©BRAINBARTER 2024/2025
SNSP Exam - Best Practices and other Basics
Exam Questions With Verified Answers.
Which interfaces cannot be configured as WAN interfaces - answer✔X0 and MGMT
What is the default configuration of X1 - answer✔Static mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - answer✔It's assigned with a valid non-
zero IP address or configuring for DHCP or PPPoE
True or False: It is recommended to disassociate the from the WAN zone if not in use -
answer✔True - Unassigned
True or False: You should open HTTPS Mgmt up on the WAN interface - answer✔False
True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option when
configuring HTTPM management - answer✔False
What can result from incorrect duplex settings on the WAN - answer✔Inconsistent Internet
connection, slow throughput, dropped packets, and inability to negotiate to an ISP connection
What settings are default on the advanced tab of a WAN interface - answer✔Link Speed to Auto
Negotiate
User Default MAC address
Enable Flow Reporting
Fragment non-VPN outbound packets larger than this Interfaces MTU
MTU stands for what - answer✔Maximum Transmission Unit
On DSL and cable connections is the MTU size generally lower or higher - answer✔Lower
How do you change the value of MTU - answer✔In increments of 8 bytes
True or False: Confirm that Ignore Don't Fragment DF bit is unchecked - answer✔True
True or False: Even if you only have 1 WAN connection you should still enable "Enable Load
Balancing" - answer✔True
, ©BRAINBARTER 2024/2025
Why must you enable load balancing with only 1 WAN connection - answer✔To access the LB
Groups and LB Statistics sections of Failover and Load Balancing configuration
Which Probe menu should you select when configuring WAN probes - answer✔Probe Succeeds
when either main or alternate target responds
Why should you always use X0 as a backup heartbeat link - answer✔Because it is hardcoded in
SonicOS
True or False: You should always configure X0's monitoring IP - answer✔True
What happens if the WAN interface does not have the monitoring IP configured - answer✔The
secondary/Standby unit directs the path to the Internet for GRID and License Manager
communication
True or False: The secondary unit is licensed automatically - answer✔False
Why would you want to use Virtual MAC with an HA pair - answer✔To reduce ARP
convergence time during a failover
When using an HA pair what should you ensure is disabled on the switchports on the switch -
answer✔Spanning Tree Protocol which can cause flapping effects when virtual MAC is seen on
multiple interfaces
True or False: Ensure all security services are enabled on proper zones - answer✔True
If you do not plan on using BWM, should it still be enabled - answer✔No
What settings use BWM - answer✔Access Rules with BWM setting use the throttles, interface
BWM settings, and priority queues
True or False: Do not disable Allow Fragmented Packets on access rules - answer✔True
What application firewall rules should be created to prevent malware - answer✔Rules that
restrict DNS, SSH, and Proxy-Access applications
What can malicious applications leverage to redirect traffic to illegitmate sites - answer✔DNS
Cache Poisoning
True or False: You should create an Address Object and AppRule to restrict the DNS protocol to
only the Trusted DNS Host - answer✔True
What is the recommend way to restrict SSH Protocol - answer✔By using an Application
Firewall rule since it's possible to deviate from the standard SSH TCP 22 configuration
What additional CFS categories should be blocked - answer✔CAT28 Hacking/Proxy Avoidence
SNSP Exam - Best Practices and other Basics
Exam Questions With Verified Answers.
Which interfaces cannot be configured as WAN interfaces - answer✔X0 and MGMT
What is the default configuration of X1 - answer✔Static mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - answer✔It's assigned with a valid non-
zero IP address or configuring for DHCP or PPPoE
True or False: It is recommended to disassociate the from the WAN zone if not in use -
answer✔True - Unassigned
True or False: You should open HTTPS Mgmt up on the WAN interface - answer✔False
True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option when
configuring HTTPM management - answer✔False
What can result from incorrect duplex settings on the WAN - answer✔Inconsistent Internet
connection, slow throughput, dropped packets, and inability to negotiate to an ISP connection
What settings are default on the advanced tab of a WAN interface - answer✔Link Speed to Auto
Negotiate
User Default MAC address
Enable Flow Reporting
Fragment non-VPN outbound packets larger than this Interfaces MTU
MTU stands for what - answer✔Maximum Transmission Unit
On DSL and cable connections is the MTU size generally lower or higher - answer✔Lower
How do you change the value of MTU - answer✔In increments of 8 bytes
True or False: Confirm that Ignore Don't Fragment DF bit is unchecked - answer✔True
True or False: Even if you only have 1 WAN connection you should still enable "Enable Load
Balancing" - answer✔True
, ©BRAINBARTER 2024/2025
Why must you enable load balancing with only 1 WAN connection - answer✔To access the LB
Groups and LB Statistics sections of Failover and Load Balancing configuration
Which Probe menu should you select when configuring WAN probes - answer✔Probe Succeeds
when either main or alternate target responds
Why should you always use X0 as a backup heartbeat link - answer✔Because it is hardcoded in
SonicOS
True or False: You should always configure X0's monitoring IP - answer✔True
What happens if the WAN interface does not have the monitoring IP configured - answer✔The
secondary/Standby unit directs the path to the Internet for GRID and License Manager
communication
True or False: The secondary unit is licensed automatically - answer✔False
Why would you want to use Virtual MAC with an HA pair - answer✔To reduce ARP
convergence time during a failover
When using an HA pair what should you ensure is disabled on the switchports on the switch -
answer✔Spanning Tree Protocol which can cause flapping effects when virtual MAC is seen on
multiple interfaces
True or False: Ensure all security services are enabled on proper zones - answer✔True
If you do not plan on using BWM, should it still be enabled - answer✔No
What settings use BWM - answer✔Access Rules with BWM setting use the throttles, interface
BWM settings, and priority queues
True or False: Do not disable Allow Fragmented Packets on access rules - answer✔True
What application firewall rules should be created to prevent malware - answer✔Rules that
restrict DNS, SSH, and Proxy-Access applications
What can malicious applications leverage to redirect traffic to illegitmate sites - answer✔DNS
Cache Poisoning
True or False: You should create an Address Object and AppRule to restrict the DNS protocol to
only the Trusted DNS Host - answer✔True
What is the recommend way to restrict SSH Protocol - answer✔By using an Application
Firewall rule since it's possible to deviate from the standard SSH TCP 22 configuration
What additional CFS categories should be blocked - answer✔CAT28 Hacking/Proxy Avoidence
