SNSA SonicOS 7 Exam Questions With 100% Correct Answers

What type of specific and advanced threat protection features are enabled by sonicos? - Answer Sandboxing SSL/SSH/TLS decryption and inspection Up to how many auto-scheduled cloud config backups are supported for each firmware version in the sw fw - Answer 3 Which panel of the SonicOS management interface is used to define password restrictions - Answer manageappliancebase settingslogin security T/F: The HTTP web-based management option in sonicos is disabled by default - Answer True T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rd-party CA authorities - Answer True Which of the following is a built-in fw system schedule? -work hours -overtime -interim hours -off hours - Answer work hours Which setting when enabled required a strong password setting to avoid potential security vulnerabilities -allow https on this wan interface -allow ping on this wan interface - Answer allow https on this wan interface What is the default public server type - Answer web server VPN wizard: What local network is selected by default in the firewall - Answer firewall subnets Which of the following network applications are available by default in the app rule guide to create policies? -ftp file transfer -internet telephony -smtp email -web access -streaming multimedia - Answer -ftp file transfer -smtp email -web access Which advanced interface setting can allow initial packets or response packets to pass through other interfaces - Answer asymmetric route support What is the default IP version setting for sending or receiving the DNS proxy packets between the firewall and the dns servers? - Answer ipv4 to ipv4 Which option is a messaging protocol that is used to build a cache of dynamic entries for ipv6 devices? -arp -neighbor discovery -mac-ip anti spoof -dhcp server -ip helper -web proxy -dynamic dns - Answer neighbor discovery What MAC-IP AnTI-SPOOF network setting prevents any spoofing of the egress packets by a bad device or unwanted ARP packets - Answer ARP Lock What type of info does the DHCP server help distribute to network clients? - Answer Gateway address, Ip address, dns server settings What DDNS providers are supported in SonicOS? - Answer noIP.com What user authentication method provides centralized authentication and authorization? - Answer RADIUS What authentication method is recommended for a relatively smaller number of users? - Answer Local users What type of SSO method identifies users based on the workstation ip address - Answer SSO agent Match the user authenication methods with their respective features 1 Local user database 2 RADIUS 3 LDAP A Scalable user-auth method B adds extra layer of security for a large # of users C suitable for small # of users - Answer Local user database- suitable for small # of users RADIUS- Adds extra layer of security LDAP- Scalable What types of privileges can an admin be assigned to? - Answer Full/Config, Full/Non Config, Read-Only T/F: The default guest profile cannot be deleted - Answer True What setting is enabled to prioritize VPN traffic over static routes? - Answer Allow VPN path to take precendence RIPv2: What option is a common mechanism for preventing routing loops? - Answer Split Horizon Which feature is used to configure the event log attributes globally, using flexible match conditions? - Answer Go to configure log Which feature provides info about the applied filters -src ip -dest ip -dest port -protocol -flow type -src int -dest int -filter logic - Answer filter logic Which client cf even depicts a higher priority level below -warning msg -critical msg - Answer -critical msg