- What the Six Domain Headings Actually Are
- Exam Format and Lab Environment
- Domain 1: Layer 3 Underlay
- Domain 2: Overlay
- Domain 3: Data Center Interconnect (DCI)
- Domain 4: Security
- Domain 5: Class of Service (CoS)
- Domain 6: Management
- Sequencing Your Preparation by Domain
- Registration, Grading, and Renewal Mechanics
- Frequently Asked Questions
- JNCIE-DC (exam JPR-981) is a six-hour hands-on lab covering six domains; Juniper publishes no percentage weights for them.
- An active JNCIP-DC is required through the exam date, so confirm its expiry before booking.
- The lab covers both Apstra-managed fabrics and controllerless fabrics, so you need fluency in each approach.
- The exam fee is $1,600 USD, and a failed attempt triggers a 14-calendar-day wait before retaking.
What the Six Domain Headings Actually Are
The Juniper Networks Certified Expert, Data Center (JNCIE-DC) exam, code JPR-981, is organized around six high-level objective headings: Layer 3 Underlay, Overlay, Data Center Interconnect (DCI), Security, Class of Service (CoS), and Management. Those six headings are the issuer's own structure, and they are the only domain framework you should treat as authoritative.
Two caveats matter before you plan anything. First, no percentage weights are published in the current certification page or the official outline, so any site that gives you a "Domain 2 is 30% of the exam" figure is guessing. Second, the optional self-study bundle's chapter list is preparation curriculum, not a replacement for the six exam-objective headings; it does not establish extra domains or guarantee exhaustive coverage of the current lab.
If you are new to the credential itself, start with What Is JNCIE-DC? for the big picture, then return here for the domain detail. For eligibility specifics, see JNCIE-DC Requirements 2026.
Exam Format and Lab Environment
JPR-981 launched on July 4, 2022. It is a six-hour practical configuration and troubleshooting lab, not a multiple-choice test. You are given a topology and a set of tasks, and you build, fix, and verify working configurations on live virtual devices. Qualified lab proctors grade performance, which means partial credit across sections is how results are reported: CertMetrics normally provides pass/fail, an overall score, and section scores within five business days.
The current exam software list defines your practice environment:
| Platform | Version |
|---|---|
| vQFX | 21.3 |
| vSRX | 20.2 |
| vMX | 20.4 |
| Apstra | 5.1.0 |
| vJunos-switch (vEX) | 23.4R2-S2 |
The exam covers both Apstra-managed and controllerless fabrics. That dual scope shapes everything below: in several domains you must be comfortable doing the work by hand in Junos and understanding how Apstra models and deploys the same intent.
Domain 1: Layer 3 Underlay
The underlay is the foundation everything else rides on. If your loopbacks are unreachable or your BGP sessions flap, no overlay task will pass. Treat this domain as the one you must be able to complete quickly and cleanly, because later tasks depend on it.
Layer 3 Underlay
Build and troubleshoot the routed IP fabric that carries overlay traffic between leaf and spine devices.
- Point-to-point interface addressing across a leaf-spine topology
- eBGP-based underlay design, including AS numbering schemes and peering between leaf and spine tiers
- Loopback advertisement and reachability, since these anchor overlay peering and VTEP addressing
- Load balancing across equal-cost paths and the policy needed to enable it
- BFD and fast failure detection for rapid convergence
- Import/export policy to control what the fabric advertises
Where candidates lose time
The classic underlay failure is a subtle mismatch: an incorrect AS number, a missing export policy for a loopback, or a multipath setting that was never enabled. In a graded lab, a single broken underlay adjacency can cascade into dozens of failed verification points downstream. Build a habit of verifying every BGP session and every loopback ping before moving on.
Because the exam spans Apstra-managed and controllerless fabrics, also practice recognizing what an Apstra-built underlay looks like on the device versus what you would hand-configure. Being able to read generated configuration is a real skill here.
Domain 2: Overlay
Overlay is where the data center's tenant-facing behavior lives. Expect EVPN-VXLAN to dominate, and expect both configuration and troubleshooting tasks: you may be asked to build a service from scratch or find why an existing one is broken.
Overlay
Deliver Layer 2 and Layer 3 tenant services across the routed underlay.
- EVPN-VXLAN control-plane design, including iBGP or eBGP overlay peering and route reflection choices
- VLAN-to-VNI mapping and routing instances for bridged services
- Inter-VNI routing, including IRB interfaces and anycast gateway behavior
- EVPN route types and what each one carries, such as MAC/IP advertisements and IP prefix routes
- Multihoming and Ethernet segment concepts for dual-attached servers
- Verification workflows: inspecting EVPN databases, VTEP tunnels, and route tables
Apstra versus controllerless thinking
In an Apstra-managed fabric you express intent through blueprints, virtual networks, and routing zones, and Apstra renders the device configuration. In a controllerless fabric you author that EVPN-VXLAN configuration yourself. The exam expects you to handle both mindsets, so practice a single service twice: once through Apstra's model, once by hand on vQFX or vJunos-switch devices. Knowing how an Apstra virtual network maps onto the underlying EVPN constructs makes troubleshooting far faster.
Key Takeaway
Memorize which EVPN route type carries what information. When a tenant host is unreachable, the route type you expect to see (and don't) usually points straight at the faulty layer.
Domain 3: Data Center Interconnect (DCI)
DCI extends tenant services between data center sites. The PDF outline uses the correct "Data Center Interconnect" spelling, and this is the domain with the most distinctive wording in the objectives, so read it carefully.
Data Center Interconnect (DCI)
Stitch overlay services across separate fabrics so tenants span multiple sites.
- Interconnecting EVPN-VXLAN fabrics using the appropriate DCI design models
- Gateway placement and the role of border or edge devices
- Stretching Layer 2 versus routing Layer 3 between sites
- Route advertisement control between fabrics to avoid loops and unwanted leakage
- Apstra-to-controllerless DCI using Type 2 or Type 5 EVPN routes, without Apstra configlets
That last bullet deserves emphasis. The objective specifically describes connecting an Apstra-managed fabric to a controllerless fabric using EVPN Type 2 or Type 5 routes without relying on Apstra configlets. That is a deliberate constraint: you need to understand how to achieve the interconnect through the native modeling and routing mechanisms rather than injecting custom configuration. Custom configlets are a separate topic, covered under Management.
Domain 4: Security
Security on this exam is practical and tied to the data center context. The vSRX in the exam software list is your signal that firewall-based policy and segmentation are in play, alongside protections on the switching and routing devices themselves.
Security
Protect and segment the fabric and the services running on it.
- Security zones and policies on vSRX, including inter-zone traffic control
- Integrating a firewall with the overlay so tenant traffic is steered through inspection
- Control-plane and management-plane protection on routing and switching devices
- Filtering and policing to limit exposure on fabric and host-facing interfaces
- Verifying that policy actually enforces the intended behavior
The trap in this domain is configuration that looks right but fails the verification test. A policy that permits the wrong direction, or a zone assignment on the wrong interface, will quietly break connectivity or leave traffic open. Always test both the allowed and the denied path.
Domain 5: Class of Service (CoS)
Class of Service is often the domain candidates under-prepare, because day-to-day data center work can go years without touching it. On a lab exam, that is a mistake: CoS tasks are very learnable and very gradeable, which makes them reliable points if you have practiced them.
Class of Service (CoS)
Classify, queue, and schedule traffic so critical flows receive the treatment they need.
- Classification of traffic on ingress using behavior aggregate or multifield approaches
- Forwarding classes, queues, and scheduler configuration
- Rewrite rules so markings remain consistent across the fabric
- Behavior of CoS across VXLAN-encapsulated traffic
- Congestion-related features and lossless-style traffic handling concepts where applicable
- Verification using CoS show commands and interface queue statistics
Expect the CoS work to require consistency: a classifier on one device is worthless if the rewrite or scheduler on the next hop disagrees. Practice end-to-end and check queue counters to prove traffic lands in the class you intended.
Domain 6: Management
Management is the operational glue, and for a fabric that includes Apstra, it covers more than basic device access. This is also where custom Apstra configlets live as a distinct objective, separate from the DCI task that forbids them.
Management
Operate, automate, and extend the fabric and its tooling.
- Apstra operational workflows: blueprint changes, deployment, and validation
- Custom configuration through Apstra configlets for settings the model does not natively cover
- Device-level management features: authentication, logging, time services, and remote access
- Monitoring and troubleshooting methods across both Apstra-managed and controllerless devices
- Configuration management practices such as rollback and commit controls
Sequencing Your Preparation by Domain
Because the domains build on each other, order matters more than a generic weekly template. The underlay must be solid before overlay work is productive, and DCI requires both. A reasonable sequence follows the dependency chain:
Underlay and Overlay Core
- Build the leaf-spine underlay by hand until it takes minutes, not hours
- Layer EVPN-VXLAN on top and verify every route type
Apstra Parity and DCI
- Recreate the same services through Apstra 5.1.0 blueprints
- Practice the Apstra-to-controllerless seam using Type 2 and Type 5 routes without configlets
Security, CoS, and Management
- Add vSRX policy and CoS end to end, then verify with counters
- Practice configlets and operational workflows under time pressure
Finish with full six-hour timed runs, since stamina and time allocation are skills the lab tests as much as syntax. For a fuller plan, see the JNCIE-DC Study Guide, and for a realistic sense of the challenge, read How Hard Is the JNCIE-DC Exam?. You can also reinforce concepts between lab sessions with the JNCIE-DC practice tests.
Registration, Grading, and Renewal Mechanics
Understanding the program rules prevents expensive surprises. Here is what the official sources establish:
- Prerequisite: an active JNCIP-DC through the exam date. Recommended courses are optional.
- Fee: $1,600 USD in the official booking for the October 27, 2026 session. That booking spans seven hours even though the assessed lab lasts six. See the JNCIE-DC cost breakdown for the full picture.
- Delivery: remote proctored and selected in-person appointments are offered. Remote candidates need a Windows computer, webcam, microphone, a private room, and matching current government-issued ID. Personal notes are prohibited.
- Results: CertMetrics normally delivers pass/fail, overall score, and section scores within five business days.
- Retakes: a failed attempt requires a 14-calendar-day wait, and subsequent attempts need a manager's approval. A passed lab cannot be retaken.
- Validity: certification stays active for three years. Renew by passing the current same-track JNCIP-DC exam or completing an eligible mapped Data Center course, instructor-led or On-Demand.
One naming note: Juniper's certification program was renamed the HPE Networking Certification Program on September 15, 2026, while the current certification page continues to use JNCIE-DC and exam JPR-981. Expect both names to appear in portal materials.
No public lab pass rate or fixed passing threshold was verified in the official sources, so treat claims about either with caution. Our pages on the passing score and the pass rate explain what is and is not known. For scheduling, see JNCIE-DC exam dates.
Key Takeaway
Check your JNCIP-DC expiry before you pay the $1,600 fee. If it lapses before the exam date, you lose your eligibility, so confirm the dates line up first.
Frequently Asked Questions
Six: Layer 3 Underlay, Overlay, Data Center Interconnect (DCI), Security, Class of Service (CoS), and Management. These are the issuer's high-level exam-objective headings for JPR-981.
No weights are published in the current certification page or the official outline. Plan to be competent across all six rather than betting on a presumed heavy domain.
Yes. The exam scope covers Apstra-managed and controllerless fabrics, and Domain 3 includes a specific objective on Apstra-to-controllerless DCI using Type 2 or Type 5 EVPN routes without Apstra configlets.
No. Personal notes are prohibited for remote candidates, so you must be able to configure and troubleshoot from memory and from the documentation the exam environment allows.
You must wait 14 calendar days before retaking, and subsequent attempts require a manager's approval. Use your section scores to target the weakest domains before rebooking.
With six domains, a dual Apstra and controllerless scope, and a six-hour hands-on format, JNCIE-DC rewards candidates who have built every layer themselves. To weigh the career side, explore the salary analysis and the ROI breakdown, and keep the cheat sheet handy for last-minute review.