SONICWALL – SNSA EXAM WITH 100% QUESTIONS AND ANSWERS
Which diagnostic utility on the SonicWall firewall allows you to lookat the contents of
... [Show More] ip
packets traversing the firewall? - ANSWER-Packet Monitor
Where is the real-time data on the Dashboard compiled and summarized from? -
ANSWER-AppFlow
What type of information is displayed on the Live Monitor panel?(Select all that apply) -
ANSWER-Multi-Core Monitor and Connection Count
What are two probe methods that you can use for logical probes? (select all that apply) -
ANSWER-Ping and TCP
Action objects allow you to control how the category behaves when a website from that
category is accessed. Which action object is used to throttle the traffic? - ANSWER-
BWM
Which of the following Address Object types is selected by default in the firewall? -
ANSWER-Host
Which file types can be used to export the logs? (Select all that apply) - ANSWER-Email
and CSV
What is the default timeout setting for administrator inactivity? - ANSWER-5 Minutes
What type of encoding format is supported when importing an end-user certificate with a
private key? - ANSWER-PKCS#12
Which SonicOS GUI option is used to create a snapshot of the current system state? -
ANSWER-Create Backup
Which interface is used by SonicOS as the backup hearbeat link? - ANSWER-X3
The firewall snapshot section displays the percentage of encryted traffic flowing through
the firewall. - ANSWER-True
Which setting is used to turn on the CFS Security Service? - ANSWER-Enable Content
Filtering Service
Which Security Configuration menu option is used to enable client DPI-SSL? -
ANSWER-Decryption Services
Which Match Object will control what type of policy it can be used in? - ANSWER-Match
object type
What are the key components of a CFS policy?(Select all that apply) - ANSWER-
Bandwidth Management, authenticate and block
Which Logs panel depicts the Eicar test virus file download? - ANSWER-AppFlow Logs
A Site-to-Site VPN can allow simultaneous access to multiples remote servers -
ANSWER-True
Which statement about SonicWall Gateway Anti-Virus service is correct? - ANSWERScans TCP stream-based protocols, in addition to common Web and email
protocols
Which of the following sentences is correct about HA configuration? - ANSWER-High
Availability cannot be configured while there are ports participanting in PortShield
What type of NAT policies does a Public Server wizard create? - ANSWER-Inbound,
Outbound, and Loopback NAT Policies
Which of the following are included in the output of a network probe? (Select all that
apply) - ANSWER-IP Addressing, Probe Target and Type and Interface Details.
Which diagnostic utility on the SonicWall firewall allows you to look at the contents of IP
packets traversing tha firewall? - ANSWER-Packet Monitor
What are two route policy modes that are enable by Dynamic Routing? - ANSWER-
Advanced Routing and Simple RIP Advertisement
Which configuration panel in the Setup Guide is used to configure the firewall as the
default gateway? - ANSWER-LAN Settings
Which Load Balancing/Failover method helps specify the amount of outbound traffic to be sent through the primary and secondary WAN interfaces? - ANSWER-Ratio based
Which of the following are required for WAN ISP Failover and Load balancing?(Select all that apply) - ANSWER-A second ISP connection and Placing each WAN on separate subnets
What does a WAN Failover solution enable?(Select all that apply) - ANSWERMaintaining a persistent connection for the WAN port traffic by failing over to the secondary WAN port and Directing redundant routes to one or more secondary service providers
In the Event Logs, which of the following will generate a log message for any dropped
packets? - ANSWER-The action for the policy is set to reset/drop
What type of certificate store be used to install the certificate? - ANSWER-Trusted Root
Certification Authorities
What is the SonicOS navigation path to begin configuring the VPN on the firewall? -
ANSWER-Manage>Connectivity>VPN
What type of object is created to configure a VPN host when implementing a Site-to-site
VPN? - ANSWER-Network Address Object
What is the default encryption method for both of the IKE phases when configuring a
VPN on the firewall? - ANSWER-SHA1
Which feature facilitates the setup and deployment of multiple global VPN clients? -
ANSWER-Group VPN Policies
What does the LDAP server provide to allow or deny user authorization? - ANSWER-
Active Directory Membership
Which group of Security Services uses the SonicWall Deep Packet Inspection engine? -
ANSWER-IPS, GAV, and Anti-Spyware
Which of the following are SonicWall's Advanced Threat Protection features?(Select all
thet apply) - ANSWER-Deep Packet Inspection and Geo-IP
In order for SonicWall1's Deep Packet Inspection engine to provide protection, where
must GAV, IPS, and Gateway Anti-Spyware be enable?(Select all that apply) -
ANSWER-Zones and Security Services [Show Less]