Which Junos command is used to clear all IPsec security associations to force renegotiation?

delete security ipsec security-associations

clear security ike security-associations

clear security ipsec security-associations

What is the primary purpose of IKE Phase 1 in an IPsec VPN?

To authenticate users with username and password credentials

To encrypt and transmit user data packets across the tunnel

To negotiate the IPsec security associations used to protect user data traffic

To establish a secure, authenticated channel between the peers for further negotiation

A company is setting up a site-to-site VPN between two Junos devices. The engineer has configured the IKE and IPsec proposals, but the tunnel is not coming up. The engineer runs 'show security ike security-associations' and sees no IKE SA. What should the engineer check next?

The security policy allowing traffic to the remote site

In a Junos IPsec VPN configuration, what is the purpose of a security policy?

To determine which traffic is protected by the IPsec VPN

To define the encryption and authentication algorithms for the tunnel

To specify the IP address of the remote peer

To set the lifetime of the IPsec security association

What is the primary purpose of an IPsec site-to-site VPN?

To provide secure remote access for individual users connecting from home or travel locations

To encrypt data at rest on storage devices within a data center

To securely connect two or more remote networks over an untrusted intermediate network, such as the internet

To replace the need for firewalls by providing deep packet inspection at the network perimeter

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 2Objective 3

IPsec Site-To-Site VPNs JN0-336 Practice Questions (Page 1)

Part of the IPsec VPN domain, which makes up ~16% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

Questions 1–5

1foundation · easy
Which Junos command is used to clear all IPsec security associations to force renegotiation?
Select an answer first
2foundation · easy
What is the primary purpose of IKE Phase 1 in an IPsec VPN?
Select an answer first
3application · medium
A company is setting up a site-to-site VPN between two Junos devices. The engineer has configured the IKE and IPsec proposals, but the tunnel is not coming up. The engineer runs 'show security ike security-associations' and sees no IKE SA. What should the engineer check next?
Select an answer first
4foundation · easy
In a Junos IPsec VPN configuration, what is the purpose of a security policy?
Select an answer first
5foundation · easy
What is the primary purpose of an IPsec site-to-site VPN?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.