JN0-637 | Juniper Certifications | Data Center, Specialist | JNCIS-DC | Skip to main Content

Exam Vouchers: Security, Professional (JNCIP-SEC) (JN0-637)

  • Price: Please call
  • Code: JN0-637

Please call

Jump to:

Description

Top

The Security Track enables you to demonstrate a thorough understanding of security technology in general and Junos OS software for SRX Series devices. JNCIP-SEC, the professional-level certification in this track, is designed for networking professionals with advanced knowledge of the Juniper Networks Junos OS for SRX Series devices. The written exam verifies your understanding of advanced security technologies and related platform configuration and troubleshooting skills.

This track contains four certifications:

  • JNCIA-SEC: Security, Associate. For details, see JNCIA-SEC.
  • JNCIS-SEC: Security, Specialist. For details, see JNCIS-SEC.
  • JNCIP-SEC: Security, Professional. For details, see the sections below.
  • JNCIE-SEC: Security, Expert. For details, see JNCIE-SEC.

Further Information

Top

Exam Length

- 90 minutes

Exam Type

- 65 multiple-choice questions

Software Versions

- Junos OS 22.2
- SD 22.1

Recertification

- Juniper certifications are valid for three years

Objectives

Top

Prior to taking this exam you should be able to meet the following objectives:

  • Demonstrate how to troubleshoot or monitor security policies or security zones.
  • Describe the concepts, operations, or functionalities of logical systems.
  • Describe the concepts, operations, or functionalities of tenant systems.
  • Describe the concepts, operations, or functionalities of Layer 2 Security.
  • Demonstrate how to configure or monitor Layer 2 Security.
  • Describe the concepts, operations, or functionalities of advanced NAT.
  • Demonstrate how to configure, troubleshoot, or monitor advanced NAT scenarios.
  • Describe the concepts, operations, or functionalities of advanced IPsec VPNs.
  • Demonstrate how to configure, troubleshoot, or monitor advanced IPsec VPNs.
  • Describe the concepts, operations, or functionalities of advanced policy-based routing.
  • Demonstrate how to configure or monitor advanced policy-based routing.
  • Describe the concepts, operations, or functionalities of multinode HA.
  • Demonstrate how to configure or monitor multinode HA.
  • Describe the concepts, operations, or functionalities of Automated Threat Mitigation.

    • Content

    Top
    1. Troubleshooting Security Policies and Security Zones
    • Tools
    • Logging and tracing
    • Other outputs
    2. Logical Systems and Tenant Systems Logical Systems
    • Administrative roles
    • Security profiles
    • Logical system communication
    Tenant Systems
    • Primary system and tenant system administrators
    • Tenant system capacity
    3. Layer 2 Security
    • Transparent mode
    • Mixed mode
    • Secure wire
    • MACsec
    • EVPN-VXLAN security
    • Configuration and monitoring
    4. Advanced Network Address Translation (NAT)
    • Persistent NAT
    • DNS doctoring
    • IPv6 NAT
    • Configuration, troubleshooting, and monitoring
    5. Advanced IPsec VPNs
    • Hub-and-spoke VPNs
    • Public Key Infrastructure (PKI)
    • Auto discovery VPNs (ADVPNs)
    • Routing with IPsec
    • Overlapping IP addresses
    • Dynamic gateways
    • IPsec Class of Service (CoS)
    • Configuration, troubleshooting, and monitoring
    6. Advanced Policy-Based Routing (APBR)
    • Profiles
    • Policies
    • Routing instances
    • APBR options
    • Configuration and monitoring
    7. Multinode High Availability (HA)
    • Concepts
    • Chassis cluster versus multinode HA
    • Deployment modes
    • Services redundancy group (SRG)
    • Interchassis link
    • Active/active mode
    • Active/passive mode
    • Active node behavior (determination and enforcement)
    • Configuration and monitoring
    8. Automated Threat Mitigation
    • Third-party or multicloud integration
    • Secure enterprise

    Pre-requisites

    Top

    Recommended Training

    Prerequisite Certification