Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
You are planning to deploy a new campus fabric. This campus will have a significant amount of east-west traffic. All access switches will only be operating at Layer 2. In this scenario, which architecture should you deploy?
According to Juniper Networks' validated designs for campus fabrics, the campus fabric core-distribution with edge-routed bridging (ERB) is the optimal architecture when high volumes of east-west traffic are present and access switches are restricted to Layer 2 operations. In an ERB design, the EVPN-VXLAN fabric extends from the core switches to the distribution switches.1 The critical differentiator is the placement of the default gateways (Integrated Routing and Bridging or IRB interfaces). In the ERB model, these gateways are moved from the core to the distribution layer, which effectively acts as the 'edge' of the EVPN fabric.
By placing the Layer 3 gateways at the distribution layer, inter-VLAN (east-west) traffic is routed closer to the endpoints.2 This prevents the 'hairpinning' effect found in Centrally-Routed Bridging (CRB) architectures, where traffic must travel all the way to the core layer to be routed between subnets before returning down to the distribution and access layers. This reduction in latency and core-link utilization is essential for modern campus environments with high server-to-server or client-to-client traffic patterns.
Furthermore, this architecture specifically accommodates Layer 2 access switches. In the ERB core-distribution model, the access switches are not part of the EVPN-VXLAN overlay; instead, they connect to the distribution tier using standard Link Aggregation Control Protocol (LACP) or ESI-LAG. This allows organizations to leverage existing legacy or lower-tier access switches that do not support advanced VXLAN capabilities while still benefiting from a robust, scalable EVPN-VXLAN fabric at the distribution and core layers.5 In contrast, while the campus fabric IP Clos also excels at handling east-west traffic, it requires the access switches themselves to perform VXLAN encapsulation/decapsulation (acting as VTEPs), which contradicts the requirement for access switches to operate only at Layer 2.
Which statement is correct about a 3-stage campus fabric IP Clos?
Juniper's official Campus Fabric IP Clos designfor Mist Wired Assurance defines that the3-stage IP Clostopology eliminates the traditionaldistribution layerentirely. This architecture is intended for smaller campus environments that do not need an intermediate distribution layer between the access and core.
''Juniper's Wired Assurance supports 3-Stage and 5-Stage IP Clos deployments. The 3-Stage IP Clos is targeted towards deployments that do not require a Distribution Layer and have smaller scale requirements.''
Because the distribution layer is not present, the only hierarchical connection in a 3-stage campus fabric is between thecore and access layers. Traffic is routed directly at the access layer, and each access switch acts as a Layer-3 gateway (IRB) for its VLANs.
''In a campus fabric IP Clos architecture, Mist provisions Layer-3 (L3) integrated routing and bridging (IRB) interfaces on the access layer. All the access switches are configured with the same IP address for each L3 subnet.''
Additionally, the Juniper documentation explains that point-to-point links are configuredbetween layers, and in the case of the 3-stage design (with no distribution), this means between thecore and accessdevices:
''The point-to-point links between each layer utilize /31 addressing to conserve addresses.''
Therefore, the correct statement isC: The core layer is connected to the access layer.
OptionsAandBincorrectly mention a distribution layer that does not exist in this topology.
OptionDis incorrect because core (spine) devices in a Clos fabric are not interconnected with each other.
Juniper Mist AI for Wired -- Campus Fabric IP Clos Architecture Guide
Juniper Mist AI for Wired -- Campus Fabric IP Clos Workflow
Juniper Mist AI for Wired -- Configure Campus Fabric IP Clos
Juniper Validated Design -- Campus Fabric IP Clos Deployment Types
You have two sites connected to an EVPN network. Each site is using the172.16.1.0/24network for its own respective site.
How does EVPN prevent overlap in this scenario?
EVPN, when used with VXLAN, leveragesBGP MPLS/VXLAN control plane mechanisms. To prevent overlapping IP prefixes between different tenants or sites, EVPN uses aRoute Distinguisher (RD).
''In EVPN-VXLAN, the route distinguisher (RD) makes routes unique when overlapping IP prefixes or MAC addresses are advertised between multiple tenants or sites.''
Option A(designated forwarder) applies to multi-homing in EVPN, not prefix uniqueness.
Option B(Layer 2 gateway) does not prevent IP overlap; it bridges VLANs.
Option D(ESI) is used for identifying multi-homed Ethernet segments, not to differentiate overlapping subnets.
Option C(Route Distinguisher) is correct, as it uniquely identifies routes even if the IP addresses are the same across sites.
Juniper Mist AI for Wired -- EVPN-VXLAN Overview
Juniper Validated Design -- EVPN-VXLAN Fundamentals
Junos OS EVPN Configuration Guide
Which two events are displayed under theClient Eventsarea found on theInsightspage? (Choose two.)
Within Mist Insights,Client Eventsshow state transitions such asreassociationand IP-level issues likeDHCP Denied.
These help correlate connectivity issues across wired or wireless edge connections.
Mist AI Insights Dashboard Guide
Mist AI for Wired -- Client Event Monitoring
What is the primary benefit of using switch configuration templates?
InJuniper Mist AI for Wired, configuration templates are a foundational part ofswitch onboarding and management. The primary purpose of these templates is to ensure configuration consistency across all switches that belong to a specific site or organization.
''Switch configuration templates allow administrators to define a standard configuration that is automatically applied to all switches within a site or organization, ensuring consistency and reducing configuration errors.''
Templates can contain base configuration parameters such as NTP, syslog, VLANs, port profiles, and authentication settings. When new switches are onboarded to the Mist Cloud, they automatically inherit the template's configuration, ensuring uniform behavior across the network fabric.
Option Ais incorrect --- templates do not directly impact hardware performance.
Option Bis incorrect --- templates are not related to upgrade times.
Option Cis incorrect --- templates are used for uniformity, not for switch-specific changes.
Option Dcorrectly describes their main benefit ---ensuring consistent configuration across all switches.
Juniper Mist AI for Wired -- Switch Configuration Templates Guide
Juniper Mist AI for Wired -- Wired Assurance Administration Guide
Juniper Validated Design -- Mist Wired Configuration Best Practices
You must move from a campus fabric core-distribution centrally-routed bridging (CRB)network to an edge-routed bridging (ERB)network.
In this scenario, where does the gateway for the network movie?
In Juniper Mist campus fabric architectures, thelocation of the Layer 3 gateway (IRB interface)differentiatescentrally-routed bridging (CRB)fromedge-routed bridging (ERB):
InCRB, thegateway resides at the core layer--- routing occurs centrally, and access/distribution layers perform Layer 2 bridging.
InERB, thegateway moves to the edge (distribution layer), enabling routing to occur closer to endpoints, improving performance and scalability.
''In a centrally-routed bridging (CRB) topology, Layer 3 gateways reside at the core. When transitioning to an edge-routed bridging (ERB) design, the Layer 3 gateways are moved to the distribution layer, closer to the access switches and clients.''
Therefore, when moving from acore-distribution CRBto anERBmodel, thegateway moves from the distribution to the access layerin campus terms (edge = access).
Option A:Incorrect --- ERB gateways are not at the distribution layer only.
Option B:Incorrect --- opposite direction.
Option C:Correct--- the gateway movesfrom distribution to access (edge).
Option D:Incorrect --- this describes CRB, not ERB.
Juniper Mist AI for Wired -- Campus Fabric Architecture Models (CRB vs ERB)
Juniper Validated Design -- Campus Fabric EVPN-VXLAN Gateway Placement
Junos OS EVPN-VXLAN Deployment Guide
Exam domains verified against: Official Juniper JN0-460 exam guide, last checked October 2026.
Identify fundamental concepts of Mist AI Wired Assurance including solutions, supported devices, features, components, account setup and subscriptions. Understand provisioning and deployment foundational concepts including configuration options and templates for wired assurance infrastructure.
Sample question from this domain above: Q3
Describe how to provision and deploy wired assurance using supported architectures and site variables. Work with provisioning and deployment options to configure templates and establish sites based on design requirements.
Describe how to manage and operate devices using MistAI wired assurance. Configure port profiles, establish service level expectations, and use APIs to integrate management functions with other systems.
Identify concepts of Campus Fabric Architectures including EVPN multihoming, IP Clos, and core-distribution patterns. Describe how to deploy different fabric architectures and understand GPB, micro segmentation, CRB versus ERB approaches and scaling requirements.
Identify VXLAN concepts including layer 2 tunneling, VTEP functions and gateway deployment. Understand EVPN multipath, route types, Ethernet Segment Identifiers and route distinguishers, then apply route targets and policies in data and control plane operations.
Common questions about the exam itself
