thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Juniper · Cybersecurity · Expert

Juniper JNCIE-SEC exam guide

Exam JPR-935

JNCIE-SEC is Juniper's expert-level security credential, earned in a 6-hour hands-on lab on SRX Series firewalls. It proves you can design and troubleshoot zones, NAT, IPsec VPNs, chassis clusters and advanced services such as AppSecure, IDP and SSL proxy, which remains valuable wherever Juniper SRX protects data centers and carrier edges.

QuestionsSee official page
Time limit360 minutes
Passing scoreSee official page
Exam fee$1,600 USD
Valid for3 years
DeliveryHands-on lab exam delivered and proctored by Juniper Networks; seats are scheduled through Juniper's certification program

Format: Hands-on lab: configure and troubleshoot SRX Series security services. Fee note: Juniper lists JNCIE exams at $1,600 plus applicable taxes; JPR-935 replaced JPR-934 on April 1, 2024.

Who it's for

Senior security engineers who hold JNCIP-SEC and configure and troubleshoot SRX firewalls in production.

What the exam covers

Security Infrastructure (source, destination and static NAT, overlapping addresses, NAT64/NAT46)—
Security Zones—
Security Policy and VPNs (route-based VPN, asymmetric routing, selective packet mode, VPN topologies)—
SRX Series Device Setup (deployment modes, system services, chassis clustering)—
Security Management (traffic analysis, attack logging and mitigation, Security Director)—
Advanced Security (AppSecure, IDP, antivirus, web filtering, user firewall, SSL proxy, ATP/Policy Enforcer)—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: Active JNCIP-SEC certification.

Recommended: Several years of hands-on SRX administration plus strong routing knowledge; Juniper offers a JNCIE-SEC bootcamp and self-study lab bundle.

Keeping it active

Valid 3 years from the date earned or recertified. Recertify before expiry by passing a qualifying exam listed on Juniper's recertification page; recertifying resets the 3-year clock. An expired certification cannot be recertified and the track must be restarted.

Skills & careers

Skills it validates

  • SRX zone and policy design
  • Complex NAT including overlapping address space and NAT64
  • Route-based and policy-based IPsec VPN topologies
  • SRX chassis cluster high availability
  • AppSecure, IDP and UTM policy configuration
  • SSL forward and reverse proxy
  • Traffic analysis and attack mitigation with screens and logging

Job roles

Senior Network Security EngineerFirewall ArchitectSecurity Consultant (Juniper)Data Center Security EngineerNetwork Security Team Lead

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Weeks 1-3: Rebuild JNCIP-SEC foundations on vSRX: zones, policies, every NAT type, and chassis cluster with redundancy groups.
  2. Weeks 4-6: IPsec: route-based hub-and-spoke, AutoVPN, ADVPN, and interop scenarios; troubleshoot with traceoptions and show security ike/ipsec.
  3. Weeks 7-9: Advanced services: AppFW/AppTrack, IDP signature and policy tuning, web filtering, user firewall and SSL proxy.
  4. Weeks 10-11: Screens, logging and Security Director workflows; practise identifying attacks from packet captures.
  5. Weeks 12-14: Timed 6-hour mock labs, then targeted drills on whatever broke your mocks.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Confirm the exam code when booking: JPR-935 is the current lab and JPR-934 is retired.
  • Lock down chassis cluster and base routing early; most later tasks assume a working HA pair.
  • Use show security flow session and security policies hit-count to prove policy behaviour instead of assuming it.
  • NAT order of operations (static, destination, routing, policy, source) is a frequent trap; draw it out per task.
  • Commit in small steps with comments so you can roll back a broken VPN or IDP change quickly.

Frequently asked questions

What exam code is JNCIE-SEC now?

JPR-935. It replaced JPR-934, which reached end of life on March 31, 2024.

How much does JNCIE-SEC cost?

Juniper lists JNCIE exams at $1,600 plus applicable taxes.

How long is the JNCIE-SEC lab?

Juniper lists the exam length as 6 hours.

What is the prerequisite?

An active JNCIP-SEC certification.

JNCIE-SEC vs CCIE Security: which should I take?

Pick the platform you work on. JNCIE-SEC is centred on SRX and Junos; CCIE Security covers Cisco firewall, identity and VPN products.

Official page: www.juniper.net. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.