SNSA PRACTICE EXAMINATION 2026
QUESTIONS WITH ANSWERS
GUARANTEED TO PASS.
⫸ WHICH FILE TYPES CAN BE USED TO EXPORT THE LOGS?
(SELECT ALL THAT APPLY). ANSWER- CSV, TEXT AND EMAIL
⫸ WHAT IS THE DEFAULT TIMEOUT SETTING FOR
ADMINISTRATOR INACTIVITY? ANSWER- 5 MINUTES
⫸ WHAT TYPE OF ENCODING FORMAT IS SUPPORTED WHEN
IMPORTING AN END-USER CERTIFICATE WITH A PRIVATE
KEY? ANSWER- PKCS#12
⫸ WHICH SONICOS GUI OPTION IS USED TO CREATE A
SNAPSHOT OF THE CURRENT SYSTEM STATE? ANSWER-
CREATE BACKUP
⫸ WHICH INTERFACE IS USED BY SONICOS AS THE BACKUP
HEARBEAT LINK? ANSWER- X0
,⫸ THE FIREWALL SNAPSHOT SECTION DISPLAYS THE
PERCENTAGE OF ENCRYTED TRAFFIC FLOWING THROUGH
THE FIREWALL.. ANSWER- TRUE
⫸ WHICH SETTING IS USED TO TURN ON THE CFS SECURITY
SERVICE? ANSWER- MANAGE >> SECURITY CONFIG >>
CONTENT FILTER >> SELECT "SONICWALL CFS" FOR
CONTENT FILTER TYPE
⫸ WHICH SECURITY CONFIGURATION MENU OPTION IS USED
TO ENABLE CLIENT DPI-SSL? ANSWER- MANAGE > SECURITY
CONFIG > DECRYPTION SERVICES > GENERAL TAB, CHECK
BOX "ENABLE SSL CLIENT INSPECTION"
AND ALL BELOW IT:
INTRUSION PREVENTION, GATEWAY ANTI-VIRUS, GATEWAY
ANTI- SPYWARE, APPLICATION FIREWALL, CONTENT FILTER.
⫸ WHICH MATCH OBJECT PROPERTY WILL CONTROL WHAT
TYPE OF POLICY IT CAN BE USED IN? ANSWER- MATCH
OBJECT TYPE
⫸ WHAT ARE THE KEY COMPONENTS OF A CFS
POLICY?(SELECT ALL THAT APPLY). ANSWER- BLOCK
PASSPHRASE (AUTHENTICATE)
CONFIRM
, BANDWIDTH MANAGEMENT
⫸ WHICH LOGS PANEL DEPICTS THE EICAR TEST VIRUS FILE
DOWNLOAD? ANSWER- INVESTIGATE > LOGS > EVENT LOGS
⫸ A SITE-TO-SITE VPN CAN ALLOW SIMULTANEOUS ACCESS
TO MULTIPLES REMOTE SERVERS. ANSWER- TRUE
⫸ WHICH STATEMENT ABOUT SONICWALL GATEWAY ANTI-
VIRUS SERVICE IS CORRECT? ANSWER- -IT INSPECTS ALL
TRAFFIC THAT TRAVERSE THE SONICWALL GATEWAY.
-IT INSPECTS MULTIPLE APPLICATION PROTOCOLS, AS WELL
AS GENERIC TCP STREAMS AND COMPRESSED TRAFFIC.
-BECAUSE SONICWALL GAV DOES NOT HAVE TO PERFORM
REASSEMBLY, THERE ARE NO FILE-SIZE LIMITATIONS
IMPOSED BY THE SCANNING ENGINE.
-DECOMPRESSION ARE ALSO PERFORMED ON A SINGLE PASS,
PER PACKET BASIC.
⫸ WHICH OF THE FOLLOWING SENTENCES IS CORRECT
ABOUT HA CONFIGURATION? ANSWER- HIGH AVAILABILITY
DOES NOT SUPPORT PORTSHIELD INTERFACES AND NATIVE
BRIDGE MODE.
QUESTIONS WITH ANSWERS
GUARANTEED TO PASS.
⫸ WHICH FILE TYPES CAN BE USED TO EXPORT THE LOGS?
(SELECT ALL THAT APPLY). ANSWER- CSV, TEXT AND EMAIL
⫸ WHAT IS THE DEFAULT TIMEOUT SETTING FOR
ADMINISTRATOR INACTIVITY? ANSWER- 5 MINUTES
⫸ WHAT TYPE OF ENCODING FORMAT IS SUPPORTED WHEN
IMPORTING AN END-USER CERTIFICATE WITH A PRIVATE
KEY? ANSWER- PKCS#12
⫸ WHICH SONICOS GUI OPTION IS USED TO CREATE A
SNAPSHOT OF THE CURRENT SYSTEM STATE? ANSWER-
CREATE BACKUP
⫸ WHICH INTERFACE IS USED BY SONICOS AS THE BACKUP
HEARBEAT LINK? ANSWER- X0
,⫸ THE FIREWALL SNAPSHOT SECTION DISPLAYS THE
PERCENTAGE OF ENCRYTED TRAFFIC FLOWING THROUGH
THE FIREWALL.. ANSWER- TRUE
⫸ WHICH SETTING IS USED TO TURN ON THE CFS SECURITY
SERVICE? ANSWER- MANAGE >> SECURITY CONFIG >>
CONTENT FILTER >> SELECT "SONICWALL CFS" FOR
CONTENT FILTER TYPE
⫸ WHICH SECURITY CONFIGURATION MENU OPTION IS USED
TO ENABLE CLIENT DPI-SSL? ANSWER- MANAGE > SECURITY
CONFIG > DECRYPTION SERVICES > GENERAL TAB, CHECK
BOX "ENABLE SSL CLIENT INSPECTION"
AND ALL BELOW IT:
INTRUSION PREVENTION, GATEWAY ANTI-VIRUS, GATEWAY
ANTI- SPYWARE, APPLICATION FIREWALL, CONTENT FILTER.
⫸ WHICH MATCH OBJECT PROPERTY WILL CONTROL WHAT
TYPE OF POLICY IT CAN BE USED IN? ANSWER- MATCH
OBJECT TYPE
⫸ WHAT ARE THE KEY COMPONENTS OF A CFS
POLICY?(SELECT ALL THAT APPLY). ANSWER- BLOCK
PASSPHRASE (AUTHENTICATE)
CONFIRM
, BANDWIDTH MANAGEMENT
⫸ WHICH LOGS PANEL DEPICTS THE EICAR TEST VIRUS FILE
DOWNLOAD? ANSWER- INVESTIGATE > LOGS > EVENT LOGS
⫸ A SITE-TO-SITE VPN CAN ALLOW SIMULTANEOUS ACCESS
TO MULTIPLES REMOTE SERVERS. ANSWER- TRUE
⫸ WHICH STATEMENT ABOUT SONICWALL GATEWAY ANTI-
VIRUS SERVICE IS CORRECT? ANSWER- -IT INSPECTS ALL
TRAFFIC THAT TRAVERSE THE SONICWALL GATEWAY.
-IT INSPECTS MULTIPLE APPLICATION PROTOCOLS, AS WELL
AS GENERIC TCP STREAMS AND COMPRESSED TRAFFIC.
-BECAUSE SONICWALL GAV DOES NOT HAVE TO PERFORM
REASSEMBLY, THERE ARE NO FILE-SIZE LIMITATIONS
IMPOSED BY THE SCANNING ENGINE.
-DECOMPRESSION ARE ALSO PERFORMED ON A SINGLE PASS,
PER PACKET BASIC.
⫸ WHICH OF THE FOLLOWING SENTENCES IS CORRECT
ABOUT HA CONFIGURATION? ANSWER- HIGH AVAILABILITY
DOES NOT SUPPORT PORTSHIELD INTERFACES AND NATIVE
BRIDGE MODE.
