JNCIE-SEC study guide
JNCIE-SEC · Work through your exam, one topic at a time.
JNCIE-SEC (also written JNCIE-Security) is the expert-level tier of the Juniper security certification ladder, sitting above the associate and specialist levels and aimed at engineers who design, deploy, and troubleshoot SRX Series firewall environments at scale. This page is an independent, unofficial study resource: we are not affiliated with, endorsed by, or sponsored by Juniper Networks or Hewlett Packard Enterprise, and nothing here is official exam material. The JNCIE-SEC study guide has 5 sections and about 1,747 words.
01Security Platform and Architecture
Security Platform and Architecture tests how well you know the SRX data plane and high-availability design: flow processing, chassis cluster redundancy groups, reth interfaces, and virtualized or logical systems. SRX is a flow-based device.
360 words, about 2 min02Firewall Filters and Security Policies
Firewall Filters and Security Policies tests two different mechanisms that are easy to conflate: stateless firewall filters and stateful, zone-based security policies. You must know where each is evaluated and which one can see a session.
343 words, about 2 min03IPsec VPNs and Secure Connectivity
IPsec VPNs and Secure Connectivity tests your ability to build working site-to-site and hub-and-spoke tunnels: IKE proposals and policies, gateways, traffic selectors, st0 interfaces, routing, and liveness detection. A proposal defines encryption, authentication, DH group, and lifetime.
342 words, about 2 min04Network Address Translation and Advanced Services
Network Address Translation and Advanced Services tests NAT design choices and the service chain that runs after policy: ALGs, AppSecure, IDP, UTM, and screens. Source NAT translates the client and can use an interface address or a pool.
355 words, about 2 min05Automation, Troubleshooting, and Operations
Automation, Troubleshooting, and Operations tests how you operate an SRX at scale: Junos scripts and APIs, plus a repeatable method for isolating policy, NAT, routing, and tunnel faults. Junos supports commit scripts that validate or modify a candidate configuration, op scripts that run on demand, event scripts triggered by event-options, and SNMP scripts.
347 words, about 2 min