What is the primary purpose of Group-Based Policy (GBP) in a Mist AI wired campus fabric?

To simplify network security by applying consistent access policies to groups of endpoints rather than individual IP addresses

To provide a graphical interface for monitoring switch CPU and memory usage

To replace the need for VLANs by using MAC addresses for all forwarding decisions

To automatically configure routing protocols between switches without manual intervention

A hospital network uses Mist wired switches to connect IoT medical devices, staff PCs, and guest Wi-Fi. The security team wants to ensure that IoT devices can only communicate with the hospital's monitoring server, while staff PCs can access both the server and the internet. Guest devices must be isolated from all internal traffic. Which GBP approach best meets these requirements?

Create separate groups for IoT, staff, and guests, then apply policies that permit only the required communication paths.

Create a single group for all devices and apply a policy that allows all traffic within the group.

Use VLANs only, without GBP, to segment traffic between device types.

Apply a default-deny policy to all traffic and then manually allow each device's MAC address.

How does microsegmentation enhance security compared to traditional VLAN-based segmentation?

It automatically patches vulnerabilities in workloads

It eliminates the need for encryption

It provides broader network access by default

It allows security policies to be applied per workload or group, rather than per subnet

A company is deploying Mist wired switches and wants to implement microsegmentation for its guest Wi-Fi network. The guests should only be able to access the internet, not internal resources. How can this be achieved using GBP?

Create a group for guests and apply a policy that allows traffic to the internet and denies traffic to internal groups.

Create a policy that allows all traffic from the guest group to the internal network.

Place guests in the same group as employees and rely on the firewall to block access.

Use a separate VLAN for guests and do not configure any GBP policies.

When configuring Group-Based Policy (GBP) on a Juniper Mist wired switch, what is the first step in creating a group?

Assign the group to a specific VLAN

Define the policy rules that will apply to the group

Enable GBP on the switch's management interface

Create a scope to contain the group

Juniper NetworksCertified Specialist, Mist AI Wired (JNCIS-MistAI)

Domain 4Objective 4

GBP and Micro Segmentation JN0-460 Practice Questions (Page 2)

Part of the Campus Fabric Architecture domain, which makes up ~23% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

Questions 6–10

6foundation · easy
What is the primary purpose of Group-Based Policy (GBP) in a Mist AI wired campus fabric?
Select an answer first
7application · medium
A hospital network uses Mist wired switches to connect IoT medical devices, staff PCs, and guest Wi-Fi. The security team wants to ensure that IoT devices can only communicate with the hospital's monitoring server, while staff PCs can access both the server and the internet. Guest devices must be isolated from all internal traffic. Which GBP approach best meets these requirements?
Select an answer first
8foundation · easy
How does microsegmentation enhance security compared to traditional VLAN-based segmentation?
Select an answer first
9application · medium
A company is deploying Mist wired switches and wants to implement microsegmentation for its guest Wi-Fi network. The guests should only be able to access the internet, not internal resources. How can this be achieved using GBP?
Select an answer first
10foundation · easy
When configuring Group-Based Policy (GBP) on a Juniper Mist wired switch, what is the first step in creating a group?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-460

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-460” is a trademark of its owner, used for identification only.