What are two probe methods that you.txt
Document Details
Uploaded by BeneficentCello
Tags
Full Transcript
What are two probe methods that you can use for logical probes? (select all that apply) - ANSWER-Ping and TCP Action objects allow you to control how the category behaves when a website from that category is accessed. Which action object is used to throttle the traffic? - ANSWER- BWM Which of th...
What are two probe methods that you can use for logical probes? (select all that apply) - ANSWER-Ping and TCP Action objects allow you to control how the category behaves when a website from that category is accessed. Which action object is used to throttle the traffic? - ANSWER- BWM Which of the following Address Object types is selected by default in the firewall? - ANSWER-Host Which diagnostic utility on the SonicWall firewall allows you to lookat the contents of ip packets traversing the firewall? - ANSWER-Packet Monitor Where is the real-time data on the Dashboard compiled and summarized from? - ANSWER-AppFlow What type of information is displayed on the Live Monitor panel?(Select all that apply) - ANSWER-Multi-Core Monitor and Connection Count Which file types can be used to export the logs? (Select all that apply) - ANSWER-Email and CSV What is the default timeout setting for administrator inactivity? - ANSWER-5 Minutes What type of encoding format is supported when importing an end-user certificate with a private key? - ANSWER-PKCS#12 Which SonicOS GUI option is used to create a snapshot of the current system state? - ANSWER-Create Backup Which interface is used by SonicOS as the backup hearbeat link? - ANSWER-X3 The firewall snapshot section displays the percentage of encryted traffic flowing through the firewall. - ANSWER-True Which setting is used to turn on the CFS Security Service? - ANSWER-Enable Content Filtering Service Which Security Configuration menu option is used to enable client DPI-SSL? - ANSWER-Decryption Services Which Match Object will control what type of policy it can be used in? - ANSWER-Match object type What are the key components of a CFS policy?(Select all that apply) - ANSWERBandwidth Management, authenticate and block Which Logs panel depicts the Eicar test virus file download? - ANSWER-AppFlow Logs A Site-to-Site VPN can allow simultaneous access to multiples remote servers - ANSWER-True Which statement about SonicWall Gateway Anti-Virus service is correct? - ANSWERScans TCP stream-based protocols, in addition to common Web and email protocols Which of the following sentences is correct about HA configuration? - ANSWER-High Availability cannot be configured while there are ports participanting in PortShield What type of NAT policies does a Public Server wizard create? - ANSWER-Inbound, Outbound, and Loopback NAT Policies Which of the following are included in the output of a network probe? (Select all that apply) - ANSWER-IP Addressing, Probe Target and Type and Interface Details. Which diagnostic utility on the SonicWall firewall allows you to look at the contents of IP packets traversing tha firewall? - ANSWER-Packet Monitor What are two route policy modes that are enable by Dynamic Routing? - ANSWERAdvanced Routing and Simple RIP Advertisement Which configuration panel in the Setup Guide is used to configure the firewall as the default gateway? - ANSWER-LAN Settings Which Load Balancing/Failover method helps specify the amount of outbound traffic to be sent through the primary and secondary WAN interfaces? - ANSWER-Ratio based Which of the following are required for WAN ISP Failover and Load balancing?(Select all that apply) - ANSWER-A second ISP connection and Placing each WAN on separate subnets What does a WAN Failover solution enable?(Select all that apply) - ANSWERMaintaining a persistent connection for the WAN port traffic by failing over to the secondary WAN port and Directing redundant routes to one or more secondary service providers In the Event Logs, which of the following will generate a log message for any dropped packets? - ANSWER-The action for the policy is set to reset/drop What type of certificate store be used to install the certificate? - ANSWER-Trusted Root Certification Authorities What is the SonicOS navigation path to begin configuring the VPN on the firewall? - ANSWER-Manage>Connectivity>VPN What type of object is created to configure a VPN host when implementing a Site-to-site VPN? - ANSWER-Network Address Object What is the default encryption method for both of the IKE phases when configuring a VPN on the firewall? - ANSWER-SHA1 Which feature facilitates the setup and deployment of multiple global VPN clients? - ANSWER-Group VPN Policies What does the LDAP server provide to allow or deny user authorization? - ANSWERActive Directory Membership Which group of Security Services uses the SonicWall Deep Packet Inspection engine? - ANSWER-IPS, GAV, and Anti-Spyware Which of the following are SonicWall's Advanced Threat Protection features?(Select all thet apply) - ANSWER-Deep Packet Inspection and Geo-IP In order for SonicWall1's Deep Packet Inspection engine to provide protection, where must GAV, IPS, and Gateway Anti-Spyware be enable?(Select all that apply) - ANSWER-Zones and Security Services Which packet status types are indicated by the Packet Monitor?(Select all tha apply) - ANSWER-Forwarded and Consumed Which option enables the capture buffer data to be wrapped and retained to save externally when full, instead of being overwritten? - ANSWER-Wrap Capture Buffer once Full Which diagnostic tool test for MySonicWall server connectivity? - ANSWER-Check Network Settings What options are used to preempt an administrator logged into the firewall?(Select all tha apply) - ANSWER-Change to read-only access and Dropped to Non-Config mode Which policy types are used in the App Rule Quick Configuration wizard?(Select all that apply) - ANSWER-FTP Data Tranfer and SMTP Client What type of information does the DHCP server help distruibute to network clients? (Select all that apply) - ANSWER-Gateway Address, IP Address and Dns Server Settings When configuring the Web proxy feature, the proxy server must be placed in the DMZ or WAN zones. - ANSWER-True Which of the following DDNS Providers are supported in SonicOS?(Select all that apply) - ANSWER-dyn.com, no-IP.com and changeip.com Which of the following are predefined zones in SonicOS?(Select all tha apply) - ANSWER-VPN and LAN Sub-interfaces on the SonicWall firewall add support for VLANs. - ANSWER-True Which of the following networking taks are feasible when a DNS server is configured? (Select all that apply) - ANSWER-Signature Downloads and CFS server name resolution Where do you configure the User Authentication method in SonicOS? - ANSWERManage>Users>Settings Which authentication method is recommended for a relatively small and limited number of users? - ANSWER-Local Users Which of the following are built-in user groups in a Sonicwall firewall?(Select all that apply) - ANSWER-Trusted Users, Everyone and Sonicwall Administrators Who among the following can manage Guest Accounts and Sessions? - ANSWERGuest Administrators Which of the following are predefined Schemas that are available when configuring LDAP?(Select all that apply) - ANSWER-Novel eDirectory and MS Active Directory Which of the following variables are used to configure static routes to forward traffic? (Select all that apply) - ANSWER-Zones and Services Statics routes, by default, take precedence over VPN traffic. - ANSWER-True Which feature is used to create a predefined email notification with a defined subject? - ANSWER-Automation Which log setting is used to change event attributes globally, using flexbile match conditions? - ANSWER-Go to Configure Log What type of information is displayed on the Protocol Monitor?(Select all that apply) - ANSWER-Ingress/Egress ARP Rate, Ingress/Egress IPV4 Rate and Ingress/Egress TCP Rate Choose two methods that SonicWall provides for managing global Ips and Anti-Spyware attack threats. - ANSWER-Prevent All and Detect All Which of the following are SonicWall outbound failover mechanisms.(Select all that apply) - ANSWER-Round Robin and Spillover-Based Ratio What is the naviagation to configuring the Advanced App Control settings in SonicOS? - ANSWER-Manage>Policies>Rules>App Control> App Control Advanced Identify the best practices that are related to configuring App Control.(Select all that apply) - ANSWER-Enable logging, as needed, per application and Assign common access rules to all users, regardless of groups. Which of the following will enable you to implement transparent role-based security management? - ANSWER-Implementing Single Sign-On Which Security Configutation menu option is used to enable client DPI-SSL? - ANSWER-Manage>Decryption Service>DPI-SSL/TLS Client Which of the following are supported by DPI-SSL? - ANSWER-TLS 1.2 Protocol What is the SonicOS navigation path to begin configuring the SSL-VPN on the firewall? - ANSWER-Manage>Connectivity>SSL-VPN Which policy type is selected when configuring the security policy of a Route-based VPN? - ANSWER-Tunnel Interface Which of the following services must be enabled to use Capture ATP? - ANSWER-AntiVirus Which of the following are Address Object types?(Select all that apply) - ANSWERNetwork, Range and Host What do virtual interfaces enable? - ANSWER-Funcional segregation of business operations In which of the following formats can a snapshot of the Packet Monitor output be exported?(Select all that apply) - ANSWER-Plain Text, HTML and Pcap Where are the results of network probes displayed?(Select all that apply) - ANSWERClient Computers, System Logs and Network Probes panel Which result field of the Packet Monitor displeys the firewall interface on which a packet was captured when sent out? - ANSWER-Egress What type of information is displayed on the Appliance Health panel?(Select all that apply) - ANSWER-Bandwidth Monitor, Live Monitor and Protocol Monitor Which tab on the SonicOS management interface displays the visualization Dashboard? - ANSWER-Monitor Which Connection monitor depicts the number os active connections? - ANSWERConnection Count Which of the following are default Event Log Filters?(Select all that apply) - ANSWERCategory and Priority Which Event Log categories are available by default in a SonicWall firewall?(Select all that apply) - ANSWER-System, Security Services and Firewall Settings Which option is a common mechanism for preventing routing loops? - ANSWER-Split Horizon Policy-Based Routing routes traffic based on various user-defined variable - ANSWERTrue WHich of the following are Single Sign-On (SSO) authentication options in a Sonicwall firewall? - ANSWER-LDAP Authentication Where do you add a Guest Services profile in SonicOS? - ANSWERManage>Users>Guest Services Which Advanced interface setting allow initial packets or response packets to pass throught other interfaces? - ANSWER-Asymetric Routing What types of mapping does ARP enable? - ANSWER-IP Addresses to MAC Addresses Which local network resource is selected by default in the SonicWall firewall when connecting with the VPN? - ANSWER-Firewalled Subnets Which setup feature also requires a string password setting to avoid potential security vulnerabilities? - ANSWER-Allow HTTPS on this WAN interface Which panel of the SonicOS management interface is used to define password restrictions? - ANSWER-Manage>Appliance>Base settings>Login Security Select the two methods you can use to register the SonicWall appliance. - ANSWERUsing the getting Started Guide and From MySonicWall.com If the Logging Level filter is defined as Error, which of the following alert types will also be displayed in the results?(Select all that apply) - ANSWER-Critial, Alert and Emergency Select the defaul server tupes that are available when configuring the Public Server wizard.(Select all that apply) - ANSWER-Citrix ICA Server, Mail Server and Web Server Sonicwall Adminstrator has modified the default LAN>WAN Access Rule from "Allow" to "Deny" blocking all outbound WAN traffic. Which of the following statements is applicable in this context? - ANSWER-LAN user cannot access the Internet, but the appliance can still register with MySonicWall.com and update the UTM signatures. Which Filtering option allows you to exclude events at lower priority? - ANSWERLogging Level Which of the following user variables are defined to configure static routes to forward traffic?(Select all that apply) - ANSWER-The default Gateway, Metrics and Source and Destination Addresses What type of system schedule options can be defined in SonicOS?(Select all that apply) - ANSWER-Once, Recurring and Mixed Which option is recommended to be left unchecked when using Stateful HA? - ANSWER-Enable Preempt Mode What type of intermediate traffic is monitored by the Packet Monitor?(Select all that apply) - ANSWER-Encrypted Packets, Multicast packets that are replicates and IP Helper-generated packets What type of information is displayed on the Threat Protection panel?(Select all that apply) - ANSWER-Spyware blocked, virusses blocked and Intrusions prevented How do you enable dynamic OSF routing on the SonicWall firewall? - ANSWERChange the routing mode to Advanced Routing on the Settings tab DPI-SSL examines SSL traffic, regardless of the port number. - ANSWER-True Where HA interfaces tab used to define the mode for the primary firewall. What is the SonicOS navigation path for HA configuration? - ANSWER-Manage>High Availability> Base Setup Which DPI-SLL setting is used to allow new connections to bypass decryption instead of being dropped when the connection limit is crossed? - ANSWER-Allow SSL without decryption (bypass) when connection limit exceeded What is the navigation path to configure Failover and Load Balancing in SonicOS? - ANSWER-Manage>Network>Failover & Load Balancing Which object type represents the confitions thar must be met in an App Rule policy? - ANSWER-Math Object Whrer is the real-time data collection enabled and configured from in the SonicOS management interface? - ANSWER-Manage>Appflow Reporting>Settings What type of real-time data can be viwed in the AppFlow logs?(Select all that apply) - ANSWER-Users and Applications Which user group can have Bookmarks configured for them? - ANSWER-SSL-VPN Users The Public Server guide assigns the server automatically to the zone to which its IP address belongs? - ANSWER-False