JN0-481 Sample Questions & Answers
Managing a deployed blueprint and the underlying IP fabric, EVPN and VXLAN architectures lead narrowly, alongside Apstra's own architecture, its design, build and deploy phases, multitenancy, and intent-based analytics.
Launch the full JN0-481 simulator →Showing 6 of 12 free samples.
- Question 1Intermediate
Data Center Architectures (IP Fabrics, EVPN-VXLAN) · Route target versus vrf-import and vrf-export policies
During the deployment of a multi-tenant EVPN-VXLAN fabric, a network engineer notices that routes from Tenant A are leaking into Tenant B's routing tables on a specific leaf switch. Which BGP construct is most likely misconfigured, causing the unintended sharing of routes between these isolated routing instances?
Show answer & explanation
Correct answer: D
The Route Target (RT) is an extended BGP community used to control the import and export of routes into specific VRFs (routing instances). If Tenant A's routes are appearing in Tenant B's VRF, it indicates that Tenant B's VRF import policy is incorrectly matching and importing Tenant A's Route Target.
- Question 2Beginner
Data Center Architectures (IP Fabrics, EVPN-VXLAN) · Ethernet segments
In an EVPN multi-homing scenario, what is the primary purpose of the Ethernet Segment Identifier (ESI)?
Show answer & explanation
Correct answer: B
The Ethernet Segment Identifier (ESI) is a 10-byte value used in EVPN to uniquely identify an Ethernet Segment, which is typically a connection from a multi-homed device (like a server using LACP) to two or more leaf switches. This enables active-active forwarding and prevents loops.
- Question 3Beginner
Data Center Architectures (IP Fabrics, EVPN-VXLAN) · Virtual Tunnel Endpoint (VTEP) functions
What is the primary function of a Virtual Tunnel Endpoint (VTEP) in a VXLAN architecture?
Show answer & explanation
Correct answer: B
A VTEP (Virtual Tunnel Endpoint) is responsible for originating and terminating VXLAN tunnels. It encapsulates original Layer 2 frames from connected hosts into VXLAN/UDP/IP packets for transport across the Layer 3 underlay network, and de-encapsulates them upon receipt.
- Question 4Beginner
Juniper Apstra Architecture · Apstra server
In the Juniper Apstra 5.1 architecture, which component serves as the centralized single source of truth that maintains the graph database, telemetry state, and intent of the data center fabric?
Show answer & explanation
Correct answer: D
The Apstra Server is the centralized controller and single source of truth. It hosts the graph database, processes intent-based analytics, maintains the blueprint, and communicates with the device agents.
- Question 5Intermediate
Juniper Apstra Architecture · Role-based Access Control (RBAC)
A consulting firm is using Apstra to manage a large enterprise data center. The IT director wants to assign a new team member the ability to view the dashboard, analytics, and telemetry data for a specific blueprint, but strictly prevent them from staging or committing any configuration changes. Which predefined Role-Based Access Control (RBAC) role should be assigned?
Show answer & explanation
Correct answer: C
In Apstra RBAC, the 'Viewer' (or Blueprint Viewer) role grants read-only access to a blueprint. Users can see telemetry, dashboards, and configurations but cannot create, modify, or commit changes.
- Question 6Beginner
Juniper Apstra Architecture · Event log
A network operator needs to audit who committed a specific blueprint change in Apstra last week. Which Apstra feature natively records user actions, system changes, and authentication events directly within the Apstra UI?
Show answer & explanation
Correct answer: A
The Apstra Event Log (accessible via the UI) records system events, user logins, and audit trails of user actions like blueprint commits. While Syslog can be configured to export these events to an external SIEM, the internal Apstra feature for viewing them is the Event Log.
flowchart LR User[User Action] --> Apstra[Apstra Server] Apstra -->|Records internally| EL[Apstra Event Log] Apstra -->|Exports externally| Syslog[External Syslog/SIEM]
Ready for the real thing?
The full JN0-481 simulator has every exam-style question, timed mode, and instant scoring.