100+ Free JNCIE-SP Practice Questions

Pass your Juniper Networks Certified Expert, Service Provider Routing and Switching exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

Not published Pass Rate

100+ Questions

100% Free

1 / 10

Question 1

Score: 0/0

A network engineer is configuring IS-IS ABR summarization between Level 1 and Level 2. After adding a summary prefix under the Level 2 IS-IS export policy, the summary is not advertised into Level 2. What is the most likely cause?

IS-IS does not support prefix summarization at the ABR

The policy is applied as import instead of export on the Level 2 instance

The contributing Level 1 prefixes are not installed in the routing table yet

Summarization requires a dedicated loopback interface at the ABR

to track

2026 Statistics

Key Facts: JNCIE-SP Exam

8 hours

Lab Exam Duration

Juniper JNCIE-SP certification page

$1,600

Exam Fee

Juniper exam pricing

JNCIP-SP

Prerequisite

Juniper certification track requirements

3 years

Certification Validity

Juniper recertification policy

500-800 hrs

Recommended Lab Time

Juniper community estimates

The JNCIE-SP is an 8-hour hands-on lab exam costing $1,600, making it one of the longest and most demanding networking expert exams. Candidates configure and troubleshoot a full service provider network covering IS-IS/OSPF, BGP confederations and route reflector hierarchies, MPLS TE with FRR, EVPN-MPLS/VXLAN, L3VPN with Inter-AS Option B/C, VPLS, MVPN, Segment Routing with TI-LFA, Flex-Algo, hierarchical CoS, and Junos automation. Prerequisite is JNCIP-SP. Certification valid for 3 years.

Sample JNCIE-SP Practice Questions

Try these sample questions to test your JNCIE-SP exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1A network engineer is configuring IS-IS ABR summarization between Level 1 and Level 2. After adding a summary prefix under the Level 2 IS-IS export policy, the summary is not advertised into Level 2. What is the most likely cause?

A.IS-IS does not support prefix summarization at the ABR

B.The policy is applied as import instead of export on the Level 2 instance

C.The contributing Level 1 prefixes are not installed in the routing table yet

D.Summarization requires a dedicated loopback interface at the ABR

Explanation: IS-IS ABR summarization on Junos generates the summary only when at least one contributing more-specific prefix is active in the routing table. If the Level 1 routes have not yet been installed (e.g., adjacency just formed or routes filtered), no summary is originated. Verifying 'show route' for the contributing prefixes is the first diagnostic step.

2On a Junos router running IS-IS, a Level 2 LSP is flooded with a metric of 16777215. What does this metric value signal to other routers?

A.The link uses wide metrics and is functioning normally at maximum utilization

B.The prefix is unreachable and the router is withdrawing it via overload signaling

C.The router has set the overload bit and is marking itself as a transit-avoidance node

D.The metric value indicates the router ID tie-breaking field in ECMP scenarios

Explanation: In IS-IS wide metrics, 0xFFFFFE (16777214) is the maximum usable metric, and 0xFFFFFF (16777215) is reserved to signal that a prefix is unreachable — equivalent to an infinity metric. Advertising a prefix at this value tells other routers to discard it from SPF calculations. This is distinct from the overload bit, which marks the entire router.

3A service provider needs to redistribute OSPF external routes into IS-IS with a specific tag to prevent re-redistribution back into OSPF on a downstream router. Which Junos configuration element correctly implements this?

A.Apply a community to the OSPF routes before redistribution; IS-IS reads BGP communities

B.Set a tag value in the IS-IS export policy and match that tag in the OSPF import policy on the downstream router

C.Use a route-filter to tag routes at the OSPF-to-IS-IS boundary using 'then tag'

D.Configure an IS-IS route-target extended community on the redistributed prefixes

Explanation: Junos routing policies support 'then tag <value>' which stamps an integer tag on redistributed routes. The downstream router's OSPF import policy can then match 'tag <value>' to reject routes that originated from OSPF, preventing routing loops. This is the standard loop-prevention mechanism for OSPF↔IS-IS mutual redistribution.

4An engineer needs to leak a specific Level 2 prefix down into a Level 1 area without leaking the entire Level 2 topology. What is the correct Junos approach?

A.Enable 'wide-metrics-only' under the Level 1 IS-IS instance

B.Apply an IS-IS import policy on the ABR that matches the prefix and sets 'level 1 active'

C.Configure a routing policy under 'protocols isis export' on the ABR that accepts the specific L2 prefix and apply it to the Level 1 area

D.Use BGP route reflector to push the prefix into the Level 1 area

Explanation: IS-IS route leaking from Level 2 to Level 1 on Junos is accomplished by configuring an export policy under 'protocols isis' and restricting it to the Level 1 context on the ABR. The policy matches the target L2 prefix(es) and the router then originates them into L1 LSPs. Without the policy, ABRs only advertise the default route into L1.

5A large SP network uses BGP confederations divided into three member-ASes. A prefix learned from an external peer is carried through two confederation member-ASes before reaching the egress ASBR. What is in the AS_PATH of that prefix as seen by the external peer receiving it?

A.The path contains the member-AS numbers in parenthetical notation followed by the originating external AS

B.The path contains only the confederation AS number, stripping all member-AS information

C.The path contains all member-AS numbers plus the confederation AS number and the external AS

D.The path contains only the originating external AS number because confederations strip internal path information at the ASBR egress

Explanation: BGP confederations are an internal mechanism. When a route exits the confederation, the ASBR removes all confederation-specific path segments (CONFED_SEQ, CONFED_SET) before advertising to external peers. External peers see only the confederation AS number prepended to the originating external AS — exactly as if it were a single AS.

6A network architect is designing a route reflector hierarchy with two tiers. All clients connect to Tier-2 RRs, which peer with Tier-1 RRs. A route originated by a Tier-2 RR client is reflected to a Tier-1 RR. What CLUSTER_LIST entry does the Tier-1 RR add before reflecting to its own clients?

A.The Tier-1 RR prepends its own cluster-id to the CLUSTER_LIST

B.The Tier-1 RR replaces the Tier-2 cluster-id with its own cluster-id

C.The Tier-1 RR does not modify CLUSTER_LIST — only ORIGINATOR_ID changes

D.The Tier-1 RR appends the Tier-2 RR's router-id to CLUSTER_LIST

Explanation: Each RR prepends its own cluster-id to the CLUSTER_LIST when reflecting a route. The CLUSTER_LIST grows as the route passes through each RR tier. An RR drops a route if its own cluster-id already appears in the CLUSTER_LIST, which prevents routing loops in multi-tier RR designs.

7An SP deploys BGP ADD-PATH on iBGP sessions to improve load balancing. A route reflector receives three paths for the same prefix from three different clients. With ADD-PATH enabled on the RR-to-client session, how many paths does the RR send to each client by default?

A.One — the best path only, as ADD-PATH requires explicit path-count configuration

B.All three paths, since ADD-PATH removes the best-path selection rule entirely

C.Two — the best path and one backup path as per RFC 7911 default behavior

D.The number of paths configured via 'add-path send path-count' on the RR

Explanation: BGP ADD-PATH (RFC 7911) does not have a fixed default count. On Junos, the operator configures 'add-path send path-count <N>' to specify how many additional paths are advertised per prefix. Without this configuration, ADD-PATH is not active even if the capability is negotiated. The RR still performs best-path selection; ADD-PATH supplements it with additional paths up to the configured count.

8A Junos router is performing selective BGP route leaking between two VRFs using RD and RT. Routes from VRF-A should only appear in VRF-B if they carry RT 65000:200. Which configuration correctly implements this?

A.Set 'vrf-import' policy on VRF-B to accept routes matching community 65000:200

B.Set 'vrf-export' on VRF-A to attach RT 65000:200 and 'vrf-import' on VRF-B to accept RT 65000:200

C.Configure a static route in VRF-B pointing to VRF-A's prefix

D.Apply a BGP community list on the VRF-B eBGP session to match 65000:200

Explanation: L3VPN route leaking in Junos uses export and import route targets. VRF-A's vrf-export policy attaches RT 65000:200 to exported routes. VRF-B's vrf-import policy accepts routes carrying RT 65000:200. Both policies are required — export stamps the RT, import filters on it. This is the RFC 4364 standard mechanism for inter-VRF route control.

9An operator needs to manipulate AS_PATH on outbound eBGP advertisements to influence inbound traffic from a specific peer. The goal is to make AS 65100 prefer an alternate path. Which Junos policy action achieves AS-path prepending?

A.then as-path prepend <AS>

B.then local-preference <value>

C.then community add <community>

D.then metric <value>

Explanation: Junos routing policy uses 'then as-path prepend <AS-number> <count>' to prepend one or more copies of an AS number to the AS_PATH on outbound advertisements. This makes the path appear longer, making it less preferred by the remote peer's BGP best-path selection (shorter AS_PATH wins). Local-preference influences outbound path selection within your own AS.

10An MPLS TE tunnel is configured with bandwidth 500 Mbps and setup-priority 4, hold-priority 3. A new tunnel requiring 400 Mbps arrives with setup-priority 2. The only available path has 300 Mbps free but runs through a link carrying the existing tunnel. What happens?

A.The new tunnel is rejected because 400 Mbps exceeds the 300 Mbps available

B.The existing tunnel is preempted because the new tunnel has a better (lower) setup-priority

C.Both tunnels share the 300 Mbps link in proportion to their bandwidth reservations

D.The new tunnel is installed without preemption because its hold-priority is compared against the existing tunnel's setup-priority

Explanation: MPLS TE preemption occurs when a new tunnel's setup-priority is numerically lower (better) than an existing tunnel's hold-priority. Here the existing tunnel has hold-priority 3 and the new tunnel has setup-priority 2. Since 2 < 3, the new tunnel can preempt the existing one to acquire its bandwidth. RSVP then signals the preempted tunnel to re-route.

About the JNCIE-SP Exam

JNCIE-SP is Juniper's highest expert certification for service provider networking. The 8-hour hands-on lab exam validates expert ability to deploy, configure, and troubleshoot Junos-based SP networks including IS-IS/OSPF optimization, large-scale BGP, MPLS traffic engineering, EVPN-MPLS, L3VPN inter-AS, VPLS, Multicast VPN, Segment Routing, CoS, and Junos automation.

Questions

0 scored questions

Time Limit

8 hours

Passing Score

Pass/Fail (exact threshold not published)

Exam Fee

$1,600 (Juniper Networks)

JNCIE-SP Exam Content Outline

~15%

IGP (IS-IS and OSPF)

IS-IS ABR summarization, route leaking, redistribution with tags/policies, and OSPF ASBR external routing

~20%

BGP

Confederations, route reflector hierarchies, ADD-PATH, selective route-leak, AS-path manipulation, and dampening

~20%

MPLS Traffic Engineering

Multi-constraint LSPs, admin groups, bandwidth reservation, preemption, RSVP graceful restart, FRR, Seamless MPLS

~15%

VPN Services (L3VPN, EVPN, VPLS)

L3VPN Inter-AS Option B/C, EVPN-MPLS, EVPN-VXLAN all-active multihoming, VPLS BGP signaling and multi-homing

~10%

Multicast VPN

Rosen MVPN, MVPN-MPLS, S-PMSI, inter-AS MVPN, PIM-SSM, and MVPN BGP signaling

~10%

Segment Routing

SR-MPLS, TI-LFA, Flex-Algo, node and adjacency SIDs, SRGB/SRLB, and SR-TE policies

~5%

Class of Service

MPLS EXP classification, hierarchical schedulers, traffic management, and CoS marking at the PE

~5%

Automation and Troubleshooting

PyEZ, SLAX commit/event scripts, PFE commands, packet captures, tcpdump, and control-plane protection

How to Pass the JNCIE-SP Exam

What You Need to Know

Passing score: Pass/Fail (exact threshold not published)
Exam length: 0 questions
Time limit: 8 hours
Exam fee: $1,600

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

JNCIE-SP Study Tips from Top Performers

1Practice full 8-hour lab simulations — time management is critical for JNCIE-SP more than any other Juniper exam

2Master MPLS label operations deeply: LDP, RSVP-TE, PHP, LFIB, PFE verification

3Build and troubleshoot Inter-AS Option B and C repeatedly — these are complex and lab-time-intensive

4Know all EVPN route types (1-5) and their exact use cases — expect multiple scenario-based tasks

5Practice Junos automation: commit scripts, event scripts, and PyEZ against a live vMX

Frequently Asked Questions

What is the JNCIE-SP exam format?

The JNCIE-SP is an 8-hour hands-on lab exam where you build and troubleshoot a service provider network with multiple Junos routers. You configure IS-IS/OSPF, large-scale BGP, MPLS TE, EVPN, L3VPN inter-AS, VPLS, MVPN, Segment Routing, CoS, and automation. No multiple-choice questions — all hands-on CLI work.

How much does the JNCIE-SP exam cost?

The exam costs $1,600 per attempt. Including prerequisites (JNCIA-Junos, JNCIS-SP, JNCIP-SP), the full certification path costs approximately $2,500+ plus training and lab expenses.

What prerequisite certification do I need for JNCIE-SP?

You must hold an active JNCIP-SP (Juniper Networks Certified Professional, Service Provider) certification. The full track is JNCIA-Junos (Associate) → JNCIS-SP (Specialist) → JNCIP-SP (Professional) → JNCIE-SP (Expert).

Can I take the JNCIE-SP exam remotely?

Yes. Juniper offers remote proctored JNCIE lab exams for AMER, EMEA, and APAC regions. Available dates are listed on the Juniper Learning Portal. Check the portal for upcoming JNCIE-SP lab event dates and registration.

How should I prepare for the JNCIE-SP lab exam?

Build a virtual lab (EVE-NG, GNS3, or Juniper vLabs) with 5+ vMX routers. Practice: 1) Full SP topology builds including IS-IS, BGP, LDP, RSVP-TE under time pressure, 2) EVPN-MPLS and L3VPN Inter-AS configuration, 3) MVPN and Segment Routing with TI-LFA, 4) Junos automation scripts, and 5) Complete 8-hour mock labs weekly for time management.

How long does it take to prepare for JNCIE-SP?

Most candidates with strong Junos SP experience spend 6-18 months preparing. Budget 500-800 hours of hands-on lab practice. The 8-hour exam requires both technical depth across all SP topics and strong time management — do not underestimate lab speed requirements.