SONICWALL SNSA FINAL PAPER
QUESTIONS WITH CORRECT ANSWERS
GRADED A+ RESOURCE
●● Up to how many auto-scheduled cloud config backups are supported
for each firmware version in the sw fw
Answer: 3
●● Which panel of the SonicOS management interface is used to define
password restrictions
Answer: manage>appliance>base settings>login security
●● T/F: The HTTP web-based management option in sonicos is disabled
by default
Answer: True
●● T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rd-
party CA authorities
Answer: True
●● Which of the following is a built-in fw system schedule?
-work hours
-overtime
,-interim hours
-off hours
Answer: work hours
●● Which setting when enabled required a strong password setting to
avoid potential security vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface
Answer: allow https on this wan interface
●● What is the default public server type
Answer: web server
●● VPN wizard: What local network is selected by default in the
firewall
Answer: firewall subnets
●● Which of the following network applications are available by default
in the app rule guide to create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
,-streaming multimedia
Answer: -ftp file transfer
-smtp email
-web access
●● Which advanced interface setting can allow initial packets or
response packets to pass through other interfaces
Answer: asymmetric route support
●● What is the default IP version setting for sending or receiving the
DNS proxy packets between the firewall and the dns servers?
Answer: ipv4 to ipv4
●● Which option is a messaging protocol that is used to build a cache of
dynamic entries for ipv6 devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
-dynamic dns
Answer: neighbor discovery
, ●● What MAC-IP AnTI-SPOOF network setting prevents any spoofing
of the egress packets by a bad device or unwanted ARP packets
Answer: ARP Lock
●● What type of info does the DHCP server help distribute to network
clients?
Answer: Gateway address, Ip address, dns server settings
●● What DDNS providers are supported in SonicOS?
Answer: changeip.com
dyn.com
noIP.com
●● What user authentication method provides centralized authentication
and authorization?
Answer: RADIUS
●● What authentication method is recommended for a relatively smaller
number of users?
Answer: Local users
QUESTIONS WITH CORRECT ANSWERS
GRADED A+ RESOURCE
●● Up to how many auto-scheduled cloud config backups are supported
for each firmware version in the sw fw
Answer: 3
●● Which panel of the SonicOS management interface is used to define
password restrictions
Answer: manage>appliance>base settings>login security
●● T/F: The HTTP web-based management option in sonicos is disabled
by default
Answer: True
●● T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rd-
party CA authorities
Answer: True
●● Which of the following is a built-in fw system schedule?
-work hours
-overtime
,-interim hours
-off hours
Answer: work hours
●● Which setting when enabled required a strong password setting to
avoid potential security vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface
Answer: allow https on this wan interface
●● What is the default public server type
Answer: web server
●● VPN wizard: What local network is selected by default in the
firewall
Answer: firewall subnets
●● Which of the following network applications are available by default
in the app rule guide to create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
,-streaming multimedia
Answer: -ftp file transfer
-smtp email
-web access
●● Which advanced interface setting can allow initial packets or
response packets to pass through other interfaces
Answer: asymmetric route support
●● What is the default IP version setting for sending or receiving the
DNS proxy packets between the firewall and the dns servers?
Answer: ipv4 to ipv4
●● Which option is a messaging protocol that is used to build a cache of
dynamic entries for ipv6 devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
-dynamic dns
Answer: neighbor discovery
, ●● What MAC-IP AnTI-SPOOF network setting prevents any spoofing
of the egress packets by a bad device or unwanted ARP packets
Answer: ARP Lock
●● What type of info does the DHCP server help distribute to network
clients?
Answer: Gateway address, Ip address, dns server settings
●● What DDNS providers are supported in SonicOS?
Answer: changeip.com
dyn.com
noIP.com
●● What user authentication method provides centralized authentication
and authorization?
Answer: RADIUS
●● What authentication method is recommended for a relatively smaller
number of users?
Answer: Local users
