100+ Free JNCIP-DC Practice Questions

Pass your Juniper JNCIP-DC Professional Data Center exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

~50-60% Pass Rate

100+ Questions

100% Free

1 / 10

Question 1

Score: 0/0

In an EVPN-VXLAN fabric, what is the primary architectural difference between Edge-Routed Bridging (ERB) and Centrally Routed Bridging (CRB)?

ERB routes traffic at the spine layer; CRB routes traffic at the leaf layer

ERB performs L3 routing at every leaf (IP gateway at leaf); CRB centralizes L3 routing at the spine/superspine

ERB uses symmetric IRB; CRB uses asymmetric IRB exclusively

ERB is used only in multi-pod designs; CRB is restricted to single-pod fabrics

to track

2026 Statistics

Key Facts: JNCIP-DC Exam

50-60%

Est. Pass Rate

Industry estimate

65 Q's

Exam Questions

Juniper

90 min

Exam Duration

Juniper

$400

Exam Fee

Juniper

3 years

Cert Valid

Juniper

150-250 hrs

Study Time

Recommended

JNCIP-DC is Juniper's professional-level data center certification. The exam has 65 questions in 90 minutes covering EVPN-VXLAN design, ESI-LAG multihoming, DCI, Apstra, microsegmentation, and automation. JNCIS-DC is required as a prerequisite. It bridges intermediate and expert-level Juniper DC certifications.

Sample JNCIP-DC Practice Questions

Try these sample questions to test your JNCIP-DC exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1In an EVPN-VXLAN fabric, what is the primary architectural difference between Edge-Routed Bridging (ERB) and Centrally Routed Bridging (CRB)?

A.ERB routes traffic at the spine layer; CRB routes traffic at the leaf layer

B.ERB performs L3 routing at every leaf (IP gateway at leaf); CRB centralizes L3 routing at the spine/superspine

C.ERB uses symmetric IRB; CRB uses asymmetric IRB exclusively

D.ERB is used only in multi-pod designs; CRB is restricted to single-pod fabrics

Explanation: In ERB (Edge-Routed Bridging), each leaf acts as the IP gateway for its locally attached subnets, performing L3 forwarding at the edge. This distributes routing across all leaves. In CRB (Centrally Routed Bridging), the spine or a dedicated gateway leaf handles all inter-VLAN routing centrally; leaves only perform L2 bridging and VXLAN encapsulation/decapsulation.

2What is an anycast gateway in an EVPN-VXLAN fabric, and what problem does it solve?

A.A gateway that uses BGP anycast routing to distribute traffic across multiple exit points for WAN connectivity

B.A shared IP and MAC address configured identically on multiple leaf switches so that VMs can move between racks without changing their default gateway

C.A dedicated spine node that acts as the single L3 gateway for all VLANs in the fabric

D.A BGP EVPN Route Type 5 prefix that summarizes all host routes into a single prefix advertisement

Explanation: An anycast gateway assigns the same IP address and the same virtual MAC address (typically a fabric-wide MAC like 00:00:5e:00:01:01) to the IRB interface on every leaf in the fabric. Because every leaf advertises identical gateway IP/MAC, a VM can live-migrate to any rack without ARP-ing for a new default gateway. It eliminates traffic tromboning and provides optimal local egress for routed traffic.

3In Junos EVPN-VXLAN, what is an Integrated Routing and Bridging (IRB) interface in a bridge domain, and why is it needed?

A.An IRB is a loopback-style interface used exclusively for VTEP source addressing

B.An IRB is a virtual L3 interface bound to a bridge domain that provides the inter-VLAN routing function without requiring a separate physical routed port

C.An IRB is a dedicated hardware forwarding engine for VXLAN encapsulation and decapsulation

D.An IRB replaces the spine switches in ERB designs by routing traffic directly between VTEPs

Explanation: An IRB interface (also called a Switched Virtual Interface or SVI in Cisco terminology) is a virtual L3 interface on Junos that is bound to a specific bridge domain (VLAN). It carries the IP address that serves as the default gateway for hosts in that VLAN. When symmetric IRB is used in EVPN-VXLAN, traffic is routed at both the ingress and egress leaf, using a dedicated L3 VNI for the L3 EVPN instance.

4A network engineer is designing a VXLAN fabric and needs to decide between VNI-to-VLAN mapping one-to-one vs. many-to-one. Which statement correctly describes these two approaches?

A.One-to-one maps a single VNI to a single VLAN per leaf; many-to-one maps multiple VNIs to a single VLAN across different leaves

B.One-to-one maps each VLAN to a unique VNI globally; many-to-one maps multiple VLANs to the same VNI — typically used for VXLAN traffic aggregation

C.One-to-one is the only supported mode in Junos; many-to-one is a Cisco NX-OS-specific feature

D.Many-to-one means a single VLAN ID maps to multiple VNIs depending on the spine, which enables spine-based traffic engineering

Explanation: In one-to-one VNI-to-VLAN mapping, each VLAN has its own globally unique VNI, which is the standard and recommended approach in EVPN-VXLAN fabrics. In many-to-one mapping, multiple VLANs share the same VNI — this is used in specific aggregation or service-chaining scenarios but requires careful design because it collapses distinct L2 domains into one VXLAN segment, which can cause MAC address conflicts.

5In EVPN-VXLAN, what is BUM traffic, and what are the two primary methods for handling it?

A.BUM stands for Broadcast, Unknown unicast, and Multicast; it is handled via ingress replication (head-end replication) or P2MP multicast underlay

B.BUM stands for Border, Unicast, and Multicast; it is handled via ECMP or LACP bonding on the uplinks

C.BUM traffic is a type of QoS-marked traffic for real-time applications; it is handled via strict priority queuing or WRED

D.BUM stands for Bridged Unicast Multipath; it is handled exclusively by the anycast gateway using proxy-ARP

Explanation: BUM traffic (Broadcast, Unknown unicast, and Multicast) must be flooded to all VTEPs in the same VNI because VXLAN is point-to-point by nature and lacks native multicast semantics. The two standard solutions are: (1) Ingress replication (head-end replication) — the sending VTEP creates a separate unicast VXLAN copy for each remote VTEP, no underlay multicast needed; (2) P2MP multicast underlay — a multicast group is mapped to each VNI, and the underlay PIM handles replication to subscribed VTEPs.

6What is assisted replication in the context of EVPN-VXLAN BUM traffic handling, and when is it used?

A.Assisted replication is when the spine switches replicate BUM traffic on behalf of leaf VTEPs, reducing the number of copies a leaf must send

B.Assisted replication is a Juniper-proprietary term for ARP proxy where the spine answers ARP requests on behalf of remote VTEPs

C.Assisted replication uses an external BUM replication server outside the DC fabric to send multicast frames

D.Assisted replication enables the EVPN control plane to pre-install all BUM entries in the hardware FIB

Explanation: Assisted replication (AR) is a hybrid BUM replication mechanism where designated spine nodes (AR replicators) receive a single BUM copy from a leaf VTEP and replicate it to all other VTEPs in the overlay. This reduces the per-leaf unicast copy burden of pure head-end replication while avoiding the complexity of multicast underlay. It is particularly useful in large fabrics where head-end replication creates significant bandwidth overhead on uplinks.

7An engineer is comparing MC-LAG with EVPN Multihoming (ESI-LAG) for dual-homed server connectivity. Which statement BEST describes a key advantage of ESI-LAG over MC-LAG?

A.ESI-LAG requires fewer physical links than MC-LAG, making it cheaper to deploy

B.ESI-LAG is control-plane-based and integrates natively with EVPN, eliminating the inter-chassis link (ICL) requirement and scaling to more than two PEs

C.MC-LAG cannot support active-active forwarding; ESI-LAG is the only way to achieve active-active multihoming

D.ESI-LAG uses OSPF instead of BGP for neighbor discovery, simplifying the underlay configuration

Explanation: MC-LAG requires a dedicated Inter-Chassis Link (ICL) between the two multihoming PEs for state synchronization, which limits the design to exactly two PEs. ESI-LAG (Ethernet Segment Identifier-based multihoming) uses EVPN Route Types 1, 4, and 2 to synchronize state via the BGP control plane. This eliminates the ICL and allows multihoming to more than two PEs (mass-scale active-active), which is critical for large spine-leaf fabrics.

8In EVPN multihoming, what is the purpose of the Ethernet Segment Identifier (ESI), and which EVPN route type carries ESI information to remote PEs?

A.The ESI uniquely identifies a multi-homed Ethernet segment; Route Type 1 (Ethernet Auto-Discovery) carries per-ES and per-EVI ESI information

B.The ESI is the VTEP IP address used for VXLAN tunneling; Route Type 3 (Inclusive Multicast) carries ESI information

C.The ESI identifies individual VLANs within a bridge domain; Route Type 5 (IP Prefix) carries per-VLAN ESI values

D.The ESI is the BGP community used for traffic engineering; Route Type 2 (MAC+IP Advertisement) is the only route type that carries ESI

Explanation: The Ethernet Segment Identifier (ESI) is a 10-byte value that uniquely identifies the multi-homed link or LAG bundle that a CE device uses to connect to multiple PEs. EVPN Route Type 1 (Ethernet Auto-Discovery route) carries the ESI in two sub-types: per-ES (mass withdrawal) and per-EVI (aliasing/load-balancing). Route Type 4 (Ethernet Segment route) is also ESI-related and is used for Designated Forwarder (DF) election among PEs sharing the same segment.

9What is EVPN-VPWS (Virtual Private Wire Service) and how does it differ from standard EVPN-VXLAN for L2 services?

A.EVPN-VPWS provides point-to-point Ethernet pseudowire services using EVPN signaling, while standard EVPN-VXLAN provides point-to-multipoint L2 bridging across multiple VTEPs

B.EVPN-VPWS is a Juniper-specific term for MC-LAG with VXLAN encapsulation, while EVPN-VXLAN uses standard IETF protocols

C.EVPN-VPWS and EVPN-VXLAN are identical — VPWS is just the older name for the same technology

D.EVPN-VPWS is used for L3 VPN services between data centers; EVPN-VXLAN is used exclusively for L2 services within a single DC

Explanation: EVPN-VPWS (defined in RFC 8214) provides a point-to-point Ethernet pseudowire between exactly two endpoints using EVPN Route Type 1 for signaling. Unlike a standard EVPN-VXLAN bridge domain (which is multipoint — many VTEPs bridging in a shared MAC-VRF), EVPN-VPWS creates a dedicated P2P wire between two specific sites. It is used for wholesale L2 connectivity, DCI point-to-point links, or legacy L2VPN service replacement.

10In a VXLAN DCI (Data Center Interconnect) design, what is split-horizon and why is it essential in the border leaf?

A.Split-horizon prevents traffic received on a VXLAN tunnel from being forwarded back out on the same VXLAN tunnel, preventing forwarding loops between DCs

B.Split-horizon is a routing protocol loop-prevention mechanism that prevents the border leaf from advertising EVPN routes back to the spine from which they were learned

C.Split-horizon is a QoS mechanism that prioritizes inter-DC traffic over intra-DC traffic using DSCP marking

D.Split-horizon forces BUM traffic to be replicated by the spine before crossing the DCI link, reducing bandwidth usage

Explanation: In VXLAN DCI, split-horizon (also called split-horizon filtering) prevents a frame received over a VXLAN overlay tunnel from being re-forwarded out on another VXLAN overlay tunnel. Without split-horizon, a BUM frame entering from DC-A's VTEP could be flooded back out toward DC-A from the DCI border leaf, creating a forwarding loop. Junos enforces split-horizon on VXLAN tunnel interfaces by default, ensuring that ingress tunnel traffic is never forwarded to other tunnel peers in the same bridge domain.

About the JNCIP-DC Exam

JNCIP-DC validates professional-level mastery of Juniper data center technologies including advanced EVPN-VXLAN design (ERB/CRB, symmetric IRB, anycast gateway), multihoming (ESI-LAG, EVPN-VPWS), DCI with border leaf and VXLAN stitching, microsegmentation with Group-Based Policy, Apstra intent-based networking, and data center automation with Ansible/PyEZ.

Questions

100 scored questions

Time Limit

90 minutes

Passing Score

Pass/Fail

Exam Fee

$400 (Juniper Networks / Pearson VUE)

JNCIP-DC Exam Content Outline

30%

EVPN-VXLAN Design & Operation

ERB vs CRB, anycast gateway, symmetric IRB, L3 VNI, ARP suppression, BUM traffic, VNI mapping

25%

Multihoming & DCI

ESI-LAG, MC-LAG, EVPN-VPWS, border leaf, VXLAN stitching, split-horizon, T5/T2 summarization

20%

Automation & Orchestration

Ansible junos_config, PyEZ Device/RPC, Apstra blueprints, intent lineage, tag-based policy, multi-site

15%

Microsegmentation & Security

Group-Based Policy, macro/micro segmentation, Contrail vRouter, GBP tags, firewall filters

10%

Advanced Troubleshooting

show evpn *, show bgp summary/neighbor, show interfaces diagnostics optics, traceoptions BGP EVPN

How to Pass the JNCIP-DC Exam

What You Need to Know

Passing score: Pass/Fail
Exam length: 100 questions
Time limit: 90 minutes
Exam fee: $400

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

JNCIP-DC Study Tips from Top Performers

1Master ERB vs CRB design trade-offs: ERB routes at every leaf with anycast gateway; CRB centralizes routing at spine/superspine — know when to use each

2Understand symmetric IRB deeply: ingress leaf routes into IP-VRF via L3 VNI; egress leaf routes from IP-VRF into destination VLAN — both leaves route

3Know all five EVPN route types: RT1 (A-D: aliasing + mass withdrawal), RT2 (MAC+IP), RT3 (IMET/BUM flooding), RT4 (DF election), RT5 (IP prefix)

4Practice ESI-LAG configuration: ESI value, LACP system-id, DF election via RT4, mass withdrawal via RT1 per-ES on link failure

5Study Apstra architecture: blueprints as source of intent, anomaly detection via telemetry, intent lineage for traceability, routing zones = VRFs, virtual networks = VLANs+VNIs

Frequently Asked Questions

What is the JNCIP-DC exam format?

JNCIP-DC has 65 multiple-choice and multi-select questions in 90 minutes. The exam is pass/fail. It covers advanced EVPN-VXLAN design, ESI-LAG multihoming, DCI, Apstra, microsegmentation, and automation. Delivered at Pearson VUE centers or online.

What is the hardest topic on JNCIP-DC?

EVPN-VXLAN advanced design — specifically ERB vs CRB trade-offs, symmetric IRB with L3 VNI, and DCI VXLAN stitching with split-horizon — is consistently reported as the most challenging area. Apstra intent lineage and ESI-LAG DF election are also frequently cited as difficult topics.

How does JNCIP-DC compare to Cisco CCNP Data Center?

JNCIP-DC and CCNP Data Center both cover advanced data center fabric design. JNCIP-DC has a stronger focus on Junos-specific EVPN-VXLAN (QFX), Apstra intent-based networking, and PyEZ automation. CCNP DC covers Cisco NX-OS, ACI, and UCS. The depth of EVPN-VXLAN coverage is comparable.

What are the prerequisites for JNCIP-DC?

JNCIS-DC certification is required. JNCIS-DC validates intermediate knowledge of Junos data center technologies. Candidates should have 3-5 years of hands-on data center networking experience with QFX switches and EVPN-VXLAN fabrics.