- CORRECT ANSWER: - Latest Update - Questions and 100% Verified Cor...

SNSP Exam - Best Practices and other Basics Latest Update - Questions and 100% Verified Correct Answers Guaranteed A+

- CORRECT ANSWER:

High usage on the control plane (Core0) can cause what issues - CORRECT ANSWER:

Sluggishness on the GUI, inability to manage the SW, Reboots and other things

How can you block files containing multiple levels of zip and/or gzip compression - CORRECT ANSWER: In GAV Settings, enable Block files with multiple levels of zip/gzip compression

How do you access the Connection Logs - CORRECT ANSWER: Investigate->Logs-

>Connnection Logs

How do you change the value of MTU - CORRECT ANSWER: In increments of 8 bytes

How does the firewall use DNS or NetBIOS in log reports - CORRECT ANSWER: To

resolve IP addresses to server names and stored the names and address pairs in a cache to assist future lookups

If a host on the network is infected with Malware what generally happens - CORRECT

ANSWER: The host will often open at random 100s or 1000s of connections to the

Internet or internal resources

If you do not plan on using BWM, should it still be enabled - CORRECT ANSWER: No

If you enable Always authenticate server for decrypted connections in DPI-SSL/TLS Client setting, what else should you enable? - CORRECT ANSWER: Skip CFS 1 / 2

Category‐based Exclusion option under DPI-SSL/TLS Server > Common Name settings to exclude a particular domain or domains from this global authenticate option. This is useful to override any server authentication‐related failures of trusted sites.

If you enable Decrement IP TTL for Forwarded traffic, what happens - CORRECT ANSWER: It decreases the TTL value for packets that have been forwarded but in the network for a significant time

If you enable Firewall Rule Based connections under GEOIP Filter settings what should

you also enable - CORRECT ANSWER: Any rules for WAN-WAN, WAN-LAN and LAN-

WAN should have GEOIP filter enabled specifically

If you would like to create a custom control port for FTP traffic, how would you do that -

CORRECT ANSWER: Under Firewall Settings->Advanced Settings->Dynamic Port-

>Enable FTP Transformations for TCP Port in Service Object

MTU stands for what - CORRECT ANSWER: Maximum Transmission Unit

On DSL and cable connections is the MTU size generally lower or higher - CORRECT

ANSWER: Lower

To avoid routing issues of X1 what should you ensure - CORRECT ANSWER: It's

assigned with a valid non-zero IP address or configuring for DHCP or PPPoE

True or False BotNet Filter can be enabled at the Access Rule level - CORRECT

ANSWER: True

True or False: All GAV protocol options should be checked for both inbound and

outbound inspection - CORRECT ANSWER: True

True or False: All Sonicwalls have multiple CPU cores - CORRECT ANSWER: True

• / 2