Juniper JN0-281 Exam Dumps

An access port is a Layer 2 switch interface mode intended for an endpoint that belongs to a single VLAN. Traffic on an access port is associated with exactly one VLAN, and frames are typically transmitted and received untagged on the wire. The switch internally maps that untagged traffic into the configured access VLAN, placing the endpoint into the correct broadcast domain. This behavior is widely used for server access, management ports, out of band devices, and any endpoint that does not tag VLANs.

By contrast, trunk ports are designed to carry multiple VLANs simultaneously, usually with 802.1Q tagging, and are typically used between switches, to routers, to virtualization hosts, or to appliances that handle multiple VLANs. That is why assigning multiple VLANs to an access port is not the standard access mode behavior.

An access port does not have to connect to a router or a firewall. It can connect directly to any Ethernet endpoint. Routing between VLANs is provided by a Layer 3 interface such as an IRB interface on the switch or an external routed device, but that is independent of whether the endpoint connects on an access port.

Verification sources from Juniper documentation

https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/topic-map/bridging-and-vlans.html

https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/task/interfaces-configuring-ethernet-switching-access.html

On Junos Ethernet switching, access and trunk ports serve different purposes and therefore treat VLAN tags differently by default. An access port is intended for a single VLAN and is designed to connect to endpoints that do not tag their frames. Because of that, access ports forward traffic as untagged on the wire and internally associate those untagged frames to the configured access VLAN. This makes access ports the standard choice for single-VLAN server NICs, management devices, and any endpoint expecting a plain Ethernet connection.

A trunk port is intended to carry traffic for multiple VLANs over a single link, which is typical for switch-to-switch uplinks, leaf-to-spine connectivity where VLAN services are extended, and hosts or appliances that use VLAN tagging. By default, trunk ports forward tagged traffic and require VLAN tags to identify the VLAN membership of each frame. Untagged behavior on a trunk is not assumed by default and is typically governed by configuring a native VLAN or equivalent untagged VLAN handling, depending on platform and design. Without such configuration, untagged frames are not treated as a normal expected case for a trunk link in data center fabrics.

Therefore, the correct default statements are that access ports forward untagged traffic and trunk ports forward tagged traffic, matching options B and D.

A data center underlay IP fabric is a routed leaf-spine network designed to provide scalable Layer 3 connectivity between all fabric nodes. A key property of these fabrics is that there are multiple equal-cost paths between any two endpoints, typically across multiple spine devices. Equal-Cost Multi-Path load balancing is used to distribute traffic across those parallel paths. The routing table installs multiple next hops for the same destination prefix, and the forwarding plane selects an egress link per flow using a hash, which keeps packets in-order within a flow while using the fabric's aggregate bandwidth. This makes statement B correct.

Because the underlay is routed, loop avoidance is handled by the routing protocol and the fundamental properties of IP forwarding, not by spanning tree. Routing protocols compute a loop-free forwarding topology and use mechanisms like shortest-path calculation and next-hop selection so that even when multiple paths exist, traffic is forwarded along valid loop-free routes. This makes statement C correct. Statement D is incorrect because spanning tree is a Layer 2 loop prevention mechanism and is not required or desired in a routed underlay fabric. Statement A is also incorrect because traffic distribution depends on ECMP and forwarding behavior, not on all devices being the same hardware model. Mixed platforms can interoperate as long as the design accounts for capacity, features, and consistent routing behavior.

The configuration is applied under the routing-options hierarchy and specifically under graceful-restart with the statement disable. In Junos, routing-options graceful-restart is the global control point used to enable or manage graceful restart behavior at the system routing level. When graceful restart is enabled, the router can continue forwarding and temporarily suppress certain routing protocol update behavior during a routing process restart or control-plane event, allowing the network to avoid unnecessary reconvergence and route churn.

Placing disable under routing-options graceful-restart turns off graceful restart globally. This means the device will not attempt to use graceful restart mechanisms for routing protocols at the global level. Protocol-specific graceful restart configuration exists under each routing protocol hierarchy, but the exhibit shows the global routing-options location, which impacts overall graceful restart behavior for the routing subsystem.

Option A is incorrect because disabling BGP graceful restart only would be done under the BGP protocol hierarchy, not routing-options. Option C is incorrect because graceful restart is a routing protocol restart behavior, not something applied only to static routes. Option D is also incorrect because the setting is not scoped to specific route statements under routing-options; it disables the graceful restart feature itself, not individual routes.

In data center environments, globally disabling graceful restart may be chosen when an operator prefers deterministic, immediate reconvergence behavior or when interoperability testing indicates graceful restart helper or restart behavior is undesired with specific peers.

Nonstop active routing is the Junos high availability feature designed to keep routing protocol operation and routing information continuous across a Routing Engine switchover on platforms with redundant Routing Engines. With NSR enabled, the control-plane routing state is replicated so that protocol sessions and routing information can remain stable when the device transitions from the primary to the backup Routing Engine. The goal is a transparent switchover that minimizes or eliminates routing reconvergence caused by a Routing Engine failure.

This is especially important in data center environments where routing stability underpins EVPN VXLAN control-plane operation, underlay BGP or OSPF adjacencies, and service reachability. By maintaining the routing protocol process state across the switchover, NSR helps prevent neighbor resets and reduces churn in the routing table, which directly protects application traffic paths from disruption that would otherwise occur during a control-plane restart.

GRES is closely related but has a different focus: it preserves forwarding and certain kernel and interface states so that packet forwarding can continue, but by itself it does not preserve the full routing protocol control plane. That is why NSR is the best match when the requirement explicitly includes routing information continuity in addition to traffic continuity. LACP and BFD are valuable availability tools, but they address link bundling and fast failure detection, not Routing Engine stateful failover.