What is the primary reason to renew a certificate before it expires?

To increase the key size automatically

To change the certificate's serial number

To avoid service disruption due to an expired certificate

To update the certificate's public key

A company is deploying an SRX Series device as an SSL proxy. They need to decrypt and inspect traffic to internal web servers that use certificates issued by an internal enterprise root CA. The SRX must trust the internal CA so that it can validate the server certificates it intercepts. Which certificate should be imported into the SRX's trust store?

The internal web server's certificate

The intermediate CA certificate only

A client certificate used for mutual authentication

The internal root CA certificate

An SRX SSL proxy is configured to use CRL for revocation checking. The CRL is updated daily, but a certificate was revoked an hour ago. The SRX will not detect the revocation until the next CRL update. The security team wants to reduce this window. Which action would be most effective?

Increase the CRL update frequency to every hour

Switch to OCSP for real-time revocation status

Manually download the CRL after each revocation

An administrator is importing a new certificate into the SRX. The certificate is in PEM format and the private key is encrypted with a passphrase. What must the administrator do to successfully import the key?

Import the certificate without the key

Provide the passphrase during the import process

Convert the PEM to PKCS#12 and import that

Decrypt the key manually and import it in plaintext

An organization is setting up SSL proxy to inspect outbound HTTPS traffic. They want to ensure that clients trust the proxy's inspection certificate. Which certificate should be distributed to client devices?

The root CA certificate of the public internet

The SRX's self-signed CA certificate

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 6Objective 1

Certificates JN0-336 Practice Questions (Page 4)

Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

Questions 16–20

16foundation · easy
What is the primary reason to renew a certificate before it expires?
Select an answer first
17application · medium
A company is deploying an SRX Series device as an SSL proxy. They need to decrypt and inspect traffic to internal web servers that use certificates issued by an internal enterprise root CA. The SRX must trust the internal CA so that it can validate the server certificates it intercepts. Which certificate should be imported into the SRX's trust store?
Select an answer first
18expert · hard
An SRX SSL proxy is configured to use CRL for revocation checking. The CRL is updated daily, but a certificate was revoked an hour ago. The SRX will not detect the revocation until the next CRL update. The security team wants to reduce this window. Which action would be most effective?
Select an answer first
19expert · hard
An administrator is importing a new certificate into the SRX. The certificate is in PEM format and the private key is encrypted with a passphrase. What must the administrator do to successfully import the key?
Select an answer first
20application · medium
An organization is setting up SSL proxy to inspect outbound HTTPS traffic. They want to ensure that clients trust the proxy's inspection certificate. Which certificate should be distributed to client devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.