Juniper NetworksCertified Specialist, Security (JNCIS-SEC)
Domain 2Objective 1
IPsec Tunnel Establishment JN0-336 Practice Questions (Page 3)
Part of the IPsec VPN domain, which makes up ~16% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)
28questions here
6free pages
9concepts
Questions 11–15
- 11
In Quick Mode, what is the purpose of the nonces exchanged between the peers?
Select an answer first - 12
What is an advantage of using digital certificates over pre-shared keys for IPsec authentication?
Select an answer first - 13
In IKE Phase 2, what information is exchanged to define which traffic will be protected by the IPsec SA?
Select an answer first - 14
What is a key security advantage of Main Mode over Aggressive Mode in IKE Phase 1?
Select an answer first - 15
A site-to-site IPsec VPN between two Juniper SRX devices fails to establish. The administrator runs `show security ike security-associations` and sees that the IKE SA is in state `IKE_V1_PHASE1_ACTIVE`. The Phase 2 negotiation is not completing. The configuration uses Main Mode with pre-shared keys. What is the most likely cause?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.