SNSP EXAM - BEST PRACTICES AND OTHER BASICS
QUESTIONS WITH VERIFIED ANSWERS
Which interfaces cannot be configured as WAN interfaces - Answers - X0 and MGMT
What is the default configuration of X1 - Answers - Static mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - Answers - It's assigned with a
valid non-zero IP address or configuring for DHCP or PPPoE
True or False: It is recommended to disassociate the from the WAN zone if not in use -
Answers - True - Unassigned
True or False: You should open HTTPS Mgmt up on the WAN interface - Answers -
False
True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option
when configuring HTTPM management - Answers - False
What can result from incorrect duplex settings on the WAN - Answers - Inconsistent
Internet connection, slow throughput, dropped packets, and inability to negotiate to an
ISP connection
What settings are default on the advanced tab of a WAN interface - Answers - Link
Speed to Auto Negotiate
User Default MAC address
Enable Flow Reporting
Fragment non-VPN outbound packets larger than this Interfaces MTU
MTU stands for what - Answers - Maximum Transmission Unit
On DSL and cable connections is the MTU size generally lower or higher - Answers -
Lower
How do you change the value of MTU - Answers - In increments of 8 bytes
True or False: Confirm that Ignore Don't Fragment DF bit is unchecked - Answers - True
True or False: Even if you only have 1 WAN connection you should still enable "Enable
Load Balancing" - Answers - True
, Why must you enable load balancing with only 1 WAN connection - Answers - To
access the LB Groups and LB Statistics sections of Failover and Load Balancing
configuration
Which Probe menu should you select when configuring WAN probes - Answers - Probe
Succeeds when either main or alternate target responds
Why should you always use X0 as a backup heartbeat link - Answers - Because it is
hardcoded in SonicOS
True or False: You should always configure X0's monitoring IP - Answers - True
What happens if the WAN interface does not have the monitoring IP configured -
Answers - The secondary/Standby unit directs the path to the Internet for GRID and
License Manager communication
True or False: The secondary unit is licensed automatically - Answers - False
Why would you want to use Virtual MAC with an HA pair - Answers - To reduce ARP
convergence time during a failover
When using an HA pair what should you ensure is disabled on the switchports on the
switch - Answers - Spanning Tree Protocol which can cause flapping effects when
virtual MAC is seen on multiple interfaces
True or False: Ensure all security services are enabled on proper zones - Answers -
True
If you do not plan on using BWM, should it still be enabled - Answers - No
What settings use BWM - Answers - Access Rules with BWM setting use the throttles,
interface BWM settings, and priority queues
True or False: Do not disable Allow Fragmented Packets on access rules - Answers -
True
What application firewall rules should be created to prevent malware - Answers - Rules
that restrict DNS, SSH, and Proxy-Access applications
What can malicious applications leverage to redirect traffic to illegitmate sites - Answers
- DNS Cache Poisoning
True or False: You should create an Address Object and AppRule to restrict the DNS
protocol to only the Trusted DNS Host - Answers - True
QUESTIONS WITH VERIFIED ANSWERS
Which interfaces cannot be configured as WAN interfaces - Answers - X0 and MGMT
What is the default configuration of X1 - Answers - Static mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - Answers - It's assigned with a
valid non-zero IP address or configuring for DHCP or PPPoE
True or False: It is recommended to disassociate the from the WAN zone if not in use -
Answers - True - Unassigned
True or False: You should open HTTPS Mgmt up on the WAN interface - Answers -
False
True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option
when configuring HTTPM management - Answers - False
What can result from incorrect duplex settings on the WAN - Answers - Inconsistent
Internet connection, slow throughput, dropped packets, and inability to negotiate to an
ISP connection
What settings are default on the advanced tab of a WAN interface - Answers - Link
Speed to Auto Negotiate
User Default MAC address
Enable Flow Reporting
Fragment non-VPN outbound packets larger than this Interfaces MTU
MTU stands for what - Answers - Maximum Transmission Unit
On DSL and cable connections is the MTU size generally lower or higher - Answers -
Lower
How do you change the value of MTU - Answers - In increments of 8 bytes
True or False: Confirm that Ignore Don't Fragment DF bit is unchecked - Answers - True
True or False: Even if you only have 1 WAN connection you should still enable "Enable
Load Balancing" - Answers - True
, Why must you enable load balancing with only 1 WAN connection - Answers - To
access the LB Groups and LB Statistics sections of Failover and Load Balancing
configuration
Which Probe menu should you select when configuring WAN probes - Answers - Probe
Succeeds when either main or alternate target responds
Why should you always use X0 as a backup heartbeat link - Answers - Because it is
hardcoded in SonicOS
True or False: You should always configure X0's monitoring IP - Answers - True
What happens if the WAN interface does not have the monitoring IP configured -
Answers - The secondary/Standby unit directs the path to the Internet for GRID and
License Manager communication
True or False: The secondary unit is licensed automatically - Answers - False
Why would you want to use Virtual MAC with an HA pair - Answers - To reduce ARP
convergence time during a failover
When using an HA pair what should you ensure is disabled on the switchports on the
switch - Answers - Spanning Tree Protocol which can cause flapping effects when
virtual MAC is seen on multiple interfaces
True or False: Ensure all security services are enabled on proper zones - Answers -
True
If you do not plan on using BWM, should it still be enabled - Answers - No
What settings use BWM - Answers - Access Rules with BWM setting use the throttles,
interface BWM settings, and priority queues
True or False: Do not disable Allow Fragmented Packets on access rules - Answers -
True
What application firewall rules should be created to prevent malware - Answers - Rules
that restrict DNS, SSH, and Proxy-Access applications
What can malicious applications leverage to redirect traffic to illegitmate sites - Answers
- DNS Cache Poisoning
True or False: You should create an Address Object and AppRule to restrict the DNS
protocol to only the Trusted DNS Host - Answers - True
