nerdexam
Juniper

JN0-633 · Question #35

You want to implement an IPsec VPN on an SRX device using PKI certificates for authentication. As part of the implementation, you are required to ensure that the certificate submission, renewal, and…

The correct answer is A. You can use SCEP to accomplish this behavior. trouble/configuring-and-troubleshooting-public-key-infrastructure.pdf

VPNs (IPsec, SSL)

Question

You want to implement an IPsec VPN on an SRX device using PKI certificates for authentication. As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority. Regarding this scenario, which statement is correct?

Options

  • AYou can use SCEP to accomplish this behavior.
  • BYou can use OCSP to accomplish this behavior.
  • CYou can use CRL to accomplish this behavior.
  • DYou can use SPKI to accomplish this behavior.

How the community answered

(32 responses)
  • A
    84% (27)
  • B
    9% (3)
  • C
    3% (1)
  • D
    3% (1)

Explanation

trouble/configuring-and-troubleshooting-public-key-infrastructure.pdf

Topics

#SCEP#PKI automation#certificate renewal#CA

Community Discussion

No community discussion yet for this question.

Full JN0-633 Practice