- What This Certification Actually Certifies
- Exam Mechanics: JN0-352, Junos 23.1, 65 Questions
- The Active JNCIA-Junos Gate
- The Nine Published Headings, Read as a Candidate
- The Version Trap: JN0-352 Versus Older Material
- Registration, Delivery and the Fee Question
- Sequencing Your Preparation by Domain
- After You Pass: Results, Validity and Renewal
- Who Uses This Credential
- Frequently Asked Questions
- JNCIS-ENT is a 65-question, 90-minute multiple-choice written exam (JN0-352) delivered through Pearson VUE, aligned to Junos 23.1.
- An active JNCIA-Junos certification is required; equivalent knowledge alone does not satisfy the prerequisite.
- The nine exam headings carry no published percentage weights, so prepare all of them rather than guessing a favorite.
- The passing score is not publicly published; your score report states the threshold for your attempt.
What This Certification Actually Certifies
The Juniper Networks Certified Specialist, Enterprise Routing and Switching credential, abbreviated JNCIS-ENT, validates knowledge of the Layer 2 and Layer 3 technologies that make up a typical Junos-based enterprise network. It sits at the specialist level of the enterprise routing and switching track, above the associate-level JNCIA-Junos credential that you must hold first. Juniper's current program pages appear under HPE Networking Certification (formerly Juniper Networks) and HPE Juniper Networking branding, but the credential you are preparing for is the same specialist exam, coded JN0-352.
It is worth being precise about what the exam is: a written, multiple-choice knowledge assessment. It tests whether you understand how Junos features work and how to reason about configuration, monitoring and troubleshooting scenarios. It is not a hands-on lab, and passing it does not by itself demonstrate practical competence at a console. That distinction matters for how you study. You will need to read configuration snippets and show output fluently, but you will answer by selecting options, not by typing commands.
If you are still orienting yourself on the basics, our explainers on what JNCIS-ENT certification is and what JNCIS-ENT stands for cover the terminology, and the complete guide to all nine content areas goes deeper on scope than this overview can.
Exam Mechanics: JN0-352, Junos 23.1, 65 Questions
Here is what the issuer's exam page establishes, and just as importantly, what it leaves unstated.
| Item | What is published |
|---|---|
| Exam code | JN0-352 |
| Software version | Junos 23.1 |
| Questions | 65 multiple-choice; no scored/unscored split is supplied |
| Time | 90 minutes (written examination timer) |
| Testing provider | Pearson VUE (test center or OnVUE online proctoring) |
| Language | English only |
| Passing score | Not publicly published; shown on your individual score report |
| Pass rate | No verified published cohort rate |
| Validity | Three years |
Two practical points follow from this table. First, 90 minutes for 65 questions leaves roughly a minute and a half per item on average, which is comfortable for recall questions and tight for questions that ask you to interpret multi-line output. Second, because the passing threshold is not published and can differ between tests, any website quoting a single "magic percentage" for this exam is guessing. Read our breakdown of the JNCIS-ENT passing score for how to think about readiness without relying on a number, and see what the data does and does not show on pass rates.
The Active JNCIA-Junos Gate
The issuer states that JNCIA-Junos certification is required, and that it must be active to satisfy the prerequisite under the current recertification policy. Equivalent knowledge is explicitly not a substitute. This is the single most common eligibility misunderstanding, because many experienced engineers assume years of Junos work should waive the associate-level exam. It does not.
Beyond that, the page describes the audience as experienced networking professionals but publishes no additional mandatory degree, no quantified experience-hour total and no referee requirement. Recommended instructor-led courses (Junos Intermediate Routing and Junos Enterprise Switching) are optional preparation, not mandatory attendance and not a pass guarantee. For a fuller walkthrough of eligibility, see JNCIS-ENT requirements and how to qualify.
The Nine Published Headings, Read as a Candidate
The exam objectives list nine headings. The issuer describes the outline as a high-level view of the skillset, not an exhaustive task analysis, and it publishes no percentage weights for any heading. Within most headings, objectives split into two flavors: concept-and-operation knowledge, and knowledge of configuration, monitoring and troubleshooting. Expect both flavors, and treat them as separate study targets even when the topic name repeats.
Layer 2 foundations: Domains 1 to 3
Domain 1: Layer 2 Switching or VLANs
Bridging components and frame processing in Junos, then VLAN concepts and their configuration and verification.
- Ports, tagging, native VLANs and voice VLANs
- Inter-VLAN routing concepts and how to monitor and troubleshoot it
- Interface and port configuration alongside VLAN configuration
Domain 2: Spanning Tree
Both STP and Rapid Spanning Tree Protocol (RSTP), split into concepts and operational knowledge.
- Port roles and states, BPDUs, convergence and reconvergence
- Configuration, monitoring and troubleshooting for STP and RSTP separately
Domain 3: Layer 2 Security
This heading is broader than its name suggests, and candidates who treat it as "just port security" tend to be surprised.
- BPDU, loop and root protection
- Port security: MAC limiting, DHCP snooping, dynamic ARP inspection (DAI) and IP source guard
- MACsec and storm control
- Layer 2 firewall filters: filter types, processing order, match criteria and actions
Layer 3 and routing protocols: Domains 4 to 7
Domain 4: Protocol Independent Routing
Routing features that exist regardless of which dynamic protocol you run.
- Static, aggregate and generated routes
- Martian addresses and routing instances, including RIB groups
- Load balancing and filter-based forwarding
Domain 5: OSPF
Link-state database, packet types, router ID, adjacencies, DR and BDR election, area and router types, LSA types, and the published topic of realms.
- Configuration of areas, interfaces and neighbors, plus routing policy application
- Troubleshooting tools: ping, traceroute, traceoptions, show commands and logging
Domain 6: IS-IS
IS-IS is a place where candidates from Cisco-heavy backgrounds often have the thinnest foundation.
- PDUs, TLVs, levels and areas, the DIS and metrics
- Configuring levels, interfaces and adjacencies; applying routing policy
Domain 7: BGP
Basic operation, message types, attributes, path selection, and IBGP/EBGP interaction, then groups, peers, policy and troubleshooting tools.
Connectivity and resilience: Domains 8 and 9
Domain 8: Tunnels
Tunneling applications and considerations, plus GRE and IP-IP, with their configuration, monitoring and troubleshooting.
Domain 9: High Availability
A long list of mechanisms, each easy to confuse with its neighbors.
- LAG, redundant trunk groups, virtual chassis
- Graceful restart, GRES, NSR and NSB
- BFD, VRRP and unified ISSU
- Troubleshooting tools listed here are traceoptions, show commands and logging
Note the subtle difference in the last bullet: the OSPF, IS-IS, BGP and Tunnels headings each list ping and traceroute among their troubleshooting tools, while High Availability lists traceoptions, show commands and logging only. Study each heading against its own published list rather than assuming a uniform toolkit.
The 88 bullet entries across these headings are an audit count of the published outline, not an indicator of how many exam questions each heading produces. Do not infer weighting from them. For a heading-by-heading study approach, the JNCIS-ENT study guide is the companion piece to this overview.
The Version Trap: JN0-352 Versus Older Material
A large share of the preparation content online was written for earlier exam codes. Some popular video courses and cert-prep listings are still labeled JN0-351, and community discussions reference even older codes. Networking fundamentals do not expire, so older IS-IS or OSPF tutorials can still teach real concepts. But an older course title does not establish coverage of the current outline, and a newly added year in a title does not either.
| Check | Why it matters |
|---|---|
| Exam code on the material says JN0-352 | Prior-code material may omit or reorder current objectives |
| Software references align with Junos 23.1 | Course modules can reference different Junos versions than the exam |
| Covers all nine headings | Partial tutorials (for example, a single IS-IS series) are supplements, not full coverage |
| Covers the niche listed items | Realms, MACsec, the port-security examples and BFD are easy to miss |
Also keep the sibling tracks apart. Juniper's data center, cloud and service provider certifications are different tracks with different exams and objectives. Do not blend enterprise specialist content with service provider or data center specialist content, and do not substitute the associate-level objectives for this exam's scope. If you are weighing the difficulty of the jump from associate to specialist, our difficulty guide frames it without invented numbers.
Registration, Delivery and the Fee Question
You book through Pearson VUE under the Juniper program pages, choosing either a physical test center or OnVUE online proctoring, subject to availability and program rules.
If you take the OnVUE route, the program requires a system check, an appropriate private testing environment, and government-issued photo identification that matches your registration. No books or notes are permitted, and the program lists no blanket pre-approved allowances. Do not assume an adaptive format or a calculator entitlement; neither is listed. Run the system check well before exam day so a webcam or network problem does not cost you an appointment.
On cost: an exact current price for JN0-352 could not be verified, because the provider's voucher store did not load during our last source review. We will not guess a dollar figure or a member discount. Confirm the current fee directly in your Pearson VUE account before budgeting, and see the JNCIS-ENT cost breakdown for the budgeting categories to plan around, and the scheduling guide for booking logistics.
Sequencing Your Preparation by Domain
Because the headings are unweighted and the candidate population varies, sequence your preparation by dependency and by where your own background is thinnest. A reasonable order builds Layer 2 first, then the routing protocols, then the features that sit on top of them. The sample below assumes a Junos-literate candidate who already holds JNCIA-Junos; stretch or compress it to match your own gaps.
Layer 2: Domains 1, 2 and 3
- Learn VLAN tagging, native and voice VLANs, then RSTP port roles and convergence
- Do not skim Layer 2 security: build a checklist covering BPDU/loop/root protection, DHCP snooping, DAI, IP source guard, MAC limiting, MACsec, storm control and firewall filters
Protocol-independent routing: Domain 4
- Cover static, aggregate and generated routes, routing instances, RIB groups, load balancing and filter-based forwarding
- Make sure you know what Martian addresses are and why they matter
OSPF, IS-IS and BGP: Domains 5, 6 and 7
- Compare OSPF and IS-IS side by side (adjacencies, DR/DIS, areas/levels) to keep them from blurring
- Practice reading neighbor and database output for each protocol
- For BGP, focus on attributes, path selection and IBGP versus EBGP behavior
Tunnels and High Availability: Domains 8 and 9
- GRE versus IP-IP use cases
- Build a one-line definition for each HA mechanism: GRES, NSR, NSB, graceful restart, BFD, VRRP, ISSU, LAG, RTG, virtual chassis
Integration and gap closing
- Take timed question sets in a 90-minute window and review every miss by domain
- Revisit whichever heading generated the most errors
The reasoning behind this order: Layer 2 concepts underpin everything that follows, routing protocols share vocabulary that is easier to learn when contrasted, and High Availability features such as graceful restart and BFD only make sense once you understand the protocols they protect. Quick reference material can help in the final week; our JNCIS-ENT cheat sheet is built for that purpose. When you assess readiness, use practice questions as a diagnostic, and compare your results by domain on the practice test site rather than fixating on a single overall number.
Key Takeaway
Write a one-line definition and one "how would I verify this with a show command" note for every item in the High Availability and Layer 2 Security lists. Those two headings contain the longest strings of similar-sounding features, which is where distractor answers do their work.
After You Pass: Results, Validity and Renewal
The exam page indicates that pass/fail is available immediately, but written results are provisional pending security validation, with valid results posted to CertMetrics within three business days. Keep that in mind before announcing a result or applying it to a job application deadline.
The certification is valid for three years. To renew before expiry, the published options are an appropriate current-level examination, a higher-level certification in the same track, or the specified or higher-level course route in the same track. The recertification page does not expose a complete approved-course matrix or a numeric CPE or CEU requirement, so do not rely on anyone claiming specific credit counts. If the credential lapses, it cannot satisfy prerequisites for higher exams or be renewed from the expired level, and the track must be re-earned from the beginning. Set a calendar reminder well ahead of your expiry date.
Who Uses This Credential
JNCIS-ENT is aimed at networking professionals who design, run or support enterprise networks built on Junos: campus switching, data center edge, branch routing and WAN connectivity. Typical roles include network engineer, network administrator and infrastructure or operations engineer in organizations that deploy Juniper gear, as well as support and consulting positions at partners and service organizations. The topic list tells you the daily work it maps to: VLANs and spanning tree on the access layer, OSPF, IS-IS and BGP in the routed core and edge, tunnels for overlay connectivity, and redundancy mechanisms that keep services up during failures and upgrades.
We have not verified a JNCIS-ENT-specific salary premium or hiring statistic, so we will not quote one. If earnings and return on investment drive your decision, the salary guide, the ROI analysis and the jobs overview discuss how to evaluate the credential against your own market using sources you can check yourself. Candidates often compare this credential with Cisco's CCNA; the two come from different vendors with different objectives, so treat the comparison as a question of which equipment ecosystem you work in, not of one being a stand-in for the other. For hands-on skill building, training options range from the issuer's own courses to self-paced labs.
Frequently Asked Questions
No. JN0-352 is a 65-question multiple-choice written exam delivered through Pearson VUE. It tests knowledge of concepts and of configuration, monitoring and troubleshooting, but you do not configure a device during the exam.
Yes. JNCIA-Junos is explicitly required and must be active to satisfy the prerequisite. Equivalent knowledge does not substitute for the certification itself, and an expired credential cannot be used.
The passing score is not publicly published under the current certification program policies. Your individual score report includes its threshold, and thresholds can differ between tests, so be skeptical of any single quoted percentage.
We could not verify an exact current JN0-352 price, so we do not quote one. Check the fee in your Pearson VUE account before you book, since pricing and any discounts can change.
The certification is valid for three years. For the written exam, there is no wait after a first failure; after a second or later failure you wait 14 calendar days beginning the following day. After passing, you must wait at least 18 months before retaking the same exam.
Approach JNCIS-ENT as a nine-heading survey of enterprise Junos, verify every fact against the issuer's current pages, and use independent practice to find your weak domains early. That combination, more than any single resource, is what separates a confident first attempt from a costly retake.