JNCIA-SEC Monitoring And Troubleshooting Practice Question

Which TWO commands can be used to view IPsec VPN security associations on an SRX Series device? (Choose two)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

show security ipsec security-associations

IPsec security associations are viewed using ipsec and ike security association show commands.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
show security flow vpn-table
Why it's wrong here
This command does not exist.
✗
show security policies vpn
Why it's wrong here
Security policies do not display VPN operational associations.
✗
show vpn ipsec active
Why it's wrong here
This is invalid Junos syntax.
✓
show security ipsec security-associations
Why this is correct
Correct. This displays Phase 2 IPsec security associations.
✓
show security ike security-associations
Why this is correct
Correct. This displays Phase 1 IKE security associations.

Quick reference

VPN Protocol Comparison

Protocol	Port	Encryption	Authentication	Use Case
IKEv2 / IPsec	UDP 500 / 4500	AES-256	Certificates / PSK	Site-to-site & remote access
SSL / TLS VPN	TCP 443	TLS 1.3	Certificates / MFA	Clientless remote access
L2TP / IPsec	UDP 1701	AES (IPsec)	PSK / Certificates	Legacy remote access
WireGuard	UDP 51820	ChaCha20	Public keys	Modern high-performance VPN
PPTP	TCP 1723	MPPE (weak)	MS-CHAPv2	Legacy — avoid in production

PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.

About these practice questions

One of 513 original JNCIA-SEC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Scored practice sessions

Quick scored rounds with instant marking and a written explanation per question.

JNCIA-SEC Practice Test 4 — 25 Questions→JNCIA-SEC Practice Test 3 — 25 Questions→

Study by exam domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Monitoring And Troubleshooting Junos OS Security Objects Srx Series Service Gateways

Practice by question type

Pick a question style and work only that format until it feels routine.

Browse scenarios

Go deeper on a topic

Each topic page collects the questions that test one concept, plus the theory behind it.

Monitoring And Troubleshooting practice questions Srx Series Service Gateways practice questions Junos OS Security Objects practice questions JNCIA-SEC fundamentals practice questions Security Policies practice questions

Keep going

Study guide All Juniper Networks practice questions JNCIA-SEC practice test

This JNCIA-SEC practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIA-SEC exam.