Administrator Certification Exam | All
Questions and Correct Answers | Verified
Answers | Just Released
Which of the following sonicos feature will help apply very specific and custom
controls over a users access to network resources and particular applications or
services?
-app control
-wan isp failover
-client dpi-ssl ---------CORRECT ANSWER-----------------app control
Which object type represents the condition that must be met in an app rule
policy?
-address object
-match object
-bandwidth object
-action object ---------CORRECT ANSWER-----------------match object
,Which of the following firewall configuration tasks will you implement to limit
online user access to approved and licensed applications only?
-enable client dpi-ssl
-set up a site-to-site vpn
-optimize application bandwidth
-create app rules ---------CORRECT ANSWER-----------------create app rules
Which of the following are address object types? (Select all that apply)
-host
-wlan
-network
-range
-static ---------CORRECT ANSWER------------------host
-network
-range
Which of the following is a correct subnet mask (Select all that apply)
255.255.255.0
255.224.0.0
255.255.255.255
,all are correct ---------CORRECT ANSWER-----------------all are correct
HA Primary and Secondary firewalls will habe different settings.
-True
-False ---------CORRECT ANSWER-----------------False
Which option is recommended to be left disabled when using stateful HA?
-Enable Preempt mode
-enable virtual MAC
-Generate/overwrite backup settings when upgrading firmware
-leaving the mode set to none ---------CORRECT ANSWER-----------------Enable
Preempt mode
What are the two probe methods that you can use for logical probes?
-tcp
-arp
-ping
-udp ---------CORRECT ANSWER------------------tcp
-ping
, Which load balancing mode uses a ranking method to determine the order of
preemption when configuring WAN failover/load balancing?
-basic failover
-spill-over based
-round robin
-ratio ---------CORRECT ANSWER-----------------basic failover
Which dpi-ssl ca certificate is recommended for re-signing in a highly secure
network environment?
dpi-ssl ca 1024-bit
dpi-ssl ca 2048-bit ---------CORRECT ANSWER-----------------dpi-ssl ca 2048-bit
Which interface should be selected when configuring routes for a route-based
vpn?
-interface from where trafic is generated
-multiple wan interface
-any physical interfacewhich is aktiv
-tunnel interface ---------CORRECT ANSWER-----------------tunnel interface