JNCIE-SEC Practice Questions - Juniper Networks Certified Expert, Security (JNCIE-SEC) Exam

Access More Questions

You are troubleshooting an IPsec VPN using IKEv2 with PKI certificates. The Phase 1 negotiation fails. The 'show security ike security-associations' output shows no SAs established. You run 'show security ike statistics' and see IKE_AUTH failures. Which sequence of CLI commands provides the most direct diagnostic path for a certificate validation failure?

show security pki ca-certificate detail; show security pki local-certificate detail; show security ike policy show security ike security-associations detail; request security pki ca-certificate verify ca-profile ; show log kmd | match 'certificate' show interfaces st0; show route 0.0.0.0/0; show security ipsec security-associations show security flow session; show security zones; show security policies from-zone trust to-zone vpn

Correct Answer:

show security ike security-associations detail; request security pki ca-certificate verify ca-profile ; show log kmd | match 'certificate'

Access more questions from this quiz

Continue to JNCIE-SEC Practice Questions - Juniper Networks Certified Expert, Security (JNCIE-SEC) Exam for more practice questions and the full quiz experience.

Access More Questions