1|Page
SonicWall SNSA 7 Exam Preparation Newest 2025/2026 Complete
Questions And Correct Answers (Verified Answers)|Already Graded
A+
SonicWALL GAV includes advanced decompression technology that can
automatically decompress and scan files on a per packet basis to search for viruses
and malware.
-True
-False - CORRECT ANSWER=-True
The SonicWALL security appliance maintains an Event log for tracking potential
security threats.
-True
-False - CORRECT ANSWER=-True
Which Security Services of the SonicWALL security appliance use the
SonicWALL Deep Packet Inspection engine?
-IPS, GAV, Anti-Spyware, and Viewpoint
-IPS, Anti-Spyware, Content Filtering
-IPS, GAV, and Anti-Spyware
-Global VPN Client - CORRECT ANSWER=-IPS, GAV, and Anti-Spyware
In order for SonicWALL's Deep Packet Inspection engine to provide protection,
where must GAV, IPS, and/or Gateway Anti-Spyware be configured?
,2|Page
-Firewall rules
-Enforced in the Zones and enabled in security services
-Address objects
-Zones
-NAT policies and firewall rules - CORRECT ANSWER=-Zones
Which of the following LB/Failover methods would be selected if an administrator
wanted to specify how much outbound traffic is sent through the primary and
secondary WAN interfaces?
-Active/Passive
-Ratio based
-Round Robin
-Spill-Over based - CORRECT ANSWER=-Ratio based
How does the SonicWALL maintain persistence with outbound load balancing?
-SSL Session ID
-Source IP and Destination IP
-Source and Destination Port
-Session Cookies - CORRECT ANSWER=-Source IP and Destination IP
One requirement of WAN ISP Failover and Load balancing is?
,3|Page
-Twin-ax cables
-Standard OS
-A second ISP connection
-Cross-Over cable - CORRECT ANSWER=-A second ISP connection
When WAN failover occurs, the firewall re-establishes all sessions using the new
WAN interface with no traffic interruption thanks to the stored and tracked session
states.
-True
-False - CORRECT ANSWER=-False
Besides Probe Monitoring, one requirement of WAN ISP Failover and Load
balancing is?
-Static IP Addresses on both WAN Interfaces
-Twin-ax cables
-Available Interface that can be configured as a secondary WAN
-Standard OS - CORRECT ANSWER=-Available Interface that can be configured
as a secondary WAN
The Company's security policy is to only allow WWW browsing by all internal
users; no other internet traffic is permitted. Assuming that you are allowing DNS,
what are the "Best Practices" firewall rules to accomplish this. Assume the
following column headings:
, 4|Page
(Select the one best answer)
--LAN > WAN(Intersection) - Any(Source) - Any(Destination) - HTTP(Service) -
Allow(Action) - All(Users)
--WAN > LAN(Intersection) - Any(Source) - Any(Destination) - DNS(Service) -
Allow(Action) - All(Users)
--WAN > WAN(Intersection) - Any(Source) -
Any(Destination) - Any(Service) - Deny(Action) - All(Users)
--LAN > WAN(Intersection) - Any(Source) - Any(Destination) - Any(Service) -
Allow(Action) - All(Users)
--WAN > LAN(Intersection) - Any(Source) - Any(Destination) - HTTP(Service) -
Allow(Action) - All(Users) - CORRECT ANSWER=--LAN > WAN(Intersection)
- Any(Source) - Any(Destination) - HTTP(Service) - Allow(Action) - All(Users)
Which of the following configurations takes precedence?
-Private NAT rules on DMZ
-Outbound WAN Load Balancing
-Global Public NAT rules
-Outbound Policy Based Route - CORRECT ANSWER=-Outbound WAN Load
Balancing
SonicWall SNSA 7 Exam Preparation Newest 2025/2026 Complete
Questions And Correct Answers (Verified Answers)|Already Graded
A+
SonicWALL GAV includes advanced decompression technology that can
automatically decompress and scan files on a per packet basis to search for viruses
and malware.
-True
-False - CORRECT ANSWER=-True
The SonicWALL security appliance maintains an Event log for tracking potential
security threats.
-True
-False - CORRECT ANSWER=-True
Which Security Services of the SonicWALL security appliance use the
SonicWALL Deep Packet Inspection engine?
-IPS, GAV, Anti-Spyware, and Viewpoint
-IPS, Anti-Spyware, Content Filtering
-IPS, GAV, and Anti-Spyware
-Global VPN Client - CORRECT ANSWER=-IPS, GAV, and Anti-Spyware
In order for SonicWALL's Deep Packet Inspection engine to provide protection,
where must GAV, IPS, and/or Gateway Anti-Spyware be configured?
,2|Page
-Firewall rules
-Enforced in the Zones and enabled in security services
-Address objects
-Zones
-NAT policies and firewall rules - CORRECT ANSWER=-Zones
Which of the following LB/Failover methods would be selected if an administrator
wanted to specify how much outbound traffic is sent through the primary and
secondary WAN interfaces?
-Active/Passive
-Ratio based
-Round Robin
-Spill-Over based - CORRECT ANSWER=-Ratio based
How does the SonicWALL maintain persistence with outbound load balancing?
-SSL Session ID
-Source IP and Destination IP
-Source and Destination Port
-Session Cookies - CORRECT ANSWER=-Source IP and Destination IP
One requirement of WAN ISP Failover and Load balancing is?
,3|Page
-Twin-ax cables
-Standard OS
-A second ISP connection
-Cross-Over cable - CORRECT ANSWER=-A second ISP connection
When WAN failover occurs, the firewall re-establishes all sessions using the new
WAN interface with no traffic interruption thanks to the stored and tracked session
states.
-True
-False - CORRECT ANSWER=-False
Besides Probe Monitoring, one requirement of WAN ISP Failover and Load
balancing is?
-Static IP Addresses on both WAN Interfaces
-Twin-ax cables
-Available Interface that can be configured as a secondary WAN
-Standard OS - CORRECT ANSWER=-Available Interface that can be configured
as a secondary WAN
The Company's security policy is to only allow WWW browsing by all internal
users; no other internet traffic is permitted. Assuming that you are allowing DNS,
what are the "Best Practices" firewall rules to accomplish this. Assume the
following column headings:
, 4|Page
(Select the one best answer)
--LAN > WAN(Intersection) - Any(Source) - Any(Destination) - HTTP(Service) -
Allow(Action) - All(Users)
--WAN > LAN(Intersection) - Any(Source) - Any(Destination) - DNS(Service) -
Allow(Action) - All(Users)
--WAN > WAN(Intersection) - Any(Source) -
Any(Destination) - Any(Service) - Deny(Action) - All(Users)
--LAN > WAN(Intersection) - Any(Source) - Any(Destination) - Any(Service) -
Allow(Action) - All(Users)
--WAN > LAN(Intersection) - Any(Source) - Any(Destination) - HTTP(Service) -
Allow(Action) - All(Users) - CORRECT ANSWER=--LAN > WAN(Intersection)
- Any(Source) - Any(Destination) - HTTP(Service) - Allow(Action) - All(Users)
Which of the following configurations takes precedence?
-Private NAT rules on DMZ
-Outbound WAN Load Balancing
-Global Public NAT rules
-Outbound Policy Based Route - CORRECT ANSWER=-Outbound WAN Load
Balancing
