SonicWall SNSA Complete Exam
Study Questions with Accurate
Answers | Brand New Version
1. What is the default type of Authentication? - ANSWER SHA1
2. Where should certificates be stored? - ANSWER Trusted Root Certificate
Authorities
3. True or False: Proxy server must be in the WAN or DMZ? - ANSWER
TRUE
4. What are two probe methods that you can use for logical probes? (select all
that apply) - ANSWER Ping and TCP
5. What are the key components of a CFS policy?(Select all that apply) -
ANSWER Block
Passphrase (Authenticate)
confirm
Bandwidth Management
6. Which Logs panel depicts the Eicar test virus file download? - ANSWER
Investigate > Logs > Event Logs
7. A Site-to-Site VPN can allow simultaneous access to multiples remote
servers - ANSWER True
,8. Which statement about SonicWall Gateway Anti-Virus service is correct? -
ANSWER -It inspects all traffic that traverse the Sonicwall Gateway.
-It inspects multiple application protocols, as well as generic TCP streams and
compressed traffic.
-Because Sonicwall GAV does not have to perform reassembly, there are no
file-size limitations imposed by the scanning engine.
-Decompression are also performed on a single pass, per packet basic.
9. Which of the following sentences is correct about HA configuration? -
ANSWER High Availability does not support Portshield interfaces and
Native Bridge mode.
10.What type of NAT policies does a Public Server wizard create? - ANSWER
Inbound, Outbound, and Loopback NAT Policies
11.Which of the following are included in the output of a network probe?
(Select all that apply) - ANSWER Name, Probe Target, Probe Type,
Gateway, Local IP, Interface, Interval, Port, Response Timeout, Failure
Threshold, Success Threshold, All Must Respond, RST is failure
12.Which diagnostic utility on the SonicWall firewall allows you to look at the
contents of IP packets traversing tha firewall? - ANSWER Packet Monitor
13.What are two route policy modes that are enable by Dynamic Routing? -
ANSWER Advanced Routing and Simple RIP Advertisement
14.Which configuration panel in the Setup Guide is used to configure the
firewall as the default gateway? - ANSWER LAN Settings Panel/ Page
, 15.Which Load Balancing/Failover method helps specify the amount of
outbound traffic to be sent through the primary and secondary WAN
interfaces? - ANSWER Ratio Load Balancing Type
16.Which of the following are required for WAN ISP Failover and Load
balancing?(Select all that apply) - ANSWER A second ISP connection and
Placing each WAN on separate subnets
17.What does a WAN Failover solution enable?(Select all that apply) -
ANSWER Maintaining a persistent connection for the WAN port traffic by
failing over to the secondary WAN port and Directing redundant routes to
one or more secondary service providers
18.In the Event Logs, which of the following will generate a log message for
any dropped packets? - ANSWER Manage > Logs & reporting> logs
Settings > Base Setup > Expand Network Category > ICMP Packets
Dropped, select the box under the GUI column to show in the Event Logs
19.What type of certificate store be used to install the certificate? - ANSWER
Trusted Root Certification Authorities
20.What is the SonicOS navigation path to begin configuring the VPN on the
firewall? - ANSWER Manage >> under connectivity >> VPN
21.What type of object is created to configure a VPN host when implementing a
Site-to-site VPN? - ANSWER An Address Object type Network
22.What is the default encryption method for both of the IKE phases when
configuring a VPN on the firewall? - ANSWER 3DES
Study Questions with Accurate
Answers | Brand New Version
1. What is the default type of Authentication? - ANSWER SHA1
2. Where should certificates be stored? - ANSWER Trusted Root Certificate
Authorities
3. True or False: Proxy server must be in the WAN or DMZ? - ANSWER
TRUE
4. What are two probe methods that you can use for logical probes? (select all
that apply) - ANSWER Ping and TCP
5. What are the key components of a CFS policy?(Select all that apply) -
ANSWER Block
Passphrase (Authenticate)
confirm
Bandwidth Management
6. Which Logs panel depicts the Eicar test virus file download? - ANSWER
Investigate > Logs > Event Logs
7. A Site-to-Site VPN can allow simultaneous access to multiples remote
servers - ANSWER True
,8. Which statement about SonicWall Gateway Anti-Virus service is correct? -
ANSWER -It inspects all traffic that traverse the Sonicwall Gateway.
-It inspects multiple application protocols, as well as generic TCP streams and
compressed traffic.
-Because Sonicwall GAV does not have to perform reassembly, there are no
file-size limitations imposed by the scanning engine.
-Decompression are also performed on a single pass, per packet basic.
9. Which of the following sentences is correct about HA configuration? -
ANSWER High Availability does not support Portshield interfaces and
Native Bridge mode.
10.What type of NAT policies does a Public Server wizard create? - ANSWER
Inbound, Outbound, and Loopback NAT Policies
11.Which of the following are included in the output of a network probe?
(Select all that apply) - ANSWER Name, Probe Target, Probe Type,
Gateway, Local IP, Interface, Interval, Port, Response Timeout, Failure
Threshold, Success Threshold, All Must Respond, RST is failure
12.Which diagnostic utility on the SonicWall firewall allows you to look at the
contents of IP packets traversing tha firewall? - ANSWER Packet Monitor
13.What are two route policy modes that are enable by Dynamic Routing? -
ANSWER Advanced Routing and Simple RIP Advertisement
14.Which configuration panel in the Setup Guide is used to configure the
firewall as the default gateway? - ANSWER LAN Settings Panel/ Page
, 15.Which Load Balancing/Failover method helps specify the amount of
outbound traffic to be sent through the primary and secondary WAN
interfaces? - ANSWER Ratio Load Balancing Type
16.Which of the following are required for WAN ISP Failover and Load
balancing?(Select all that apply) - ANSWER A second ISP connection and
Placing each WAN on separate subnets
17.What does a WAN Failover solution enable?(Select all that apply) -
ANSWER Maintaining a persistent connection for the WAN port traffic by
failing over to the secondary WAN port and Directing redundant routes to
one or more secondary service providers
18.In the Event Logs, which of the following will generate a log message for
any dropped packets? - ANSWER Manage > Logs & reporting> logs
Settings > Base Setup > Expand Network Category > ICMP Packets
Dropped, select the box under the GUI column to show in the Event Logs
19.What type of certificate store be used to install the certificate? - ANSWER
Trusted Root Certification Authorities
20.What is the SonicOS navigation path to begin configuring the VPN on the
firewall? - ANSWER Manage >> under connectivity >> VPN
21.What type of object is created to configure a VPN host when implementing a
Site-to-site VPN? - ANSWER An Address Object type Network
22.What is the default encryption method for both of the IKE phases when
configuring a VPN on the firewall? - ANSWER 3DES
