SNSA UPDATED ACTUAL Exam
Questions and CORRECT Answers
What type of specific and advanced threat protection features are enabled by sonicos? -
CORRECT ANSWER - Sandboxing
SSL/SSH/TLS decryption and inspection
Up to how many auto-scheduled cloud config backups are supported for each firmware version
in the sw fw - CORRECT ANSWER - 3
Which panel of the SonicOS management interface is used to define password restrictions -
CORRECT ANSWER - manage>appliance>base settings>login security
T/F: The HTTP web-based management option in sonicos is disabled by default - CORRECT
ANSWER - True
T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rd-party CA authorities -
CORRECT ANSWER - True
Which of the following is a built-in fw system schedule?
-work hours
-overtime
-interim hours
-off hours - CORRECT ANSWER - work hours
Which setting when enabled required a strong password setting to avoid potential security
vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface - CORRECT ANSWER - allow https on this wan interface
,What is the default public server type - CORRECT ANSWER - web server
VPN wizard: What local network is selected by default in the firewall - CORRECT
ANSWER - firewall subnets
Which of the following network applications are available by default in the app rule guide to
create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
-streaming multimedia - CORRECT ANSWER - -ftp file transfer
-smtp email
-web access
Which advanced interface setting can allow initial packets or response packets to pass through
other interfaces - CORRECT ANSWER - asymmetric route support
What is the default IP version setting for sending or receiving the DNS proxy packets between
the firewall and the dns servers? - CORRECT ANSWER - ipv4 to ipv4
Which option is a messaging protocol that is used to build a cache of dynamic entries for ipv6
devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
, -dynamic dns - CORRECT ANSWER - neighbor discovery
What MAC-IP AnTI-SPOOF network setting prevents any spoofing of the egress packets by a
bad device or unwanted ARP packets - CORRECT ANSWER - ARP Lock
What type of info does the DHCP server help distribute to network clients? - CORRECT
ANSWER - Gateway address, Ip address, dns server settings
What DDNS providers are supported in SonicOS? - CORRECT ANSWER - changeip.com
dyn.com
noIP.com
What user authentication method provides centralized authentication and authorization? -
CORRECT ANSWER - RADIUS
What authentication method is recommended for a relatively smaller number of users? -
CORRECT ANSWER - Local users
What type of SSO method identifies users based on the workstation ip address - CORRECT
ANSWER - SSO agent
Match the user authenication methods with their respective features
1 Local user database
2 RADIUS
3 LDAP
A Scalable user-auth method
B adds extra layer of security for a large # of users
C suitable for small # of users - CORRECT ANSWER - Local user database- suitable for
small # of users
Questions and CORRECT Answers
What type of specific and advanced threat protection features are enabled by sonicos? -
CORRECT ANSWER - Sandboxing
SSL/SSH/TLS decryption and inspection
Up to how many auto-scheduled cloud config backups are supported for each firmware version
in the sw fw - CORRECT ANSWER - 3
Which panel of the SonicOS management interface is used to define password restrictions -
CORRECT ANSWER - manage>appliance>base settings>login security
T/F: The HTTP web-based management option in sonicos is disabled by default - CORRECT
ANSWER - True
T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rd-party CA authorities -
CORRECT ANSWER - True
Which of the following is a built-in fw system schedule?
-work hours
-overtime
-interim hours
-off hours - CORRECT ANSWER - work hours
Which setting when enabled required a strong password setting to avoid potential security
vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface - CORRECT ANSWER - allow https on this wan interface
,What is the default public server type - CORRECT ANSWER - web server
VPN wizard: What local network is selected by default in the firewall - CORRECT
ANSWER - firewall subnets
Which of the following network applications are available by default in the app rule guide to
create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
-streaming multimedia - CORRECT ANSWER - -ftp file transfer
-smtp email
-web access
Which advanced interface setting can allow initial packets or response packets to pass through
other interfaces - CORRECT ANSWER - asymmetric route support
What is the default IP version setting for sending or receiving the DNS proxy packets between
the firewall and the dns servers? - CORRECT ANSWER - ipv4 to ipv4
Which option is a messaging protocol that is used to build a cache of dynamic entries for ipv6
devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
, -dynamic dns - CORRECT ANSWER - neighbor discovery
What MAC-IP AnTI-SPOOF network setting prevents any spoofing of the egress packets by a
bad device or unwanted ARP packets - CORRECT ANSWER - ARP Lock
What type of info does the DHCP server help distribute to network clients? - CORRECT
ANSWER - Gateway address, Ip address, dns server settings
What DDNS providers are supported in SonicOS? - CORRECT ANSWER - changeip.com
dyn.com
noIP.com
What user authentication method provides centralized authentication and authorization? -
CORRECT ANSWER - RADIUS
What authentication method is recommended for a relatively smaller number of users? -
CORRECT ANSWER - Local users
What type of SSO method identifies users based on the workstation ip address - CORRECT
ANSWER - SSO agent
Match the user authenication methods with their respective features
1 Local user database
2 RADIUS
3 LDAP
A Scalable user-auth method
B adds extra layer of security for a large # of users
C suitable for small # of users - CORRECT ANSWER - Local user database- suitable for
small # of users
