100+ Free JNCIE-DC Practice Questions

Pass your Juniper Networks Certified Expert, Data Center (JNCIE-DC) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

Not published Pass Rate

100+ Questions

100% Free

1 / 10

Question 1

Score: 0/0

In a multi-pod EVPN-VXLAN fabric, you are designing VXLAN stitching at a border leaf using ERB (Edge-Routed Bridging). The border leaf must terminate VXLAN tunnels from two internal pods and stitch traffic to an external EVPN-MPLS DCI. Which two forwarding behaviors must the border leaf support simultaneously?

Layer 2 VNI termination for intra-pod BUM flooding and Layer 3 VRF-lite forwarding to the WAN

IP-VRF route leaking between overlay VRFs and PE-CE BGP EVPN signaling toward the MPLS core

VTEP termination for VXLAN encapsulated frames plus MPLS label imposition for DCI-bound traffic

Only MAC-VRF bridging; routing between pods must be handled by a dedicated inter-pod spine

to track

2026 Statistics

Key Facts: JNCIE-DC Exam

8 hours

Lab Exam Duration

Juniper JNCIE-DC certification page

$1,600

Exam Fee

Juniper exam pricing

JNCIP-DC

Prerequisite

Juniper certification track requirements

3 years

Certification Validity

Juniper recertification policy

400-700 hrs

Recommended Lab Time

Juniper community estimates

The JNCIE-DC is an 8-hour hands-on lab exam costing $1,600, testing expert-level data center fabric skills on Junos QFX/MX. Topics include multi-pod EVPN-VXLAN with VXLAN stitching at border leaves, ERB vs CRB hybrid designs, anycast gateway, advanced ESI multi-homing with DF election, EVPN-VPWS, EVPN multicast (IGMP snooping proxy, SMET), DCI (seamless VXLAN-MPLS, MC-LAG pod integration), Apstra multi-blueprint intent-based design, GBP microsegmentation, OpenConfig/gNMI telemetry, and PyEZ/Ansible automation. Prerequisite is JNCIP-DC. Certification valid for 3 years.

Sample JNCIE-DC Practice Questions

Try these sample questions to test your JNCIE-DC exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1In a multi-pod EVPN-VXLAN fabric, you are designing VXLAN stitching at a border leaf using ERB (Edge-Routed Bridging). The border leaf must terminate VXLAN tunnels from two internal pods and stitch traffic to an external EVPN-MPLS DCI. Which two forwarding behaviors must the border leaf support simultaneously?

A.Layer 2 VNI termination for intra-pod BUM flooding and Layer 3 VRF-lite forwarding to the WAN

B.IP-VRF route leaking between overlay VRFs and PE-CE BGP EVPN signaling toward the MPLS core

C.VTEP termination for VXLAN encapsulated frames plus MPLS label imposition for DCI-bound traffic

D.Only MAC-VRF bridging; routing between pods must be handled by a dedicated inter-pod spine

Explanation: A border leaf performing VXLAN-to-MPLS stitching must act as a VTEP (terminating VXLAN tunnels from internal pods) and simultaneously impose MPLS labels for traffic destined to the DCI PE. This dual-plane forwarding is the defining behavior of a stitching node. ERB places routing at the leaf, so the border leaf owns both the VTEP function and the MPLS encapsulation handoff — it does not offload either to a separate device.

2You configure an anycast gateway on leaf switches across two EVPN pods. A VM moves from Pod 1 to Pod 2 without changing its IP address. After the move, which EVPN route type ensures the remote spine correctly updates the MAC-IP binding and points traffic to the new VTEP?

A.Type 1 (Ethernet Auto-Discovery) route

B.Type 2 (MAC/IP Advertisement) route

C.Type 3 (Inclusive Multicast Ethernet Tag) route

D.Type 5 (IP Prefix) route

Explanation: EVPN Type 2 routes carry the MAC address and optionally the IP address of an endpoint, associated with the originating VTEP's next-hop. When the VM moves, the new leaf advertises a Type 2 route with the same MAC/IP but a new VTEP next-hop. Receiving spines and remote leaves update their forwarding tables accordingly. Type 5 routes carry IP prefixes (used for external routing), Type 3 routes advertise VTEP membership for BUM flooding, and Type 1 routes handle per-EVI or per-ES autodiscovery for multihoming.

3In a Junos EVPN-VXLAN ERB deployment, you want to enable route leaking between two VRFs (VRF-A and VRF-B) at the leaf level without using a centralized border router. Which Junos configuration construct achieves intra-device inter-VRF leaking for EVPN IP-VRF?

A.Configure rib-group statements under routing-options to copy routes between inet.0 tables

B.Use logical-systems with explicit route-import policies between each system's master.inet.0

C.Define instance-import policies referencing the remote VRF's bgp.evpn.0 table using vrf-import

D.Create an IRB interface in each VRF and place them in a shared VLAN to bridge traffic between VRFs

Explanation: Junos EVPN IP-VRF route leaking uses vrf-import policy chains within each routing-instance. You define an import policy that matches the exported routes from the remote VRF (via route-target community matching) and import them into the local VRF's inet.0. This is a control-plane operation that keeps traffic in the kernel forwarding table without bridging. The bgp.evpn.0 RIB holds EVPN-learned routes before they are resolved into the VRF inet.0 via import policy.

4You are configuring eBGP unnumbered peering between leaf and spine switches in a Junos underlay. Which protocol provides the IPv6 link-local address resolution that makes unnumbered BGP operational on point-to-point links?

A.DHCPv6 stateless address autoconfiguration (SLAAC)

B.IPv6 Router Advertisement (RA) messages combined with the interface's link-local address

C.OSPFv3 adjacency negotiation, which exchanges link-local addresses as a side effect

D.Static IPv6 address assignment on loopback interfaces exported into BGP

Explanation: BGP unnumbered peering (RFC 5549) uses IPv6 link-local addresses as BGP peer addresses on point-to-point interfaces. Each interface auto-generates an EUI-64 link-local address (fe80::/10 prefix). IPv6 Router Advertisement messages carry the peer's link-local address, enabling BGP to discover and form the session. No global IPv6 or IPv4 addresses are needed on the transit links. This is the industry-standard mechanism used in Clos fabric underlays.

5A JNCIE-DC lab scenario requires you to configure BFD for fast convergence on eBGP sessions in the underlay. After enabling BFD, you notice the sessions are flapping every few seconds. Which configuration parameter should you increase first to stabilize the sessions?

A.Increase the BGP hold-time to prevent keepalive timeouts

B.Increase the BFD minimum-interval and/or multiplier values

C.Reduce the BFD transmit-interval below 100ms for faster detection

D.Disable BFD liveness-detection on the primary interface and use it only on the backup

Explanation: BFD flapping is most commonly caused by minimum-interval values set too aggressively for the hardware or CPU capacity of the device, causing false failure detection. Increasing the minimum-interval (e.g., from 300ms to 1000ms) or raising the multiplier (e.g., from 3 to 5) reduces detection sensitivity and eliminates spurious failures. The BGP hold-time is separate from BFD and does not resolve BFD instability. Reducing the transmit-interval would make the problem worse.

6You are designing a CRB (Centrally-Routed Bridging) vs ERB (Edge-Routed Bridging) hybrid fabric. In a hybrid design, which layer-3 forwarding responsibility remains on the spine in the CRB segment while the ERB segment handles routing at the leaf?

A.The spine handles all ARP suppression for both CRB and ERB segments

B.The spine performs IP-VRF route resolution and inter-subnet routing for all VNIs in the CRB domain

C.The spine only handles BUM flooding trees; routing is always pushed to leaves in a hybrid design

D.The spine manages MAC learning and aging timers for the CRB segment VLANs

Explanation: In CRB, the spine switches host the IP-VRF (Integrated Routing and Bridging) function — inter-subnet routing is performed centrally at the spine. In a hybrid CRB/ERB fabric, the CRB segment retains spine-based IRB and IP-VRF routing while the ERB leaves in the ERB segment perform distributed routing locally. The two models coexist with border leaves stitching between them. ARP suppression and MAC management are leaf-level operations in both models.

7In an EVPN multi-homing scenario, two leaf switches (Leaf-1 and Leaf-2) share an Ethernet Segment (ESI 00:11:22:33:44:55:66:77:88:99) connected to a dual-homed server. After link failure on Leaf-1, traffic for the server's MAC still arrives at Leaf-1. Which EVPN mechanism should redirect this traffic immediately?

A.Leaf-1 sends a Type 3 IMET route withdrawal to trigger BUM re-flooding

B.Leaf-1 withdraws its Type 1 per-EVI route, signaling Leaf-2 as the sole active forwarder

C.Leaf-2 advertises a higher local-preference Type 2 route to override Leaf-1's stale entry

D.The spine initiates a MAC flush by sending a BGP notification to all VTEPs

Explanation: EVPN Type 1 Ethernet Auto-Discovery (per-EVI) routes are used for fast failover in multi-homing. When Leaf-1's link to the server fails, it withdraws its per-EVI Type 1 route for that ESI. Remote VTEPs receiving this withdrawal immediately redirect traffic for all MACs on that ESI to the remaining active PE (Leaf-2), without waiting for MAC timeout or Type 2 re-advertisement. This is the designed mass-withdrawal mechanism for sub-second failover.

8When configuring split-horizon-group in a Junos EVPN all-active multi-homing deployment, what is its primary purpose?

A.To prevent BUM traffic received from a remote VTEP from being forwarded out the local ESI-facing interface

B.To block unicast traffic between the two leaf switches forming the Ethernet Segment

C.To prevent route reflectors from advertising Type 2 routes back toward the originating ESI

D.To ensure that only the Designated Forwarder sends BUM traffic toward the CE

Explanation: Split-horizon-group prevents BUM (Broadcast, Unknown unicast, Multicast) traffic loops in all-active multi-homing. When a BUM frame arrives from a remote VTEP via EVPN, it must not be forwarded out the local ESI-facing interface because the remote VTEP may have already sent a copy via a different path to the same CE. The split-horizon-group tag on the ESI interface causes Junos to drop BUM traffic that arrived from the overlay back toward the same ESI — this is a Layer 2 loop prevention mechanism specific to multi-homed Ethernet Segments.

9You are verifying DF (Designated Forwarder) election for an Ethernet Segment using ESI rolling algorithm in Junos. After adding a third leaf to the ESI, which statement correctly describes how DF responsibilities are redistributed?

A.The leaf with the lowest BGP router-ID always becomes the sole DF for all VLANs

B.VLANs (or EVIs) are distributed across all three leaves using a modulo function based on the number of active PEs

C.DF election is non-preemptive; the two original leaves retain their assignments until they are manually reset

D.Each leaf advertises its preference and the highest-preference leaf wins DF for every EVI

Explanation: EVPN DF election with the ESI rolling (modulo) algorithm distributes Ethernet VIs across all active PEs using a modulo hash: DF for a given EVI = ordinal of PE whose index equals (EVI-ID mod number-of-PEs). When a third leaf joins the ESI, the modulo denominator changes from 2 to 3, rebalancing EVI assignments across all three PEs. This causes some EVIs to move DF responsibility — it is preemptive by design when new PEs join.

10In an EVPN all-active multi-homed deployment, MAC-IP synchronization between the two leaf switches in the same Ethernet Segment is critical. Which EVPN mechanism ensures both leaves have consistent ARP/MAC bindings for hosts connected to the shared ESI?

A.Both leaves perform independent ARP learning and converge over time via BGP Type 2 route exchange

B.GARP (Gratuitous ARP) flooding is used to synchronize MAC tables between the two ESI peers

C.Proxy ARP is disabled on both leaves to force hosts to re-ARP after any mobility event

D.Local MAC-IP bindings learned by one ESI PE are distributed via EVPN Type 2 routes with the ESI set, allowing the peer PE to install them

Explanation: In EVPN multi-homing, when one leaf learns a MAC-IP binding from the locally attached host, it originates an EVPN Type 2 (MAC/IP Advertisement) route with the ESI populated. The peer leaf (also part of the same ESI) receives this Type 2 route and installs the MAC-IP in its local table with a local next-hop, enabling it to answer ARP requests on behalf of that host (proxy ARP). This is the EVPN-native MAC-IP synchronization mechanism — no GARP flooding between PEs is required.

About the JNCIE-DC Exam

JNCIE-DC is Juniper's highest expert certification for data center networking. The 8-hour hands-on lab exam validates expert ability to design, deploy, configure, and troubleshoot Junos-based data center fabrics including advanced EVPN-VXLAN multi-pod/multi-fabric designs, complex multi-homing with ESI, DCI scenarios, Apstra intent-based networking, microsegmentation with GBP, telemetry, and automation.

Questions

0 scored questions

Time Limit

8 hours

Passing Score

Pass/Fail (exact threshold not published)

Exam Fee

$1,600 (Juniper Networks)

JNCIE-DC Exam Content Outline

~25%

EVPN-VXLAN Fabric Design

Multi-pod EVPN-VXLAN, VXLAN stitching at border leaves, ERB vs CRB hybrid, anycast gateway, symmetric and asymmetric IRB, L3 VNI, route-target auto-derivation

~20%

Advanced Multi-Homing

All-active ESI multi-homing, split-horizon-group, DF election (ESI rolling and preference algorithms), MAC-IP synchronization, EVPN aliasing, LACP-based ESI

~15%

Underlay and Convergence

eBGP numbered/unnumbered with RFC 5549, BFD for fast convergence, BGP unnumbered IPv6 link-local peering, ECMP with hash entropy

~15%

DCI and EVPN Services

Seamless EVPN-VXLAN DCI, VXLAN-to-MPLS stitching, MC-LAG pod integration, EVPN-VPWS, EVPN multicast (IGMP proxy, Assisted Replication, SMET)

~10%

Apstra Intent-Based Networking

Multi-blueprint design, SLA monitoring and analytics dashboards, configuration rollback via revision history, Configlets and Connectivity Templates

~8%

Microsegmentation

Group-Based Policy (GBP) with SGT, dynamic tagging via 802.1X and RADIUS, GBP policy contracts, EVPN SGT distribution

~7%

Telemetry and Automation

OpenConfig/gNMI/gRPC streaming, JTI sensor paths, PyEZ configuration management, Ansible rolling deployments, ZTP, commit-confirmed workflows

How to Pass the JNCIE-DC Exam

What You Need to Know

Passing score: Pass/Fail (exact threshold not published)
Exam length: 0 questions
Time limit: 8 hours
Exam fee: $1,600

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

JNCIE-DC Study Tips from Top Performers

1Practice full 8-hour lab simulations — time management is critical; EVPN configuration tasks can be verbose

2Master all 8 EVPN route types and their exact use cases — expect multi-homing, multicast, and VPWS scenarios

3Practice Apstra blueprint creation, Configlet authoring, and rollback workflows hands-on

4Build and verify eBGP unnumbered (RFC 5549) setups repeatedly — this is a core underlay skill

5Know split-horizon-group and DF election algorithms cold — ESI multi-homing is tested extensively

Frequently Asked Questions

What is the JNCIE-DC exam format?

The JNCIE-DC is an 8-hour hands-on lab exam where you build and troubleshoot a data center fabric with multiple Junos QFX and MX devices. You configure EVPN-VXLAN multi-pod designs, advanced ESI multi-homing, DCI scenarios, Apstra intent-based automation, and microsegmentation. No multiple-choice questions — all hands-on CLI and GUI work.

How much does the JNCIE-DC exam cost?

The exam costs $1,600 per attempt. Including prerequisites (JNCIA-Junos, JNCIS-DC, JNCIP-DC), the full certification path costs approximately $2,500+ plus training and lab expenses.

What prerequisite certification do I need for JNCIE-DC?

You must hold an active JNCIP-DC (Juniper Networks Certified Professional, Data Center) certification. The full track is JNCIA-Junos (Associate) → JNCIS-DC (Specialist) → JNCIP-DC (Professional) → JNCIE-DC (Expert).

Can I take the JNCIE-DC exam remotely?

Yes. Juniper offers remote proctored JNCIE lab exams for AMER, EMEA, and APAC regions. Available dates are listed on the Juniper Learning Portal. Check the portal for upcoming JNCIE-DC lab event dates and registration.

How should I prepare for the JNCIE-DC lab exam?

Build a virtual lab (EVE-NG or Juniper vLabs) with multiple vQFX switches. Practice: 1) Full multi-pod EVPN-VXLAN builds with eBGP underlay under time pressure, 2) All-active ESI multi-homing with DF election, 3) DCI and VXLAN-MPLS stitching, 4) Apstra blueprint and Configlet workflows, and 5) Complete 8-hour mock labs weekly for time management.

How long does it take to prepare for JNCIE-DC?

Most candidates with strong Junos data center experience spend 6-18 months preparing. Budget 400-700 hours of hands-on lab practice. The 8-hour exam requires deep EVPN-VXLAN expertise, strong Apstra skills, and efficient configuration speed under time pressure.