A network administrator is configuring MACsec on a pair of Juniper switches. They want to use a pre-shared key but also want to ensure that the key is automatically rotated periodically. What feature should they enable to achieve this?

Enable MKA with a rekey period configured.

Configure a static SAK on both switches.

Use 802.1X to dynamically assign keys.

Manually update the pre-shared key every month.

Which Junos configuration statement is used to enable MACsec on an interface?

set security macsec interface ge-0/0/0

set ethernet-switching-options macsec ge-0/0/0

set protocols macsec interface ge-0/0/0

A network administrator is configuring MACsec on a Juniper EX switch. They have created a MACsec policy and applied it to an interface. What is the next step to complete the configuration?

Configure a pre-shared key or other key source for the policy.

Reboot the switch to activate the policy.

Create a new VLAN for MACsec traffic.

Enable MACsec globally on the switch.

A network administrator is troubleshooting a MACsec link where the 'show security macsec associations' command shows 'Status: Down'. The physical link is up and both devices have the same pre-shared key. What should the administrator check next?

Verify that MKA is enabled and the key is correctly configured on both sides.

Reboot both switches to reset the MACsec state.

Replace the fiber optic cables.

Check the interface MTU settings.

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 3Objective 4

MACsec JN0-637 Practice Questions (Page 3)

Part of the Layer 2 Security domain, which makes up ~14% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

4concepts

Questions 11–15

11application · medium
A network administrator is configuring MACsec on a pair of Juniper switches. They want to use a pre-shared key but also want to ensure that the key is automatically rotated periodically. What feature should they enable to achieve this?
Select an answer first
12foundation · easy
Which Junos configuration statement is used to enable MACsec on an interface?
Select an answer first
13foundation · easy
Which protocol is used by MACsec to establish and maintain secure associations and distribute session keys?
Select an answer first
14application · medium
A network administrator is configuring MACsec on a Juniper EX switch. They have created a MACsec policy and applied it to an interface. What is the next step to complete the configuration?
Select an answer first
15application · medium
A network administrator is troubleshooting a MACsec link where the 'show security macsec associations' command shows 'Status: Down'. The physical link is up and both devices have the same pre-shared key. What should the administrator check next?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.