SNSA Exam Guide Questions With Correct Answers

Capture ATP - Answer Discover and stop zero-day and unknown attacks RFDPI - Answer Effective security analysis of every bit of traffic in real time without added latency TLS - Answer Protect Internet Communications by encrypting the traffic Content Filtering - Answer granular web policies to restrict objectionable, unproductive, or unsecure web content T or F - SonicOS 7's modern and intuitive user interface features intelligent device dashboards with actionable alerts, redesigned topologies and simplified policy creation and management - Answer True T or F - An administrator can be logged off when pre-empted by another administrator or can be dropped into a non-config mode. - Answer TRUE T or F - Sonicwall firewalls can interoperate with any x509v3 certificates issued by 3rd party CA authorities - Answer TRUE Which SNMP version does Sonicwall Support - Answer SNMPv1, SNMPv2, SNMPv3 T OR F - You can back up the firmware automatically in a recurring mode to your local server - Answer False Which feature is used to ensure the firewall licenses are the same as in the respective M account - Answer Synchronize What options are used to pre-empt an administrator logged into the firewall - Answer 1) Drop into Non-config mode 2) Log out What are some of the key features of the Sonicwall Next-Gen firewalls - Answer 1) Flexible deployment 2) Network segmentation 3) Application intelligence and control What are some of the key features of the SonicOS 7 architecture - Answer 1) Simplified integration 2) Advanced protection against encrypted threats 3) Easy, zero-touch deployment 4) TLS 1.3 Two best practices that should be implemented before updating the firewall firmware - Answer 1) Download a settings file locally 2) Use the create backup option built into the firewall space - Answer space Default public server type - Answer Web Server Default Local encryption cipher in the security settings of the Sonciwall VPN - Answer 3DES Maximum numbers of SD-WAN Interface Group Members - Answer 10 T or F - The public server guide assigns the server automatically to the zone to which its IP address belongs - Answer True T or F - When configuring a site to site policy, the local network option must match the destination network on the other side of the tunnel, in order to avoid tunnel negotiation errors or even a total failure - Answer TRUE Quick Config Guide options with the tasks that they enable - Answer 1. Public Server - Providing public access to an internal server 2. VPN - Configuring a new site to site policy 3. SD-WAN - Configuring software based control over the Internet what is the default public serer type - Answer Web Server space - Answer space T or F - The Route Mode feature provides an alternative for NAT to route traffic between separate public IP address ranges - Answer TRUE What is the default IP version setting for sending or receiving the DNS proxy packets between the firewall and the DNS servers - Answer IPv4 to IPv4 Which feature is a messaging protocol that is used to build a cache of dynamic entries for IPv6 devices on the firewall - Answer Neighbor Discovery Which feature prevents ARP poisoning of connected machines - Answer ARP watch T or F - Sonicwall DHCP server options support standards as defined primarily in RFC 2131 and RFC 2132 - Answer True How many web proxy servers can be configured in the Sonicwall firewall - Answer 32