- What You Are Actually Studying For
- Before You Book: Prerequisite, Version and Logistics
- The Nine Exam Headings and Where Candidates Struggle
- Layer 2 Block: Switching, Spanning Tree and Security
- Routing Block: Static Routing Through BGP
- Tunnels and High Availability
- The Version Trap: JN0-352 Versus Older Material
- A Study Sequence Built Around the Objectives
- Exam Day Mechanics and Results
- After You Pass: Renewal and Retakes
- Frequently Asked Questions
- JN0-352 is a 65-question, 90-minute multiple-choice written exam delivered through Pearson VUE, aligned to Junos 23.1.
- An active JNCIA-Junos certification is required; equivalent knowledge alone does not satisfy the prerequisite.
- The nine objective headings carry no published weights, so study all of them rather than guessing a favorite.
- The passing score is not public; your score report shows the threshold for your specific test.
What You Are Actually Studying For
The credential is the Juniper Networks Certified Specialist, Enterprise Routing and Switching (JNCIS-ENT), earned by passing the written exam coded JN0-352. Juniper's current program pages now appear under HPE Networking Certification and HPE Juniper Networking branding, but the certification you are pursuing is the same specialist-level enterprise routing and switching credential. If you want a plain-language primer before diving in, start with What Is JNCIS-ENT Certification? and then return here.
This guide is a study plan, not a promise. No independent preparation can guarantee a pass, and no published cohort pass rate exists to benchmark against. We cover that gap in detail in JNCIS-ENT Pass Rate 2026: What the Data Shows. What you can control is how closely your preparation tracks the published objectives, and that is what the rest of this article is built around.
Before You Book: Prerequisite, Version and Logistics
The prerequisite is a certification, not a skill level
Juniper requires JNCIA-Junos, and it must be active under the current recertification policy to satisfy the prerequisite. Being able to pass it "in your sleep" does not count. If your JNCIA-Junos lapsed, resolve that before you invest weeks in routing protocols. Full eligibility details are in JNCIS-ENT Requirements 2026: Eligibility, Prerequisites & How to Qualify.
The exam page describes an audience of experienced networking professionals but does not publish a mandatory degree, a quantified number of experience hours, or a referee requirement.
Exam facts at a glance
| Item | What the issuer sources state |
|---|---|
| Exam code | JN0-352 |
| Software version | Junos 23.1 |
| Questions | 65 multiple-choice |
| Time | 90 minutes |
| Delivery | Pearson VUE test center or OnVUE online proctoring |
| Language | English only |
| Passing score | Not publicly published; shown on your score report |
| Exam fee | Not verified here; confirm at checkout |
| Validity | Three years |
We deliberately do not quote a price. The provider's voucher store could not be retrieved when this guide was checked, and guessing at a figure would do you no favors. Our JNCIS-ENT Certification Cost 2026: Complete Pricing Breakdown walks through how to confirm current pricing, and JNCIS-ENT Exam Dates 2026: Testing Windows, Deadlines & Scheduling covers booking mechanics.
Choosing test center or OnVUE
OnVUE online proctoring requires a system check, a private testing environment, and government-issued photo identification that matches your registration. Notes and books are not allowed, and no blanket pre-approved allowances are listed. If your home setup is unpredictable, a test center removes that variable.
The Nine Exam Headings and Where Candidates Struggle
The published outline lists nine headings. None has a published percentage weight, and Juniper describes the outline as a high-level view of the skillset rather than an exhaustive task list. That means any claim that "BGP is 30% of the exam" is invention. Plan for breadth. Our companion piece, JNCIS-ENT Exam Domains 2026: Complete Guide to All 9 Content Areas, expands each heading.
- Layer 2 Switching or VLANs
- Spanning Tree
- Layer 2 Security
- Protocol Independent Routing
- OSPF
- IS-IS
- BGP
- Tunnels
- High Availability
Most headings pair a conceptual objective (how the technology works and why) with a configuration, monitoring and troubleshooting objective. Expect questions on both sides: why a design behaves as it does, and what a given configuration or command output tells you.
Layer 2 Block: Switching, Spanning Tree and Security
Domain 1: Layer 2 Switching or VLANs
The objectives cover bridging components, frame processing, VLAN ports, tagging, native and voice VLANs, and inter-VLAN routing, plus configuration, monitoring and troubleshooting of interfaces, VLANs and inter-VLAN routing.
- Be able to trace how a frame is processed when it enters a trunk versus an access port.
- Know what native and voice VLANs change about tagging behavior.
- Understand how inter-VLAN routing is delivered on Junos and what you would check when it fails.
Domain 2: Spanning Tree
STP and RSTP concepts, port roles and states, BPDUs, and convergence and reconvergence, plus configuration and monitoring of STP and RSTP.
- Memorize role and state relationships so you can reason about a topology change rather than recite definitions.
- Be ready to read monitoring output and identify the root bridge and blocked or discarding ports.
- Know why RSTP reconverges faster and what triggers reconvergence.
Domain 3: Layer 2 Security
This heading is broader than its name suggests. It covers BPDU, loop and root protection; port security including MAC limiting, DHCP snooping, dynamic ARP inspection and IP source guard; MACsec; storm control; and Layer 2 firewall filters (filter types, processing order, match criteria and actions).
- Do not skip MACsec because it feels niche; it is explicitly listed.
- Learn how DHCP snooping, DAI and IP source guard depend on each other.
- For firewall filters, practice reasoning about processing order and which action wins.
Routing Block: Static Routing Through BGP
Protocol Independent Routing
This domain is easy to under-study because it feels like review. The objectives name static, aggregate and generated routes, Martian addresses, routing instances including RIB groups, load balancing, and filter-based forwarding. Distinguish aggregate from generated routes carefully, since the difference is a classic knowledge-check target. Configuration objectives focus on static/aggregate/generated routes, load balancing, and filter-based forwarding.
OSPF
Conceptual coverage includes the link-state database, packet types, router ID, adjacencies and neighbors, DR and BDR election, area and router types, LSA types, and the topic the outline calls Realms. Keep Realms on your checklist because it is published, even though many generic OSPF resources never mention it. On the configuration side, know areas, interfaces and neighbors, routing policy application, and the troubleshooting toolset: ping, traceroute, traceoptions, show commands and logging.
IS-IS
IS-IS is where candidates from OSPF-heavy or Cisco backgrounds often lose points. The outline covers the link-state database, PDUs, TLVs, adjacencies, levels and areas, the DIS, and metrics. Build a side-by-side comparison with OSPF: how areas map to levels, how the DIS differs from a DR/BDR, and what TLVs carry. Good IS-IS explanations exist in community tutorials, but check that anything you read is consistent with the current objectives rather than treating a historical post as your syllabus.
BGP
Know basic operation, message types, attributes, the route and path selection process, and the interaction between IBGP and EBGP. The configuration objectives cover groups and peers, additional basic options, policy application and the same troubleshooting tools listed above. The most common mistake is memorizing the attribute list without practicing the order in which path selection applies it.
| Heading | Troubleshooting tools named in the objectives |
|---|---|
| OSPF | ping, traceroute, traceoptions, show commands, logging |
| IS-IS | ping, traceroute, traceoptions, show commands, logging |
| BGP | ping, traceroute, traceoptions, show commands, logging |
| Tunnels | ping, traceroute, traceoptions, show commands, logging |
| High Availability | traceoptions, show commands, logging |
Tunnels and High Availability
Domain 8: Tunnels
Tunneling applications and considerations, GRE and IP-IP, and the configuration, monitoring and troubleshooting of each.
- Compare GRE and IP-IP: what each encapsulates, overhead, and when you would choose one.
- Know the requirements that must be met for a tunnel to come up and pass traffic.
Domain 9: High Availability
This is the longest concept list on the exam: LAG, RTG, virtual chassis, graceful restart, GRES, NSR, NSB, BFD, VRRP and unified ISSU.
- Create a one-line purpose statement for each feature and a note on what failure it protects against.
- Separate similar-sounding features such as GRES, NSR and NSB; they solve different problems.
- BFD appears in the conceptual objective but not in the configuration bullet list, so prioritize understanding what it does and why it speeds failure detection.
The Version Trap: JN0-352 Versus Older Material
Many popular study resources are tied to earlier exam codes. Some video courses and cert-prep libraries are still labeled JN0-351, and a title with a newly added year does not change what is inside. Underlying networking concepts such as OSPF adjacency behavior do not expire, but you cannot assume an older course covers the current outline completely. Check each resource against the nine headings and the Junos 23.1 reference.
Commercial practice exams carry their own risk. Vendor alignment claims are not independently verified, and any claim of "real exam questions" should make you cautious. Use practice questions to find weak spots, not as a prediction of your result. The issuer's free Open Learning course is useful context, but its module software references differ from Junos 23.1, so treat it as supplementary and keep the exam objectives as your anchor. Our JNCIS-ENT Training overview compares preparation routes.
A Study Sequence Built Around the Objectives
Because the exam is unweighted, order your study by dependency rather than by guesswork. Layer 2 concepts underpin security, routing concepts underpin tunnels and high availability, and troubleshooting tools recur across several headings. A sample eight-week arrangement:
Layer 2 foundation
- Switching and VLANs, then STP and RSTP port roles, states and reconvergence.
- Do spanning tree before Layer 2 security, since BPDU, loop and root protection assume you understand roles.
Layer 2 security and protocol independent routing
- MAC limiting, DHCP snooping, DAI, IP source guard, MACsec, storm control, firewall filters.
- Static, aggregate and generated routes, RIB groups, load balancing, filter-based forwarding.
Link-state protocols
- OSPF first, including Realms and LSA types, then IS-IS using an OSPF comparison table.
- Practice reading neighbor and database output for both.
BGP
- Message types, attributes, path selection order, IBGP versus EBGP behavior, and policy application.
Tunnels and high availability
- GRE and IP-IP, then each high availability feature with a purpose statement.
Mixed review
- Timed practice blocks, error log review, and a pass over weak headings.
Shorten or stretch this to fit your background. A candidate who works daily with BGP might compress week 6 and lengthen the Layer 2 security and high availability weeks. A condensed fact sheet can help in the final days; see the JNCIS-ENT Cheat Sheet 2026: One-Page Review of Must-Know Facts.
Key Takeaway
Keep an error log from your first practice block. For every miss, note the heading, whether it was a concept or a configuration/monitoring item, and whether you misread the question or lacked the fact. Patterns in that log will tell you where to spend week 8 better than any assumed weighting.
Exam Day Mechanics and Results
With 65 questions in 90 minutes, you have a little under a minute and a half per question on average. No scored versus unscored split is published, so treat every question as counting. The exam is not described as adaptive, and no calculator entitlement is listed, so do not plan around either.
- Pace yourself: Flag and move on from time-consuming output-interpretation questions, then return.
- Read the output carefully: Show-command questions often hinge on a single field, such as a role, state or metric.
- Check your ID: The name on your government-issued identification must match your registration.
The exam page states that pass/fail is available immediately, but written results are provisional pending security validation, with valid results posted to your CertMetrics record within three business days. Your score report includes the passing threshold for that test, which is why we cannot quote one here. See JNCIS-ENT Passing Score 2026: Exactly What You Need to Pass for how to interpret it, and How Hard Is the JNCIS-ENT Exam? Complete Difficulty Guide 2026 for a candid look at difficulty.
After You Pass: Renewal and Retakes
Retake rules for the written exam
- After a first failed attempt, there is no waiting period.
- After a second or later failure, wait 14 calendar days beginning the following day.
- After passing, wait at least 18 months before taking the same exam again.
Keeping the certification current
The certification is valid for three years. Renew before it expires by passing an appropriate current-level exam, earning a higher-level certification in the same track, or using a specified course route in the same track. An expired certification cannot satisfy prerequisites or be renewed from its expired level, so the track would need to be re-earned from the beginning. Do not assume a continuing-education credit system exists; the recertification page does not publish a numeric requirement.
Thinking about career payoff? We avoid inventing figures, but the Is the JNCIS-ENT Certification Worth It? Complete ROI Analysis 2026 article frames the decision, and JNCIS-ENT Jobs looks at the roles where it appears. When you are ready to test yourself against the objectives, you can try our JNCIS-ENT practice tests to find weak headings before exam day.
Frequently Asked Questions
Yes. The selected track page identifies JNCIS-ENT with exam code JN0-352 and Junos 23.1. Older codes such as JN0-351 appear in some third-party courses, but those are earlier offerings and should not be treated as current coverage without checking the objectives.
Juniper does not publicly publish the passing score; under the program policies, it appears on your individual score report and can differ between tests. Be wary of any site that states a specific percentage as fact.
No. An active JNCIA-Junos certification is required to satisfy the prerequisite; equivalent knowledge alone is not a substitute. If yours has expired, it cannot satisfy the requirement.
The nine headings are unweighted, so there is no official "most important" domain. Studying in dependency order, Layer 2 first, then routing, then tunnels and high availability, works well for most candidates.
Not required, since the exam is a written, multiple-choice test. Hands-on practice with Junos still helps you interpret configuration and show output, and the objectives repeatedly reference monitoring and troubleshooting. Whatever you use should match Junos 23.1 behavior where possible.