SONICWALL – SNSA EXAM WITH 100% QUESTIONS AND ANSWERS

SONICWALL – SNSA EXAM WITH 100% QUESTIONS AND ANSWERS


Which diagnostic utility on the SonicWall firewall allows you to lookat the contents of ip
packets traversing the firewall? - ANSWER-Packet Monitor

Where is the real-time data on the Dashboard compiled and summarized from? -
ANSWER-AppFlow

What type of information is displayed on the Live Monitor panel?(Select all that apply) -
ANSWER-Multi-Core Monitor and Connection Count

What are two probe methods that you can use for logical probes? (select all that apply) -
ANSWER-Ping and TCP

Action objects allow you to control how the category behaves when a website from that
category is accessed. Which action object is used to throttle the traffic? - ANSWER-
BWM

Which of the following Address Object types is selected by default in the firewall? -
ANSWER-Host

Which file types can be used to export the logs? (Select all that apply) - ANSWER-Email
and CSV

What is the default timeout setting for administrator inactivity? - ANSWER-5 Minutes

What type of encoding format is supported when importing an end-user certificate with a
private key? - ANSWER-PKCS#12

Which SonicOS GUI option is used to create a snapshot of the current system state? -
ANSWER-Create Backup

Which interface is used by SonicOS as the backup hearbeat link? - ANSWER-X3

The firewall snapshot section displays the percentage of encryted traffic flowing through

the firewall. - ANSWER-True

Which setting is used to turn on the CFS Security Service? - ANSWER-Enable Content
Filtering Service

Which Security Configuration menu option is used to enable client DPI-SSL? -
ANSWER-Decryption Services

Which Match Object will control what type of policy it can be used in? - ANSWER-Match
object type

What are the key components of a CFS policy?(Select all that apply) - ANSWER-
Bandwidth Management, authenticate and block

Which Logs panel depicts the Eicar test virus file download? - ANSWER-AppFlow Logs

A Site-to-Site VPN can allow simultaneous access to multiples remote servers -
ANSWER-True

Which statement about SonicWall Gateway Anti-Virus service is correct? - ANSWERScans TCP stream-based protocols, in addition to common Web and email

protocols

Which of the following sentences is correct about HA configuration? - ANSWER-High
Availability cannot be configured while there are ports participanting in PortShield

What type of NAT policies does a Public Server wizard create? - ANSWER-Inbound,
Outbound, and Loopback NAT Policies

Which of the following are included in the output of a network probe? (Select all that
apply) - ANSWER-IP Addressing, Probe Target and Type and Interface Details.

Which diagnostic utility on the SonicWall firewall allows you to look at the contents of IP
packets traversing tha firewall? - ANSWER-Packet Monitor

What are two route policy modes that are enable by Dynamic Routing? - ANSWER-
Advanced Routing and Simple RIP Advertisement

Which configuration panel in the Setup Guide is used to configure the firewall as the
default gateway? - ANSWER-LAN Settings

Which Load Balancing/Failover method helps specify the amount of outbound traffic to be sent through the primary and secondary WAN interfaces? - ANSWER-Ratio based

Which of the following are required for WAN ISP Failover and Load balancing?(Select all that apply) - ANSWER-A second ISP connection and Placing each WAN on separate subnets

What does a WAN Failover solution enable?(Select all that apply) - ANSWERMaintaining a persistent connection for the WAN port traffic by failing over to the secondary WAN port and Directing redundant routes to one or more secondary service providers

In the Event Logs, which of the following will generate a log message for any dropped
packets? - ANSWER-The action for the policy is set to reset/drop

What type of certificate store be used to install the certificate? - ANSWER-Trusted Root
Certification Authorities

What is the SonicOS navigation path to begin configuring the VPN on the firewall? -
ANSWER-Manage>Connectivity>VPN

What type of object is created to configure a VPN host when implementing a Site-to-site
VPN? - ANSWER-Network Address Object

What is the default encryption method for both of the IKE phases when configuring a
VPN on the firewall? - ANSWER-SHA1

Which feature facilitates the setup and deployment of multiple global VPN clients? -
ANSWER-Group VPN Policies

What does the LDAP server provide to allow or deny user authorization? - ANSWER-
Active Directory Membership

Which group of Security Services uses the SonicWall Deep Packet Inspection engine? -
ANSWER-IPS, GAV, and Anti-Spyware

Which of the following are SonicWall's Advanced Threat Protection features?(Select all
thet apply) - ANSWER-Deep Packet Inspection and Geo-IP

In order for SonicWall1's Deep Packet Inspection engine to provide protection, where
must GAV, IPS, and Gateway Anti-Spyware be enable?(Select all that apply) -
ANSWER-Zones and Security Services