When replacing a certificate on an SSL proxy, what should be done to minimize disruption?

Use the same private key as the old certificate

Delete the old certificate before installing the new one

Generate a new key pair and install the new certificate before the old one expires

Replace the certificate during peak traffic hours

A security team wants to ensure that revoked certificates are detected promptly. They are concerned about the latency of CRL downloads. Which configuration should they use on the SRX?

Enable OCSP and configure the SRX to query the OCSP responder

Increase the CRL update interval

An administrator must replace an expiring server certificate on the SRX SSL proxy. The new certificate has been issued by the same CA and uses the same key pair. What is the most efficient way to update the SRX without disrupting existing SSL sessions?

Generate a new key pair and import both the key and certificate

Delete the old certificate and create a new one from scratch

Import the new certificate and associate it with the existing key pair

Wait until the certificate expires and then import the new one

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 6Objective 1

Certificates JN0-336 Practice Questions (Page 3)

Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

Questions 11–15

11foundation · easy
When replacing a certificate on an SSL proxy, what should be done to minimize disruption?
Select an answer first
12application · medium
A security team wants to ensure that revoked certificates are detected promptly. They are concerned about the latency of CRL downloads. Which configuration should they use on the SRX?
Select an answer first
13foundation · easy
Which certificate type is presented by a client to a server to prove the client's identity during mutual TLS authentication?
Select an answer first
14foundation · easy
Which revocation checking method queries the CA in real time for the status of a specific certificate?
Select an answer first
15application · medium
An administrator must replace an expiring server certificate on the SRX SSL proxy. The new certificate has been issued by the same CA and uses the same key pair. What is the most efficient way to update the SRX without disrupting existing SSL sessions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.

Certificates JN0-336 Practice Questions (Page 3)

Questions 11–15

When replacing a certificate on an SSL proxy, what should be done to minimize disruption?

A security team wants to ensure that revoked certificates are detected promptly. They are concerned about the latency of CRL downloads. Which configuration should they use on the SRX?

Which certificate type is presented by a client to a server to prove the client's identity during mutual TLS authentication?

Which revocation checking method queries the CA in real time for the status of a specific certificate?

An administrator must replace an expiring server certificate on the SRX SSL proxy. The new certificate has been issued by the same CA and uses the same key pair. What is the most efficient way to update the SRX without disrupting existing SSL sessions?

Keep studying — SSL Proxy