Juniper Networks Certified Internet Expert Security (JNCIE-SEC)
At the pinnacle of the Junos Security certification track is the JNCIE-SEC practical exam. This exam is designed to validate the networking professionals’ ability to deploy, configure, manage, and troubleshoot Junos-based security platforms. Throughout this 6-hour practical exam, candidates will build a secure enterprise network consisting of multiple interconnected sites and services using firewall devices. Successful candidates will perform system configuration on all devices, configure secure management capabilities, implement advanced security features, define complex policies and attack prevention features, HA capabilities, and IPS features.
Prerequisites
Recommended training for this certification
Juniper Networks Certified Internet Professional Junos Security (JNCIP-SEC) plus additional training as individually required.
Exams
- Exam code: JPR-934
- Lab Exam (Hands-on Lab)
- Held at selected Juniper Networks testing centers
- Exam length: 6 hours
- Software Release:
- a. Junos Space: 19.4
- b. Junos Space Security Director: 19.4
- c. Policy Enforcer: 19.4
- d. vQFX Ethernet Switch: 17.4
- e. vSRX Services Gateway: 19.4
This exam may include:
- Security Infrastructure
- Security Management
- Advanced Security
Exam Objectives
NAT
- Source, destination, static-based
- Overlapping address space
- NAT64 or NAT46
Security Zones
- Zone-based architecture
- How to secure traffic destined to the SRX Series device
Security Policy
- Route-based VPN
- Asynchronous routing
- Selective packet mode
IPSec VPN
- Interoperability
- VPN topologies
SRX Series Device Setup
- Deployment modes
- System services and access control
- High availability chassis clustering
Traffic Analysis
- Tools (for example, Wireshark)
- Malicious traffic detection
Network Security Monitoring
- Attack logging and analysis
- Attack mitigation
Junos Space Security Director
- Report generation
- Device management
AppSecure Services
- AppFW, AppTrack
UTM
- Antivirus, Web filtering
IDP or IPS
- Signature management
- IDP policy
Screens
- Attack detection or prevention
- Screen options
UserFW
- Integrated user firewall
SSL Proxy
- Client protection
- Sever protection
Policy Enforcer or Advanced Threat Protection
- Anti-malware protection
- Firewall filters
- Infected host feed
- GeoIP
- Threat intelligence feeds
Recertification
Re-certification is achieved by passing the current version of the Juniper Networks Certified Internet Professional Junos Security (JNCIP-SEC) exam.