JNCIP-SEC: Juniper Networks Certified Professional – Security (2024) — Question 63

You need to generate a certificate for a PKI-based site-to-site VPN. The peer is expecting to use your domain name, vpn.Juniper.net, to establish the VPN. Your domain name, vpn.juniper.net, resolves to 10.100.0.5.

Which two configuration elements are required when you generate your certificate request? (Choose two.)

Answer options

• A. email[email protected]
• B. ip-address 10.100.0.5
• C. domain-name vpn.juniper.net
• D. subject CN=vpn.juniper.net

Correct answer: B, D

Explanation

The correct answers are B and D, as both the IP address and the subject name are essential elements for the certificate request in a VPN configuration. Option A, which is an email address, and option C, the domain name, are not required for generating the certificate request in this context.