Juniper NetworksCertified Specialist, Security (JNCIS-SEC)
Domain 2Objective 1
IPsec Tunnel Establishment JN0-336 Practice Questions (Page 4)
Part of the IPsec VPN domain, which makes up ~16% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)
28questions here
6free pages
9concepts
Questions 16–20
- 16
A security engineer is configuring a site-to-site IPsec VPN with PFS enabled. The tunnel establishes successfully, but after a rekey, the tunnel fails. The engineer notices that the Phase 2 proposal includes a DH group of 14, but the Phase 1 proposal uses DH group 2. What is the most likely cause of the failure?
Select an answer first - 17
A network engineer is configuring an IPsec VPN between two Juniper SRX devices. The security policy requires that all traffic be encrypted using AES-256 and authenticated using SHA-256. The engineer configures the Phase 2 proposal with these algorithms. However, the tunnel fails to establish. What is the most likely reason?
Select an answer first - 18
During IKE Phase 1, what is the purpose of the Diffie-Hellman key exchange?
Select an answer first - 19
Which authentication method uses a shared secret that must be manually configured on both IPsec peers?
Select an answer first - 20
A security administrator is configuring a site-to-site IPsec VPN on Juniper SRX devices. The company policy requires that each new IPsec SA use a new Diffie-Hellman key exchange to prevent the compromise of one session from affecting previous or future sessions. Which configuration setting should be enabled?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.