Juniper NetworksCertified Specialist, Security (JNCIS-SEC)
Domain 2Objective 3
IPsec Site-To-Site VPNs JN0-336 Practice Questions (Page 4)
Part of the IPsec VPN domain, which makes up ~16% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)
29questions here
6free pages
7concepts
Questions 16–20
- 16
Which component of the IPsec protocol suite is responsible for negotiating security associations and exchanging keys?
Select an answer first - 17
A company is configuring a site-to-site VPN between two Junos devices. The security policy requires the use of AES-256 encryption and SHA-256 authentication for both IKE and IPsec. The engineer creates an IKE proposal and an IPsec proposal with these algorithms. However, the tunnel fails to establish. The remote device is a third-party firewall that supports AES-256 and SHA-256. What is the most likely cause of the failure?
Select an answer first - 18
A security engineer is designing a site-to-site VPN that must provide both confidentiality and integrity for the data. The engineer is considering which IPsec protocol to use. Which protocol should be selected?
Select an answer first - 19
In Junos, which configuration hierarchy is used to define an IPsec proposal?
Select an answer first - 20
A security engineer is designing a site-to-site VPN that must provide integrity and authentication for the IP header, but encryption is not required. The engineer is considering using AH. Which statement about AH is correct?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.