Be able to identify the concepts and functionality of various fundamental elements of networking.

• Collision domains and broadcast domains
• Function of routers and switches
• Optical network fundamentals – SONET/SDH, OTN
• Ethernet networks
• Layer 2 addressing, including address resolution
• IPv4 and IPv6 fundamentals
• Layer 3 / IP addressing, including subnet masks
• Subnetting and supernetting
• Decimal to binary conversion
• Longest match routing
• Connection-oriented vs. connectionless protocols

Be able to identify the concepts and functionality of the core elements of the Junos OS.

• Junos device portfolio – product families, general functionality
• Software architecture
• Control and forwarding planes
• Routing Engine and Packet Forwarding Engine
• Protocol daemons
• Transit traffic processing
• Exception traffic

Be able to identify the concepts, operation and functionality of the Junos user interfaces.

• CLI functionality
• CLI modes
• CLI navigation
• CLI Help
• Filtering output
• Active vs. candidate configuration
• Reverting to previous configurations
• Modifying, managing, and saving configuration files
• Viewing, comparing, and loading configuration files
• J-Web – core/common functionality

Be able to identify the main elements for configuring Junos devices.

• Factory-default state
• Initial configuration
• User accounts
• Login classes
• User authentication methods
• Interface types and properties
• Configuration groups
• Additional initial configuration elements – NTP, SNMP, syslog, etc.
• Configuration archival
• Logging and tracing
• Rescue configuration

Describe how to configure basic components of a Junos device.

Be able to identify methods of monitoring and maintaining Junos devices

• Show commands
• Monitor commands
• Interface statistics and errors
• Network tools – ping, traceroute, telnet, SSH, etc.
• Real-time performance monitoring (RPM)
• Junos OS installation
• Software upgrades
• Powering on and shutting down Junos devices
• Root password recovery

Be able to identify basic routing concepts and functionality for Junos devices.

• Packet forwarding concepts
• Routing tables
• Routing vs. forwarding tables
• Route preference
• Routing instances
• Static routing
• Advantages of / use cases for dynamic routing protocols

Be able to identify the concepts and functionality of routing policy and firewall filters on Junos devices.

• Default routing policies
• Import and export policies
• Routing policy flow
• Effect of policies on routes and routing tables
• Policy structure and terms
• Policy match criteria, match types, and actions
• Firewall filter concepts
• Filter match criteria and actions
• Effect of filters on packets
• Unicast reverse-path-forwarding (RPF)

Be able to identify concepts, general features, and functionality of Junos OS security.

• Junos security architecture
• Branch vs. high-end platforms
• Major hardware components of SRX Series services gateways
• Packet flow
• Packet-based vs. session-based forwarding

Be able to identify the concepts, benefits, or operation of zones.

• Zone types
• Dependencies
• Host inbound packet behavior
• Screens
• Transit packet behavior

Demonstrate knowledge of how to configure, monitor, or troubleshoot zones

• Zone configuration steps
• Hierarchy priority (inheritance)
• Screens
• Monitoring and troubleshooting

Be able to identify the concepts, benefits, or operation of security policies.

• Policy types
• Policy components
• Policy ordering
• Host inbound traffic examination
• Transit traffic examination
• Scheduling
• Rematching
• ALGs
• Address books
• Applications

Demonstrate knowledge of how to configure, monitor, or troubleshoot security policies

• Policies
• ALGs
• Address books
• Custom applications
• Monitoring and troubleshooting

Be able to identify the concepts, benefits, or operation of NAT.

• NAT types
• NAT/PAT processing
• DNS doctoring
• Cone NAT
• IPv4 to IPv6
• Address persistence
• NAT proxy ARP

Demonstrate knowledge of how to configure, monitor, or troubleshoot NAT

• NAT configuration steps
• Monitoring and troubleshooting

Be able to identify the concepts, benefits, or operation of IPsec VPNs

• Secure VPN characteristics and components
• IPSec tunnel establishment
• IPSec traffic processing
• Group VPN
• ADVPN
• PKI
• Dynamic VPN
• Junos OS IPsec implementation options

Demonstrate knowledge of how to configure, monitor, or troubleshoot IPsec VPNs

• IPSec VPN configuration steps
• Monitoring and troubleshooting

Be able to identify the concepts, benefits, or operation of HA.

• HA features and characteristics
• Deployment requirements and considerations
• Chassis cluster characteristics and operation
• Cluster modes
• Cluster and node IDs
• Redundancy groups
• Cluster interfaces
• Real-time objects
• State synchronization
• Ethernet switching considerations
• IPSec considerations
• Manual failover

Demonstrate knowledge of how to configure, monitor, or troubleshoot clustering

• Cluster preparation
• Cluster configuration steps
• Monitoring and troubleshooting

Be able to identify concepts, general features or functionality of virtualized security using SRX.

• Installation
• Clustering with vSRX
• Deployment scenarios
• Troubleshooting

Be able to describe the concepts, operation, or functionality of AppSecure.

• Application Identification
• Custom Applications
• Application Signatures
• Application Tracking
• AppQoS
• AppFirewall

Given a scenario, demonstrate how to configure or monitor AppSecure

Describe the concepts, operation, or functionality of Security Director logging and reporting.

• Security Director logging and reporting Installation
• Security policy design and application
• Analyzing data

Given a scenario, demonstrate how to configure or monitor Security Director logging and reporting information

Be able to describe the concepts, operation, or functionality of Sky ATP.

• Functions and processing flow
• Analysis and actions
• Monitoring and reporting

Given a scenario, demonstrate how to configure or monitor Sky ATP

Be able to describe the concepts, operations, or functionality of UTM.

• Processing Order
• Content Filtering
• Anti-virus
• Anti-Spam
• Web Filtering

Given a scenario, demonstrate how to configure or monitor UTM functions

Be able to describe the concepts, operation, or functionality of IPS

• Processing order
• Signatures
• Policy
• Templates

Given a scenario, demonstrate how to configure or monitor IPS functions

Be able to describe the concepts, operation, or functionality of SDSN.

• SDSN fundamentals
• Policy Enforcer
• SDSN components

Given a scenario, demonstrate how to configure or monitor SDSN deployments

Be able to describe the concepts, operation, or functionality of the user firewall

• Integrated user firewall
• Integrated user firewall
• Authentication sources

Given a scenario, demonstrate how to configure or monitor the user firewall

Be able to describe the concepts, operation, or functionality of Layer 2 security

• Transparent mode
• Mixed mode
• Secure wire
• MacSec

Given a scenario, demonstrate how to configure or monitor Layer 2 security

NAT

• Source, destination, static-based
• Overlapping address space
• NAT64 or NAT46

Security Zones

• Zone-based architecture
• How to secure traffic destined to the SRX Series device

Security Policy

• Route-based VPN
• Asynchronous routing
• Selective packet mode

IPSec VPN

• Interoperability
• VPN topologies

SRX Series Device Setup

• Deployment modes
• System services and access control
• High availability chassis clustering

Traffic Analysis

• Tools (for example, Wireshark)
• Malicious traffic detection

Network Security Monitoring

• Attack logging and analysis
• Attack mitigation

Security Operations

• Security policies

Junos Space Security Director

• Report generation
• Device management

AppSecure Services

• AppFW, AppQoS, AppTrack, APBR

UTM

• Antivirus, antispam, web filtering, content filtering

IDP or IPS

• Signature management
• Custom IDP signature
• IDP policy

Screens

• Attack detection or prevention
• Screen options

UserFW

• Integrated user firewall
• Captive portal
• Juniper Identity Management Service (JIMS)

SSL Proxy

• Client protection
• Server protection

SDSN or Sky STP

• Security intelligence feeds
• Anti-malware protection
• Firewall filters
• Infected host feed
• GeoIP
• Threat intelligence feeds