SNSA EXAM LATEST 2023 REAL EXAM 100
QUESTIONS AND CORRECT
ANSWERS(VERIFIED ANSWERS)|AGRADE
What type of specific and advanced threat protection features are enabled
by sonicos? - correct answer Sandboxing SSL/SSH/TLS decryption and
inspection
Up to how many auto-scheduled cloud config backups are supported for each
firmware version in the sw fw - correct answer 3
Which panel of the SonicOS management interface is used to define
password
restrictions - correct answer manage>appliance>base settings>login security
T/F: The HTTP web-based management option in sonicos is disabled by
default - correct answer True
T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rdparty
CA authorities - correct answer True
Which of the following is a built-in fw system schedule?
-work
hours
-
overtime
-interim
hours
-off hours - correct answer work hours
Which setting when enabled required a strong password setting to avoid
potential security vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface - correct answer allow https on this wan
interface
What is the default public server type - correct answer web server
VPN wizard: What local network is selected by default in the firewall -
correct answer firewall subnets
Which of the following network applications are available by default in the
app rule guide to create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
-streaming multimedia - correct answer -ftp file transfer
-smtp email
-web access
SNSA EXAM LATEST 2023 REAL EXAM 100 QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) AGRADE
,SNSA EXAM LATEST 2023 REAL EXAM 100
QUESTIONS AND CORRECT
ANSWERS(VERIFIED ANSWERS)|AGRADE
Which advanced interface setting can allow initial packets or response
packets to pass through other interfaces - correct answer asymmetric route
support
What is the default IP version setting for sending or receiving the DNS proxy
packets between the firewall and the dns servers? - correct answer ipv4 to
ipv4
Which option is a messaging protocol that is used to build a cache of
dynamic entries for ipv6 devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
-dynamic dns - correct answer neighbor discovery
What MAC-IP AnTI-SPOOF network setting prevents any spoofing of the
egress packets by a bad device or unwanted ARP packets - correct answer
ARP Lock
What type of info does the DHCP server help distribute to network clients?
- correct answer Gateway address, Ip address, dns server settings
What DDNS providers are supported in SonicOS? - correct answer
changeip.com dyn.com noIP.com
What user authentication method provides centralized authentication and
authorization
?
- correct answer RADIUS
What authentication method is recommended for a relatively smaller
number of users? - correct answer Local users
What type of SSO method identifies users based on the workstation ip
address - correct answer SSO agent
Match the user authenication methods with their respective
features 1 Local user database
2RADIUS
3LDAP
A Scalable user-auth method
B adds extra layer of security for a large # of users
C suitable for small # of users - correct answer Local user database-
suitable for small # of users
SNSA EXAM LATEST 2023 REAL EXAM 100 QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) AGRADE
, SNSA EXAM LATEST 2023 REAL EXAM 100
QUESTIONS AND CORRECT
RADIUS- Adds extra layer of security ANSWERS(VERIFIED
ANSWERS)|AGRADE
SNSA EXAM LATEST 2023 REAL EXAM 100 QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) AGRADE
QUESTIONS AND CORRECT
ANSWERS(VERIFIED ANSWERS)|AGRADE
What type of specific and advanced threat protection features are enabled
by sonicos? - correct answer Sandboxing SSL/SSH/TLS decryption and
inspection
Up to how many auto-scheduled cloud config backups are supported for each
firmware version in the sw fw - correct answer 3
Which panel of the SonicOS management interface is used to define
password
restrictions - correct answer manage>appliance>base settings>login security
T/F: The HTTP web-based management option in sonicos is disabled by
default - correct answer True
T/F: Sw FWs can interoperate with any x509v3 certs issued by a 3rdparty
CA authorities - correct answer True
Which of the following is a built-in fw system schedule?
-work
hours
-
overtime
-interim
hours
-off hours - correct answer work hours
Which setting when enabled required a strong password setting to avoid
potential security vulnerabilities
-allow https on this wan interface
-allow ping on this wan interface - correct answer allow https on this wan
interface
What is the default public server type - correct answer web server
VPN wizard: What local network is selected by default in the firewall -
correct answer firewall subnets
Which of the following network applications are available by default in the
app rule guide to create policies?
-ftp file transfer
-internet telephony
-smtp email
-web access
-streaming multimedia - correct answer -ftp file transfer
-smtp email
-web access
SNSA EXAM LATEST 2023 REAL EXAM 100 QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) AGRADE
,SNSA EXAM LATEST 2023 REAL EXAM 100
QUESTIONS AND CORRECT
ANSWERS(VERIFIED ANSWERS)|AGRADE
Which advanced interface setting can allow initial packets or response
packets to pass through other interfaces - correct answer asymmetric route
support
What is the default IP version setting for sending or receiving the DNS proxy
packets between the firewall and the dns servers? - correct answer ipv4 to
ipv4
Which option is a messaging protocol that is used to build a cache of
dynamic entries for ipv6 devices?
-arp
-neighbor discovery
-mac-ip anti spoof
-dhcp server
-ip helper
-web proxy
-dynamic dns - correct answer neighbor discovery
What MAC-IP AnTI-SPOOF network setting prevents any spoofing of the
egress packets by a bad device or unwanted ARP packets - correct answer
ARP Lock
What type of info does the DHCP server help distribute to network clients?
- correct answer Gateway address, Ip address, dns server settings
What DDNS providers are supported in SonicOS? - correct answer
changeip.com dyn.com noIP.com
What user authentication method provides centralized authentication and
authorization
?
- correct answer RADIUS
What authentication method is recommended for a relatively smaller
number of users? - correct answer Local users
What type of SSO method identifies users based on the workstation ip
address - correct answer SSO agent
Match the user authenication methods with their respective
features 1 Local user database
2RADIUS
3LDAP
A Scalable user-auth method
B adds extra layer of security for a large # of users
C suitable for small # of users - correct answer Local user database-
suitable for small # of users
SNSA EXAM LATEST 2023 REAL EXAM 100 QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) AGRADE
, SNSA EXAM LATEST 2023 REAL EXAM 100
QUESTIONS AND CORRECT
RADIUS- Adds extra layer of security ANSWERS(VERIFIED
ANSWERS)|AGRADE
SNSA EXAM LATEST 2023 REAL EXAM 100 QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) AGRADE
