Which Junos operational command displays the status of IPsec security associations?

show security ipsec security-associations

show security ike security-associations

A security engineer is configuring a site-to-site VPN on a Junos device. The engineer wants to ensure that the IPsec SA uses a specific SPI value for traffic identification. Which statement about SPI is correct?

The SPI is used to identify the IPsec SA.

The SPI is manually configured by the administrator.

The SPI is only used in transport mode.

The SPI is the same for both directions of the tunnel.

A company is configuring a site-to-site VPN between two Junos devices. The engineer has configured the IKE gateway and IPsec VPN, but the tunnel is not coming up. The engineer runs 'show security ike security-associations' and sees an IKE SA with a status of 'UP'. What should the engineer check next?

The security policy allowing IKE traffic

The IPsec security-associations

Which scenario is a typical use case for an IPsec site-to-site VPN?

A telecommuter using a VPN client on a laptop to access corporate email

Encrypting a database file before storing it in an object storage bucket

Connecting a branch office network to a headquarters network over the internet

Providing a secure web portal for customers to access their account information

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 2Objective 3

IPsec Site-To-Site VPNs JN0-336 Practice Questions (Page 2)

Part of the IPsec VPN domain, which makes up ~16% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

Questions 6–10

6application · medium
An engineer is configuring a site-to-site VPN on a Junos device. The engineer wants to ensure that the IKE SA is established before the IPsec SA. Which configuration element is responsible for establishing the IKE SA?
Select an answer first
7foundation · easy
Which Junos operational command displays the status of IPsec security associations?
Select an answer first
8expert · medium
A security engineer is configuring a site-to-site VPN on a Junos device. The engineer wants to ensure that the IPsec SA uses a specific SPI value for traffic identification. Which statement about SPI is correct?
Select an answer first
9application · medium
A company is configuring a site-to-site VPN between two Junos devices. The engineer has configured the IKE gateway and IPsec VPN, but the tunnel is not coming up. The engineer runs 'show security ike security-associations' and sees an IKE SA with a status of 'UP'. What should the engineer check next?
Select an answer first
10foundation · easy
Which scenario is a typical use case for an IPsec site-to-site VPN?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.

IPsec Site-To-Site VPNs JN0-336 Practice Questions (Page 2)

Questions 6–10

An engineer is configuring a site-to-site VPN on a Junos device. The engineer wants to ensure that the IKE SA is established before the IPsec SA. Which configuration element is responsible for establishing the IKE SA?

Which Junos operational command displays the status of IPsec security associations?

A security engineer is configuring a site-to-site VPN on a Junos device. The engineer wants to ensure that the IPsec SA uses a specific SPI value for traffic identification. Which statement about SPI is correct?

Which scenario is a typical use case for an IPsec site-to-site VPN?

Keep studying — IPsec VPN