Why might an administrator disable a specific ALG in Junos OS?

To reduce security risks or resolve interoperability issues with certain applications.

To improve the device's encryption performance.

To increase the device's routing table size.

An administrator is troubleshooting a SIP trunk issue where calls are failing. The administrator believes the SIP ALG is modifying the SDP payload incorrectly. What is the best way to verify if the SIP ALG is causing the issue?

Review the application identification logs.

Check the security policy logs for SIP traffic.

Run a packet capture on the SRX to inspect SIP messages.

Temporarily disable the SIP ALG and test the calls.

What is the primary function of an Application Layer Gateway (ALG) in Junos OS?

To inspect and modify application-layer traffic to ensure proper traversal of NAT and security policies.

To route traffic based on application-layer information.

To encrypt all application-layer traffic.

To block all traffic that does not match a predefined signature.

An SRX is configured with NAT for internal SIP phones. Calls are failing to establish even though the security policy permits SIP traffic. The administrator suspects the SIP ALG is not handling the traffic correctly. What is the primary function of the SIP ALG in this scenario?

To translate the SIP domain names to IP addresses for the phones.

To encrypt SIP signaling to protect the privacy of calls.

To inspect SIP signaling and modify the SDP payload to ensure media streams traverse NAT.

To block all SIP traffic that does not match a predefined signature.

Juniper NetworksCertified Associate, Security

Domain 2Objective 4

Applications and Application Layer Gateways (ALGs) JN0-232 Practice Questions (Page 3)

Part of the Junos OS Security Objects domain, which makes up ~18% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

Questions 11–15

11foundation · easy
Why might an administrator disable a specific ALG in Junos OS?
Select an answer first
12application · medium
An administrator is troubleshooting a SIP trunk issue where calls are failing. The administrator believes the SIP ALG is modifying the SDP payload incorrectly. What is the best way to verify if the SIP ALG is causing the issue?
Select an answer first
13foundation · easy
What is the primary function of an Application Layer Gateway (ALG) in Junos OS?
Select an answer first
14application · easy
A network engineer is configuring an SRX to support video conferencing using H.323. The engineer understands that H.323 uses dynamic ports for media. Which ALG should be enabled to ensure H.323 traffic traverses the SRX correctly?
Select an answer first
15application · medium
An SRX is configured with NAT for internal SIP phones. Calls are failing to establish even though the security policy permits SIP traffic. The administrator suspects the SIP ALG is not handling the traffic correctly. What is the primary function of the SIP ALG in this scenario?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-232

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-232” is a trademark of its owner, used for identification only.