For a Juniper Mist Access Point (AP) to successfully connect to the Mist Cloud, it has two fundamental network requirements. First, it needs DNS resolution to translate the Mist cloud's hostname (e.g., ep-terminator.mistsys.net) into an IP address. Without this, the AP cannot locate the cloud service. Second, the AP requires a DHCP server on the local network. The DHCP server provides the AP with an IP address, a default gateway for Internet access, and the address of the DNS server itself. This process is essential for the zero-touch provisioning (ZTP) functionality of Mist APs.

A. You need a CA SSL certificate.

This is incorrect. Mist APs have a pre-installed device certificate (IDevID) used to establish a secure connection to the Mist cloud. The user is not required to provide one.

C. You need a static IP address.

This is incorrect. While a static IP can be configured, it is not a requirement for initial connection. The standard and expected method for an AP to get online is via DHCP.

1. Juniper Mist Documentation, "Ports and Firewall Configuration": This document explicitly states the initial requirements for APs. In the "Mist APs" section, it says, "Mist APs require DHCP-assigned IP addresses, a default gateway, and DNS to connect to the Mist cloud." This directly supports the need for both DHCP (D) and DNS (B).

Source: Juniper Networks, Mist Cloud Documentation, "Ports and Firewall Configuration".

2. Juniper Mist Documentation, "AP Power Up and Connection": This guide details the boot-up and connection sequence. It states, "When you power on a Mist AP, it automatically attempts to get an IP address from the DHCP server." This confirms that a DHCP server is the expected mechanism for obtaining an IP address, not a static configuration.

Source: Juniper Networks, Mist Cloud Documentation, "AP Power Up and Connection".