SONICWALL SNSA UPDATED EXAM SCRIPT QUESTIONS
AND ANSWERS RATED A+
✔✔What are the key components of a CFS policy?(Select all that apply) - ✔✔Block
Passphrase (Authenticate)
confirm
Bandwidth Management
✔✔Which Logs panel depicts the Eicar test virus file download? - ✔✔Investigate > Logs
> Event Logs
✔✔A Site-to-Site VPN can allow simultaneous access to multiples remote servers -
✔✔True
✔✔Which statement about SonicWall Gateway Anti-Virus service is correct? - ✔✔-It
inspects all traffic that traverse the Sonicwall Gateway.
-It inspects multiple application protocols, as well as generic TCP streams and
compressed traffic.
-Because Sonicwall GAV does not have to perform reassembly, there are no file-size
limitations imposed by the scanning engine.
-Decompression are also performed on a single pass, per packet basic.
✔✔Which of the following sentences is correct about HA configuration? - ✔✔High
Availability does not support Portshield interfaces and Native Bridge mode.
✔✔What type of NAT policies does a Public Server wizard create? - ✔✔Inbound,
Outbound, and Loopback NAT Policies
✔✔Which of the following are included in the output of a network probe? (Select all that
apply) - ✔✔Name, Probe Target, Probe Type, Gateway, Local IP, Interface, Interval,
Port, Response Timeout, Failure Threshold, Success Threshold, All Must Respond,
RST is failure
✔✔Which diagnostic utility on the SonicWall firewall allows you to look at the contents
of IP packets traversing tha firewall? - ✔✔Packet Monitor
✔✔What are two route policy modes that are enable by Dynamic Routing? -
✔✔Advanced Routing and Simple RIP Advertisement
✔✔Which configuration panel in the Setup Guide is used to configure the firewall as the
default gateway? - ✔✔LAN Settings Panel/ Page
, ✔✔Which Load Balancing/Failover method helps specify the amount of outbound traffic
to be sent through the primary and secondary WAN interfaces? - ✔✔Ratio Load
Balancing Type
✔✔Which of the following are required for WAN ISP Failover and Load
balancing?(Select all that apply) - ✔✔A second ISP connection and Placing each WAN
on separate subnets
✔✔What does a WAN Failover solution enable?(Select all that apply) - ✔✔Maintaining a
persistent connection for the WAN port traffic by failing over to the secondary WAN port
and Directing redundant routes to one or more secondary service providers
✔✔In the Event Logs, which of the following will generate a log message for any
dropped packets? - ✔✔Manage > Logs & reporting> logs Settings > Base Setup >
Expand Network Category > ICMP Packets Dropped, select the box under the GUI
column to show in the Event Logs
✔✔What type of certificate store be used to install the certificate? - ✔✔Trusted Root
Certification Authorities
✔✔What is the SonicOS navigation path to begin configuring the VPN on the firewall? -
✔✔Manage >> under connectivity >> VPN
✔✔What type of object is created to configure a VPN host when implementing a Site-to-
site VPN? - ✔✔An Address Object type Network
✔✔What is the default encryption method for both of the IKE phases when configuring a
VPN on the firewall? - ✔✔3DES
✔✔Which feature facilitates the setup and deployment of multiple global VPN clients? -
✔✔a VPN policy
✔✔What does the LDAP server provide to allow or deny user authorization? - ✔✔Active
Directory Membership
✔✔Which group of Security Services uses the SonicWall Deep Packet Inspection
engine? - ✔✔Gateway Anti-virus (GAV), Anti-Spyware and Instruction Prevention
Service (IPS)
✔✔Which of the following are SonicWall's Advanced Threat Protection features?(Select
all thet apply) - ✔✔All the servces from Deep Packet inspection, Capture ATP, Geo IP
and Botnet Filter
AND ANSWERS RATED A+
✔✔What are the key components of a CFS policy?(Select all that apply) - ✔✔Block
Passphrase (Authenticate)
confirm
Bandwidth Management
✔✔Which Logs panel depicts the Eicar test virus file download? - ✔✔Investigate > Logs
> Event Logs
✔✔A Site-to-Site VPN can allow simultaneous access to multiples remote servers -
✔✔True
✔✔Which statement about SonicWall Gateway Anti-Virus service is correct? - ✔✔-It
inspects all traffic that traverse the Sonicwall Gateway.
-It inspects multiple application protocols, as well as generic TCP streams and
compressed traffic.
-Because Sonicwall GAV does not have to perform reassembly, there are no file-size
limitations imposed by the scanning engine.
-Decompression are also performed on a single pass, per packet basic.
✔✔Which of the following sentences is correct about HA configuration? - ✔✔High
Availability does not support Portshield interfaces and Native Bridge mode.
✔✔What type of NAT policies does a Public Server wizard create? - ✔✔Inbound,
Outbound, and Loopback NAT Policies
✔✔Which of the following are included in the output of a network probe? (Select all that
apply) - ✔✔Name, Probe Target, Probe Type, Gateway, Local IP, Interface, Interval,
Port, Response Timeout, Failure Threshold, Success Threshold, All Must Respond,
RST is failure
✔✔Which diagnostic utility on the SonicWall firewall allows you to look at the contents
of IP packets traversing tha firewall? - ✔✔Packet Monitor
✔✔What are two route policy modes that are enable by Dynamic Routing? -
✔✔Advanced Routing and Simple RIP Advertisement
✔✔Which configuration panel in the Setup Guide is used to configure the firewall as the
default gateway? - ✔✔LAN Settings Panel/ Page
, ✔✔Which Load Balancing/Failover method helps specify the amount of outbound traffic
to be sent through the primary and secondary WAN interfaces? - ✔✔Ratio Load
Balancing Type
✔✔Which of the following are required for WAN ISP Failover and Load
balancing?(Select all that apply) - ✔✔A second ISP connection and Placing each WAN
on separate subnets
✔✔What does a WAN Failover solution enable?(Select all that apply) - ✔✔Maintaining a
persistent connection for the WAN port traffic by failing over to the secondary WAN port
and Directing redundant routes to one or more secondary service providers
✔✔In the Event Logs, which of the following will generate a log message for any
dropped packets? - ✔✔Manage > Logs & reporting> logs Settings > Base Setup >
Expand Network Category > ICMP Packets Dropped, select the box under the GUI
column to show in the Event Logs
✔✔What type of certificate store be used to install the certificate? - ✔✔Trusted Root
Certification Authorities
✔✔What is the SonicOS navigation path to begin configuring the VPN on the firewall? -
✔✔Manage >> under connectivity >> VPN
✔✔What type of object is created to configure a VPN host when implementing a Site-to-
site VPN? - ✔✔An Address Object type Network
✔✔What is the default encryption method for both of the IKE phases when configuring a
VPN on the firewall? - ✔✔3DES
✔✔Which feature facilitates the setup and deployment of multiple global VPN clients? -
✔✔a VPN policy
✔✔What does the LDAP server provide to allow or deny user authorization? - ✔✔Active
Directory Membership
✔✔Which group of Security Services uses the SonicWall Deep Packet Inspection
engine? - ✔✔Gateway Anti-virus (GAV), Anti-Spyware and Instruction Prevention
Service (IPS)
✔✔Which of the following are SonicWall's Advanced Threat Protection features?(Select
all thet apply) - ✔✔All the servces from Deep Packet inspection, Capture ATP, Geo IP
and Botnet Filter
