SNSA Study Guide With Complete Solution

Capture ATP - Answer Discovers and stops Zero-day and unknown attacks. RFDPI - Answer Effective security analysis of every bit of traffic in real time without added latency TLD - Answer Protects Internet communications by encrypting the traffic Content Filtering - Answer Granular web policies to restrict objectionable, unproductive, or unsecure web content. Synchronize - Answer Which feature is used to ensure the firewall licenses are the same as in the respective M account? Log out and to drop into non-config mode - Answer What options are used to pre-empt an administrator logged into the firewall? Application intelligence and control, network segmentation, and flexible deployment. - Answer What are some key features of SonicWall Next-Gen firewalls? What are some of the key featuers of SonicOS 7 architecture? - Answer Advanced protection against encrypted threats, easy zero-touch deployment, simplified integration, and TLS 1.3 What are two best practices that should be implemented before updating the firewall firmware? - Answer Use the create backup option built into the firewall and download a settings file locally. What is SonicWall's default public server type? - Answer Web server What is the default encryption method for VPN tunnels? - Answer 3DES What is the most secure encryption method for VPN tunnels? - Answer AES-256, but it takes the longest time to encrypt and decrypt What is the default hashing method for VPN authentication via IKE negotiation? - Answer SHA-1 What is the default lifetime for VPN tunnels? - Answer 28800 seconds / 8 hours What is the minimum lifetime for VPN tunnels allowed? - Answer 2 minutes What is the default pre-configured SLA criteria? - Answer Lowest Latency, Jitter, and Packet Loss What is the maximum numbers of SD-WAN Interface Group Members? - Answer 10 The Public Server guide assigns the server automatically to the zone to which its IP address belongs. - Answer True When configuring a Site-to-Site policy, the Local Network option must match the Destination Network on the other side of the tunnel in order to avoid tunnel negotiation errors or even a total failure. - Answer True VPN - Answer Provides public access to an internal server Public Server - Answer Configuring a new site-to-site policy SD-WAN - Answer software defined wide area network Configuring software-based control over the Internet What are the default zones? - Answer LAN, WAN, DMZ, VPN, SSL-VPN, and Multicast The Routed Mode feature provides an alternative for NAT to route traffic between separate public IP ranges. - Answer True What is the default action to a DNS Rebinding Attack? - Answer To log the attack. What is the default IP version setting for sending/receiving DNS Proxy packets between firewall and DNS server? - Answer IPv4 to IPv4 What is the default value of time for Neighbor Discovery to reach a neighbor? - Answer 20 seconds Which feature is a messaging protocol that is used to build a cache of dynamic entries for IPv6 devices on the firewall? - Answer Neighbor Discovery Protocol Which feature prevents ARP poisoning of connected machines? - Answer ARP Watch SonicWall DHCP server options support standards as defined primarily in RFC 2131 and RFC 2132 - Answer True How many web proxy servers can be configured in the SonicWall firewall? - Answer 32