Docsity
Log inSign up
Docsity
Prepare for your exams
Prepare for your exams

Study with the several resources on Docsity

Earn points to download
Earn points to download

Earn points by helping other students or get them with a premium plan

Guidelines and tips
Guidelines and tips
Sell on Docsity
Sell on Docsity
Log inSign up

Prepare for your exams

Study with the several resources on Docsity

Find documents

Prepare for your exams with the study notes shared by other students like you on Docsity

Search Store documents

The best documents sold by students who completed their studies

Search through all study resources
Docsity AINEW

Summarize your documents, ask them questions, convert them into quizzes and concept maps

Explore questions

Clear up your doubts by reading the answers to questions asked by your fellow students

Earn points to download

Earn points by helping other students or get them with a premium plan

Share documents
download point icon20 Points

For each uploaded document

Answer questions
download point icon5 Points

For each given answer (max 1 per day)

All the ways to get free points
Get points immediately

Choose a premium plan with all the points you need

Study Opportunities

Choose your next study program

Get in touch with the best universities in the world. Search through thousands of universities and official partners

Community

Ask the community

Ask the community for help and clear up your study doubts

University Rankings

Discover the best universities in your country according to Docsity users

Free resources

Our save-the-student-ebooks!

Download our free guides on studying techniques, anxiety management strategies, and thesis advice from Docsity tutors

From our blog

Exams and Study
Go to the blog

SonicWALL Basic Administration: Q&A for Network Security, Exams of Network security

Massachusetts Institute of Technology (MIT)Network security

A series of questions and answers related to sonicwall basic administration, covering topics such as vpn configurations, firewall technologies, content filtering services, deep packet inspection, and wan failover. It serves as a study guide or quiz for individuals seeking to enhance their understanding of sonicwall security appliances and network security principles. The content is structured to test knowledge and comprehension of key concepts and configurations within the sonicwall environment, making it a valuable resource for network administrators and security professionals. It includes practical scenarios and best practices for managing network security using sonicwall appliances.

Typology: Exams

2024/2025

Available from 06/09/2025

GlobalStudyVault
GlobalStudyVault ๐Ÿ‡บ๐Ÿ‡ธ

574 documents

1 / 12

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
SonicWALL Basic Administration Questions
| 100% Correct Answers | Verified | Latest
Version
A customer has an established base of GVC VPN users with a WAN GroupVPN policy configured. The
customer wants to begin an implementation for SSL VPN users. The existing group of GVC VPN users
must be converted to SSL VPN users because the SonicWALL security appliance does not support both
types of VPN users. - โœ”โœ”FALSE
SSL VPN eliminates the need for remote access authentication. - โœ”โœ”FALSE
Which of the following correctly describes how a bandwidth management rule works?
-Can be configured for all VPN traffic
-Only applies to outbound traffic from the firewall to the WAN or any other destination
-Can be configured only for individual VPN Security Associations
-Only applies to inbound traffic from the WAN to the firewall - โœ”โœ”Can be configured for all VPN traffic
What are the benefits provided by a VPN (select all that apply)?
-Securely connects distributed networks together
-Prevents denial-of-service attacks on remote connections
-Enables a remote connection to the LAN via the Internet
-Assures remote clients have up-to-date anti-virus software
-Provides data confidentiality and sender authentication - โœ”โœ”-Securely connects distributed networks
together
-Enables a remote connection to the LAN via the Internet
-Provides data confidentiality and sender authentication
1
pf3
pf4
pf5
pf8
pf9
pfa

Partial preview of the text

Download SonicWALL Basic Administration: Q&A for Network Security and more Exams Network security in PDF only on Docsity!

SonicWALL Basic Administration Questions

| 100% Correct Answers | Verified | Latest

Version

A customer has an established base of GVC VPN users with a WAN GroupVPN policy configured. The customer wants to begin an implementation for SSL VPN users. The existing group of GVC VPN users must be converted to SSL VPN users because the SonicWALL security appliance does not support both types of VPN users. - โœ”โœ”FALSE SSL VPN eliminates the need for remote access authentication. - โœ”โœ”FALSE Which of the following correctly describes how a bandwidth management rule works?

  • Can be configured for all VPN traffic
  • Only applies to outbound traffic from the firewall to the WAN or any other destination
  • Can be configured only for individual VPN Security Associations
  • Only applies to inbound traffic from the WAN to the firewall - โœ”โœ”Can be configured for all VPN traffic What are the benefits provided by a VPN (select all that apply)?
  • Securely connects distributed networks together
  • Prevents denial-of-service attacks on remote connections
  • Enables a remote connection to the LAN via the Internet
  • Assures remote clients have up-to-date anti-virus software
  • Provides data confidentiality and sender authentication - โœ”โœ”-Securely connects distributed networks together
  • Enables a remote connection to the LAN via the Internet
  • Provides data confidentiality and sender authentication

What benefits are provided by a VPN (select all that apply)?

  • Reporting
  • Increased capacity
  • Scalability
  • Encryption
  • Security - โœ”โœ”-Scalability
  • Encryption
  • Security Which of the following is the most basic firewall technology?
  • Packet filtering
  • Single firewall
  • Deep packet inspection
  • Application proxies - โœ”โœ”-Packet filtering The default firewall access rule allows all communication from the LAN to the Internet.
  • True
  • False - โœ”โœ”-True What are two advantages of a multiple firewall?
  • Protects restricted special resources
  • Offers protection from external attacks while each network segment has free access to other segments
  • Helps protect entire departments - โœ”โœ”What are two advantages of a multiple firewall?

- FTP

- HTTP

  • Email attachments - โœ”โœ”-HTTP
  • HTTPS If the appliance loses connection to the SonicWALL site rating library: (Select all that apply.)
  • CFS blocks all web traffic (based on configuration)
  • CFS continues to operate using the last ratings seen
  • CFS allows all web traffic (based on configuration)
  • CFS must use its internal logic to identify which traffic to block - โœ”โœ”-CFS blocks all web traffic (based on configuration)
  • CFS allows all web traffic (based on configuration) With SonicWALL CFS, network administrators have a flexible tool to provide comprehensive filtering based on which of the following? (Select all that apply.)
  • Allowed domain designations
  • Time of day
  • SMTP
  • Keywords
  • LDAP Groups
  • Forbidden domain designations
  • FTP - โœ”โœ”-Allowed domain designations
  • Time of day
  • Keywords
  • Forbidden domain designations The default CFS policy when assigned "Via Users and Zones Screens" should be the most restrictive.
  • True
  • False - โœ”โœ”True The SonicWALL Log can be exported in the following formats: (Choose all that apply)
  • Log View
  • Comma-separated value (CSV)
  • Tab Delimited
  • Plain text - โœ”โœ”-Comma-separated value (CSV)
  • Plain text Which SonicWALL security services use the Deep Packet Inspection engine? (Select all that apply)
  • IPS
  • Anti-Spyware
  • GVC
  • GAV
  • CFS - โœ”โœ”-IPS
  • Anti-Spyware
  • GAV
  • CFS A SonicWALL security appliance configured with Gateway Anti-Virus verifies and enforces the Desktop Anti-Virus client to the downstream workstation.
  • True
  • False - โœ”โœ”-False
  • Global VPN Client - โœ”โœ”-IPS, GAV, and Anti-Spyware In order for SonicWALL's Deep Packet Inspection engine to provide protection, where must GAV, IPS, and/or Gateway Anti-Spyware be configured?
  • Firewall rules
  • Enforced in the Zones and enabled in security services
  • Address objects
  • Zones
  • NAT policies and firewall rules - โœ”โœ”-Zones Which of the following LB/Failover methods would be selected if an administrator wanted to specify how much outbound traffic is sent through the primary and secondary WAN interfaces?
  • Active/Passive
  • Ratio based
  • Round Robin
  • Spill-Over based - โœ”โœ”-Ratio based How does the SonicWALL maintain persistence with outbound load balancing?
  • SSL Session ID
  • Source IP and Destination IP
  • Source and Destination Port
  • Session Cookies - โœ”โœ”-Source IP and Destination IP One requirement of WAN ISP Failover and Load balancing is?
  • Twin-ax cables
  • Standard OS
  • A second ISP connection
  • Cross-Over cable - โœ”โœ”-A second ISP connection When WAN failover occurs, the firewall re-establishes all sessions using the new WAN interface with no traffic interruption thanks to the stored and tracked session states.
  • True
  • False - โœ”โœ”-False Besides Probe Monitoring, one requirement of WAN ISP Failover and Load balancing is?
  • Static IP Addresses on both WAN Interfaces
  • Twin-ax cables
  • Available Interface that can be configured as a secondary WAN
  • Standard OS - โœ”โœ”-Available Interface that can be configured as a secondary WAN The Company's security policy is to only allow WWW browsing by all internal users; no other internet traffic is permitted. Assuming that you are allowing DNS, what are the "Best Practices" firewall rules to accomplish this. Assume the following column headings: (Select the one best answer) --LAN > WAN(Intersection) - Any(Source) - Any(Destination) - HTTP(Service) - Allow(Action) - All(Users) --WAN > LAN(Intersection) - Any(Source) - Any(Destination) - DNS(Service) - Allow(Action) - All(Users) --WAN > WAN(Intersection) - Any(Source) - Any(Destination) - Any(Service) - Deny(Action) - All(Users)
  • True
  • False - โœ”โœ”-True Before you upgrade firmware, you should save some backups and documentation, so that you are prepared to recover easily if something goes wrong.
  • True
  • False - โœ”โœ”-True Which of the following is NOT a valid System boot option:
  • Uploaded Firmware
  • New Firmware
  • Current Firmware
  • Current Firmware with Factory Defaults - โœ”โœ”-New Firmware For any model, when having problems with synchronization with the licensing information, you can try a method which involves a button on the _____ page which resets the firewall's licensing.
  • diag.html
  • climgr.html
  • adminlocal.html
  • debug.html - โœ”โœ”-diag.html The default IP Address for a SonicOS appliance booted in SafeMode is:
  • For Gen 5 192.168.168.1, for Gen 6 192.168.1.
  • For Gen 5 192.168.168.168, for Gen 6 192.168.1.
  • For Gen 5 192.168.168.1, for Gen 6 192.168.1.
  • For Gen 5 192.168.1.254, for Gen 6 192.168.168.
  • For Gen 5 192.168.168.168, for Gen 6 192.168.1.254 - โœ”โœ”-For Gen 5 192.168.168.168, for Gen 6 192.168.1. To interpret traffic captured by the Packet Capture tool, it is necessary to understand the three-way handshake that occurs for every IKE connection or TCP connection. True False - โœ”โœ”True Clicking Create Backup overwrites the existing System Backup firmware image as necessary. True False - โœ”โœ”True When a connection completely traverses the firewall, and while the Monitor Intermediate Packets setting is enabled, the packet capture filter should show 2 entries for each packet; ingress and egress. In an inbound NAT scenario, the destination IP should change prior to egress. In an outbound NAT scenario, the source IP should change. True False - โœ”โœ”True The Tech Support Report generates a detailed report of the SonicWALL security appliance configuration and status, and can be exported using the Download Report button. True False - โœ”โœ”True