SONICWALL – SNSA EXAM WITH 100% QUESTIONS AND ANSWERS

SONICWALL – SNSA EXAM WITH 100% QUESTIONS AND ANSWERS Which diagnostic utility on the SonicWall firewall allows you to lookat the contents of ip packets traversing the firewall? - ANSWER-Packet Monitor Where is the real-time data on the Dashboard compiled and summarized from? - ANSWER-AppFlow What type of information is displayed on the Live Monitor panel?(Select all that apply) - ANSWER-Multi-Core Monitor and Connection Count What are two probe methods that you can use for logical probes? (select all that apply) - ANSWER-Ping and TCP Action objects allow you to control how the category behaves when a website from that category is accessed. Which action object is used to throttle the traffic? - ANSWER- BWM Which of the following Address Object types is selected by default in the firewall? - ANSWER-Host Which file types can be used to export the logs? (Select all that apply) - ANSWER-Email and CSV What is the default timeout setting for administrator inactivity? - ANSWER-5 Minutes What type of encoding format is supported when importing an end-user certificate with a private key? - ANSWER-PKCS#12 Which SonicOS GUI option is used to create a snapshot of the current system state? - ANSWER-Create Backup Which interface is used by SonicOS as the backup hearbeat link? - ANSWER-X3 The firewall snapshot section displays the percentage of encryted traffic flowing through the firewall. - ANSWER-True Which setting is used to turn on the CFS Security Service? - ANSWER-Enable Content Filtering Service Which Security Configuration menu option is used to enable client DPI-SSL? - ANSWER-Decryption Services Which Match Object will control what type of policy it can be used in? - ANSWER-Match object type What are the key components of a CFS policy?(Select all that apply) - ANSWER- Bandwidth Management, authenticate and block Which Logs panel depicts the Eicar test virus file download? - ANSWER-AppFlow Logs A Site-to-Site VPN can allow simultaneous access to multiples remote servers - ANSWER-True Which statement about SonicWall Gateway Anti-Virus service is correct? - ANSWERScans TCP stream-based protocols, in addition to common Web and email protocols Which of the following sentences is correct about HA configuration? - ANSWER-High Availability cannot be configured while there are ports participanting in PortShield What type of NAT policies does a Public Server wizard create? - ANSWER-Inbound, Outbound, and Loopback NAT Policies Which of the following are included in the output of a network probe? (Select all that apply) - ANSWER-IP Addressing, Probe Target and Type and Interface Details. Which diagnostic utility on the SonicWall firewall allows you to look at the contents of IP packets traversing tha firewall? - ANSWER-Packet Monitor What are two route policy modes that are enable by Dynamic Routing? - ANSWER- Advanced Routing and Simple RIP Advertisement Which configuration panel in the Setup Guide is used to configure the firewall as the default gateway? - ANSWER-LAN Settings Which Load Balancing/Failover method helps specify the amount of outbound traffic to be sent through the primary and secondary WAN interfaces? - ANSWER-Ratio based Which of the following are required for WAN ISP Failover and Load balancing?(Select all that apply) - ANSWER-A second ISP connection and Placing each WAN on separate subnets What does a WAN Failover solution enable?(Select all that apply) - ANSWERMaintaining a persistent connection for the WAN port traffic by failing over to the secondary WAN port and Directing redundant routes to one or more secondary service providers In the Event Logs, which of the following will generate a log message for any dropped packets? - ANSWER-The action for the policy is set to reset/drop What type of certificate store be used to install the certificate? - ANSWER-Trusted Root Certification Authorities What is the SonicOS navigation path to begin configuring the VPN on the firewall? - ANSWER-Manage>Connectivity>VPN What type of object is created to configure a VPN host when implementing a Site-to-site VPN? - ANSWER-Network Address Object What is the default encryption method for both of the IKE phases when configuring a VPN on the firewall? - ANSWER-SHA1 Which feature facilitates the setup and deployment of multiple global VPN clients? - ANSWER-Group VPN Policies What does the LDAP server provide to allow or deny user authorization? - ANSWER- Active Directory Membership Which group of Security Services uses the SonicWall Deep Packet Inspection engine? - ANSWER-IPS, GAV, and Anti-Spyware Which of the following are SonicWall's Advanced Threat Protection features?(Select all thet apply) - ANSWER-Deep Packet Inspection and Geo-IP