Download SonicWall SNSA Questions With 100% Correct Answers Recent Update 2023 Attained Grade A+ and more Exams Computer Science in PDF only on Docsity!
SonicWall SNSA Questions With 100%
Correct Answers Recent Update 2023
Attained Grade A+
What are two probe methods that you can use for logical probes? (select all that apply) - ✓✓✓Ping and TCP Action objects allow you to control how the category behaves when a website from that category is accessed. Which action object is used to throttle the traffic? - ✓✓✓Bandwidth Management (BWM) Which of the following Address Object types is selected by default in the firewall? - ✓✓✓Host Which diagnostic utility on the SonicWall firewall allows you to look at the contents of ip packets traversing the firewall? - ✓✓✓Packet Monitor Where is the real-time data on the Dashboard compiled and summarized from? - ✓✓✓Manage >> AppFlow Settings What type of information is displayed on the Live Monitor panel?(Select all that apply) - ✓✓✓Multi-Core Monitor Applications Ingress/Egress Bandwidth Ingress/Egress Packet Rate Ingress/Egress Packet Size Connection Rate Connection Count
Which file types can be used to export the logs? (Select all that apply) - ✓✓✓CSV, TEXT and Email What is the default timeout setting for administrator inactivity? - ✓✓✓5 Minutes What type of encoding format is supported when importing an end-user certificate with a private key? - ✓✓✓PKCS# Which SonicOS GUI option is used to create a snapshot of the current system state? - ✓✓✓Create Backup Which interface is used by SonicOS as the backup hearbeat link? - ✓✓✓X The firewall snapshot section displays the percentage of encryted traffic flowing through the firewall. - ✓✓✓True Which setting is used to turn on the CFS Security Service? - ✓✓✓Manage >> Security Config >> Content Filter >> Select "Sonicwall CFS" for content Filter Type Which Security Configuration menu option is used to enable client DPI-SSL? - ✓✓✓Manage > Security Config > Decryption Services > General Tab, check box "Enable SSL Client Inspection" and all below it: Intrusion Prevention, Gateway Anti-Virus, Gateway Anti- Spyware, Application Firewall, Content Filter. Which Match Object property will control what type of policy it can be used in? - ✓✓✓Match object type What are the key components of a CFS policy?(Select all that apply) - ✓✓✓Block Passphrase (Authenticate)
What are two route policy modes that are enable by Dynamic Routing? - ✓✓✓Advanced Routing and Simple RIP Advertisement Which configuration panel in the Setup Guide is used to configure the firewall as the default gateway? - ✓✓✓LAN Settings Panel/ Page Which Load Balancing/Failover method helps specify the amount of outbound traffic to be sent through the primary and secondary WAN interfaces? - ✓✓✓Ratio Load Balancing Type Which of the following are required for WAN ISP Failover and Load balancing?(Select all that apply) - ✓✓✓A second ISP connection and Placing each WAN on separate subnets What does a WAN Failover solution enable?(Select all that apply) - ✓✓✓Maintaining a persistent connection for the WAN port traffic by failing over to the secondary WAN port and Directing redundant routes to one or more secondary service providers In the Event Logs, which of the following will generate a log message for any dropped packets? - ✓✓✓Manage > Logs & reporting> logs Settings > Base Setup > Expand Network Category > ICMP Packets Dropped, select the box under the GUI column to show in the Event Logs What type of certificate store be used to install the certificate? - ✓✓✓Trusted Root Certification Authorities What is the SonicOS navigation path to begin configuring the VPN on the firewall? - ✓✓✓Manage >> under connectivity >> VPN What type of object is created to configure a VPN host when implementing a Site-to-site VPN? - ✓✓✓An Address Object type Network
What is the default encryption method for both of the IKE phases when configuring a VPN on the firewall? - ✓✓✓3DES Which feature facilitates the setup and deployment of multiple global VPN clients? - ✓✓✓a VPN policy What does the LDAP server provide to allow or deny user authorization? - ✓✓✓Active Directory Membership Which group of Security Services uses the SonicWall Deep Packet Inspection engine? - ✓✓✓Gateway Anti-virus (GAV), Anti-Spyware and Instruction Prevention Service (IPS) Which of the following are SonicWall's Advanced Threat Protection features?(Select all thet apply) - ✓✓✓All the servces from Deep Packet inspection, Capture ATP, Geo IP and Botnet Filter In order for SonicWall1's Deep Packet Inspection engine to provide protection, where must GAV, IPS, and Gateway Anti-Spyware be enable?(Select all that apply) - ✓✓✓Security services and zones all found withinthe manage tab >> connectivity and manage tab >> network Which packet status types are indicated by the Packet Monitor?(Select all tha apply) - ✓✓✓Generated, Forwarded, Consumed and dropped packet status Which option enables the capture buffer data to be wrapped and retained to save externally when full, instead of being overwritten? - ✓✓✓Wrap Capture Buffer once Full Which diagnostic tool test for MySonicWall server connectivity? - ✓✓✓Check Network Settings
Which of the following are built-in user groups in a Sonicwall firewall?(Select all that apply) - ✓✓✓Everyone & Trusted Users Who among the following can manage Guest Accounts and Sessions? - ✓✓✓Guest Administrators Which of the following are predefined Schemas that are available when configuring LDAP?(Select all that apply) - ✓✓✓Microsoft AD, RFC2798 InetOrgPerson, RFC Network Information Service, Samba SMB, Novell eDirector, Which of the following variables are used to configure static routes to forward traffic? (Select all that apply) - ✓✓✓Source and Destination addresses Source and Destination Netmask Default Gateway Service Interface Metric Statics routes, by default, take precedence over VPN traffic. - ✓✓✓True Which feature is used to create a predefined email notification with a defined subject? - ✓✓✓Email Log Automation Which log setting is used to change event attributes globally, using flexbile match conditions? - ✓✓✓From Investigate > Logs > Event Logs click on " Go to configure logs" Which takes you to Manage > Logs & Reporting > Log settings > Base Setup What type of information is displayed on the Protocol Monitor?(Select all that apply) - ✓✓✓Ingress/Egress ARP Rate, Ingress/Egress IPV4 Rate and Ingress/Egress TCP Rate
Choose two methods that SonicWall provides for managing global Ips and Anti-Spyware attack threats. - ✓✓✓Prevent All and Detect All Which of the following are SonicWall outbound failover mechanisms.(Select all that apply) - ✓✓✓Round Robin and Spillover-Based Ratio ( also Basic and Ratio) What is the naviagation to configuring the Advanced App Control settings in SonicOS? - ✓✓✓Manage>Policies>Rules> App Control Advanced Identify the best practices that are related to configuring App Control.(Select all that apply) - ✓✓✓Enable logging, as needed, per application and Assign common access rules to all users, regardless of groups. Which of the following will enable you to implement transparent role-based security management? - ✓✓✓Implementing Single Sign-On Which Security Configutation menu option is used to enable client DPI-SSL? - ✓✓✓Manage>Decryption Service>DPI-SSL/TLS Client Which of the following are supported by DPI-SSL? - ✓✓✓(answer) TLS 1.2 Protocol Other options: SSLv23, SSLv3, TLS 1.0, TLS 1.1, TLS 1. NO SSLV1 or 2 What is the SonicOS navigation path to begin configuring the SSL-VPN on the firewall?
- ✓✓✓Manage>Connectivity>SSL-VPN Which policy type is selected when configuring the security policy of a Route-based VPN? - ✓✓✓Tunnel Interface
Which Event Log categories are available by default in a SonicWall firewall?(Select all that apply) - ✓✓✓System, Log, Security Services, Users, Firewall Settings, Network, VPN, High Availability, 3G/4G Modem & Module, Firewall, Wireless, Voip, SSL VPN, AntiSpam, WAN acceleration, SD WAN. Which option is a common mechanism for preventing routing loops? - ✓✓✓Split Horizon Policy-Based Routing routes traffic based on various user-defined variable - ✓✓✓True WHich of the following are Single Sign-On (SSO) authentication options in a Sonicwall firewall? - ✓✓✓LDAP and/or Local Users Where do you add a Guest Services profile in SonicOS? - ✓✓✓Manage Tab, Under System Setup, expand Users >> Guest Services Which Advanced interface setting allow initial packets or response packets to pass throught other interfaces? - ✓✓✓The option "Enable Asymmetric Route Support" can be checked to allow the initial\response packets pass through other interfaces What types of mapping does ARP enable? - ✓✓✓IP Addresses to MAC Addresses Which local network resource is selected by default in the SonicWall firewall when connecting with the VPN? - ✓✓✓Firewalled Subnets Which setup feature also requires a string password setting to avoid potential security vulnerabilities? - ✓✓✓Allow HTTPS on this WAN interface
Which panel of the SonicOS management interface is used to define password restrictions? - ✓✓✓Manage Tab, under System Setup Category > Appliance >> Base Settings, under login Security. Select the two methods you can use to register the SonicWall appliance. - ✓✓✓Using an account within mysonicwall.com and the getting started wizard on the SonicWALL device itself. If the Logging Level filter is defined as Error, which of the following alert types will also be displayed in the results?(Select all that apply) - ✓✓✓Least to most significant logging levels: Debug, Inform, Notice, Warning, Error, Critical, Alert & Emergency. If "error" is filtered then the 3 higher priority event logs will also be displayed while excluding the lower priorities. Answer is Critical, Alert and Emergency. Select the default server types that are available when configuring the Public Server wizard.(Select all that apply) - ✓✓✓Web Server, FTP Server, Mail Server, Terminal Service Server & other Sonicwall Adminstrator has modified the default LAN>WAN Access Rule from "Allow" to "Deny" blocking all outbound WAN traffic. Which of the following statements is applicable in this context? - ✓✓✓LAN user cannot access the Internet, but the appliance can still register with MySonicWall.com and update the UTM signatures. Which Filtering option allows you to exclude events at lower priority? - ✓✓✓The logging levels. See answer from question 90 above as reference. Which of the following user variables are defined to configure static routes to foward traffic?(Select all that apply) - ✓✓✓Destination address, destination mask, gateway and interface
Where HA interfaces tab used to define the mode for the primary firewall. What is the SonicOS navigation path for HA configuration? - ✓✓✓Manage> Under System Setup > High Availability> Base Setup Which DPI-SLL setting is used to allow new connections to bypass decryption instead of being dropped when the connection limit is crossed? - ✓✓✓Allow SSL without decryption (bypass) when connection limit exceeded What is the navigation path to configure Failover and Load Balancing in SonicOS? - ✓✓✓Manage>Under System Setup> Network>Failover & Load Balancing, click configure on specified group. Which object type represents the conditions that must be met in an App Rule policy? - ✓✓✓Match Object Where is the real-time data collection enabled and configured from in the SonicOS management interface? - ✓✓✓Manage > Under Logs & Reporting > Appflow Settings > Flow Reporting > Settings What type of real-time data can be viewed in the AppFlow logs?(Select all that apply) - ✓✓✓Tops Apps, Bits per sec, Packets per sec, Average packet size, Connections per sec, Core utiliz, Interface protocols Which user group can have Bookmarks configured for them? - ✓✓✓SSL-VPN Users
The Public Server guide assigns the server automatically to the zone to which its IP address belongs? - ✓✓✓False What are the main menu categories on the Monitor page of the Sonicwall OS? - ✓✓✓Event Summaries (3) Appliance Health (8) Current Status (8) What are the main menu categories on the Investigate page of the Sonicwall OS? - ✓✓✓Logs (6) Reports (7) Tools (4) What are the main menu categories on the Manage page of the Sonicwall OS? - ✓✓✓Updates (4) Connectivity (4) Policies (2) System Setup (7) System Configuration (4) Logs & Reporting (2) What is the navigation path to configure CA certificate? - ✓✓✓Manage> System Setup>Appliance> Certificates Which Mac Anti-Spoof network settings provide anti spoofing of unwanted ARP packets? - ✓✓✓ARP Lock What is the default ip version setting for sending or receiving dns proxy packets between the firewall and dns server? - ✓✓✓Ipv4 to ipv
