- What JNCIS-ENT Actually Is
- The Exam at a Glance: JN0-352 Facts
- The Active JNCIA-Junos Prerequisite
- The Nine Published Exam Headings
- Source-Bound Details Candidates Overlook
- The Version Trap: JN0-352 Is Not JN0-351
- Booking, Delivery and Results
- Validity, Renewal and Retakes
- Who This Credential Fits
- Sequencing Your Preparation Around the Objectives
- Frequently Asked Questions
- JNCIS-ENT is Juniper's specialist-level enterprise routing and switching credential, earned by passing the 65-question, 90-minute JN0-352 written exam.
- An active JNCIA-Junos certification is required before JNCIS-ENT; equivalent knowledge alone does not satisfy the prerequisite.
- The exam objectives span nine unweighted headings, from Layer 2 switching and Spanning Tree through BGP, tunnels and high availability.
- The passing score is not publicly published; your score report states the threshold, and thresholds can differ between tests.
What JNCIS-ENT Actually Is
JNCIS-ENT stands for Juniper Networks Certified Specialist, Enterprise Routing and Switching. It is the specialist rung of Juniper's enterprise routing and switching certification track, and it is earned by passing a single written exam, JN0-352. If you have seen the acronym attached to other programs, set that aside: everything on this page concerns the Juniper exam, its objectives and its policies, and nothing else.
Juniper's current certification and testing pages carry HPE Networking Certification and HPE Juniper Networking branding, reflecting the company's current corporate structure. The credential itself remains the Juniper Networks specialist certification described here, and its exam objectives are published on the issuer's learning portal under the title "Enterprise Routing and Switching, Specialist (JNCIS-ENT) Certification Overview."
Be careful with adjacent tracks. The JNCIS-DC data-center credential (JN0-481), the JNCIS-SP service-provider credential (JN0-364), and the JNCIA-Cloud and JNCIP-SP certifications are distinct programs with their own objectives. None of their content defines what JNCIS-ENT tests. If you want the terminology angle covered separately, see What Does JNCIS-ENT Stand For? and JNCIS-ENT Meaning.
The Exam at a Glance: JN0-352 Facts
The verified facts are compact, which is why it pays to know them precisely and to treat anything beyond them with skepticism.
| Item | What the sources support |
|---|---|
| Exam code | JN0-352 |
| Software version | Junos 23.1 |
| Questions | 65 (no scored/unscored split is stated on the exam page) |
| Time limit | 90 minutes |
| Format | Multiple-choice written exam |
| Language | English only |
| Testing provider | Pearson VUE (test center or OnVUE online proctoring) |
| Passing score | Not publicly published; shown on your score report |
| Fee | Not verified here; confirm in the official voucher store |
| Validity | Three years |
Two points deserve emphasis. First, this is a written, knowledge-based exam. It is not a hands-on lab, and the 90-minute timer is a written-exam limit rather than a course length. Second, do not assume an adaptive format or any unlisted tools such as a calculator. The program's published rules do not grant either.
For deeper treatment of the numbers people ask about most, see the guides on the passing score and certification cost. In short: Juniper's current policies say the passing score is not published, and an exact current fee was not confirmable at the time of writing, so budget by checking the official voucher store directly rather than relying on figures quoted by third parties.
The Active JNCIA-Junos Prerequisite
The most concrete gate is the prerequisite. The exam page states that JNCIA-Junos certification is required, and under the current recertification policy it must be active to satisfy the requirement. Equivalent knowledge by itself is not a substitute for holding the credential.
That has practical consequences:
- If your JNCIA-Junos has expired, it cannot satisfy the prerequisite and you cannot renew from the expired level.
- Under the published policy, an expired certification means re-earning the track from its beginning.
- The exam page describes an experienced networking professional as the target audience, but publishes no additional mandatory degree, quantified experience-hour total or referee requirement.
Recommended Juniper courses, such as Junos Intermediate Routing and Junos Enterprise Switching, are optional preparation. They are not mandatory attendance, and they do not guarantee a pass. For the full eligibility picture, read JNCIS-ENT Requirements: Eligibility, Prerequisites and How to Qualify.
The Nine Published Exam Headings
Juniper publishes the JN0-352 objectives under nine headings. The outline is unweighted: no percentage is attached to any heading, so you should not assume that any single area dominates the exam. Juniper also describes the outline as a high-level view of the skillset, not an exhaustive task analysis. Within most headings, the objectives pair conceptual understanding with configuration, monitoring and troubleshooting knowledge, and both are fair game for multiple-choice questions.
Domain 1: Layer 2 Switching or VLANs
The foundation: how Junos bridges frames and how VLANs segment a network.
- Bridging components and frame processing
- VLAN ports, tagging, native VLANs and voice VLANs
- Inter-VLAN routing
- Configuration, monitoring and troubleshooting of interfaces, VLANs and inter-VLAN routing
Domain 2: Spanning Tree
Loop prevention concepts and their configuration.
- STP and RSTP concepts, port roles and states
- BPDUs, convergence and reconvergence
- Configuration, monitoring and troubleshooting of STP and RSTP
Domain 3: Layer 2 Security
Protecting the switched edge and controlling traffic.
- BPDU, loop and root protection
- Port security: MAC limiting, DHCP snooping, dynamic ARP inspection (DAI) and IP source guard
- MACsec and storm control
- Layer 2 firewall filters: filter types, processing order, match criteria and actions
Domain 4: Protocol Independent Routing
Routing building blocks that do not belong to a single protocol.
- Static, aggregate and generated routes
- Martian addresses
- Routing instances, including RIB groups
- Load balancing and filter-based forwarding
Domain 5: OSPF
Link-state routing for the enterprise interior.
- Link-state database, packet types, router ID, adjacencies and neighbors
- DR and BDR election, area and router types, realms
- LSA packet types
- Configuration, policy application and troubleshooting tools
Domain 6: IS-IS
The other link-state IGP on the exam.
- Link-state database, PDUs, TLVs, adjacencies and neighbors
- Levels and areas, the designated intermediate system (DIS) and metrics
- Configuration, policy application and troubleshooting tools
Domain 7: BGP
Path-vector routing between and within autonomous systems.
- Basic operation, message types and attributes
- Route and path selection
- IBGP and EBGP functionality and interaction
- Groups, peers, routing policy and troubleshooting tools
Domain 8: Tunnels
IP tunneling applications and requirements.
- Tunneling applications and considerations
- Generic Routing Encapsulation (GRE) and IP-IP
- Configuration, monitoring and troubleshooting of GRE and IP-IP
Domain 9: High Availability
Keeping the network forwarding through failures and upgrades.
- LAG, redundant trunk groups (RTG) and virtual chassis
- Graceful restart, GRES, NSR and NSB
- BFD, VRRP and unified ISSU
For a heading-by-heading walkthrough, see JNCIS-ENT Exam Domains: Complete Guide to All 9 Content Areas.
Source-Bound Details Candidates Overlook
Because the outline is a high-level view, small phrases in it are easy to skim past. A few are worth calling out, since they mark the difference between studying the published scope and studying a generic routing-and-switching syllabus.
Layer 2 security is broader than port security
The Layer 2 Security heading lists MACsec alongside storm control, and it enumerates the port-security examples individually: MAC limiting, DHCP snooping, DAI and IP source guard. It also covers Layer 2 firewall filters as a separate concept, including processing order. A candidate who only memorizes MAC limiting has covered a fraction of what is named.
Two link-state protocols, not one
Plenty of enterprise study material treats OSPF as the only IGP worth learning. JN0-352 lists IS-IS under its own heading, with TLVs, PDUs, levels, the DIS and metrics. Existing IS-IS tutorials online are often shared with service-provider study contexts, so verify that whatever you read aligns with the enterprise exam rather than assuming it does.
The troubleshooting tool lists differ by domain
OSPF, IS-IS, BGP and Tunnels each name ping, traceroute, traceoptions, show commands and logging as their troubleshooting tools. The High Availability heading lists traceoptions, show commands and logging only. Do not memorize one generic toolbox; know which diagnostics the objectives attach to which area.
High availability includes BFD
BFD appears in the conceptual High Availability objective even though it is not repeated in the configuration bullet. Treat it as examinable conceptual knowledge alongside VRRP, graceful restart and NSR.
The Version Trap: JN0-352 Is Not JN0-351
Juniper's exam codes have turned over several times, and many third-party courses still carry old labels. Some video courses and cert-prep offerings online are explicitly titled for the prior JN0-351 code, and older material references still earlier codes. Those titles do not make every underlying concept wrong, since Layer 2 switching and BGP fundamentals change slowly, but they do not establish that the course covers the current JN0-352 outline.
Practical safeguards:
- Anchor your study to the objectives for JN0-352 and Junos 23.1 on Juniper's learning portal.
- When a resource's software references differ from Junos 23.1, treat its command syntax and feature coverage as something to verify rather than trust.
- Do not let a year in a title stand in for alignment with the current exam code.
Juniper's own Open Learning course for this certification advertises free course access and a 70% voucher-assessment threshold. Those are properties of that course, not of the certification exam: they are not the exam's fee, its passing score or any population pass rate. Likewise, course duration and voucher windows have nothing to do with the 90-minute exam timer. If you are weighing materials, the JNCIS-ENT study guide walks through how to organize them around the published outline.
Booking, Delivery and Results
Exams are delivered through Pearson VUE, either at a test center or through OnVUE online proctoring, subject to booking availability and program rules. Candidates attempting the online route should note what the program's OnVUE requirements call for: a system check, an appropriate private testing environment, and matching government-issued photo identification. Books and notes are not permitted, and the program lists no blanket pre-approved allowances.
On results, the exam page says pass/fail is available immediately. Current policies add a nuance: written results are provisional pending security validation, with valid results posted to CertMetrics within three business days. Plan on that interval before announcing the result to an employer or updating a profile. For scheduling considerations, see JNCIS-ENT Exam Dates: Testing Windows, Deadlines and Scheduling.
Validity, Renewal and Retakes
Three years of validity
JNCIS-ENT is valid for three years. To keep it current, renew before expiry through one of three routes: an appropriate current-level examination, a higher-level certification in the same track, or the specified or higher-level course route in the same track. The retrieved recertification page does not expose a complete approved-course matrix or a numeric continuing-education requirement, so check the issuer's Recertification Options page rather than relying on a number from elsewhere.
Written-exam retake rules
- After a first failed attempt, there is no waiting period.
- After a second or subsequent failure, wait 14 calendar days, beginning the following day.
- After passing, wait at least 18 months before taking the same exam again.
These are written-exam policies and say nothing about any lab-based exam. Because expiry removes the credential's ability to satisfy prerequisites and to be renewed from its own level, it is worth putting the expiry date in your calendar the day you pass.
Who This Credential Fits
The exam page frames the audience as experienced networking professionals, and the objectives match: this is for people who work with switched and routed enterprise networks running Junos. Typical roles that touch these skills include network engineers, network administrators and operations staff responsible for campus, branch and data-center-adjacent enterprise infrastructure. Whether a specific employer values the credential varies, so scan current postings in your market; the page on JNCIS-ENT jobs discusses where the skills show up.
On the money question, be wary of precise figures. No verified JNCIS-ENT-specific salary premium or cohort pass rate was established for this article, so any specific number you encounter should be checked against its source. For a framework to reason about value without invented statistics, see Is the JNCIS-ENT Certification Worth It? and the salary guide. The same caution applies to pass-rate claims: an unpublished passing score is not evidence of any pass rate in either direction.
People also ask how it compares to Cisco's CCNA. The honest answer is that they sit in different vendor ecosystems with different syntax, scope and requirements, so treat any equivalence claim as opinion rather than fact. If your environment runs Junos, the Juniper credential maps directly to your tooling.
Sequencing Your Preparation Around the Objectives
Because the outline is unweighted, there is no official guidance on which heading to prioritize, so sequence by dependency rather than guesswork. Layer 2 knowledge underpins the security material, and the IGPs underpin BGP and the high-availability protocols. A dependency-ordered plan might look like this:
Layer 2 foundation
- Domain 1 (switching, VLANs, inter-VLAN routing)
- Domain 2 (STP and RSTP roles, states, BPDUs)
Layer 2 protection
- Domain 3: port security examples, MACsec, storm control and firewall-filter processing order
Routing and the IGPs
- Domain 4 (protocol-independent routing)
- Domains 5 and 6 (OSPF, then IS-IS, comparing LSAs against PDUs and TLVs)
BGP, tunnels and resilience
- Domain 7 (attributes and path selection)
- Domains 8 and 9 (GRE, IP-IP, LAG, VRRP, BFD, NSR, ISSU)
Adjust the pacing to your experience; the point is the ordering. Finish with practice questions that mix headings, since the real exam will not group questions by topic. The cheat sheet is useful for a final review pass, and if you want a sense of the effort involved, read how hard the JNCIS-ENT exam is.
When you are ready to test yourself, you can try the JNCIS-ENT practice tests on the main site. These are independently written knowledge-preparation questions, not actual issuer questions or an official mock exam, and they are not a predictor of your score or a guarantee of passing.
Frequently Asked Questions
It stands for Juniper Networks Certified Specialist, Enterprise Routing and Switching. It is earned by passing the JN0-352 written exam, which is based on Junos 23.1.
The exam has 65 multiple-choice questions and a 90-minute time limit. The exam page does not state a scored versus unscored split.
The passing score is not publicly published under Juniper's current Certification Program Policies. Your individual score report includes its threshold, and thresholds can differ between tests.
Yes. JNCIA-Junos is explicitly required and must be active to satisfy the prerequisite. Equivalent knowledge alone is not accepted as a substitute.
It is valid for three years. There is no wait after a first failed attempt; after a second or later failure you wait 14 calendar days, starting the following day. After passing, wait at least 18 months to retake the same exam.