SNSP EXAM - SONICWALL NETWORK SECURITY
PROFESSIONAL BEST PRACTICES AND OTHER
BASICS
SonicWall Network Security Professional (SNSP) exam Best Practices and other Basics
SonicWall Network Security Professional (SNSP) exam Best Practices and other Basics
- Answers - SonicWall Network Security Professional (SNSP) exam Best Practices and
other Basics
True or False: It is recommended to disassociate the from the WAN zone if not in use -
Answers - True - Unassigned
What is the default configuration of X1 - Answers - Static mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - Answers - It's assigned with a
valid non-zero IP address or configuring for DHCP or PPPoE
Which interfaces cannot be configured as WAN interfaces - Answers - X0 and MGMT
True or False: You should open HTTPS Mgmt up on the WAN interface - Answers -
False
True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option
when configuring HTTPM management - Answers - False
What can result from incorrect duplex settings on the WAN - Answers - Inconsistent
Internet connection, slow throughput, dropped packets, and inability to negotiate to an
ISP connection
What settings are default on the advanced tab of a WAN interface - Answers - Link
Speed to Auto Negotiate
User Default MAC address
Enable Flow Reporting
Fragment non-VPN outbound packets larger than this Interfaces MTU
MTU stands for what - Answers - Maximum Transmission Unit
On DSL and cable connections is the MTU size generally lower or higher - Answers -
Lower
How do you change the value of MTU - Answers - In increments of 8 bytes
True or False: Confirm that Ignore Don't Fragment DF bit is unchecked - Answers - True
, True or False: Even if you only have 1 WAN connection you should still enable "Enable
Load Balancing" - Answers - True
Why must you enable load balancing with only 1 WAN connection - Answers - To
access the LB Groups and LB Statistics sections of Failover and Load Balancing
configuration
Which Probe menu should you select when configuring WAN probes - Answers - Probe
Succeeds when either main or alternate target responds
Why should you always use X0 as a backup heartbeat link - Answers - Because it is
hardcoded in SonicOS
True or False: You should always configure X0's monitoring IP - Answers - True
What happens if the WAN interface does not have the monitoring IP configured -
Answers - The secondary/Standby unit directs the path to the Internet for GRID and
License Manager communication
True or False: The secondary unit is licensed automatically - Answers - False
Why would you want to use Virtual MAC with an HA pair - Answers - To reduce ARP
convergence time during a failover
When using an HA pair what should you ensure is disabled on the switchports on the
switch - Answers - Spanning Tree Protocol which can cause flapping effects when
virtual MAC is seen on multiple interfaces
True or False: Ensure all security services are enabled on proper zones - Answers -
True
If you do not plan on using BWM, should it still be enabled - Answers - No
What settings use BWM - Answers - Access Rules with BWM setting use the throttles,
interface BWM settings, and priority queues
True or False: Do not disable Allow Fragmented Packets on access rules - Answers -
True
What application firewall rules should be created to prevent malware - Answers - Rules
that restrict DNS, SSH, and Proxy-Access applications
What can malicious applications leverage to redirect traffic to illegitmate sites - Answers
- DNS Cache Poisoning
PROFESSIONAL BEST PRACTICES AND OTHER
BASICS
SonicWall Network Security Professional (SNSP) exam Best Practices and other Basics
SonicWall Network Security Professional (SNSP) exam Best Practices and other Basics
- Answers - SonicWall Network Security Professional (SNSP) exam Best Practices and
other Basics
True or False: It is recommended to disassociate the from the WAN zone if not in use -
Answers - True - Unassigned
What is the default configuration of X1 - Answers - Static mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - Answers - It's assigned with a
valid non-zero IP address or configuring for DHCP or PPPoE
Which interfaces cannot be configured as WAN interfaces - Answers - X0 and MGMT
True or False: You should open HTTPS Mgmt up on the WAN interface - Answers -
False
True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option
when configuring HTTPM management - Answers - False
What can result from incorrect duplex settings on the WAN - Answers - Inconsistent
Internet connection, slow throughput, dropped packets, and inability to negotiate to an
ISP connection
What settings are default on the advanced tab of a WAN interface - Answers - Link
Speed to Auto Negotiate
User Default MAC address
Enable Flow Reporting
Fragment non-VPN outbound packets larger than this Interfaces MTU
MTU stands for what - Answers - Maximum Transmission Unit
On DSL and cable connections is the MTU size generally lower or higher - Answers -
Lower
How do you change the value of MTU - Answers - In increments of 8 bytes
True or False: Confirm that Ignore Don't Fragment DF bit is unchecked - Answers - True
, True or False: Even if you only have 1 WAN connection you should still enable "Enable
Load Balancing" - Answers - True
Why must you enable load balancing with only 1 WAN connection - Answers - To
access the LB Groups and LB Statistics sections of Failover and Load Balancing
configuration
Which Probe menu should you select when configuring WAN probes - Answers - Probe
Succeeds when either main or alternate target responds
Why should you always use X0 as a backup heartbeat link - Answers - Because it is
hardcoded in SonicOS
True or False: You should always configure X0's monitoring IP - Answers - True
What happens if the WAN interface does not have the monitoring IP configured -
Answers - The secondary/Standby unit directs the path to the Internet for GRID and
License Manager communication
True or False: The secondary unit is licensed automatically - Answers - False
Why would you want to use Virtual MAC with an HA pair - Answers - To reduce ARP
convergence time during a failover
When using an HA pair what should you ensure is disabled on the switchports on the
switch - Answers - Spanning Tree Protocol which can cause flapping effects when
virtual MAC is seen on multiple interfaces
True or False: Ensure all security services are enabled on proper zones - Answers -
True
If you do not plan on using BWM, should it still be enabled - Answers - No
What settings use BWM - Answers - Access Rules with BWM setting use the throttles,
interface BWM settings, and priority queues
True or False: Do not disable Allow Fragmented Packets on access rules - Answers -
True
What application firewall rules should be created to prevent malware - Answers - Rules
that restrict DNS, SSH, and Proxy-Access applications
What can malicious applications leverage to redirect traffic to illegitmate sites - Answers
- DNS Cache Poisoning
