Juniper NetworksCertified Specialist, Security (JNCIS-SEC)
Domain 2Objective 1
IPsec Tunnel Establishment JN0-336 Practice Questions (Page 1)
Part of the IPsec VPN domain, which makes up ~16% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)
28questions here
6free pages
9concepts
Questions 1–5
- 1
An IPsec tunnel fails to establish, and the logs show an IKE Phase 1 proposal mismatch. What is the most likely cause?
Select an answer first - 2
A company is deploying a large-scale IPsec VPN with hundreds of remote sites. The security team wants to simplify key management and avoid storing pre-shared keys on each device. They also need to support dynamic IP addresses for remote sites. Which authentication method should be used?
Select an answer first - 3
A network administrator is explaining IPsec to a colleague. The administrator says that IPsec tunnel establishment involves two phases. What is the primary purpose of IKE Phase 2?
Select an answer first - 4
During IKE Phase 2, the Juniper SRX devices exchange proxy IDs. What is the purpose of the proxy ID exchange?
Select an answer first - 5
Which IKE Phase 1 exchange mode uses three messages and does not protect the identities of the peers?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.