SNSA ACTUAL EXAM PAPER 2026
QUESTIONS WITH SOLUTIONS GRADED A+
●● Up to how many auto-scheduled cloud config backups are supported
for each firmware version in the sw fw.
Answer: 3
●● Which panel of the SonicOS management interface is used to define
password restrictions.
Answer: manage>appliance>base settings>login security
●● T/F: The HTTP web-based management option in sonicos is disabled
by default.
Answer: True
●● T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rd-
party CA authorities.
Answer: True
●● Which of the following is a built-in fw system schedule?
-work hours
-overtime
-interim hours
,-off hours.
Answer: work hours
●● Which setting when enabled required a strong password setting to
avoid potential security vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface.
Answer: allow https on this wan interface
●● What is the default public server type.
Answer: web server
●● VPN wizard: What local network is selected by default in the
firewall.
Answer: firewall subnets
●● Which of the following network applications are available by default
in the app rule guide to create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
-streaming multimedia.
,Answer: -ftp file transfer
-smtp email
-web access
●● Which advanced interface setting can allow initial packets or
response packets to pass through other interfaces.
Answer: asymmetric route support
●● What is the default IP version setting for sending or receiving the
DNS proxy packets between the firewall and the dns servers?.
Answer: ipv4 to ipv4
●● Which option is a messaging protocol that is used to build a cache of
dynamic entries for ipv6 devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
-dynamic dns.
Answer: neighbor discovery
, ●● What MAC-IP AnTI-SPOOF network setting prevents any spoofing
of the egress packets by a bad device or unwanted ARP packets.
Answer: ARP Lock
●● What type of info does the DHCP server help distribute to network
clients?.
Answer: Gateway address, Ip address, dns server settings
●● What DDNS providers are supported in SonicOS?.
Answer: changeip.com
dyn.com
noIP.com
●● What user authentication method provides centralized authentication
and authorization?.
Answer: RADIUS
●● What authentication method is recommended for a relatively smaller
number of users?.
Answer: Local users
●● What type of SSO method identifies users based on the workstation
ip address.
QUESTIONS WITH SOLUTIONS GRADED A+
●● Up to how many auto-scheduled cloud config backups are supported
for each firmware version in the sw fw.
Answer: 3
●● Which panel of the SonicOS management interface is used to define
password restrictions.
Answer: manage>appliance>base settings>login security
●● T/F: The HTTP web-based management option in sonicos is disabled
by default.
Answer: True
●● T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rd-
party CA authorities.
Answer: True
●● Which of the following is a built-in fw system schedule?
-work hours
-overtime
-interim hours
,-off hours.
Answer: work hours
●● Which setting when enabled required a strong password setting to
avoid potential security vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface.
Answer: allow https on this wan interface
●● What is the default public server type.
Answer: web server
●● VPN wizard: What local network is selected by default in the
firewall.
Answer: firewall subnets
●● Which of the following network applications are available by default
in the app rule guide to create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
-streaming multimedia.
,Answer: -ftp file transfer
-smtp email
-web access
●● Which advanced interface setting can allow initial packets or
response packets to pass through other interfaces.
Answer: asymmetric route support
●● What is the default IP version setting for sending or receiving the
DNS proxy packets between the firewall and the dns servers?.
Answer: ipv4 to ipv4
●● Which option is a messaging protocol that is used to build a cache of
dynamic entries for ipv6 devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
-dynamic dns.
Answer: neighbor discovery
, ●● What MAC-IP AnTI-SPOOF network setting prevents any spoofing
of the egress packets by a bad device or unwanted ARP packets.
Answer: ARP Lock
●● What type of info does the DHCP server help distribute to network
clients?.
Answer: Gateway address, Ip address, dns server settings
●● What DDNS providers are supported in SonicOS?.
Answer: changeip.com
dyn.com
noIP.com
●● What user authentication method provides centralized authentication
and authorization?.
Answer: RADIUS
●● What authentication method is recommended for a relatively smaller
number of users?.
Answer: Local users
●● What type of SSO method identifies users based on the workstation
ip address.
