JN0-336 · ● Active · Professional · Juniper Networks
The current exam code is JN0-336, which replaced JN0-335 on September 2, 2025. JNCIS-SEC validates intermediate-to-professional knowledge of SRX Series firewalls, security policies, VPNs, threat prevention, and Junos OS security configuration.
Exam facts
| Field | Value |
|---|---|
| Cost | USD $300 (Specialist level) |
| Duration | 90 minutes |
| Questions | 65 multiple choice |
| Passing | Not officially published; ~65-70% estimated |
| Format | Multiple choice |
| Delivery | Pearson VUE |
| Languages | English only |
| Valid | 3 years |
| Renewal | Pass higher cert (JNCIP-SEC or JNCIE-SEC) or retake |
| Prerequisites | JNCIA-SEC (or equivalent demonstrated knowledge) |
| Released | JN0-336 released September 2, 2025 (replaced JN0-335) |
| Retiring | N/A |
Vendor source — Juniper Networks Security Certifications ↗ Exam syllabus — JN0-336 Exam Syllabus ↗ Pearson VUE registration — Juniper Networks via Pearson VUE ↗
About
JNCIS-SEC is the specialist-level security certification in Juniper Networks' security track. It verifies intermediate-to-professional understanding of Junios OS for SRX Series firewalls, including security policies, VPN configuration, threat prevention technologies, and real-world firewall operations. The exam targets network and security engineers moving beyond foundational knowledge (JNCIA-SEC) into advanced configuration and troubleshooting. JN0-336, released in September 2025, is the current standard replacing JN0-335.
Domain context — Security / Networking
Vendor-specific security engineering certification focused on Juniper SRX Series firewalls — part of the broader Network Security and Threat Prevention domain. SRX is widely deployed in mid-market and enterprise firewall roles.
Read full deep dive — Juniper Networks Overview →
Topics covered
- Juniper Junos OS for SRX Series architecture and operational concepts
- Security policies (address books, security policies, policy templates)
- Network Address Translation (NAT) — source, destination, static NAT
- IPsec VPN site-to-site and remote-access configuration and troubleshooting
- Intrusion Detection and Prevention (IDP) policies and signatures
- Juniper Advanced Threat Prevention (ATP) Cloud integration
- Application Security and SSL Proxy / TLS Inspection
- High Availability (HA) clustering and failover configuration
- Unified Threat Management (UTM) — antivirus, web filtering, anti-spam
- User authentication and identity-aware security policies
- Logging, monitoring, and security event analysis
- Juniper Security Director (centralized management)
- Flow logging, session analysis, and troubleshooting
Source: NWExam JN0-336 Syllabus ↗
Common skills at Security · Professional
Shared skillset for networking professionals targeting security-focused certifications at this level.
- Firewall policy design and rule optimization
- VPN architecture (IPsec, SSL VPN, remote access)
- Threat prevention technology selection and deployment
- High-availability clustering and failover design
- Security logging and event correlation
- Incident response via firewall logs
- User and application identification
- NAT and routing policy integration
- WAN security and perimeter defense
- Performance tuning under load
Recommended courses at Security · Professional
| Provider | Title | Cost | URL |
|---|---|---|---|
| Juniper Open Learning | JNCIS-SEC Live and Self-Paced Training | Free | ↗ |
| Juniper Learning Portal | JNCIS-SEC Exam Overview | Free | ↗ |
| Udemy (Paper Trails) | JNCIA-SEC JN0-231, JNCIS-SEC JN0-335, JNCIP-SEC JN0-636 | $14–$100 | ↗ |
| Udemy (Multiple instructors) | JNCIS-SEC Practice Exam (JN0-334, JN0-335 versions) | $14–$100 | ↗ |
| CBT Nuggets | Juniper Networks Training (covers JNCIS-SEC) | $35–$60/month | ↗ |
| Global Knowledge | JNCIS-SEC Instructor-Led Training | Contact for pricing | ↗ |
Course-selection rule: Juniper Open Learning is the official free resource. Udemy courses may reference older exam codes (JN0-334, JN0-335) — verify course content covers JN0-336 topics or use them as general SRX reference material.
Practice exams
| Provider | Title | Cost | URL |
|---|---|---|---|
| NWExam | JN0-336 Premium Question Bank (300+ questions, 2 months access) | $49–$99 | ↗ |
| DumpsBase | JN0-336 Practice Exam (103 verified questions) | Free (limited) / Paid | ↗ |
| ExamTopics | Juniper Certification Free Exams | Free | ↗ |
| Cert Queen | JN0-336 Exam Dumps (free demo) | Free (demo) / Paid | ↗ |
| UniNets | Hands-On JNCIS Security Virtual Lab | $149–$299 | ↗ |
Note: Whizlabs and MeasureUp do not currently offer dedicated JN0-336 practice exams. NWExam is the most comprehensive vendor-agnostic option.
Books
| Title | Author | Publisher | Year | ISBN | URL |
|---|---|---|---|---|---|
| Juniper SRX Series: A Comprehensive Guide to Security Services | Brad Woodberg, Rob Cameron | O'Reilly | 2011 | 978-1449338961 | ↗ |
| Junos Security: A Guide to Junos for the SRX Services Gateways and Security Certification | Rob Cameron, Brad Woodberg, Patricio Giecco, Timothy Eberhard | O'Reilly | 2014 | 978-1449381714 | ↗ |
Book note: Both titles predate JN0-336 but remain the authoritative SRX configuration references. They cover foundational policy, NAT, IPsec, HA, and troubleshooting concepts that have not substantially changed. Pair with official Juniper Open Learning materials for the latest threat prevention (ATP, IDP, SSL Proxy) features.
Typical job titles at Security · Professional
Juniper Security Engineer · Firewall Engineer (SRX) · Network Security Specialist · Security Infrastructure Engineer · Juniper SRX Administrator · Senior Network Security Engineer
(Job titles drawn from current job-board postings that list JNCIS-SEC or equivalent SRX expertise as required or preferred.)
Salary
| Region | Range | Source |
|---|---|---|
| USD | $119,500 – $169,750 | Robert Half 2026 ↗ |
| ZAR | No region-specific data available — use Juniper/Networking salary surveys | PayScale ZA, CareerJunction |
| GBP | No region-specific data available — use UK network security salary surveys | IT Jobs Watch |
Salary note: JNCIS-SEC holders typically fall into the "Network Security Engineer" or "Intermediate Security Engineer" bands. Juniper-specific premiums vary by geography and employer; higher-tier firms and service providers may offer $15–$25K additional over base range.
Skills validated
This exam specifically tests:
- SRX Series firewall architecture (SPU, CP, I/O modules)
- Junos CLI for security configuration
- Security policy creation and rule ordering
- NAT (source, destination, port forwarding)
- IPsec VPN negotiation and troubleshooting (IKE phase 1/2, encryption)
- IDP and signature management
- ATP Cloud integration and threat feeds
- SSL/TLS inspection and decryption policies
- HA clustering (node states, synchronization, failover)
- Zone-based security (trust, untrust, DMZ)
- User authentication (RADIUS, LDAP integration)
- Flow and session logging
- Performance optimization under load
Related certifications
- Prerequisite for: JNCIP-SEC (JN0-637) ↗
- In same track: JNCIA-SEC (JN0-231) ↗ (entry level) · JNCIE-SEC ↗ (expert lab exam)
- Stacks with: Other Juniper specialist certs (JNCIS-ENT for enterprise routing, JNCIS-SP for service provider)
- Replaces: JN0-335 (retired September 2, 2025)
- Vendor overview: Juniper Networks ↗
Sources
- Juniper Networks JNCIS-SEC: https://www.juniper.net/us/en/training/certification/tracks/security/jncis-sec.html
- NWExam JN0-336 Exam Syllabus: https://www.nwexam.com/juniper/juniper-jn0-336-certification-exam-syllabus
- Pearson VUE Juniper Testing: https://www.pearsonvue.com/us/en/junipernetworks.html
- Juniper Open Learning: https://learningportal.juniper.net/
- Juniper Learning Portal: https://learningportal.juniper.net/
- O'Reilly Juniper SRX Series: https://www.oreilly.com/library/view/juniper-srx-series/9781449339029/
- O'Reilly Junos Security: https://www.oreilly.com/library/view/junos-security/9781449381721/
- Robert Half Network Security Engineer Salary: https://www.roberthalf.com/us/en/job-details/network-security-engineer
- Udemy Juniper JNCIS Courses: https://www.udemy.com/topic/jncis/
- ExamTopics Juniper Exams: https://www.examtopics.com/exams/juniper/
Last verified: 2026-05-01 Parent ecosystem: Juniper Networks Parent domain: Security/Networking Vendor overview: Juniper Networks