Applications and Application Layer Gateways (ALGs) JN0-232 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How does an ALG handle a protocol like FTP that uses dynamic ports for data transfer?

   • AIt blocks all data connections to prevent security risks.
   • BIt requires the user to manually configure the data ports.
   • CIt opens the necessary ports dynamically based on the control channel information.
   • DIt uses a static port for all data transfers.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security administrator is configuring a policy to allow web browsing traffic. The administrator wants to ensure that the policy matches HTTP and HTTPS traffic specifically, not just any traffic on ports 80 and 443. What is the best way to achieve this?

   • AUse an application set containing all TCP traffic.
   • BCreate a custom application object with protocol TCP and destination port 80.
   • CUse the predefined application objects 'junos-http' and 'junos-https' in the policy.
   • DEnable the HTTP ALG and use it in the policy.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the effect of an ALG on NAT for supported protocols?

   • AIt ensures that NAT translations are applied correctly to both control and data channels.
   • BIt applies NAT only to the control channel.
   • CIt has no effect on NAT.
   • DIt disables NAT for the protocol to avoid errors.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a common ALG supported by Junos OS?

   • AICMP
   • BDNS
   • CFTP
   • DHTTP
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary benefit of using an application set in Junos OS security policies?

   • AIt increases the throughput of the security device.
   • BIt provides encryption for all applications in the set.
   • CIt simplifies policy configuration by grouping multiple applications into a single object.
   • DIt automatically enables NAT for all applications in the set.
   Reveal Solution Discussion Select an answer first