JN0-460 JNCIS-MistAI-Wired Questions and Answers

InJuniper Mist AI for Wired, configuration templates are a foundational part ofswitch onboarding and management. The primary purpose of these templates is to ensure configuration consistency across all switches that belong to a specific site or organization.

“Switch configuration templates allow administrators to define a standard configuration that is automatically applied to all switches within a site or organization, ensuring consistency and reducing configuration errors.”

Templates can contain base configuration parameters such as NTP, syslog, VLANs, port profiles, and authentication settings. When new switches are onboarded to the Mist Cloud, they automatically inherit the template’s configuration, ensuring uniform behavior across the network fabric.

Option Ais incorrect — templates do not directly impact hardware performance.

Option Bis incorrect — templates are not related to upgrade times.

Option Cis incorrect — templates are used for uniformity, not for switch-specific changes.

Option Dcorrectly describes their main benefit —ensuring consistent configuration across all switches.

Abrownfield adoptionin Mist AI refers to onboarding existing Juniper switches (with existing configurations) into the Mist Cloud for management and monitoring. For the switch to connect successfully, it must be able to reach Mist Cloud services usingDNSandInternet connectivity.

“To onboard existing (brownfield) switches into Mist Cloud, the device must have outbound Internet connectivity and DNS resolution to discover Mist Cloud service endpoints.”

Option A:Correct— DNS is required for the switch to resolve Mist Cloud URLs.

Option B:Correct— Internet access is required for registration and telemetry exchange.

Option C:Incorrect — templates can be applied later but are not required for adoption.

Option D:Incorrect — Mist uses TCP ports 2200 or 443, not UDP 1280.

Juniper Mist AI for Wired uses group-based policy (GBP) to enforce segmentation within a single VRF, without requiring separate VRFs per user group. GBP tags classify endpoints logically (e.g., employees, guests, IoT devices) and enforce security rules across the EVPN-VXLAN fabric.

“Group-Based Policy (GBP) provides scalable segmentation by assigning tags to endpoints based on attributes such as user type, role, or device type. These GBP tags are then used in policies to control communication between groups.”

Option A is inefficient: assigning unique tags per endpoint is not scalable.

Option C is incorrect: GBP is identity-based segmentation, not location-based.

Option D is incorrect: assigning a single tag defeats the purpose of segmentation.

Option B is correct: the best practice is to assign GBP tags based on endpoint type (e.g., servers, staff, IoT, guests), which then drives policy enforcement.

Anorganization-level configuration templatecan only be applied tosite groups, not to individual sites.

Therefore, a single site such as Site A cannot be directly specified inside an org-level template.

Duringcampus fabric deploymentin Mist AI, switches are onboarded usingclaim codesand must beassigned to the correct siteandonlineso that Mist can push configurations and validate connectivity.

“All switches to be included in a campus fabric must be claimed, online, and assigned to the target site before launching the Campus Fabric wizard. Mist Cloud automatically discovers their roles and builds the topology.”

Option A:Incorrect — switches must be site-assigned before fabric creation.

Option B:Correct— switches must beonlineto receive configurations from Mist.

Option C:Incorrect — offline devices cannot be configured or validated in the fabric wizard.

Option D:Correct— switches must beassigned to the correct sitefor topology creation.

Group-Based Policy (GBP)is a Juniper EVPN-VXLAN feature that enablesmicrosegmentationwithout requiring multiple VRFs or VLANs. It is implemented within Juniper Mist’sWired Assurance and Campus Fabricframeworks.

“GBP provides scalable, identity-based segmentation for campus fabrics and is supported on EX4100 and EX4400 Series switches operating in EVPN-VXLAN mode under Mist management.”

The feature requires hardware and software support forEVPN-VXLAN and GBP tagging, which is currently available on specific EX models managed by Mist Cloud.

Option A:Correct— GBP requires compatible access switches, specifically EX4100 and EX4400 models.

Option B:Incorrect — GBP is centrally managed through Mist Cloud, not configured per switch.

Option C:Incorrect — GBP is provisioned via Mist Cloud, not the CLI.

Option D:Incorrect — GBP is not supported onallEVPN-capable switches; only on defined platforms (EX4100/EX4400).

TheAlerts Configurationsection in the Mist dashboard allows administrators to definenotification rules and recipientsfor various network events, including switch issues, site-level incidents, and SLE threshold violations. Notifications can be sent viaemail, webhook, or third-party integrations.

“Use the Alerts Configuration page to enable alerts for specific device events, assign severity levels, and define e-mail or webhook recipients for switch and site notifications.”

Option A (Marvis conversational interface):Used for querying issues via AI, not for email alerts.

Option B (Wired SLEs):Provides analytics and thresholds but does not manage notifications.

Option D (Marvis Actions):Offers suggested remediation steps, not alert setup.

Option C (Alerts Configuration):Correct— this is where email notifications are configured.

In Juniper Mist,Greenfield adoptionapplies to new, cloud-ready switches (such as EX4100, EX4400, and QFX series) using aclaim or activation codeto securely connect to the Mist cloud.

Brownfield adoption, however, supports switches already deployed or not factory-fresh. These are manually onboarded by configuring outbound management connectivity and adopting them through the Mist portal.

This distinction enables both new and legacy EX/QFX environments to be cloud-managed under Wired Assurance.

Juniper Mist automatically classifies ports to simplify visibility and automation withinWired Assurance. The Mist cloud analyzesport telemetryandlink behaviorto determine port roles, including uplinks.

“Mist uses machine learning and switch telemetry to automatically detect uplinks by analyzing traffic behavior and topology information. Uplink ports typically exhibit higher TX/RX utilization and are identified as spanning-tree root or forwarding ports connecting upstream devices.”

Option A:Correct — Mist examines traffic statistics. Ports with significantly higher TX/RX utilization relative to others are likely uplinks.

Option B:Incorrect — MTU size is not a classification criterion.

Option C:Correct — Mist usesSTP information(root or designated port status) to identify uplinks.

Option D:Incorrect — port description fields are for administrative purposes only and are not used by Mist analytics.

Comprehensive and Detailed Explanation From Exact Extract:

InEVPN-VXLANarchitectures, theVXLAN Tunnel Endpoint (VTEP)is the logical interface responsible for encapsulating and de-encapsulating Layer 2 Ethernet frames into VXLAN packets.

Each participating switch — typically the access or distribution node — hosts aVTEPthat maps local VLANs to VXLAN Network Identifiers (VNIs).

When a packet leaves a local VLAN, the VTEP encapsulates it in a VXLAN header and routes it through the underlay IP fabric.

When received at the destination VTEP, the frame is de-encapsulated and delivered to the appropriate local VLAN.

“VTEPs in an EVPN-VXLAN campus fabric perform MAC-to-VNI mapping and encapsulate/decapsulate traffic between virtualized network segments, allowing seamless Layer 2 and Layer 3 connectivity across an IP underlay.”

According toJuniper Mist Wired Assurance documentation, three built-in diagnostic tools available for testing switch functionality areBounce Port,Ping, andCable Test.

Bounce Portallows you to disable and re-enable a port to reset connectivity.

Pingverifies Layer 3 reachability between the switch and target IPs.

Cable Testperforms diagnostics to detect wiring faults, impedance mismatches, or cable lengths.

These tools are accessed directly from theSwitch Testing Toolssection in the Mist dashboard and are available for EX Series and QFX Series switches onboarded to the Mist cloud.

Juniper Mist AI collectstelemetry for Service Level Expectations (SLEs)across wired and wireless devices. This telemetry includes metrics such as time-to-connect, throughput, coverage, and switch performance.

“Service Level Expectation (SLE) data is collected from every device and stored for up toone monthin the Mist Cloud. This allows administrators to analyze historical performance trends and troubleshoot issues based on real-time and historical data.”

Option B (2 months):Incorrect — data is not retained this long.

Option C (7 days):Incorrect — telemetry retention is longer.

Option D (24 hours):Incorrect — too short for Mist SLE analytics.

Option A (1 month):Correct — Mist Cloud retains SLE telemetry for30 days (1 month).

In Juniper Mist Cloud, there are multiple configuration scopes:

Organization-level templatesapply globally.

Site-level configurationapplies across all devices in a site.

Individual switch configurationis used to define unique, device-specific attributes such ashostname, management IP, or local overrides.

“Templates and site-level configuration ensure consistency across devices, whileindividual switch configuration is used to assign unique values such as hostnames.”

Option A:Incorrect — org templates define common config, not hostnames.

Option B:Incorrect — site configs are shared across all switches in the site.

Option D:Incorrect — device profiles apply settings like port policies or authentication, not hostnames.

Option C:Correct —individual switch configurationis the correct place to assign hostnames uniquely per device.

Juniper Mist is built on a fully open andRESTful API architecture, allowing programmatic access to all functions.

Administrators and developers can automate switch provisioning, monitoring, and troubleshooting directly via the REST API.

This open design supports JSON data formatting and HTTPS authentication, ensuring secure integration with external systems.

ForJuniper cloud-ready EX Series switches(EX2300, EX3400, EX4100, EX4400, etc.) to successfully onboard to theJuniper Mist Cloud, specific connectivity requirements must be met:

“Cloud-managed EX switches require outbound connectivity to the Mist Cloud on TCP ports 2200 or 443. Switches must also have access to DNS services to resolve cloud service URLs during onboarding.”

Option A:Incorrect — minimum version depends on switch model; older models may onboard with earlier releases (e.g., 20.x, 21.x).

Option B:Correct— outbound TCP 2200 or 443 connectivity is required for cloud registration.

Option C:Incorrect — switches connect directly to Mist Cloud, not the Agile Licensing Portal.

Option D:Correct— DNS resolution is mandatory for discovering Mist Cloud endpoints.

TheSwitch Insightssection in the Mist dashboard provides detailed switch telemetry, including interface statistics, port utilization, client count, and traffic analysis. It allows administrators to view real-time and historicaltraffic per port, identify top talkers, and detect anomalies.

“The Switch Insights page displays real-time and historical data such as traffic per port, PoE usage, connected clients, and interface errors for every switch managed by Mist.”

Option A:Correct— port-level traffic and utilization metrics are visible in Switch Insights.

Option B:Incorrect — available for all Mist-managed switches (EX and supported QFX).

Option C:Incorrect — displays complete event history, not limited to five events.

Option D:Incorrect — configuration rollback is done via the configuration history section, not Switch Insights.