SNSA SONICOS 7 ACTUAL LATEST EXAM

SNSA SONICOS 7 ACTUAL LATEST EXAM

SONICWALL NETWORK SECURITY

ADMINISTRATOR (SNSA) FOR SONICOS 7 WITH

300 REAL EXAM QUESTIONS AND CORRECT

VERIFIED ANSWERS (BRAND NEW!!)

The SonicWALL Administrator has modified the default LAN>WAN access rule from "allow" to "deny", blocking all outbound WAN traffic. Which of the

following statements is true: - ANSWER-LAN users cannot surf the internet, but

the appliance can still register with mysonicwall.com and update the UTM signatures

what are the key fetures of sonicwall next-gen virtual firewals? (Select all that apply) -operational complexity -network segmentation -flexible deployment -single-layer security system -application intelligence and control - ANSWER--network segmentation -flexible deployment -application intelligence and control

When creating a site to site VPN, the policy type should be set to? - ANSWER- Site to Site

When creating a Route Based VPN the policy type should be set to? - ANSWER- Tunnel Interface 1 / 4

TACACS+ - ANSWER-Provides separate authentication, authorization and accounting (AAA) services.

The NSM Closed Network Support feature is ideal for customers who run: -

ANSWER-One or more private networks that are **completely shut off** from the outside environment.

Which packet status types are indicated by the Packet Monitor?(Select all tha apply) - ANSWER-Dropped, Forwarded, Consumed

T or F NSM on prem offers large scale centralized management of SonicWall Gen

• devices only? - ANSWER-False

Export formats for snapshot of Packet Monitor - ANSWER-HTML, PCAP, Plain Text

T or F Keep Alive should be enabled on the firewall with the most processing overhead - ANSWER-False (should be on the firewall with the *least* overhead)

The default session time an administrator can be logged into the firewall is? - ANSWER-5 Minutes

What user authentication should be used for groups with more than 1000 users and provides an extra layer of security? - ANSWER-RADIUS

T or F NSM On-Prem requires a separate license for the reporting and analytics features - ANSWER-True

• / 4

T or F Setting the Event Priority level lower than the Logging Level will cause those events to be filtered out from Event Logs. - ANSWER-True

If the Logging Level Filter is defined as Error, which of the following alert messages will also be displayed in the results? (Select all that apply) - ANSWER- Emergency, Alert, Critical

T or F Advanced routing is enabled by default? - ANSWER-True

Which of the following variables are used to configure static routes to forward traffic? (Select all that apply) - ANSWER-Interfaces, Services

Which protocols are supported by the Advanced Routing mode of SonicWall NSv?(Select all that apply) - ANSWER-RIP, OSPFv3

Who among the following can manage Guest Accounts and Sessions? - ANSWER- Guest Administrators

Which of the following are the default user groups to which a new user is automatically added in a SonicWall firewall? (Select all that apply) - ANSWER- Trusted Users, Everyone

Which user authentication methods are available in a SonicWall NSv? (Select all that apply) - ANSWER-RADIUS, LDAP, TACACS, Local User

T or F The default Guest Profile cannot be deleted. - ANSWER-True

What type of mapping does ARP enable? - ANSWER-IP Addresses to MAC Addresses 3 / 4

Which firewall network setting allows the current state of the DHCP leases in the network to be periodically written to Flash? - ANSWER-Enable DHCP Server Persistence

Which advanced network interface setting on the SonicWall NSv firewall allows initial packets or response packets to pass through other interfaces? - ANSWER- Enable Asymmetric Route Support

Which of the following DDNS Providers are supported in SonicOS? (Select all that apply) - ANSWER-no-IP.com, dyn.com

T or F The SonicOS NSv scheme of interface addressing works in conjunction with address objects, service objects, and network zones. - ANSWER-True

T or F The Public Server guide assigns the server automatically to the zone to which its IP address belongs. - ANSWER-True

T or F When configuring a Site-to-Site policy, the Local Network option must match the Destination Network on the other side of the tunnel, in order to avoid tunnel negotiation errors or even a total failure. - ANSWER-True

Which of the following is the default public server type? - ANSWER-Web Server

What options are used to preempt an administrator logged into the firewall? (Select all that apply) - ANSWER-Log out, Drop into Non-Config mode

• / 4