First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.
Continue in the practice tool above to load more questions, 50 at a time.
Question 1Wired Switching Fundamentals
On a Juniper Mist-supported wired switch, which component is responsible for forwarding user traffic between access ports while the Mist cloud manages configuration and telemetry?
- The wireless access point radio
- The Mist cloud forwarding plane
- The Juniper Mist Edge appliance
- The on-premises switch ASIC and forwarding tables Correct answer.
Explanation
Mist is a cloud management and analytics platform; the physical switch still performs local hardware forwarding using its ASIC and forwarding tables. Mist Edge exists for tunneled wireless and some services, not for switching user traffic between wired ports.
Question 2Wired Switching Fundamentals
Which statement describes how a Juniper Mist-managed switch receives its configuration when it is onboarded to an organization?
- It downloads configuration from a local DHCP server option.
- It inherits configuration only from the connected access point.
- It pulls a full configuration template rendered from the site and device settings in Mist. Correct answer.
- It requires an administrator to paste a CLI configuration into the console.
Explanation
Mist renders device configuration from organization templates, site settings, and per-device overrides, then pushes it to the switch. Manual CLI pasting is not the onboarding model, and DHCP only supplies addressing and controller discovery information.
Question 3Wired Switching Fundamentals
A switch port connecting to an end-user laptop must carry a single untagged VLAN. Which port mode should be configured on the Juniper Mist switch?
- Trunk mode
- Access mode Correct answer.
- Routed mode
- Mirror mode
Explanation
Access mode places a port into one VLAN and sends frames untagged to the attached endpoint. Trunk mode carries multiple VLANs with tags, routed mode terminates Layer 3, and mirror mode copies traffic for analysis.
Question 4Wired Switching Fundamentals
Which protocol should be enabled on switch-to-switch links to prevent Layer 2 forwarding loops in a redundant topology?
- RSTP Correct answer.
- LACP
- DHCP snooping
- OSPF
Explanation
Rapid Spanning Tree Protocol blocks redundant paths so a single active topology exists, preventing broadcast storms and loops. OSPF is a Layer 3 routing protocol, LACP bundles links, and DHCP snooping filters DHCP messages.
Question 5Wired Switching Fundamentals
What is the purpose of a VLAN in a wired switching design?
- To encrypt frames between switches
- To logically segment a Layer 2 broadcast domain Correct answer.
- To assign IP addresses to endpoints automatically
- To increase the physical link speed
Explanation
A VLAN creates separate Layer 2 broadcast domains on shared physical infrastructure, improving segmentation and security. Encryption, address assignment, and link speed are handled by other mechanisms.
Question 6Wired Switching Fundamentals
Which Juniper Mist feature provides a searchable record of configuration changes made to a switch?
- Audit log Correct answer.
- Live packet capture
- Marvis Actions
- Site survey
Explanation
The Mist audit log records administrative and configuration changes with who made them and when, supporting troubleshooting and compliance. Packet capture, Marvis Actions, and site surveys serve different operational purposes.
Question 7Wired Switching Fundamentals
Which interface type is used to manage a Juniper Mist switch out of band when the management network is separate from user VLANs?
- The dedicated management Ethernet port Correct answer.
- An access port in the user VLAN
- A trunk user port
- A mirror destination port
Explanation
A dedicated management port keeps administrative reachability separate from user data VLANs, which is the definition of out-of-band management. Using a user-facing port would place management traffic in the production data path.
Question 8Wired Switching Fundamentals
What does link aggregation (LAG) provide when configured between two Juniper Mist switches?
- Increased combined bandwidth and link redundancy Correct answer.
- Encryption of inter-switch traffic
- Loop prevention across all redundant paths
- Automatic VLAN assignment to endpoints
Explanation
A LAG bundles multiple physical links into one logical link, adding bandwidth and allowing traffic to continue if a member link fails. Loop prevention, VLAN assignment, and encryption are handled by other features.
Question 9Wired Switching Fundamentals
An access port is configured with a VLAN that does not exist in the switch VLAN database. What is the most likely result for traffic on that port?
- The switch creates the VLAN automatically with default settings.
- Traffic is forwarded in the native VLAN.
- Frames are dropped because the port has no valid VLAN membership. Correct answer.
- The port is placed into a routed mode automatically.
Explanation
An access port must be assigned to an existing VLAN; if the VLAN is undefined, the port has no valid forwarding domain and traffic is dropped. The switch does not silently create VLANs or fall back to the native VLAN on an access port.
Question 10Wired Switching Fundamentals
A trunk link between two switches must carry VLANs 10, 20, and 30. Which configuration approach on the Juniper Mist switch is appropriate?
- Set the port as trunk and list VLANs 10, 20, and 30 as members. Correct answer.
- Set the port as access in VLAN 10 and rely on tagging for the others.
- Set the port as a mirror port for all three VLANs.
- Set the port as routed and create subinterfaces for each VLAN.
Explanation
A trunk port carries multiple VLANs and tags frames so the peer can distinguish them, so all required VLANs must be listed as members. An access port carries only one untagged VLAN, routed ports terminate Layer 3, and mirror ports copy traffic.
Question 11Wired Switching Fundamentals
A Juniper Mist switch reports that a port is administratively down. What does this indicate?
- The endpoint failed authentication.
- The cable is faulty at the far end.
- The link is blocked by spanning tree.
- The port was disabled in configuration. Correct answer.
Explanation
Administratively down means the interface has been disabled by configuration rather than by a physical or protocol condition. Cable faults, spanning tree blocking, and authentication failures produce different operational states.
Question 12Wired Switching Fundamentals
Which spanning tree role does a non-root bridge switch select on the port that provides the lowest-cost path to the root bridge?
- Disabled port
- Designated port
- Root port Correct answer.
- Alternate port
Explanation
Each non-root switch elects one root port, the port with the lowest path cost toward the root bridge. Designated ports forward toward a segment, alternate ports provide backup paths, and disabled ports do not participate.
Question 13Wired Switching Fundamentals
You want Mist to detect and alert on a switch port that is flapping repeatedly. Which capability should you rely on?
- Marvis anomaly and event insights surfaced in the Mist cloud Correct answer.
- Manual syslog review by an administrator
- Disabling the port permanently
- Static ARP entries on the switch
Explanation
Mist collects switch telemetry and events and surfaces anomalies such as flapping links through its analytics and Marvis insights. Static ARP, manual log review, and permanent shutdown do not provide automated detection and alerting.
Question 14Wired Switching Fundamentals
A LAG member link fails. What behavior should be expected on a correctly configured aggregated link?
- Spanning tree blocks the entire LAG permanently.
- The entire LAG goes down and all traffic stops.
- Remaining member links continue to carry traffic with reduced aggregate bandwidth. Correct answer.
- The LAG converts automatically to a single access port.
Explanation
A properly configured LAG keeps operating over the surviving member links, providing redundancy at the cost of reduced total bandwidth. The bundle does not collapse to an access port, and spanning tree does not permanently block a healthy aggregate.
Question 15Wired Switching Fundamentals
Which statement best explains why a switch port configured with 802.1X authentication might place a device into a restricted VLAN?
- The device negotiated a lower link speed than expected.
- The device failed authentication and is given limited access per policy. Correct answer.
- The device is connected through a LAG.
- The device sent tagged frames on an access port.
Explanation
With 802.1X, a supplicant that fails authentication can be assigned to a restricted or guest VLAN that limits reachability according to policy. Link speed, tagging errors, and LAG membership are unrelated to authentication outcomes.
Question 16Wired Switching Fundamentals
An administrator needs to confirm which VLAN a specific MAC address was learned on across the wired network. Which Mist capability is most directly useful?
- The wireless site survey heat map
- The firmware upgrade schedule
- The organization billing report
- The client and device visibility pages showing wired client location Correct answer.
Explanation
Mist correlates wired client information such as MAC address, switch, port, and VLAN, making client visibility pages the direct place to locate a device. Billing, wireless heat maps, and firmware schedules do not report Layer 2 client location.
Question 17Wired Switching Fundamentals
What is the effect of configuring a native VLAN on a trunk port?
- It carries untagged frames on that trunk link. Correct answer.
- It encrypts frames in that VLAN.
- It blocks all tagged frames on the link.
- It assigns the port to routed mode.
Explanation
The native VLAN handles untagged traffic on a trunk, while other VLANs are carried with 802.1Q tags. Both ends of a trunk should agree on the native VLAN to avoid misdelivery and VLAN-hopping risks.
Question 18Wired Switching Fundamentals
A switch is connected to an access point that serves multiple SSIDs mapped to different VLANs. How should the switch port be configured?
- As a trunk port carrying the AP management and SSID VLANs Correct answer.
- As an access port in the management VLAN only
- As a routed port with one IP address
- As a mirror port for wireless traffic
Explanation
An AP that maps SSIDs to separate VLANs needs a trunk so each VLAN reaches the AP with tags, including the management VLAN. An access port would restrict the AP to a single untagged VLAN.
Question 19Wired Switching Fundamentals
Which two functions does LLDP provide on a Juniper Mist wired switch that aid topology discovery? (Choose the single best answer.)
- It authenticates supplicants on the port.
- It elects a spanning tree root bridge.
- It assigns IP addresses to neighbors.
- It advertises neighbor identity and port information to adjacent devices. Correct answer.
Explanation
LLDP is a neighbor discovery protocol that advertises device identity, port identifiers, and capabilities to adjacent devices, helping build an accurate topology. It does not provide addressing, spanning tree election, or authentication.
Question 20Wired Switching Fundamentals
A network designer wants wired clients to be segmented by department without running separate cabling to each department's switch. Which design element accomplishes this?
- Disabling spanning tree on all ports
- Increasing the uplink speed between switches
- Enabling OSPF on every access port
- Assigning each department to a distinct VLAN on shared switches Correct answer.
Explanation
VLANs let one physical switching infrastructure support multiple isolated broadcast domains, one per department. Faster uplinks, routing on access ports, and disabling spanning tree do not provide logical segmentation.
Question 21Wired Switching Fundamentals
Two switches are connected by two links that are not bundled into a LAG. Spanning tree places one link in a blocking state. What is the primary consequence of this design?
- Both links actively forward traffic simultaneously.
- The switches merge into a single routed domain.
- The blocked link provides no active bandwidth until the forwarding link fails. Correct answer.
- The blocked link causes a permanent broadcast storm.
Explanation
Spanning tree keeps one path forwarding and blocks the redundant one to prevent loops, so the blocked link is standby capacity only. Bundling the links into a LAG would let both forward traffic at once.
Question 22Wired Switching Fundamentals
A trunk between two switches has a native VLAN mismatch: VLAN 1 on one side and VLAN 99 on the other. What risk does this create?
- Spanning tree is disabled on the trunk.
- Untagged frames may be delivered to the wrong VLAN, enabling VLAN hopping. Correct answer.
- The trunk converts to an access port on both switches.
- Tagged frames for all VLANs are automatically dropped.
Explanation
When native VLANs differ, untagged frames arriving on one side are classified into a different VLAN on the other, which can leak traffic between VLANs and enable VLAN-hopping attacks. Tagged VLAN traffic and spanning tree are not automatically disabled by the mismatch.
Question 23Wired Switching Fundamentals
An administrator observes that a newly added switch port is up but no traffic reaches the endpoint, and the port is a member of a LAG whose other members are active. Which is the most likely cause?
- The switch has no management IP address.
- The endpoint's cable is unplugged.
- The LAG hashing or member configuration on the new link does not match the peer. Correct answer.
- The endpoint is using a different browser.
Explanation
A LAG requires consistent member configuration and compatible hashing on both peers; a mismatched member can appear up yet fail to pass traffic correctly. An unplugged cable would show the link down, and management addressing or browser choice does not affect data forwarding.
Question 24Wired Switching Fundamentals
A switch port configured for 802.1X is connected to an unmanaged hub with several devices behind it. Why might the port be placed into an unauthorized state?
- The hub increases the link speed beyond the port capability.
- Multiple MAC addresses appear on a port configured for a single authenticated supplicant. Correct answer.
- The hub converts tagged frames to untagged frames.
- The hub disables LLDP on the port.
Explanation
Port security and 802.1X configurations that expect one authenticated device can treat multiple MAC addresses behind a hub as a violation and restrict the port. Speed, tagging conversion, and LLDP are not the trigger for the unauthorized state.
Question 25Wired Switching Fundamentals
A design uses a LAG for switch-to-switch connectivity and also relies on spanning tree for redundancy to a third switch. What is the correct interaction between these features?
- The LAG is treated as a single logical link by spanning tree, and the third switch path is blocked or forwarding per topology. Correct answer.
- The LAG disables spanning tree on the switches entirely.
- Spanning tree load-balances traffic across the LAG members.
- Spanning tree treats each LAG member as a separate link and blocks all but one member.
Explanation
Spanning tree views an aggregated link as one logical port, so it does not block individual members; loop prevention applies to the topology of logical links. Load balancing across members is done by the LAG hashing, not by spanning tree.
Question 26Wired Switching Fundamentals
On a Juniper Mist wired switch, what is the purpose of a VLAN?
- To assign a routable address to every access port
- To group ports and clients into a single broadcast domain Correct answer.
- To convert copper ports into fiber uplinks
- To encrypt traffic between the switch and the Mist cloud
Explanation
A VLAN creates a logically separated Layer 2 broadcast domain, so frames stay within the group of ports and clients assigned to it. Traffic between VLANs requires routing, which is a separate function from the VLAN itself.
Question 27Wired Switching Fundamentals
Which statement describes an access port on a Juniper Mist switch?
- It only forwards frames that already carry an 802.1Q tag
- It automatically becomes a LAG member when a second link is detected
- It carries a single untagged VLAN to connected endpoints Correct answer.
- It tags every frame with all configured VLANs
Explanation
An access port belongs to one VLAN and sends frames to the endpoint untagged, so the end device does not need to understand 802.1Q. Tagged traffic is the role of trunk ports.
Question 28Wired Switching Fundamentals
What does 802.1Q tagging accomplish on a trunk link between two Juniper Mist switches?
- It authenticates the neighboring switch before forwarding traffic
- It identifies the VLAN membership of each frame as it crosses the link Correct answer.
- It compresses frames to reduce bandwidth use
- It assigns a priority to every frame regardless of VLAN
Explanation
The 802.1Q header carries a VLAN identifier so the receiving switch knows which broadcast domain a frame belongs to. This lets one physical link carry traffic for many VLANs.
Question 29Wired Switching Fundamentals
Which protocol should be enabled so a Juniper Mist switch can learn the identity and capabilities of directly connected neighbors for topology mapping?
- RSTP
- DHCP snooping
- NTP
- LLDP Correct answer.
Explanation
LLDP is a neighbor-discovery protocol that advertises device identity, port, and capability information to directly connected peers. Mist uses this data to build an accurate wired topology.
Question 30Wired Switching Fundamentals
A switch port is configured as a trunk but the connected endpoint is a standard PC that sends untagged frames. What happens to that untagged traffic?
- It is forwarded to the management VLAN by default
- It is placed into the trunk's native VLAN Correct answer.
- It is automatically retagged into every allowed VLAN
- It is dropped because trunks only accept tagged frames
Explanation
On an 802.1Q trunk, untagged frames are associated with the native VLAN, so the PC's traffic lands in that VLAN. If the native VLAN is unused or mismatched, the traffic may not reach the intended network.
Question 31Wired Switching Fundamentals
Why is it a best practice to change the native VLAN on trunk links away from the default VLAN 1?
- To disable spanning tree on the link
- To increase the maximum frame size on the link
- To allow the trunk to carry more than 4094 VLANs
- To reduce VLAN-hopping risk from untagged frames on the trunk Correct answer.
Explanation
Untagged frames on a trunk are placed in the native VLAN, so leaving it as the default can expose that VLAN to double-tagging and misconfiguration risks. Using a dedicated, unused native VLAN limits that exposure.
Question 32Wired Switching Fundamentals
What is the primary purpose of Rapid Spanning Tree Protocol on a Juniper Mist wired network?
- To load-balance traffic across all redundant links simultaneously
- To prevent Layer 2 forwarding loops by blocking redundant paths Correct answer.
- To assign IP addresses to wired clients
- To authenticate endpoints before they reach the network
Explanation
RSTP elects a root bridge and puts redundant ports into a blocking or alternate role so a single active path exists per VLAN. This prevents broadcast storms and looping frames.
Question 33Wired Switching Fundamentals
How does a Juniper Mist switch behave when a port configured with 802.1X receives no response to authentication requests from the attached device?
- It forwards the device into the management VLAN by default
- It permanently disables the port until a reboot
- It converts the port into a trunk carrying all VLANs
- It applies the configured fallback behavior, which may place the port in a guest or restricted VLAN Correct answer.
Explanation
Mist switch profiles let you define fallback handling when authentication cannot complete, such as assigning a guest VLAN or limiting access. This keeps policy predictable instead of granting full access.
Question 34Wired Switching Fundamentals
Which Juniper Mist capability lets an administrator see which switch port a particular wired client is connected to?
- The WLAN security policy editor
- The RF template assignment page
- Wired client visibility in the Mist dashboard Correct answer.
- The device firmware update scheduler
Explanation
Mist correlates client, port, and switch data so you can locate a wired client and the port it uses. This visibility is central to troubleshooting connectivity issues.
Question 35Wired Switching Fundamentals
A LAG is configured between two Juniper Mist switches and the member links use different speeds. What is the recommended practice?
- Use member links of equal speed and configuration for predictable hashing Correct answer.
- Mix speeds freely because the LAG always uses the fastest link
- Disable LLDP on all but one member link
- Assign each member link to a different VLAN to balance load
Explanation
LAG hashing distributes flows across members, and unequal member characteristics can cause uneven utilization and unexpected behavior. Matching speed and configuration keeps distribution predictable.
Question 36Wired Switching Fundamentals
Which statement describes the effect of a port configured in trunk mode with an allowed VLAN list of 10 and 20?
- Only untagged frames are forwarded on the port
- The port forwards VLAN 10 and 20 traffic only if it is a LAG member
- Frames tagged for VLAN 10 or 20 are forwarded; other VLAN tags are dropped Correct answer.
- All VLANs are forwarded because a trunk permits every VLAN by default
Explanation
The allowed VLAN list acts as a filter on a trunk, so only the listed VLANs pass. Tags for other VLANs are discarded at the port.
Question 37Wired Switching Fundamentals
Why might an administrator enable storm control on a Juniper Mist access port connected to an end-user device?
- To force the endpoint to authenticate with 802.1X
- To convert the port into a routed interface
- To limit broadcast, multicast, or unknown unicast floods that could degrade the network Correct answer.
- To increase the port's negotiated link speed
Explanation
Storm control sets thresholds on flood traffic so a misbehaving endpoint cannot saturate the segment with broadcasts or unknown unicasts. When the threshold is exceeded the switch can drop or shut the port.
Question 38Wired Switching Fundamentals
What is the function of a management VLAN on a Juniper Mist wired deployment?
- To separate switch management traffic from user data traffic Correct answer.
- To replace the need for a routing protocol
- To carry all user traffic by default
- To provide PoE power to access points
Explanation
A dedicated management VLAN isolates the addresses used to reach and manage switches from user data, improving security and clarity. Administrators can then apply stricter controls to management access.
Question 39Wired Switching Fundamentals
A Juniper Mist switch port shows a status of up but the connected device cannot obtain an IP address. Which area should be checked first?
- Whether the switch firmware is the latest release
- Whether the port is a LAG member
- Whether the access VLAN on the port matches the VLAN served by the DHCP scope Correct answer.
- Whether LLDP is enabled on the uplink
Explanation
If the port's access VLAN does not match the VLAN where the DHCP server or relay lives, the client's DHCP request never reaches a server. Checking VLAN alignment is the fastest way to isolate the fault.
Question 40Wired Switching Fundamentals
Which statement best explains why a switch port configured for 802.1X authentication might place a device into a restricted VLAN?
- The device sent more broadcast traffic than the storm control threshold
- The device negotiated a lower link speed than the port expects
- The device is connected through a LAG member link
- The device failed authentication or did not respond, so the switch applies the fallback policy Correct answer.
Explanation
When authentication fails or times out, the switch can apply a fallback such as a restricted or guest VLAN. This limits access while still allowing remediation or guest connectivity.
Question 41Wired Switching Fundamentals
What does Power over Ethernet provide on a Juniper Mist access switch?
- It supplies redundant power to the switch's own power supplies
- It delivers both data and electrical power over the same copper cable Correct answer.
- It converts optical uplinks into copper connections
- It encrypts traffic between the switch and the endpoint
Explanation
PoE lets a single Ethernet cable carry data and power, which is common for access points, cameras, and phones. The switch port negotiates the power class with the powered device.
Question 42Wired Switching Fundamentals
An administrator wants wired clients to be segmented by department without running separate cabling to each department. Which approach fits best?
- Assign each department a unique LLDP system name
- Assign each department its own VLAN and carry them over shared trunk links Correct answer.
- Assign each department a separate spanning tree instance per port
- Assign each department a different physical switch model
Explanation
VLANs provide logical segmentation over shared physical infrastructure, so one trunk can carry multiple departmental broadcast domains. This avoids extra cabling while keeping traffic separated.
Question 43Wired Switching Fundamentals
Which interface type is commonly used to manage a Juniper Mist switch in band over the production network?
- A dedicated console cable only
- A USB storage port
- An out-of-band dial-up modem
- A VLAN interface reachable over the switching fabric Correct answer.
Explanation
In-band management uses a VLAN interface on the switch that is reachable through the production network. Out-of-band management instead uses a separate physical path such as a dedicated management port.
Question 44Wired Switching Fundamentals
A trunk between two switches carries VLAN 10, but one side lists VLAN 10 in its allowed list and the other does not. What is the expected result for VLAN 10 traffic?
- VLAN 10 traffic passes because the other side allows it
- VLAN 10 traffic is dropped at the side where it is not allowed Correct answer.
- VLAN 10 traffic is forwarded only during spanning tree convergence
- VLAN 10 traffic is automatically converted to the native VLAN
Explanation
Allowed VLAN lists are enforced locally, so a VLAN must be permitted on both ends of the trunk to pass. If one side excludes it, frames for that VLAN are dropped there.
Question 45Wired Switching Fundamentals
Which Juniper Mist feature helps an administrator confirm whether a switch port has been flapping over time?
- The site-level time zone setting
- Port event and anomaly monitoring in the Mist dashboard Correct answer.
- The DHCP relay configuration page
- The RF neighbor report
Explanation
Mist tracks port state changes and surfaces anomalies such as repeated link transitions, which indicate flapping. Reviewing these events helps correlate the problem with cabling or endpoint behavior.
Question 46Wired Switching Fundamentals
Why is it important that both ends of a LAG use the same hashing and member configuration?
- Consistent configuration keeps frame distribution and forwarding symmetric across members Correct answer.
- It allows the LAG to exceed the speed of its fastest member
- It lets each member link carry a different VLAN set
- It removes the need for spanning tree anywhere in the network
Explanation
A LAG behaves as one logical link, so mismatched member or hashing settings can cause uneven distribution and unexpected drops. Symmetric configuration keeps forwarding consistent in both directions.
Question 47Wired Switching Fundamentals
A designer wants to connect two switches with two links and use both simultaneously while avoiding spanning tree blocking. Which solution should be used?
- Bundle the two links into a LAG so they act as one logical link Correct answer.
- Leave both links unbundled and rely on RSTP to block one
- Assign each link to a different VLAN
- Disable spanning tree on both switches
Explanation
A LAG presents multiple physical links as a single logical interface, so both carry traffic and spanning tree sees one path. This provides redundancy and added bandwidth without a blocked link.
Question 48Wired Switching Fundamentals
What is the purpose of a DHCP snooping binding table on a Juniper Mist switch?
- To record trusted client IP-to-MAC bindings for filtering untrusted DHCP messages Correct answer.
- To list allowed VLANs on each trunk
- To map LLDP neighbors to switch ports
- To store firmware images for switch upgrades
Explanation
DHCP snooping builds a binding table from trusted DHCP exchanges and uses it to validate client traffic and block rogue DHCP servers. This protects the Layer 2 network from address spoofing.
Question 49Wired Switching Fundamentals
Which statement explains how a Juniper Mist switch applies a port profile to many ports at once?
- Each port must be configured individually with no shared settings
- The profile is applied by the endpoint during authentication
- The profile is defined once and referenced by each port, keeping settings consistent Correct answer.
- The profile only applies to LAG members
Explanation
Port profiles centralize settings such as VLAN, PoE, and authentication so they can be reused across many ports. Referencing a profile reduces drift and simplifies changes.
Question 50Wired Switching Fundamentals
A switch reports that a LAG interface is down even though individual member links show up. What is the most likely cause?
- The switch clock is not synchronized by NTP
- Member links are configured with mismatched LAG settings or are not all in the same LAG Correct answer.
- The management VLAN is not the native VLAN
- LLDP has been disabled on the uplink
Explanation
A LAG interface stays down when its members are inconsistent or not properly bundled, since the aggregate cannot form. Verifying that each member has matching LAG configuration is the key check.