Official Exam Details: (JN0-452)
JN0-452
70%
94 Verified Questions
120 Minutes
Exam Format & Question Types
This certification exam features multiple-choice questions (single and multi-select), interactive Hotspots, Hot Areas, and Drag-and-Drop scenario configurations designed to test real-world technical competency.
JN0-452: JNCIA-Cloud Certification Study Guide & Architectural Master Blueprint
Exam Overview & Profile
The Juniper Networks Certified Associate – Cloud (JNCIA-Cloud) certification, identified by exam code JN0-452, validates foundational knowledge of cloud computing principles and their application within Juniper Networks’ cloud solutions. This certification targets networking professionals, cloud enthusiasts, and individuals beginning their journey into software-defined networking (SDN) and network function virtualization (NFV) as implemented by Juniper. Candidates should possess a basic understanding of networking concepts and demonstrate familiarity with cloud architectures. The exam typically consists of approximately 65 multiple-choice questions, with a duration of 90 minutes. A passing score of around 60% is generally required, emphasizing a strong conceptual grasp of the curriculum.
Deep-Dive Domain Breakdown: Architectural Master Blueprint
Success on JN0-452 hinges on a comprehensive understanding of the following architectural domains and core technologies:
- Cloud Computing Fundamentals:
- Service Models: Differentiate between Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Understand their respective responsibilities and use cases.
- Deployment Models: Grasp the distinctions and implications of Public, Private, Hybrid, and Community cloud environments.
- Cloud Benefits: Articulate the key advantages (e.g., agility, scalability, cost-efficiency) and common challenges (e.g., security, vendor lock-in) of cloud adoption.
- Virtualization Technologies:
- Hypervisors: Understand Type 1 (bare-metal) vs. Type 2 (hosted) hypervisors and their operational characteristics.
- Virtual Machines (VMs): Concepts of vCPU, vRAM, virtual disks, and network interfaces. Basic understanding of containerization as a lightweight alternative to VMs.
- Network Function Virtualization (NFV): Core concepts of Virtual Network Functions (VNFs), NFV Infrastructure (NFVI), and the Management and Orchestration (MANO) framework (e.g., ETSI NFV architecture). Examples like Juniper vSRX and cSRX.
- Software-Defined Networking (SDN) Principles:
- Decoupling Control and Data Planes: Understand the foundational shift from traditional networking.
- Centralized Control: The role of an SDN controller in providing a single point of management and programmability.
- Programmability: Automation through APIs (e.g., REST, OpenFlow).
- Juniper Contrail Networking: Deep dive into Contrail’s role as an SDN controller for data centers, its architecture, virtual routing and switching capabilities, and overlay networking concepts (e.g., VXLAN).
- Juniper Cloud Solutions Overview:
- Contrail Networking: Detailed understanding of its functions for SDN in cloud environments, including security policy enforcement and network automation.
- Contrail Service Orchestration (CSO): Its application in automating and orchestrating services for SD-WAN and branch deployments.
- NorthStar Controller: Its role as an SDN controller for IP/MPLS WAN networks, focusing on traffic engineering and optimization.
- vSRX and cSRX: Juniper’s virtual and containerized firewall solutions for cloud security.
- Juniper Mist Cloud: Basic awareness of its AI-driven wireless and WAN management capabilities, integrating with Juniper’s broader cloud strategy.
- Cloud Automation & Orchestration:
- Basic concepts of automation tools (e.g., Ansible, Chef, Puppet) and scripting languages (e.g., Python).
- Role of APIs (e.g., RESTful, NETCONF) in automating network operations in cloud environments.
High-Yield Exam Tips & Scenario Traps
- Architectural Decision Rules: Understand the appropriate use cases for Juniper Contrail Networking (data center SDN) versus Contrail Service Orchestration (SD-WAN, branch automation). Clearly differentiate between SDN as a network control paradigm and NFV as a network function virtualization strategy. Focus on Juniper’s specific implementations and solutions when asked about cloud architectures.
- Common Exam Traps:
- SDN vs. NFV: Confusing the fundamental definitions and objectives of these two distinct but complementary concepts.
- Controller Roles: Misidentifying the primary function of Contrail Networking, NorthStar, and CSO. Each has a specific domain of control.
- Cloud Service Models: Incorrectly assigning a scenario to IaaS, PaaS, or SaaS, especially when subtle distinctions are presented.
- Virtualization Nuances: Overlooking differences between Type 1 and Type 2 hypervisors or the benefits/drawbacks of VMs versus containers.
- Security Principles: Neglecting to consider how security (e.g., vSRX/cSRX, Contrail security policies) integrates into virtualized and cloud networks.
- Strategic Approach: Prioritize conceptual understanding over deep configuration details for this associate-level exam. Concentrate on “why” certain solutions are chosen in cloud scenarios.
Frequently Asked Questions (FAQ)
- Q1: How should I structure my study time for JN0-452 effectively?
- A1: Allocate time for each major domain. Begin with a solid grasp of fundamental cloud concepts before diving into Juniper-specific solutions. Utilize the official Juniper training course material and supplementary documentation from Juniper TechLibrary. Dedicate significant time to understanding the interplay between SDN, NFV, and virtualization, as these form the core of the exam. Regularly test your knowledge with practice questions to identify weak areas.
- Q2: What resources are most effective for JN0-452 preparation?
- A2: The official JNCIA-Cloud training course is paramount. Supplement this with Juniper’s extensive TechLibrary for detailed product documentation on Contrail, NorthStar, vSRX, and CSO. Engaging with Juniper community forums can also provide valuable insights and clarify complex topics. While not strictly required, hands-on exposure to virtualized environments or Contrail demos can greatly solidify theoretical understanding.
- Q3: Is hands-on experience crucial for passing the JNCIA-Cloud exam?
- A3: While JNCIA-Cloud is primarily conceptual, some familiarity with virtualized environments and basic SDN concepts through labs (even simulated ones or online sandboxes if available for Contrail) can significantly enhance understanding. It helps connect the theoretical knowledge to practical application, making scenario-based questions easier to interpret and answer correctly. However, deep configuration expertise is not expected at this associate level.
- Q4: How can I best approach scenario-based questions on the exam?
- A4: For scenario-based questions, carefully read the entire prompt, identifying keywords and the specific problem or requirement presented. Eliminate distractors that are technically correct but not relevant to the scenario. Focus on applying Juniper’s recommended architectural principles and solutions within the given context. Often, the answer lies in understanding which Juniper product or cloud concept best addresses the described need for scalability, automation, security, or network control.
Free JN0-452 Sample Practice Questions
Test your knowledge with these sample scenario questions complete with verified explanations:
General Practice Questions
QUESTION 1
You want a Juniper Access Point to remember its configuration in the event of a power failure.
Which parameter in the UI would you enable in the site configuration to satisfy this requirement?
- A. AP Config Persistence
- B. Enable Local Status Page
- C. AP Uplink Monitoring
- D. Mesh
Click to View Verified Solution & Explanation
Correct Option: A
✅ Option A (Correct) Reasoning: AP Config Persistence ensures the access point stores its last-known configuration locally. This allows the AP to reboot and operate with its previous settings, even if it cannot immediately reach the Mist cloud after a power failure or reboot.❌ Why the other choices are incorrect:
Option B is incorrect: Enable Local Status Page provides a web interface on the AP for local troubleshooting and status viewing; it does not pertain to configuration retention.
Option C is incorrect: AP Uplink Monitoring tracks the health and connectivity of the AP’s wired connection, not for saving configuration locally.
Option D is incorrect: Mesh enables wireless backhaul between APs to extend coverage without Ethernet, which is unrelated to configuration persistence during power outages.
Reference: https://www.mist.com/documentation/
QUESTION 2
Clients are roaming between 5 GHz and 6 GHz at times.
In this scenario, under which SLE –> classifier –> sub-classifier would this behavior fall in the UI?
- A. roaming –> stability –> failed to fast roam
- B. roaming –> latency –> slow OKC roam
- C. throughput –> capacity –> excessive client load
- D. roaming –> signal quality –> interband roam
Click to View Verified Solution & Explanation
Correct Option: D
✅ Option D (Correct) Reasoning: The behavior of clients roaming between 5 GHz and 6 GHz is specifically classified as an "interband roam" within Juniper Mist’s Roaming SLE, typically found under the Signal Quality classifier. This directly addresses the frequency band transition.
❌ Why the other choices are incorrect:
Option A is incorrect: "Failed to fast roam" refers to issues with 802.11r/k/v or OKC roaming protocols failing, not the act of interband roaming itself.
Option B is incorrect: "Slow OKC roam" indicates performance problems with Opportunistic Key Caching (OKC) roaming, not the general concept of interband roaming.
Option C is incorrect: "Excessive client load" falls under the Throughput SLE and Capacity classifier, dealing with network congestion rather than client roaming events.
QUESTION 3
According to Juniper Networks, it is recommended that devices using Mist location-based services (LBS) have line-of-sight to how many APs?
- A. 4
- B. 3
- C. 1
- D. 2
Click to View Verified Solution & Explanation
Correct Option: A
✅ Option A (Correct) Reasoning: For devices using Juniper Mist location-based services (LBS), it is recommended to have line-of-sight to at least four APs. While three APs are mathematically sufficient for 2D triangulation, four APs provide crucial redundancy and significantly improve location accuracy and robustness by mitigating signal fluctuations, obstructions, and noise, ensuring consistent performance for LBS.
❌ Why the other choices are incorrect:
Option B is incorrect: While three APs are the minimum required for 2D triangulation, this option does not represent the recommended best practice for optimal accuracy and robustness in dynamic environments with potential signal interference or blockages.
Option C is incorrect: One AP cannot provide location information through triangulation or trilateration. At least three APs are required for basic 2D positioning.
Option D is incorrect: Two APs are insufficient for accurate 2D location determination. Trilateration or triangulation requires measurements from at least three distinct points (APs) to precisely pinpoint a device’s position.
Reference: https://www.juniper.net/documentation/us/en/software/mist-ai/location-services/index.html
QUESTION 4
The roaming service-level expectation (SLE) shows an 81% success rate, but the line graph has gaps in the data. As the wireless network administrator, you have not heard any comments about the network, good or bad.
In this scenario, why are there gaps in the roaming SLE line graph?
- A. Opportunistic Key Caching (OKC) roams are slow, and not meeting the SLE.
- B. No roaming events occurred at those times.
- C. Roaming events are not satisfying the SLE.
- D. The RADIUS server was not available at this time.
Click to View Verified Solution & Explanation
Correct Option: B
✅ Option B (Correct) Reasoning: If no roaming events occur during specific time intervals, the Juniper Mist AI platform has no data to plot for the roaming Service Level Expectation (SLE) during those times. This naturally results in gaps in the line graph, as the graph only displays metrics when actual events are present to be measured.❌ Why the other choices are incorrect:
Option A is incorrect: Slow or unsuccessful Opportunistic Key Caching (OKC) roams would be recorded as roaming events, contributing to the overall success rate (potentially lowering it). However, they would still appear as data points, indicating an event occurred, rather than causing a complete gap in the graph.
Option C is incorrect: Roaming events failing to satisfy the SLE means they are being recorded but performing poorly. These events would still appear on the graph, perhaps as failures or contributing to a low success rate (like 81%), not as an absence of data points or gaps.
Option D is incorrect: An unavailable RADIUS server would cause authentication failures during roaming attempts. These failed attempts are still recorded as roaming events by the Mist APs and platform, impacting the SLE success rate, but they would not result in gaps because the events themselves are still observed.
Reference: https://www.juniper.net/documentation/us/en/software/mist-ai/mist-operations/wlan-assurance.html
QUESTION 5 (Multi-Select)
Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)
- A. Clients connected to the same AP remain isolated from each other.
- B. All ARP broadcasts on the wired network are blocked from going out of the wireless interface.
- C. Clients connected to the same AP maintain communication with each other.
- D. All ARP broadcasts on the wired network are sent out of the wireless interface.
Click to View Verified Solution & Explanation
Correct Option: A, B
✅ Option A (Correct) Reasoning: The ‘Isolation’ section shows ‘Prohibit peer to peer communication’ selected with ‘Same AP’ enabled. This explicitly means clients connected to the same AP are isolated from each other.✅ Option B (Correct) Reasoning: The ‘Filtering (Wireless)’ section shows ‘ARP’ checked. When ARP filtering is enabled, the AP intercepts and responds to ARP requests, preventing unnecessary ARP broadcasts from the wired network from going out to wireless clients.❌ Why the other choices are incorrect:
Option C is incorrect: The ‘Isolation’ setting ‘Same AP’ explicitly prohibits peer-to-peer communication between clients on the same AP, contradicting this statement.
Option D is incorrect: With ARP filtering enabled, ARP broadcasts are typically suppressed or proxied by the AP, not indiscriminately sent out of the wireless interface.
QUESTION 6
You have a Juniper Mist wireless network with six APs distributed throughout your site.
In this scenario, which device determines when it is time for a client to roam to another AP?
- A. a client
- B. a switch
- C. a Juniper AP
- D. a Juniper Mist Edge
Click to View Verified Solution & Explanation
Correct Option: A
✅ Option A (Correct) Reasoning: In Wi-Fi networks, the client device is responsible for determining when to roam. It constantly monitors signal strength, interference, and other metrics from available APs to decide when to disconnect from the current AP and associate with a new, stronger one. APs can facilitate roaming (e.g., 802.11k/v/r) but the final decision rests with the client.❌ Why the other choices are incorrect:
Option B is incorrect: A switch operates at the data link and network layers, forwarding traffic. It has no role in a wireless client’s decision to roam between access points.
Option C is incorrect: While a Juniper AP responds to client probes and provides information, it does not dictate when a client roams. The client makes the roaming decision independently.
Option D is incorrect: Juniper Mist Edge extends cloud services on-premises, managing tunnels or local services. It does not control client roaming decisions.
Reference: https://www.juniper.net/documentation/us/en/software/mist/mist-ai/index.html
QUESTION 7 (Multi-Select)
According to Juniper Networks, what are two best practices of AP placement for location services? (Choose two.)
- A. The AP must be mounted on the ceiling and must face the ground.
- B. The AP must be mounted on the wall and must face the room.
- C. At any given location, a device has a line-of-sight of two or more APs.
- D. At any given location, a device has a line-of-sight of one AP.
Click to View Verified Solution & Explanation
Correct Option: A, C
✅ Option A (Correct) Reasoning: Juniper Networks recommends ceiling mounting APs facing the ground for optimal Wi-Fi coverage and superior vBLE (Virtual Bluetooth Low Energy) performance essential for location services. This orientation provides a clear signal path to client devices.
✅ Option C (Correct) Reasoning: For accurate location services, devices must have line-of-sight and receive signals from multiple APs. Seeing two or more APs allows for triangulation and multilateration, which are fundamental for precise indoor positioning.
❌ Why the other choices are incorrect:
Option B is incorrect: While wall mounting is possible, ceiling mounting generally offers better uniform coverage and consistent vBLE performance for location services. Wall mounting can create signal shadows.
Option D is incorrect: Relying on a single AP provides only proximity information, not precise location. Accurate location services require signals from multiple access points to determine a device’s position.
QUESTION 8
Click the Exhibit button.

Your colleagues report that they are unable to browse tutorials needed for work located at youtube.com when using their BYOD devices. When using a guest device, they are able to access youtube.com.
In this scenario, how would you allow BYOD colleagues to access youtube.com using the WxLAN policies?
- A. Delete the WxLAN policy for guests and add the guest label to the policy for BYOD.
- B. Move the WxLAN policy for guests above the policy for contractor.
- C. Delete the WxLAN policy for BYOD and add the BYOD label to the policy for guests.
- D. Move the WxLAN policy for BYOD above the policy for guests.
Click to View Verified Solution & Explanation
Correct Option: C
✅ Option C (Correct) Reasoning: The question states guest users can access youtube.com. This implies the existing guest policy, despite visually blocking ‘All Video and Music’, effectively permits YouTube for guests. By deleting the specific BYOD policy and adding the BYOD the guest policy, BYOD users will now fall under the same policy that currently allows guests to access YouTube, thus achieving the goal.
❌ Why the other choices are incorrect:
Option A is incorrect: Deleting the guest policy and moving the guest the BYOD policy would change the guest access and likely not resolve the BYOD issue. The goal is to allow BYOD access to YouTube, which the existing guest policy (as per the problem statement) facilitates.
Option B is incorrect: Moving the guest policy above the contractor policy only changes the processing order for contractors and guests, which does not affect BYOD users’ access to youtube.com.
Option D is incorrect: Moving the BYOD policy above the guest policy does not explicitly permit YouTube for BYOD users. The BYOD policy shown in the exhibit does not allow YouTube, so it would still be implicitly denied by the default ‘All Resources’ block.
QUESTION 9 (Multi-Select)
Which two statuses are displayed on the Juniper Mist subscription page? (Choose two.)
- A. Demo
- B. ExceedMost Voted
- C. Valid
- D. ActiveMost Voted
Click to View Verified Solution & Explanation
Correct Option: A, D
✅ Option A (Correct) Reasoning: Juniper Mist displays ‘Demo’ status for trial or evaluation subscriptions, indicating a temporary access period.✅ Option D (Correct) Reasoning: The ‘Active’ status indicates that a subscription is currently in use and fully operational within the Mist environment.❌ Why the other choices are incorrect:
Option B is incorrect: ‘Exceed’ typically refers to usage limits or quotas being surpassed, not a primary subscription status.
Option C is incorrect: While an ‘Active’ subscription is inherently ‘Valid’, ‘Valid’ itself is not typically a distinct primary status displayed on the subscription page separate from ‘Active’.
QUESTION 10
Your Juniper Access Point has changed channels due to RADAR being observed on a DFS channel.
This change is an example of which Juniper Mist RRM system?
- A. FCC compliance
- B. global optimization
- C. reinforcement learning
- D. event-driven
Click to View Verified Solution & Explanation
Correct Option: D
✅ Option D (Correct) Reasoning: The Juniper Mist RRM system’s immediate channel change due to RADAR detection on a DFS channel is an example of an event-driven action. This functionality ensures regulatory compliance by reacting instantaneously to specific environmental events, such as radar signals, to prevent interference and maintain service availability.
❌ Why the other choices are incorrect:
Option A is incorrect: FCC compliance refers to adhering to regulatory standards, which is the goal of DFS. It is not the RRM system that performs the channel change.
Option B is incorrect: Global optimization involves system-wide, often AI-driven, adjustments for overall network performance, not an immediate reactive measure by a single AP to a local event.
Option C is incorrect: Reinforcement learning is used by Mist AI for long-term, adaptive optimization based on collected data and historical trends, not for instantaneous, rule-based reactions to specific events like radar detection.
Reference: https://www.juniper.net/documentation/us/en/software/mist-ai/mist-ai/mist-wireless-rrm.html
QUESTION 11 (Multi-Select)
Labels are created for which two configuration levels? (Choose two.)
- A. site
- B. AP
- C. location
- D. organization
Click to View Verified Solution & Explanation
Correct Option: A,D
✅ Option A (Correct) Reasoning: Labels can be created at the site level to group resources such as APs, switches, and WLANs within a specific site, allowing for site-specific policy application and management.✅ Option D (Correct) Reasoning: Labels can be created at the organization level, providing a global scope for consistent policy application and management across all sites within a Mist organization.❌ Why the other choices are incorrect:
Option B is incorrect: APs are endpoints to which labels are applied, not a hierarchical level where labels are configured or created. Labels are defined at site or organization levels.
Option C is incorrect: While locations exist within sites, labels are defined at the broader ‘site’ configuration level to group resources, rather than at a more granular ‘location’ level for policy creation.
QUESTION 12 (Multi-Select)
You are creating a Juniper Mist account.
Which two statements are true in this scenario? (Choose two.)
- A. You need separate usernames and passwords to access the Juniper Mist dashboard and Juniper Mist support.
- B. You can access the Juniper Mist dashboards and Juniper Mist support using a single username and password.
- C. Creating a Juniper account does not require you to have a Juniper device.
- D. Creating a Juniper Mist account requires you to have a Juniper device.
Click to View Verified Solution & Explanation
Correct Option: B, C
✅ Option B (Correct) Reasoning: Juniper Mist leverages a unified Juniper ID (JID) for single sign-on. Users can access the Juniper Mist dashboard and the Juniper Support Portal (for Mist support cases) using the same username and password, streamlining access to various Juniper services.
✅ Option C (Correct) Reasoning: Creating a Juniper Mist account, often referred to as a tenant, does not inherently require you to possess a Juniper device at the moment of account creation. Users can set up an account, explore features, or configure settings before adding any physical Juniper devices.
❌ Why the other choices are incorrect:
Option A is incorrect: Juniper’s strategy is to provide a unified user experience. Separate credentials for the dashboard and support would contradict this, as a single Juniper ID is used across these platforms.
Option D is incorrect: While Juniper Mist is designed to manage Juniper devices, the initial account creation process does not mandate prior ownership or registration of a Juniper device. Accounts can be created for evaluation or pre-configuration purposes.
QUESTION 13
You want to set the acceptable minimum RSSI for client devices.
Which WLAN feature is needed to accomplish this task?
- A. WLAN forwarding
- B. geofencingMost Voted
- C. WLAN rate limit
- D. wireless traffic filtering
Click to View Verified Solution & Explanation
Correct Option: D
✅ Option D (Correct) Reasoning: Setting an acceptable minimum RSSI for client devices functions as a form of access control. It filters out client devices with weak signal strength, preventing them from associating with the AP. This ensures better network performance and client experience by filtering undesirable connections based on wireless signal quality.❌ Why the other choices are incorrect:
Option A is incorrect: WLAN forwarding defines how data traffic is routed or bridged, not how clients are admitted based on RSSI.
Option B is incorrect: Geofencing is a location-based service that triggers actions when devices enter or leave defined geographical areas, unrelated to client RSSI thresholds.
Option C is incorrect: WLAN rate limit controls the bandwidth allocated to clients or the WLAN, having no bearing on minimum RSSI for client association.
Reference: https://www.juniper.net/documentation/us/en/software/mist-ai/mist-ai/mist-ai-wlan-configs.html
QUESTION 14
Which solution provides the greatest location accuracy?
- A. Wi-Fi
- B. SDK-enabled mobile application
- C. BLE badges
- D. ultra wide-band (UWB)
Click to View Verified Solution & Explanation
Correct Option: D
✅ Option D (Correct) Reasoning: Ultra-wideband (UWB) technology provides the greatest location accuracy, typically achieving sub-meter precision (e.g., 10-30 cm). Its wide frequency spectrum enables precise time-of-flight measurements for highly accurate real-time location services (RTLS).
❌ Why the other choices are incorrect:
Option A is incorrect: Wi-Fi-based location, using techniques like RSSI, provides accuracy in the range of 3-5 meters, which is significantly less precise than UWB.
Option B is incorrect: An SDK-enabled mobile application leverages underlying technologies like Wi-Fi or BLE. It is not a distinct positioning technology itself, and its accuracy is bound by the capabilities of the embedded wireless methods.
Option C is incorrect: BLE (Bluetooth Low Energy) badges offer good location accuracy, typically in the 1-3 meter range, especially with advanced techniques. However, UWB consistently outperforms BLE for sub-meter precision.
QUESTION 15
Which statement correctly describes adjacent channel interference (ACI)?
- A. ACI has two or more access points operating on non-overlapping channels.
- B. ACI has two or more access points operating on overlapping channels.
- C. ACI has two or more access points operating on the same channel.
- D. ACI has two or more access points operating on the 2.4 GHz band.
Click to View Verified Solution & Explanation
Correct Option: B
✅ Option B (Correct) Reasoning: Adjacent Channel Interference (ACI) occurs when Wi-Fi devices operate on channels that are close to each other and partially overlap, causing mutual interference and degrading performance.❌ Why the other choices are incorrect:
Option A is incorrect: Non-overlapping channels are specifically used to prevent interference, which is the opposite of ACI.
Option C is incorrect: Operating on the same channel describes Co-Channel Interference (CCI), not ACI.
Option D is incorrect: While prevalent in 2.4 GHz due to limited non-overlapping channels, ACI is defined by channel overlap, not exclusively by the frequency band itself.
QUESTION 16 (Multi-Select)
You are designing security around your wireless network and need to create WxLAN policies for Juniper Mist that require new policy labels.
At which two levels would you be able to create policy labels in this scenario? (Choose two.)
- A. organization
- B. WLAN
- C. AP
- D. site
Click to View Verified Solution & Explanation
Correct Option: A, D
✅ Option A (Correct) Reasoning: Policy labels for WxLAN can be created at the organization level in Juniper Mist. This allows for centralized definition and reuse of labels across multiple sites, ensuring consistent security policies throughout the entire organization’s wireless network. Such global labels are crucial for enterprise-wide policy enforcement.
✅ Option D (Correct) Reasoning: Policy labels can also be created at the site level. This enables granular control, allowing administrators to define specific labels relevant to a particular site’s requirements, such as unique departments or guest access policies. Site-level labels ensure flexibility while maintaining a structured policy framework.
❌ Why the other choices are incorrect:
Option B is incorrect: WLANs are the services that utilize policies and labels, but the labels themselves are not created directly at the WLAN level. Labels are defined at the organization or site scope and then referenced by policies applied to WLANs.
Option C is incorrect: APs are hardware devices that enforce policies. Policy labels are logical constructs defined in the Mist cloud management platform at organization or site levels, not directly on an individual AP. APs consume the policies that leverage these labels.
QUESTION 17
You are asked to perform a site survey on your enterprise by using a Juniper Access Point (AP) that is fully functional and visible by the Juniper Mist cloud. Your enterprise provides you with the portable equipment for elevating the Juniper AP and a battery that properly powers it.
In this scenario, how would you ensure that the Juniper AP will be fully functional for site survey purposes?
- A. You will need to enable AP Config Persistence and disable AP Uplink Monitoring in the site configuration to force the Juniper AP to remember its configuration regardless of an Internet connection or not.
- B. You will need to enable Site Survey Mode in the site configuration to force the Juniper AP to remember its configuration regardless of an Internet connection or not.
- C. A Juniper AP will maintain its configuration by default as long as the Wi-Fi Assurance license has not expired.
- D. A Juniper AP will maintain its configuration by default once rebooted regardless of an Internet connection or not.
Click to View Verified Solution & Explanation
Correct Option: B
✅ Option B (Correct) Reasoning: Enabling Site Survey Mode in the Juniper Mist site configuration is the dedicated and most appropriate method to prepare an AP for an offline site survey. This mode ensures the AP retains its configuration and continues broadcasting SSIDs, operating autonomously without continuous cloud connectivity, which is crucial for portable survey operations.
❌ Why the other choices are incorrect:
Option A is incorrect: While enabling AP Config Persistence and disabling AP Uplink Monitoring contribute to offline operation, "Site Survey Mode" is a specific, comprehensive feature designed to handle all aspects of an offline site survey effectively, making it the primary solution.
Option C is incorrect: AP configuration retention for an offline site survey is managed by specific operational modes or settings, not merely tied to the Wi-Fi Assurance license’s expiry. License expiry primarily affects cloud management capabilities and advanced feature access.
Option D is incorrect: Juniper Mist APs are fundamentally cloud-managed. While an AP retains its last loaded configuration after a reboot, ensuring full functionality for an extended period without an internet connection, specifically for a site survey, requires activating "Site Survey Mode" rather than relying on default reboot behavior.
Reference: https://www.mist.com/documentation/category/access-points/
QUESTION 18
Click the Exhibit button.

Referring to the exhibit, which client has the weakest connection to the WLAN?
- A. Client 2
- B. Client 4
- C. Client 3
- D. Client 1
Click to View Verified Solution & Explanation
Correct Option: A
✅ Option A (Correct) Reasoning: The ‘weakest connection’ to the WLAN is determined by the lowest (most negative) Received Signal Strength Indicator (RSSI) and the lowest Signal-to-Noise Ratio (SNR). Client 1 exhibits an RSSI of -81 dBm and an SNR of 11 dB, which are the lowest values across all listed clients, indicating the weakest signal.
❌ Why the other choices are incorrect:
Option B is incorrect: Client 4 has an RSSI of -70 dBm and an SNR of 22 dB. These values represent a stronger connection than Client 1’s, as -70 dBm is less negative and 22 dB is a higher SNR.
Option C is incorrect: Client 3 has an RSSI of -67 dBm and an SNR of 25 dB. These are the strongest signal metrics among the listed clients, indicating the best connection, not the weakest.
Option D is incorrect: Client 2 has an RSSI of -71 dBm and an SNR of 21 dB. While not the strongest, these values are superior to Client 1’s, meaning Client 2 does not have the weakest connection.
Reference: https://www.juniper.net/documentation/us/en/software/mist/mist-ug/monitor/client-details.html
QUESTION 19 (Multi-Select)
You want to review the roaming activity of a specific wireless client.
In this scenario, which two Marvis features would you use to accomplish this task? (Choose two.)
- A. Marvis Actions
- B. Marvis Minis
- C. Marvis Query Language
- D. Marvis Virtual Network Assistant
Click to View Verified Solution & Explanation
Correct Option: B, C
✅ Option B (Correct) Reasoning: Marvis Minis offer concise visual insights into client behavior, including a client’s journey and roaming history across different APs. This provides a quick overview of their roaming activity.✅ Option C (Correct) Reasoning: Marvis Query Language (MQL) enables administrators to construct specific queries to retrieve detailed information about a client’s events, associations, and historical roaming patterns.❌ Why the other choices are incorrect:
Personnel
Option A is incorrect: Marvis Actions are proactive, AI-driven recommendations to address network issues, not a tool for directly reviewing historical client roaming activity.
Option D is incorrect: The Marvis Virtual Network Assistant is the overall AI interface. MQL and Marvis Minis are the specific features within the VNA used to review client data.
Need the Full Exam Simulator?
Practice the complete question bank in a realistic, timed environment with advanced tracking.
