Juniper JN0-664 Practice Exam Questions & Answers

7 Free Questions Last reviewed November 1, 2026 Prepared & Reviewed by the ValidExamDumps Editorial Team

96 Practice Questions (Our Bank)
90 minutes Exam Duration
Exam Facts

Juniper JN0-664 Exam Details

Key details for this exam, checked against the published exam outline

Exam Code
JN0-664
Full Name
Service Provider Routing and Switching, Professional Exam
Issuing Body
Juniper Networks
Question Format (Our Bank)
Multiple Choice
Official Exam Fee
USD 400 (Professional level exam through Pearson VUE)
Eligibility
JNCIS-SP
Validity
3 years
Practice Questions

Free JN0-664 Practice Questions

Each question shows the correct answer and an explanation of why it is right

VA
ValidExamDumps Editorial Team Every question and its answer is checked by our JN0-664 exam preparation team, who also write the explanation shown with each one. How we research and review these pages

Question 1 Domain 3 BGP

Which two statements are correct about reflecting inet-vpn unicast prefixes in BGP route reflection? (Choose two.)

Correct Answer A, B
Explanation

Route reflection is a BGP feature that allows a router to reflect routes learned from one IBGP peer to another IBGP peer, without requiring a full-mesh IBGP topology. Route reflectors do not change any existing BGP attributes by default when advertising routes, unless explicitly configured to do so. A BGP peer does not require any configuration changes to become a route reflector client, only the route reflector needs to be configured with the client parameter under [edit protocols bgp group group-name neighbor neighbor-address] hierarchy level.

Question 2 Domain 7 Layer 2 VPNs

Exhibit

Question 2 exhibit

CE-1 and CE-2 are part of a VPLS called Customer1 No connectivity exists between CE-1 and CE-2. In the process of troubleshooting, you notice PE-1 is not learning any routes for this VPLS from PE-2, and PE-2 is not learning any routes for this VPLS from PE-1.

Correct Answer A
Explanation

VPLS is a technology that provides Layer 2 VPN services over an MPLS network. VPLS uses BGP as its control protocol to exchange VPN membership information between PE routers. The route target is a BGP extended community attribute that identifies which VPN a route belongs to. The route target must match on PE routers that participate in the same VPLS instance, otherwise they will not accept or advertise routes for that VPLS.

Question 3 Domain 5 IP Multicast

Refer to the exhibit.

Question 3 exhibit

Click the Exhibit hutton.

You are configuring an interprovider Option C Layer 3 VPN to connect two customer sites.

Referring to the exhibit, which three statements are correct? (Choose three.)

Correct Answer A, B, C
Explanation

Interprovider Option C for Layer 3 VPNs involves the use of Autonomous System Boundary Routers (ASBRs) to exchange labeled VPN-IPv4 routes between different Autonomous Systems (AS). This option requires BGP sessions between ASBRs, and the VPN routes are carried end-to-end using MPLS labels. Here's a detailed analysis of the roles of different routers in this scenario:

1. **ASBR Routers**:

- ASBRs are responsible for exchanging VPN-IPv4 routes between different ASes.

- **A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**

- Correct. ASBRs maintain routes to internal destinations within their own AS, and they also need to know the loopback addresses of PEs in the other AS to set up the BGP sessions and MPLS tunnels.

2. **PE Routers**:

- PE routers are responsible for maintaining VPN routes and label information to forward VPN traffic correctly.

- **B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

- Correct. PE routers need to maintain:

- Internal routes within their AS for routing.

- Loopback addresses of other AS PEs for establishing MPLS LSPs.

- L3VPN routes to provide end-to-end VPN connectivity.

3. **P Routers**:

- P routers are the core routers that do not participate in BGP VPN routing but forward labeled packets based on MPLS labels.

- **C. P routers only maintain the internal routes from their own AS.**

- Correct. P routers maintain the internal routing information to forward packets within the AS and use MPLS labels for forwarding VPN packets. They do not maintain VPN routes or routes from other ASes.

4. **Incorrect Statements**:

- **D. P routers maintain the internal routes from its own AS and the loopback address from the other AS PEs.**

- Incorrect. P routers do not need to maintain the loopback addresses of other AS PEs. They only maintain internal routing and MPLS label information.

- **E. ASBR routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

- Incorrect. ASBR routers do not maintain L3VPN routes. They exchange labeled VPN-IPv4 routes with other ASBRs and forward them to PE routers.

**Conclusion**:

The correct answers are:

**A. ASBR routers maintain the internal routes from its own AS and the loopback addresses from the other AS PEs.**

**B. PE routers maintain the internal routes from its own AS, the loopback address from the other AS PEs, and the L3VPN routes.**

**C. P routers only maintain the internal routes from their own AS.**

**Reference**:

- Juniper Networks Documentation on Interprovider VPNs: [Interprovider VPN Configuration](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/mpls-vpn-interprovider.html)

- MPLS and VPN Architectures, CCIP Edition by Ivan Pepelnjak and Jim Guichard

Get the complete JN0-664 question set $20$40

Get Full Access

Question 4 Domain 3 BGP

When building an interprovider VPN, you notice on the PE router that you have hidden routes which are received from your BGP peer with family inet labeled-unica3t configured.

Which parameter must you configure to solve this problem?

Correct Answer C
Explanation

The resolve-vpn parameter is a BGP option that allows a router to resolve labeled VPN-IPv4 routes using unlabeled IPv4 routes received from another BGP peer with family inet labeled-unicast configured. This option enables interprovider VPNs without requiring MPLS labels between ASBRs or using VRF tables on ASBRs. In this scenario, you need to configure the resolve-vpn parameter under [edit protocols bgp group external family inet labeled-unicast] hierarchy level on both ASBRs.

Question 5 Domain 3 BGP

You must alter class-of-service values in packets on the outbound interface of an edge router.

In this scenario, which CoS component allows you to accomplish this task?

Correct Answer C
Explanation

Class of Service (CoS) in networking is used to manage traffic by classifying, scheduling, and sometimes modifying packets to ensure network performance and Quality of Service (QoS). Different CoS components are used to achieve these goals. Let's analyze each option to determine which CoS component allows you to alter class-of-service values on the outbound interface of an edge router.

1. **Output Policer**:

- Policing is used to control the rate of traffic sent to or from a network interface. It can drop or remark traffic that exceeds a certain rate.

- Policing is not typically used to alter CoS values but to enforce traffic limits.

2. **Scheduler**:

- A scheduler is responsible for managing the order in which packets are transmitted out of an interface based on their CoS markings. It can allocate bandwidth and prioritize traffic.

- The scheduler manages how packets are queued and sent but does not alter the CoS values of packets.

3. **Rewrite Rules**:

- Rewrite rules are used to modify the CoS values of packets, such as DSCP (Differentiated Services Code Point) or 802.1p bits, as they exit an interface.

- Rewrite rules can alter the class-of-service values in the packet headers to match the desired policies of the outbound interface.

- Therefore, rewrite rules are the correct component for altering CoS values on an outbound interface.

4. **Forwarding Classes**:

- Forwarding classes are used to categorize packets into different traffic classes within a router for QoS handling.

- They help in defining how packets should be treated by the scheduler but do not directly modify the CoS values.

**Conclusion**:

To alter class-of-service values in packets on the outbound interface of an edge router, the correct CoS component to use is:

**C. rewrite rules**

**Reference**:

- Juniper Networks Documentation on CoS: [Class of Service Overview](https://www.juniper.net/documentation/en_US/junos/topics/concept/class-of-service-overview.html)

- Junos OS CoS Configuration Guide: [Rewrite Rules](https://www.juniper.net/documentation/en_US/junos/topics/topic-map/class-of-service-rewrite-rules.html)

Question 6 Domain 7 Layer 2 VPNs

Which two statements are correct about the customer interface in an LDP-signaled pseudowire? (Choose two)

Correct Answer C, D
Explanation

The customer interface in an LDP-signaled pseudowire is the interface on the PE router that connects to the CE device. An LDP-signaled pseudowire is a type of Layer 2 circuit that uses LDP to establish a point-to-point connection between two PE routers over an MPLS network. The customer interface can have different encapsulation types depending on the type of traffic that is carried over the pseudowire. The encapsulation types are ethernet-ccc, vlan-ccc, extended-vlan-ccc, atm-ccc, frame-relay-ccc, ppp-ccc, cisco-hdlc-ccc, and tcc-ccc. Depending on the encapsulation type, the customer interface can accept or reject tagged or untagged frames in the data plane, and include or exclude VLAN tags in the control plane LDP advertisement. The following table summarizes the behavior of different encapsulation types:

Question 7 Domain 6 Layer 3 VPNs

Exhibit

Question 7 exhibit

R1 and R8 are not receiving each other's routes

Referring to the exhibit, what are three configuration commands that would solve this problem? (Choose three.)

Correct Answer A, B, C
Study Guide

What the Juniper JN0-664 Exam Covers

Exam domains verified against the Official Juniper JN0-664 exam guide, last checked November 2026.

Domain 1 OSPF

Describe the concepts, operation, or functionality of OSPFv2 and OSPFv3. Given a scenario, demonstrate knowledge of how to configure or monitor single-area or multi-area OSPF.

Domain 2 IS-IS

Describe the concepts, operation, or functionality of IS-IS. Given a scenario, demonstrate knowledge of how to configure or monitor single-area or multi-area IS-IS.

Domain 3 BGP

Describe the concepts, operation, or functionality of BGP and BGP scaling mechanisms. Given a scenario, demonstrate knowledge of how to configure or monitor BGP.

Sample questions from this domain above Q1Q4Q5

Domain 4 Class of Service (CoS)

Describe the concepts, operation, or functionality of Junos OS CoS. Given a scenario, demonstrate knowledge of how to configure or monitor CoS.

Domain 5 IP Multicast

Describe the concepts, operation, or functionality of IP multicast. Given a scenario, demonstrate knowledge of how to configure or monitor IGMP, PIM dense mode, or PIM sparse mode including SSM.

Sample question from this domain above Q3

Domain 6 Layer 3 VPNs

Describe the concepts, operation, or functionality of Layer 3 VPNs including carrier-of-carriers and inter-provider VPN models. Given a scenario, demonstrate knowledge of how to configure or monitor Layer 3 VPN components.

Sample question from this domain above Q7

Domain 7 Layer 2 VPNs

Describe the concepts, operation, or functionality of BGP Layer 2 VPNs, LDP Layer 2 circuits, VPLS, and EVPN. Given a scenario, demonstrate knowledge of how to configure, monitor, or troubleshoot Layer 2 VPNs.

Sample questions from this domain above Q2Q6

FAQ

JN0-664 Exam FAQ

Common questions about the exam itself

What background do I need to sit the JN0-664 exam?
You need to hold the JNCIS-SP (Service Provider Routing and Switching Specialist) certification before taking JN0-664. This exam is designed for networking professionals with advanced knowledge of routing and switching implementations in Junos, so you should have hands-on experience deploying service provider networks with multiple routing protocols.
How difficult is the JN0-664 compared to other Juniper certs?
JN0-664 is intentionally difficult at Professional level. It tests deep understanding of how to configure and troubleshoot complex protocols like IS-IS, BGP, and OSPF specifically in service provider environments, not just basic concepts. The exam measures both foundational knowledge and the ability to make sound operational decisions in real-world scenarios.
Which topic area causes the most trouble for JN0-664 candidates?
Layer 3 and Layer 2 VPN concepts tend to be the hardest areas because they combine multiple protocols like BGP, MPLS, and EVPN into integrated solutions. Hands-on lab experience configuring these VPN types is essential rather than just reading about them.
How long should I spend preparing for JN0-664?
Realistic preparation typically takes several months of study and hands-on practice. Since you need JNCIS-SP first, most candidates spend months on the Specialist level, then additional months on Professional-level deep-dive work with actual Juniper equipment or labs.
What happens on exam day for JN0-664?
You will sit a written exam with 65 multiple-choice questions in 90 minutes, delivered through Pearson VUE either online proctored or at a test centre. The exam measures your ability to configure, monitor, and troubleshoot service provider networks across OSPF, IS-IS, BGP, VPNs, multicast, and Class of Service.
What are the rules if I fail JN0-664 or need to reschedule?
Juniper does not publish specific retake rules on their certification pages. You will need to contact Pearson VUE directly to understand retake fees, waiting periods between attempts, and rescheduling policies for your region.
How long does the JNCIP-SP certification stay valid?
Juniper certifications are valid for three years. To renew, you must pass the current version of the JN0-664 exam or take an approved Juniper training course, which also renews all lower-level certifications in the same track.
What job role does JNCIP-SP map to?
The JNCIP-SP credential targets network engineers and architects working in service provider environments who design, implement, and troubleshoot scalable networks across core, aggregation, and edge infrastructures. It is widely recognized in the telecommunications sector for managing complex multi-protocol production networks.
How does JN0-664 relate to the Expert level in the Service Provider track?
JN0-664 is the Professional level. The Expert level (JNCIE-SP) sits above it and requires a hands-on lab exam that tests practical configuration and troubleshooting skills. Passing JN0-664 alone does not qualify you for Expert level.
Is JNCIP-SP the same as JNCIP-ENT?
No. JNCIP-SP focuses on service provider routing and switching with topics like BGP scaling, Layer 2 and Layer 3 VPNs, MPLS, and multicast. JNCIP-ENT covers enterprise routing and switching with different focus areas. They are separate certification tracks at Juniper.

Other Juniper Exams

Free practice questions for more Juniper certification exams

All Juniper exams