Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Juniper
Exam Format
90 min
65
Not publicly disclosed
Professional
Registration
$400 USD
Pearson VUE or online proctoring
Validity
3 years
Pass the current JNCIP-SEC exam (JN0-637); Pass any higher-level Juniper certification exam (JNCIE); Earn continuing education credits through Juniper Learning Portal
JN0-635 Exam Topics and Domains
JN0-635 is organized into 8 weighted domains. Expect to work with IPsec, Multinode HA, Junos APBR, SRX Series, and more.
1
Troubleshooting Security Policies and Security Zones
12%
Diagnostic Tools and Utilities
Security Policy Troubleshooting Tools
- Use diagnostic tools to troubleshoot security policies
- Analyze security policy behavior in live environments
Logging and Tracing
Security Logging MechanismsTracing and Debugging
- Configure and use logging for security policy troubleshooting
- Implement tracing to diagnose security issues
Security Zone Monitoring
Zone Configuration Verification
- Monitor and verify security zone configurations
- Troubleshoot zone-related connectivity issues
2
Logical Systems and Tenant Systems
15%
Logical Systems Concepts
Administrative Roles in Logical SystemsSecurity Profiles in Logical SystemsLogical System Communication
- Understand logical system architecture and use cases
- Configure and manage logical system administrators
- Implement inter-logical system communication
Tenant Systems Concepts
Tenant System AdministrationTenant System Capacity Management
- Understand tenant system architecture
- Configure tenant system administrators
- Manage tenant system capacity and resources
3
Layer 2 Security
14%
Transparent Mode
Transparent Mode Operations
- Understand transparent mode concepts and use cases
- Configure and monitor transparent mode operation
Mixed Mode
Mixed Mode Configuration
- Understand mixed mode architecture
- Configure and verify mixed mode operation
Secure Wire
Secure Wire Functionality
- Understand secure wire concepts and use cases
- Configure and monitor secure wire deployments
MACsec
MACsec Implementation
- Understand MACsec technology and benefits
- Configure and verify MACsec on SRX devices
EVPN-VXLAN Security
Ethernet VPN-Virtual Extensible LAN Security
- Understand EVPN-VXLAN security concepts
- Configure and monitor security in EVPN-VXLAN deployments
4
Advanced Network Address Translation (NAT)
13%
Persistent NAT
Persistent NAT Configuration
- Understand persistent NAT concepts and use cases
- Configure and verify persistent NAT
DNS Doctoring
DNS Application Layer Gateway (ALG)
- Understand DNS doctoring concepts
- Configure and troubleshoot DNS doctoring
IPv6 NAT
IPv6 NAT Implementation
- Understand IPv6 NAT concepts and types
- Configure and verify IPv6 NAT implementations
5
Advanced IPsec VPNs
20%
Hub-and-Spoke VPNs
Hub-and-Spoke Topology
- Understand hub-and-spoke VPN architecture
- Configure and verify hub-and-spoke VPNs
Public Key Infrastructure (PKI)
Certificate-Based Authentication
- Understand PKI concepts and components
- Configure certificate-based IPsec authentication
Auto Discovery VPNs (ADVPNs)
ADVPN Functionality
- Understand ADVPN concepts and operation
- Configure and monitor ADVPN deployments
Routing with IPsec
Dynamic Routing Over IPsec
- Configure dynamic routing protocols over IPsec tunnels
- Troubleshoot routing in IPsec VPN environments
Overlapping IP Addresses
Handling Overlapping Address Spaces
- Understand challenges of overlapping IP addresses in VPNs
- Configure solutions for overlapping address spaces
Dynamic Gateways
Dynamic IP Addressing for VPN Endpoints
- Configure IPsec VPNs with dynamic gateway addresses
- Understand IKE identity and authentication with dynamic peers
IPsec Class of Service (CoS)
QoS in IPsec Tunnels
- Understand CoS concepts in IPsec VPNs
- Configure and verify CoS for IPsec traffic
6
Advanced Policy-Based Routing (APBR)
10%
APBR Profiles
Profile Configuration
- Understand APBR profile structure and components
- Configure and apply APBR profiles
APBR Policies
Policy Rules and Matching
- Create APBR policies with appropriate match criteria
- Understand policy evaluation and application
Routing Instances with APBR
Routing Instance Integration
- Integrate APBR with routing instances
- Configure and verify instance-based policy routing
APBR Options
Advanced APBR Features
- Configure advanced APBR options
- Implement SLA-based routing decisions
7
Multinode High Availability (HA)
12%
Multinode HA Concepts
Multinode HA ArchitectureChassis Cluster vs Multinode HA
- Understand multinode HA concepts and architecture
- Compare chassis cluster and multinode HA solutions
Deployment Modes
Active/Active ModeActive/Passive Mode
- Configure and verify active/active deployments
- Configure and verify active/passive deployments
Services Redundancy Group (SRG)
SRG Configuration and Operation
- Understand SRG concepts and operation
- Configure and monitor services redundancy groups
Interchassis Link
Interchassis Communication
- Configure and verify interchassis links
- Understand session synchronization mechanisms
Active Node Behavior
Active Node Determination and Enforcement
- Understand active node determination process
- Configure and control active node behavior
8
Automated Threat Mitigation
4%
Third-Party and Multicloud Integration
Integration Concepts
- Understand third-party integration capabilities
- Configure multicloud security integrations
Secure Enterprise
Juniper Secure Enterprise Features
- Understand Juniper Secure Enterprise concepts
- Configure automated threat mitigation features
How do I earn this certification?
Passing JN0-635 earns the JNCIP-SEC certification. It sits in the Security track.
Current Level Exams
JN0-637 - JNCIP-SECCurrent replacement for JN0-635
Next Level Options
JNCIE-SEC Lab - JNCIE-SEC Highest level of Juniper Security certification
Alternative Paths
- JN0-648 - JNCIP-ENT Complementary routing and switching skills for security professionals
- JN0-664 - JNCIP-SPService provider security architectures
- JN0-451 - JNCIS-MistAI Cloud-managed security and AI-driven operations
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
Use the official PlanetCert Practice Test alongside the study plan below to prepare efficiently for JN0-635.
What's changed on this exam?
Current Status
- RETIRED
- Last content update: Unknown
- Announcement date: 2020-07-27 (JN0-635 launch date)
Updates
- EVPN-VXLAN Security Junos 22.2 Added to JN0-637 exam as part of Layer 2 Security domain • Release date: 2022
- Multinode High Availability Junos 21.2+ Enhanced coverage in JN0-637 compared to JN0-635 • Release date: 2021
- Automated Threat Mitigation Ongoing New exam domain focusing on third-party integration and SecureEnterprise • Release date: 2023-2024
Who should take this exam?
This exam is typically taken by Networking professionals with advanced security knowledge and Security architects working with Juniper SRX Series.
Type: certification; Name: JNCIS-SEC; Description: Juniper Networks Certified Specialist - Security
- Advanced knowledge of security technology
- Advanced knowledge of Junos OS for SRX Series
- Minimum 1 year hands-on experience with SRX devices
- Completion of Advanced Juniper Security training course