A security policy on an SRX permits FTP traffic from the trust zone to the untrust zone. The FTP ALG is enabled. What is the effect of the ALG on the security policy?

The ALG has no effect on the security policy.

The ALG requires a separate security policy for the FTP data port.

The ALG dynamically creates temporary pinholes in the security policy for FTP data connections.

The ALG overrides the security policy and allows all FTP traffic without inspection.

What does an ALG do with embedded IP addresses in application-layer payloads when NAT is applied?

It drops the packets containing embedded IP addresses.

It ignores them because NAT does not affect the payload.

It encrypts the embedded IP addresses.

It rewrites them to match the translated addresses.

Which Junos OS feature enables a security policy to match traffic based on the application, regardless of the port used?

Network Address Translation (NAT)

An organization uses a legacy application that communicates over TCP port 4444. The application's traffic is not recognized by the default application signatures. The administrator wants to create a custom application object for this traffic. What must be specified in the custom application object?

Only the application name and a description.

The application signature and timeout.

Protocol (TCP) and destination port (4444).

Source port and destination port.

Which components are required when defining a custom application object in Junos OS?

Protocol, destination port, and timeout settings

Application signature and encryption algorithm

Source IP address and source port

Juniper NetworksCertified Associate, Security

Domain 2Objective 4

Applications and Application Layer Gateways (ALGs) JN0-232 Practice Questions (Page 4)

Part of the Junos OS Security Objects domain, which makes up ~18% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

Questions 16–20

16application · medium
A security policy on an SRX permits FTP traffic from the trust zone to the untrust zone. The FTP ALG is enabled. What is the effect of the ALG on the security policy?
Select an answer first
17foundation · easy
What does an ALG do with embedded IP addresses in application-layer payloads when NAT is applied?
Select an answer first
18foundation · easy
Which Junos OS feature enables a security policy to match traffic based on the application, regardless of the port used?
Select an answer first
19application · easy
An organization uses a legacy application that communicates over TCP port 4444. The application's traffic is not recognized by the default application signatures. The administrator wants to create a custom application object for this traffic. What must be specified in the custom application object?
Select an answer first
20foundation · easy
Which components are required when defining a custom application object in Junos OS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-232

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-232” is a trademark of its owner, used for identification only.