SNSP Exam - Best Practices and other Basics Exam Questions With Verified Answers
0 view 0 purchase
Course
SNSP
Institution
SNSP
SNSP Exam - Best Practices and other Basics
Exam Questions With Verified Answers.
Which interfaces cannot be configured as WAN interfaces - answerX0 and MGMT
What is the default configuration of X1 - answerStatic mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - ans...
SNSP Exam - Best Practices and other Basics
Exam Questions With Verified Answers.
Which interfaces cannot be configured as WAN interfaces - answer✔X0 and MGMT
What is the default configuration of X1 - answer✔Static mode with IP of 0.0.0.0
To avoid routing issues of X1 what should you ensure - answer✔It's assigned with a valid non-
zero IP address or configuring for DHCP or PPPoE
True or False: It is recommended to disassociate the from the WAN zone if not in use -
answer✔True - Unassigned
True or False: You should open HTTPS Mgmt up on the WAN interface - answer✔False
True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option when
configuring HTTPM management - answer✔False
What can result from incorrect duplex settings on the WAN - answer✔Inconsistent Internet
connection, slow throughput, dropped packets, and inability to negotiate to an ISP connection
What settings are default on the advanced tab of a WAN interface - answer✔Link Speed to Auto
Negotiate
User Default MAC address
Enable Flow Reporting
Fragment non-VPN outbound packets larger than this Interfaces MTU
MTU stands for what - answer✔Maximum Transmission Unit
On DSL and cable connections is the MTU size generally lower or higher - answer✔Lower
How do you change the value of MTU - answer✔In increments of 8 bytes
True or False: Confirm that Ignore Don't Fragment DF bit is unchecked - answer✔True
True or False: Even if you only have 1 WAN connection you should still enable "Enable Load
Balancing" - answer✔True
Why must you enable load balancing with only 1 WAN connection - answer✔To access the LB
Groups and LB Statistics sections of Failover and Load Balancing configuration
Which Probe menu should you select when configuring WAN probes - answer✔Probe Succeeds
when either main or alternate target responds
Why should you always use X0 as a backup heartbeat link - answer✔Because it is hardcoded in
SonicOS
True or False: You should always configure X0's monitoring IP - answer✔True
What happens if the WAN interface does not have the monitoring IP configured - answer✔The
secondary/Standby unit directs the path to the Internet for GRID and License Manager
communication
True or False: The secondary unit is licensed automatically - answer✔False
Why would you want to use Virtual MAC with an HA pair - answer✔To reduce ARP
convergence time during a failover
When using an HA pair what should you ensure is disabled on the switchports on the switch -
answer✔Spanning Tree Protocol which can cause flapping effects when virtual MAC is seen on
multiple interfaces
True or False: Ensure all security services are enabled on proper zones - answer✔True
If you do not plan on using BWM, should it still be enabled - answer✔No
What settings use BWM - answer✔Access Rules with BWM setting use the throttles, interface
BWM settings, and priority queues
True or False: Do not disable Allow Fragmented Packets on access rules - answer✔True
What application firewall rules should be created to prevent malware - answer✔Rules that
restrict DNS, SSH, and Proxy-Access applications
What can malicious applications leverage to redirect traffic to illegitmate sites - answer✔DNS
Cache Poisoning
True or False: You should create an Address Object and AppRule to restrict the DNS protocol to
only the Trusted DNS Host - answer✔True
What is the recommend way to restrict SSH Protocol - answer✔By using an Application
Firewall rule since it's possible to deviate from the standard SSH TCP 22 configuration
What additional CFS categories should be blocked - answer✔CAT28 Hacking/Proxy Avoidence
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Brainbarter. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $10.49. You're not tied to anything after your purchase.
