JNCIP-DC study guide
JNCIP-DC · Work through your exam, one topic at a time.
JNCIP-DC is Juniper's professional-level certification for data center engineers, aimed at people who already hold a JNCIA-DC or have equivalent hands-on experience with Junos and data center fabrics. It sits between the associate and expert tiers, so it assumes you can configure and troubleshoot without step-by-step guidance and can reason about design trade-offs rather than just recall commands. The JNCIP-DC study guide has 6 sections and about 2,242 words.
01Data Center Architecture and Deployment
The Data Center Architecture and Deployment domain tests how you translate a requirement into a validated Juniper IP fabric: spine-leaf topology, underlay routing choices, overlay placement, port sizing, and Day-0/Day-1 bring-up tooling. Every leaf connects to every spine (or a documented consistent subset) so the fabric is non-blocking and every uplink is ECMP-eligible; size uplinks from rack oversubscription targets.
395 words, about 2 min02Data Center Switching and Fabric Technologies
This domain tests the Layer 2 and multihoming mechanics underneath the overlay: VLAN and trunk behavior, LACP, MC-LAG, EVPN ESI multihoming, storm control, and VTEP data-plane function. Access ports carry untagged frames into one VLAN; trunk ports carry tagged frames.
415 words, about 2 min03Data Center Routing and Overlay Networking
This domain covers EVPN route types, VXLAN encapsulation, MAC-VRF versus IP-VRF, route targets and route distinguishers, symmetric versus asymmetric IRB, and MAC mobility. Type 1, Ethernet A-D: per ESI (and per Ethernet tag), used for aliasing and fast convergence.
376 words, about 2 min04Data Center Security and Network Services
This domain tests control-plane protection, tenant isolation, Layer 2 hardening, and service insertion such as firewalls and NAT inside an EVPN fabric. Apply a firewall filter to the loopback ( set interfaces lo0 unit 0 family inet filter input protect-re ) that permits BGP only from spine peer addresses, SSH only from management subnets, and ICMP, then discards everything else.
349 words, about 2 min05Data Center Automation and Orchestration
This domain tests Day-0 through Day-2 automation: ZTP, configuration management, on-box and off-box APIs, Apstra intent-based operations, and safe change practices. ZTP: DHCP options point the device at an image and configuration server; the device auto-installs and applies config on first boot.
352 words, about 2 min06Data Center Monitoring, Troubleshooting, and Operations
This domain tests whether you can localize a fault across underlay, overlay control plane, and data plane, plus day-to-day operations such as telemetry, logging, and rollback. Underlay: show bgp summary , show route , loopback-to-loopback pings, BFD state, interface error counters.
355 words, about 2 min