switches share the exact same priority value, the comparison necessarily falls through to the MAC address tiebreak, where the switch with the numerically lowest MAC address wins the election. Comparing the three addresses shown --- 00:1a:2b:3c:4d:01, 00:1a:2b:3c:4d:02, and 00:1a:2b:3c:4d:03 --- Switch A's address is the lowest, since only the final octet differs and 01 is less than both 02 and 03, making Switch A the elected root bridge. RSTP uses the identical Bridge ID comparison mechanism as legacy STP for root election, so there is no special 'median MAC address' rule that applies uniquely under RSTP, making that distractor factually invalid regardless of protocol version. The election process also does not require any manual bridge priority configuration to complete; the default priority value is entirely sufficient on its own to allow a deterministic election to occur, since default priorities are still numerically comparable Bridge IDs. Reference topics: Junos Enterprise Switching -- Spanning Tree Protocols, Default Priority and MAC Address Tiebreaking.

A functioning GRE tunnel interface in Junos requires, at minimum, both a tunnel source address and a tunnel destination address configured together under the tunnel statement of the gr- logical unit, since these two values together define the outer, delivery-layer IP header that will encapsulate every passenger packet sent through the tunnel; the source identifies which of the router's own addresses will originate the encapsulated traffic, and the destination identifies the remote tunnel endpoint the encapsulated traffic must be routed toward across the underlying IP network. The first option correctly supplies both required values in a single, complete statement --- source 192.168.1.1 (Router A's own address) and destination 192.168.2.1 (Router B's address) --- fully defining the tunnel's endpoints and ensuring the encapsulation and route-resolution process can succeed. The fourth option supplies only the destination and omits the source entirely, which is an incomplete configuration; without an explicit source, Junos cannot always reliably determine which local address to use for encapsulation, particularly on multi-address or multi-interface routers, and the tunnel configuration is left non-deterministic or non-functional as shown. The second option enables the IPv6 protocol family on the tunnel's logical unit, which is irrelevant to a scenario explicitly requiring IPv4 passenger traffic support. The third option attempts to assign a family inet address directly using one of the underlying tunnel endpoint addresses, which conflates the tunnel's own transport addressing with logical-unit protocol addressing and does not by itself establish the required source/destination tunnel definition. Reference topics: Junos Enterprise Routing -- Tunneling, Configuring GRE Tunnel Source and Destination.

In the output of show ospf database, Junos marks every self-originated link-state advertisement with an asterisk immediately preceding the LSA's link-state ID. A self-originated LSA is one that was created and flooded by the router on which the command is being executed, as opposed to an LSA that was received from and originated by a neighboring router elsewhere in the area. In this exhibit, the asterisked Router LSA has an ID of 10.101.100.0 and an Advertising Router value of the same 10.101.100.0, confirming that this particular Router LSA describes the local device's own links, area membership, and interface costs, and that the local router itself flooded this LSA into the area's link-state database. This distinction matters operationally because when troubleshooting OSPF topology or SPF calculation issues, engineers frequently need to isolate their own router's advertised state from the states advertised by every other router in the area; the asterisk provides an immediate, unambiguous visual cue for that separation without needing to cross-reference the router's own ID separately. It has no relationship to designated router or backup designated router status --- DR/BDR roles are indicated elsewhere in interface-level output, not through the asterisk convention in the LSA database dump, and a router that is neither DR nor BDR still self-originates and flags its own Router LSA the same way. Reference topics: Junos Enterprise Routing -- OSPF, Interpreting the OSPF Link-State Database.