All Juniper Networks exams

Free JN0-106 practice test: 30 questions with answers

30 original questions for Junos, Associate (JNCIA-Junos), drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.

Free questions
30
Full bank
112 questions
Real exam
65 questions, 90 min

JN0-106 exam guide: topics, cost and format

All 30 JN0-106 questions with answers

The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.

Networking Fundamentals (5 questions)

  1. Question 1

    A small office replaces a hub with a 24-port Layer 2 switch. An engineer asks how the collision domains change. Which statement is correct?

    1. AEach switch port is its own collision domain, so hosts on different ports do not contend for the medium
    2. BAll 24 ports form one collision domain, because the switch floods unknown unicast frames to every port
    3. CThe switch keeps the hub's single collision domain but blocks broadcast frames on every port
    4. DThe switch creates one collision domain for each VLAN, while the former hub's single domain stays in place
    Show answer and explanation
    Correct answer: A

    Each switch port is its own collision domain, so hosts on different ports do not contend for the medium. Flooding does not merge the ports into one domain, a switch forwards broadcasts rather than blocking them by default, and VLANs create broadcast domains rather than collision domains.

  2. Question 2

    Which device type separates broadcast domains by default, so that a broadcast sent by a host on one side does not reach hosts on the other side?

    1. AA Layer 2 switch with no VLANs configured on any of its access ports
    2. BA router that connects two IP subnets through separate interfaces
    3. CA hub that connects several hosts to a single shared medium
    4. DA repeater that joins two Ethernet segments into one larger segment
    Show answer and explanation
    Correct answer: B

    A router does not forward Layer 2 broadcasts from one interface to another, so each router interface begins a new broadcast domain. A switch without VLANs, a repeater, and a hub all forward broadcasts to every other port or segment, so none of them separates broadcast domains by default.

  3. Question 3

    Which two statements about TCP and UDP are correct? (Choose two.)

    1. ATCP is connection-oriented and completes a three-way handshake before application data is sent
    2. BUDP sets up a session and acknowledges each segment before the sender transmits application data
    3. CTCP is connectionless, so the application must request retransmission of any lost segments
    4. DUDP is connectionless and does not by itself acknowledge delivery or retransmit lost datagrams
    Show answer and explanation
    Correct answer: A, D

    TCP establishes a connection with a three-way handshake and provides acknowledgments and retransmission, while UDP is connectionless and does not by itself guarantee delivery. The other two statements swap the characteristics of the two protocols.

  4. Question 4

    A router holds three routes: 10.0.0.0/8, 10.20.0.0/16 and 10.20.30.0/24. A packet arrives with destination 10.20.30.9. Which route does the router use to forward the packet?

    1. AThe 10.0.0.0/8 route, because it is the broadest summary that covers the destination address
    2. BThe 10.20.0.0/16 route, because it is the first matching entry listed in the table
    3. CThe route that was learned most recently, regardless of how many prefix bits it matches
    4. DThe 10.20.30.0/24 route, because it is the longest prefix that matches the destination address
    Show answer and explanation
    Correct answer: D

    Routers choose the matching route with the longest prefix length, which here is the /24 entry. The /8 and /16 routes also match but are less specific, and table order or learning time does not decide the choice.

  5. Question 5

    A server uses the address 172.16.5.200 with a /27 mask. What is the directed broadcast address of its subnet?

    1. A172.16.5.199
    2. B172.16.5.207
    3. C172.16.5.223
    4. D172.16.5.255
    Show answer and explanation
    Correct answer: C

    A /27 block holds 32 addresses, so this subnet runs from 172.16.5.192 to 172.16.5.223, and the last address in the block is the broadcast. 172.16.5.255 is the broadcast of a /24, while 172.16.5.199 and 172.16.5.207 are ordinary host addresses inside the block.

Junos OS Fundamentals (5 questions)

  1. Question 6

    An OSPF hello packet arrives on an interface of a Junos router. Which component ultimately processes this packet?

    1. AThe Routing Engine, because routing protocol packets are exception traffic passed up from the PFE
    2. BThe Packet Forwarding Engine, which performs the first lookup in the forwarding table for the packet
    3. CThe chassis daemon, which must validate the neighbor before any routing protocol packet is accepted
    4. DThe management daemon, which logs the hello in the system log before the packet is handled
    Show answer and explanation
    Correct answer: A

    OSPF hellos are routing protocol packets, which the PFE passes up to the Routing Engine as exception traffic. The PFE may perform the first lookup, but the Routing Engine runs OSPF, and the chassis and management daemons do not process routing protocol hellos.

  2. Question 7

    Which statement correctly describes the separation between the control plane and the forwarding plane in Junos?

    1. AThe Routing Engine runs the routing protocols and builds the routing table, and the PFE forwards packets using the forwarding table derived from it
    2. BThe control plane forwards transit packets at line rate, while the forwarding plane runs the routing protocols and handles all CLI management sessions
    3. CBoth planes run on the Routing Engine, and the Packet Forwarding Engine only stores interface counters and forwarding statistics for the operator
    4. DThe Packet Forwarding Engine runs OSPF and BGP and builds the routing table, then sends each packet it forwards to the Routing Engine
    Show answer and explanation
    Correct answer: A

    In Junos the Routing Engine handles control-plane work such as the routing protocols and the routing table, while the Packet Forwarding Engine forwards traffic using the forwarding table derived from it. The other options either swap the two planes' roles or place both planes on the Routing Engine.

  3. Question 8

    An engineer states that every transit packet crossing a Junos router must be processed by the Routing Engine before it leaves. Which response is correct?

    1. AThe statement is correct, because the Routing Engine performs a lookup in the forwarding table for every transit packet
    2. BThe statement is correct for packets on Gigabit Ethernet interfaces only, since those lack hardware forwarding support
    3. CThe statement is wrong, because the Routing Engine never sees any packet, including OSPF hello messages from neighbors
    4. DThe statement is wrong, because the PFE forwards transit traffic and the Routing Engine handles only exception traffic
    Show answer and explanation
    Correct answer: D

    Junos forwards transit traffic in the PFE using the forwarding table, so the Routing Engine is not in the per-packet path for transit packets. Exception traffic, such as routing protocol packets and packets addressed to the router, is sent to the Routing Engine, and Gigabit Ethernet interfaces do have hardware forwarding.

  4. Question 9

    Which Junos daemon runs the routing protocol processes and maintains the routing table on the Routing Engine?

    1. Achassisd, which monitors hardware components such as fans, power supplies and temperature sensors on the device
    2. Bmgd, which handles the command-line interface and NETCONF management sessions for operators
    3. Crpd, the routing protocol daemon that runs the routing protocols and builds the routing table
    4. DThe Packet Forwarding Engine, which runs the routing protocol processes and the routing table locally
    Show answer and explanation
    Correct answer: C

    rpd is the routing protocol daemon on the Routing Engine that runs the routing protocols and maintains the routing table. chassisd monitors hardware, mgd handles CLI and NETCONF sessions, and the PFE forwards packets rather than running routing protocols.

  5. Question 10

    A flood of packets aimed at the router's own address drives the Routing Engine CPU high. Which mechanism limits this traffic so it stops consuming Routing Engine resources?

    1. AA firewall filter applied as an input filter on the lo0 interface that limits traffic destined to the router
    2. BA routing policy with an export term that rejects the flooded prefix from OSPF
    3. CA higher OSPF hello interval so that fewer packets reach the Routing Engine
    4. DA static default route on the upstream router that points at a discard next hop
    Show answer and explanation
    Correct answer: A

    The lo0 filter is designed to protect the Routing Engine by controlling traffic addressed to the router's own addresses. A routing policy filters routes rather than packets, a higher hello interval does not stop a flood, and a discard default upstream would drop all legitimate traffic too.

User Interfaces (4 questions)

  1. Question 11

    An operator wants to see only the lines containing ge-0/0/0 from the output of show interfaces terse. Which command accomplishes this?

    1. Ashow interfaces terse | count
    2. Bshow interfaces terse | except ge-0/0/0
    3. Cshow interfaces terse | match ge-0/0/0
    4. Dshow interfaces terse | find ge-0/0/0
    Show answer and explanation
    Correct answer: C

    The match pipe displays only the lines that contain the given text. except removes the matching lines, count reports how many lines are in the output rather than showing them, and find starts the output at the first match and keeps everything below it.

  2. Question 12

    An operator adds a new interface address in configuration mode and checks show interfaces terse, but the address does not appear. The operator has not run any other commands. Which step is missing?

    1. ARunning save to write the candidate configuration to a file on the device
    2. BRunning rollback 0 to reload the active configuration into the candidate configuration
    3. CRestarting the Routing Engine so that the new interface address is read from the configuration
    4. DRunning commit to activate the candidate configuration as the active configuration
    Show answer and explanation
    Correct answer: D

    Junos keeps edits in the candidate configuration until a commit activates them, so the new address is not active yet. save only writes the candidate to a file, rollback 0 discards uncommitted edits, and restarting the Routing Engine is unnecessary.

  3. Question 13

    While in configuration mode, which command displays the differences between the candidate configuration and the active configuration?

    1. Ashow system commit
    2. Brun show configuration
    3. Cshow configuration | display set
    4. Dshow | compare
    Show answer and explanation
    Correct answer: D

    The compare pipe in configuration mode displays the candidate changes against the active configuration. show system commit lists commit history, run show configuration displays the active configuration, and display set only changes the output format.

  4. Question 14

    Which two functions are part of the core feature set of J-Web? (Choose two.)

    1. AViewing and editing the device configuration from a web browser
    2. BCompiling the Junos software image from source code on the router itself
    3. CMonitoring interface and chassis status from a browser-based dashboard
    4. DActing as the routing protocol process for OSPF and BGP peers on the device
    Show answer and explanation
    Correct answer: A, C

    J-Web is a browser-based interface for configuration, monitoring, and troubleshooting tasks. Compiling software from source and running routing protocol processes are not J-Web functions, since Junos software is installed from packages and protocols run on the Routing Engine.

Configuration Basics (4 questions)

  1. Question 15

    A junior administrator needs an operator account that can display device operational status but cannot change anything. Which login class configuration meets this requirement?

    1. Aset system login class ops permissions all
    2. Bset system login class ops permissions configure
    3. Cset system login class ops permissions view
    4. Dset system login class ops permissions maintenance
    Show answer and explanation
    Correct answer: C

    The view permission allows show commands for operational state and does not allow changes. all grants every permission, configure allows editing the configuration, and maintenance allows maintenance actions such as reboots.

  2. Question 16

    What is the purpose of a configuration group in Junos?

    1. AIt creates a separate routing table so that two customers can use overlapping address ranges
    2. BIt stores reusable configuration statements once, so other hierarchies can pull them in with apply-groups
    3. CIt saves the active configuration as a rescue file that can be restored after a failed change
    4. DIt assigns each interface to a management VLAN and automatically disables the default login classes on every device
    Show answer and explanation
    Correct answer: B

    Configuration groups define statements once under the groups hierarchy, and apply-groups inserts them wherever they are needed. Routing instances, rescue configurations, and VLAN assignments each serve different purposes and are not what groups do.

  3. Question 17

    After a change, an engineer loses remote access to a device. A rescue configuration was saved earlier from a known-good state. Which action restores that rescue copy?

    1. ARun load factory-default and then commit, which restores the device to its shipped settings and removes site-specific configuration
    2. BRun rollback rescue in configuration mode, then commit to activate the restored configuration
    3. CRun commit confirmed to make the earlier rescue copy the new active configuration
    4. DReboot the device, which automatically loads the rescue configuration as the active one
    Show answer and explanation
    Correct answer: B

    The rescue configuration is loaded with rollback rescue, and it still has to be committed to become active. Loading the factory default replaces the site's settings, while commit confirmed and a reboot do not load the rescue file.

  4. Question 18

    Which two statements are configured under the system hierarchy? (Choose two.)

    1. AAn NTP server address used for time synchronization
    2. BA syslog file that records messages at a chosen severity
    3. CA community string that grants read-only SNMP access
    4. DThe OSPF area that the router joins for dynamic route exchange
    Show answer and explanation
    Correct answer: A, B

    NTP servers and syslog files are configured under the system hierarchy as system ntp and system syslog. SNMP community strings sit in the top-level snmp hierarchy, and OSPF areas are configured under protocols.

Operational Monitoring and Maintenance (4 questions)

  1. Question 19

    An administrator sees steadily rising input errors with CRC errors on interface ge-0/0/0 while traffic volume is light. Which action is the best first step?

    1. ACheck the cable, optic and link speed or duplex settings on both ends of the link
    2. BAdd a static route that avoids the interface so that traffic stops using the link entirely
    3. CChange the OSPF cost on the interface so that routing prefers another path immediately
    4. DRaise the interface MTU to 9192 bytes so that frames stop being dropped at the port
    Show answer and explanation
    Correct answer: A

    CRC errors usually point to a physical or link-layer problem such as a damaged cable, a faulty optic, or a speed or duplex mismatch. Changing the MTU, adding a static route, or changing the OSPF cost does not fix the underlying error.

  2. Question 20

    Which command shows traffic counters for ge-0/0/0 updating in real time until the operator stops it?

    1. Ashow interfaces ge-0/0/0 terse
    2. Bshow log messages
    3. Cmonitor interface ge-0/0/0
    4. Drequest system reboot
    Show answer and explanation
    Correct answer: C

    monitor interface displays live counters for the named interface and keeps refreshing until stopped. show interfaces terse gives a one-time snapshot, show log messages displays the system log, and request system reboot restarts the device.

  3. Question 21

    An engineer upgraded Junos on a device and the new release causes problems. The previous release is still on the device. Which action returns the device to the previous software release?

    1. ARun rollback 1 and commit, which reverts the installed Junos software release
    2. BRun show system software to see the old release, which also reverts the active software
    3. CRun request system software rollback, then reboot so the previous release loads
    4. DRun request system reboot, which loads the release that was installed before the upgrade
    Show answer and explanation
    Correct answer: C

    request system software rollback sets the previously installed release to load on the next reboot, so a reboot is required afterward. rollback 1 applies to configuration, a plain reboot loads the current release, and show system software only displays information.

  4. Question 22

    A network engineer has lost the root password on a Junos device and cannot log in remotely. What is the usual approach?

    1. AUse the console port and follow the documented password recovery procedure that requires a reboot
    2. BRun request system software rollback, which restores the previous root password along with the earlier release
    3. CSend an SNMP set request to the root user object, which resets the stored password remotely
    4. DLog in over SSH with the factory-default key that every device ships with
    Show answer and explanation
    Correct answer: A

    Junos root password recovery requires physical access to the console and a reboot into the documented recovery procedure, because remote management needs a valid login. Rollback commands and SNMP do not reset the root password, and devices do not ship with an SSH key that bypasses authentication.

Routing Fundamentals (4 questions)

  1. Question 23

    An engineer wants to confirm which routes are installed for actual packet forwarding by the Packet Forwarding Engine. Which command should be used?

    1. Ashow route
    2. Bshow route summary
    3. Cshow configuration routing-options
    4. Dshow route forwarding-table
    Show answer and explanation
    Correct answer: D

    show route forwarding-table displays the forwarding table the PFE uses for lookups. show route displays the full routing table with all candidate routes, show route summary only gives counts, and show configuration routing-options displays configuration rather than routes.

  2. Question 24

    A Junos router learns the same prefix from a static route and from an OSPF internal route. Assuming no preference is changed by configuration, which route becomes active in the routing table?

    1. AThe OSPF internal route, because its default route preference value is lower than the static route's
    2. BThe static route, because its default route preference value is lower than the OSPF route's
    3. CBoth routes, because Junos installs equal-cost routes from different protocols as active at the same time
    4. DWhichever route has the higher metric, because metric is compared first between different protocols
    Show answer and explanation
    Correct answer: B

    Junos chooses the route with the lowest preference value, and static routes default to 5 while OSPF internal routes default to 10. Metrics are only compared between routes from the same protocol, so the other options are wrong.

  3. Question 25

    A provider must keep two customer networks that use overlapping address ranges separated on one router, each with its own routing table. Which Junos feature meets this need?

    1. AConfig groups, which apply the same routing statements to each customer interface
    2. BPrefix lists in policy options, which hide overlapping ranges from the forwarding table
    3. CFirewall filters on the lo0 interface, which keep each customer's routes out of inet.0
    4. DRouting instances, which create a separate routing table for each customer
    Show answer and explanation
    Correct answer: D

    A routing instance has its own routing table and protocol context, so overlapping prefixes can coexist on one device. Configuration groups only reuse statements, and firewall filters and prefix lists do not create separate routing tables.

  4. Question 26

    Which configuration statement creates a static default route that sends traffic toward next hop 192.0.2.1?

    1. Aset protocols ospf area 0.0.0.0 interface 192.0.2.1 metric 0
    2. Bset protocols static route 0.0.0.0/0 next-hop 192.0.2.1
    3. Cset routing-options static route 0.0.0.0/0 next-hop 192.0.2.1
    4. Dset interfaces lo0 unit 0 family inet address 192.0.2.1/32
    Show answer and explanation
    Correct answer: C

    Junos static routes are configured under routing-options static with a prefix and a next-hop address. The protocols hierarchy does not hold static routes, and OSPF or interface address statements do not define a default route.

Routing Policy and Firewall Filters (4 questions)

  1. Question 27

    A router learns several static routes and must advertise them into OSPF. Which policy design accomplishes this?

    1. AAn import policy applied to the static protocol that accepts OSPF routes into the routing table
    2. BAn export policy applied to OSPF that matches routes from the static protocol and accepts them
    3. CA firewall filter on the loopback interface that accepts static prefixes and sends them to the OSPF daemon
    4. DA prefix list applied as an input filter on each physical interface that carries OSPF hello packets
    Show answer and explanation
    Correct answer: B

    Export policies control which routes a protocol advertises, so a term matching from protocol static with an accept action, applied as an OSPF export policy, advertises the static routes. Import policies, firewall filters, and interface prefix lists do not make OSPF advertise routes.

  2. Question 28

    Which two conditions can be used in the from statement of a Junos routing policy term? (Choose two.)

    1. AThe protocol that originated the route
    2. BThe BGP community attached to the route
    3. CThe source address of the packet
    4. DThe destination port of the packet
    Show answer and explanation
    Correct answer: A, B

    Routing policy terms match route attributes such as the originating protocol and the BGP community. Source address and destination port match packet headers, so they belong to firewall filter terms instead.

  3. Question 29

    A firewall filter has three terms. A packet matches the first term, which contains a count action and then an accept action. What happens to the packet?

    1. AThe packet is counted, then evaluated against the second term, and the last matching term decides its fate
    2. BThe packet is counted and accepted, and evaluation of the remaining terms stops
    3. CThe packet is discarded only after all three terms have been evaluated against it
    4. DThe packet is logged and then rejected, with an ICMP error returned to the original sender
    Show answer and explanation
    Correct answer: B

    accept is a terminating action, so the filter stops at the first matching term. count is non-terminating and only records a counter, so the packet is counted and then accepted.

  4. Question 30

    An engineer enables unicast reverse path forwarding in loose mode on an edge interface that receives asymmetric traffic. What does the router check for each incoming packet?

    1. AWhether the routing table contains any route to the packet's source address, regardless of interface
    2. BWhether the best route to the source address points back out the interface the packet arrived on
    3. CWhether the destination address matches a route installed through the interface that received the packet
    4. DWhether the source address appears in a firewall filter term that explicitly accepts the packet
    Show answer and explanation
    Correct answer: A

    Loose mode only requires that some route to the source exists, which suits asymmetric routing. Strict mode requires the best route to point back out the arrival interface, and the other options check the wrong address or the wrong table.