Juniper NetworksCertified Specialist, Security (JNCIS-SEC)
Domain 6Objective 1
Certificates JN0-336 Practice Questions (Page 2)
Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)
24questions here
5free pages
5concepts
Questions 6–10
- 6
An SRX SSL proxy is configured to validate certificates for outbound HTTPS. The administrator wants to ensure that revoked certificates are rejected, but also wants to avoid blocking traffic when the OCSP responder is temporarily unreachable. Which configuration best meets both requirements?
Select an answer first - 7
Which method for checking certificate revocation involves downloading a list of revoked certificates from a CA?
Select an answer first - 8
A security team is configuring SSL proxy and wants to ensure that clients are warned if a certificate is revoked. They are using a local CA to sign dynamic certificates. What is the best way to ensure clients receive revocation information?
Select an answer first - 9
An administrator notices that the SRX SSL proxy is failing to validate certificates for a new internal application. The application presents a certificate chain that includes an intermediate CA certificate that is not currently installed on the SRX. The root CA is already trusted. What should the administrator do to resolve the validation failure?
Select an answer first - 10
When installing a certificate on an SSL proxy, what must be kept secure and private?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.