Exams Vouchers: Security, Specialist (JNCIS-SEC) (JN0-336)

The Security track enables you to demonstrate a thorough understanding of security technology in general and Junos OS software for SRX Series devices. JNCIS-SEC, the specialist-level certification in this track, is designed for networking professionals with intermediate knowledge of the Juniper Networks Junos OS for SRX Series devices. The written exam verifies your understanding of security technologies and related platform configuration and troubleshooting skills.

This track contains four certifications:

- JNCIA-SEC: Security, Associate. For details, see JNCIA-SEC.

- JNCIS-SEC: Security, Specialist. For details, see the sections below.

- JNCIP-SEC: Security, Professional. For details, see JNCIP-SEC.

- JNCIE-SEC: Security, Expert. For details, see JNCIE-SEC.

Exam Details

Exam Length: 90 minutes

Exam Type: 65 multiple-choice questions

Software Versions: Junos OS 24.4

Recertification

Juniper certifications are valid for three years.

Prior to taking this exam you should be able to meet the following objectives:

• Identify application IDP concepts
• Demonstrate knowledge of how to configure, monitor, or troubleshoot IDP
• Identify the concepts, benefits, or operation of IPsec VPNs
• Demonstrate knowledge of how to configure, monitor, or troubleshoot IPsec VPNs
• Identify the concepts, benefits, or operation of Juniper ATP Cloud
• Demonstrate knowledge of how to configure, monitor, or troubleshoot Juniper ATP Cloud
• Identify the concepts, benefits, or operation of HA
• Demonstrate knowledge of how to configure, monitor, or troubleshoot clustering
• Identify concepts, general features, or functionality of identity-aware security policies
• Demonstrate knowledge of how to configure, monitor, or troubleshoot identity-aware security policies
• Identify concepts, general features, or functionality of SSL proxy
• Demonstrate knowledge of how to configure, monitor, or troubleshoot SSL proxy
• Identify concepts, general features, or functionality of Junos Space Security Director

Intrusion Detection and Prevention (IDP)

• IDP database management
• IDP policy

IPsec VPN

• IPsec tunnel establishment
• IPsec traffic processing
• IPsec site-to-site VPNs
• Juniper Secure Connect

Juniper Advanced Threat Prevention (ATP) Cloud

• Supported files
• Components 
• Security feeds
• Traffic remediation
• Workflow
• Encrypted Traffic Insights (ETI)
• DNS and IoT security 
• Adaptive threat profiling

High Availability (HA) Clustering

• HA features and characteristics
• Deployment requirements and considerations
• Chassis cluster characteristics and operation
• Real-time objects and state synchronization

Identity-Aware Security Policies

• Juniper Identity Management Service (JIMS)
• Ports and protocols
• Data flow

SSL Proxy

• Certificates
• Client and server protection

Security Director

• Deployment options
• Onboarding devices

Security policies management

It recommended but not mandatory that candidates have completed the below training.

• Juniper Security

Prerequisite Certification

• JNCIA-SEC