SonicWALL - SNSA Exam Questions & Answers Solved 100%

What are two probe methods that you can use for logical probes? (select all that apply) - Answer Ping and TCP Action objects allow you to control how the category behaves when a website from that category is accessed. Which action object is used to throttle the traffic? - Answer Bandwidth Management (BWM) Which of the following Address Object types is selected by default in the firewall? - Answer Host Which diagnostic utility on the SonicWall firewall allows you to look at the contents of ip packets traversing the firewall? - Answer Packet Monitor Where is the real-time data on the Dashboard compiled and summarized from? - Answer Manage AppFlow Settings What type of information is displayed on the Live Monitor panel?(Select all that apply) - Answer Multi-Core Monitor Applications Ingress/Egress Bandwidth Ingress/Egress Packet Rate Ingress/Egress Packet Size Connection Rate Connection Count Which file types can be used to export the logs? (Select all that apply) - Answer CSV, TEXT and Email What is the default timeout setting for administrator inactivity? - Answer 5 Minutes What type of encoding format is supported when importing an end-user certificate with a private key? - Answer PKCS#12 Which SonicOS GUI option is used to create a snapshot of the current system state? - Answer Create Backup Which interface is used by SonicOS as the backup hearbeat link? - Answer X0 The firewall snapshot section displays the percentage of encryted traffic flowing through the firewall. - Answer True Which setting is used to turn on the CFS Security Service? - Answer Manage Security Config Content Filter Select "Sonicwall CFS" for content Filter Type Which Security Configuration menu option is used to enable client DPI-SSL? - Answer Manage Security Config Decryption Services General Tab, check box "Enable SSL Client Inspection" and all below it: Intrusion Prevention, Gateway Anti-Virus, Gateway Anti- Spyware, Application Firewall, Content Filter. Which Match Object property will control what type of policy it can be used in? - Answer Match object type What are the key components of a CFS policy?(Select all that apply) - Answer Block Passphrase (Authenticate) confirm Bandwidth Management Which Logs panel depicts the Eicar test virus file download? - Answer Investigate Logs Event Logs A Site-to-Site VPN can allow simultaneous access to multiples remote servers - Answer True Which statement about SonicWall Gateway Anti-Virus service is correct? - Answer -It inspects all traffic that traverse the Sonicwall Gateway. -It inspects multiple application protocols, as well as generic TCP streams and compressed traffic. -Because Sonicwall GAV does not have to perform reassembly, there are no file-size limitations imposed by the scanning engine. -Decompression are also performed on a single pass, per packet basic. Which of the following sentences is correct about HA configuration? - Answer High Availability does not support Portshield interfaces and Native Bridge mode. What type of NAT policies does a Public Server wizard create? - Answer Inbound, Outbound, and Loopback NAT Policies Which of the following are included in the output of a network probe? (Select all that apply) - Answer Name, Probe Target, Probe Type, Gateway, Local IP, Interface, Interval, Port, Response Timeout, Failure Threshold, Success Threshold, All Must Respond, RST is failure Which diagnostic utility on the SonicWall firewall allows you to look at the contents of IP packets traversing tha firewall? - Answer Packet Monitor What are two route policy modes that are enable by Dynamic Routing? - Answer Advanced Routing and Simple RIP Advertisement Which configuration panel in the Setup Guide is used to configure the firewall as the default gateway? - Answer LAN Settings Panel/ Page Which Load Balancing/Failover method helps specify the amount of outbound traffic to be sent through the primary and secondary WAN interfaces? - Answer Ratio Load Balancing Type Which of the following are required for WAN ISP Failover and Load balancing?(Select all that apply) - Answer A second ISP connection and Placing each WAN on separate subnets What does a WAN Failover solution enable?(Select all that apply) - Answer Maintaining a persistent connection for the WAN port traffic by failing over to the secondary WAN port and Directing redundant routes to one or more secondary service providers In the Event Logs, which of the following will generate a log message for any dropped packets? - Answer Manage Logs & reporting logs Settings Base Setup Expand Network Category ICMP Packets Dropped, select the box under the GUI column to show in the Event Logs What type of certificate store be used to install the certificate? - Answer Trusted Root Certification Authorities What is the SonicOS navigation path to begin configuring the VPN on the firewall? - Answer Manage under connectivity VPN What type of object is created to configure a VPN host when implementing a Site-to-site VPN? - Answer An Address Object type Network What is the default encryption method for both of the IKE phases when configuring a VPN on the firewall? - Answer 3DES Which feature facilitates the setup and deployment of multiple global VPN clients? - Answer a VPN policy What does the LDAP server provide to allow or deny user authorization? - Answer Active Directory Membership Which group of Security Services uses the SonicWall Deep Packet Inspection engine? - Answer Gateway Anti-virus (GAV), Anti-Spyware and Instruction Prevention Service (IPS) Which of the following are SonicWall's Advanced Threat Protection features?(Select all thet apply) - Answer All the servces from Deep Packet inspection, Capture ATP, Geo IP and Botnet Filter In order for SonicWall1's Deep Packet Inspection engine to provide protection, where must GAV, IPS, and Gateway Anti-Spyware be enable?(Select all that apply) - Answer Security services and zones all found withinthe manage tab connectivity and manage tab network