JN0-1103 Sample Questions & Answers

In Juniper's SD-WAN solution, while policies are centrally managed and orchestrated from the Mist Cloud, the actual real-time path selection decisions based on link performance metrics (like latency, jitter, and packet loss) are made locally at the branch device. The device continuously monitors the health of the WAN links and steers traffic according to the predefined application policies. This allows for rapid adaptation to changing network conditions without waiting for instructions from the cloud controller.

The core principle of a Clos-based spine-and-leaf fabric is that every leaf switch must be connected to every spine switch. This design creates a large, non-blocking fabric where traffic from any leaf has a predictable, equal-cost path to any other leaf (always traversing from leaf-to-spine-to-leaf). Direct connections between leaf switches or between spine switches are not part of this architecture and would break the model.

Zero Trust moves beyond static, perimeter-based security. A fundamental component is the concept of continuous verification. An adaptive trust engine constantly assesses signals (user identity, device health, location, behavior) and adjusts access permissions dynamically. If a user's device becomes non-compliant or their behavior is anomalous, access can be restricted or revoked in real-time. Static ACLs, perimeter firewalls, and basic VLAN segmentation are traditional security measures that do not provide this continuous, dynamic enforcement.

This statement is true. A key feature of a Juniper SRX chassis cluster is its ability to perform stateful failover. The fabric link is used to synchronize session state information, including connection tables for TCP (called Real-Time Objects or RTOs), from the primary node to the backup node. When a failover occurs, the new primary node has the necessary session information to continue processing existing traffic without requiring sessions to be re-established, ensuring business continuity.

A predictive survey is a crucial first step to model RF coverage and capacity, allowing for optimal AP placement planning before any physical installation occurs.

Understanding the business needs (e.g., how many users, what applications they will use, are there voice/video requirements) is fundamental to designing a WLAN that meets expectations.

Translating business needs into technical specifications (e.g., minimum signal strength, required throughput per user, WPA3 security) is a critical part of the planning phase.

The Juniper EX Series switches are designed specifically for campus and branch access, distribution, and core layers. They offer a wide range of models with features like PoE/PoE+, are fully manageable by the Mist Cloud for AI-driven operations, and provide a cost-effective solution for enterprise access layer requirements. QFX Series is for data centers, SRX Series are firewalls, and MX Series are routers.

The standard method for horizontally scaling a spine-and-leaf fabric is to add more leaf switches, provided the spine switches have sufficient port capacity. The fundamental rule of connecting every leaf to every spine must be maintained. Therefore, the correct approach is to utilize available ports on the existing spine switches (or add line cards if they are modular like the QFX10008) and connect each of the 32 new leaf switches to all four spine switches. Adding a super-spine layer is a method for scaling out (building pods), not for simply adding more leaves within the same pod.

Oversubscription is the ratio of potential input bandwidth to available output (uplink) bandwidth.

• Total potential input bandwidth (downlinks) = 48 ports * 1 Gbps/port = 48 Gbps.
• Total available output bandwidth (uplinks) = 4 ports * 10 Gbps/port = 40 Gbps.
• The ratio is Input : Output, which is 48 Gbps : 40 Gbps.
• Simplifying the ratio by dividing both sides by 40 gives 1.2 : 1.

Virtual Chassis is a Juniper technology that allows multiple supported switches (like the EX4400) to be interconnected and managed as a single logical device. This simplifies management by providing a single management plane and control plane, and it enhances redundancy because if one member switch (the primary routing engine) fails, another can take over seamlessly. MC-LAG is for link-level redundancy between two separate devices, and EVPN is a fabric technology.

A hub-and-spoke topology perfectly matches the company's requirements. In this design, the major offices act as central hubs, and the smaller branch offices act as spokes. Each spoke establishes a secure IPsec VPN tunnel to its designated regional hub. This centralizes traffic flow, simplifies management, and reduces the number of required tunnels compared to a full mesh. It allows secure communication from branches to hubs while controlling branch-to-branch traffic, aligning with the stated goals.