SNSP Exam - Best Practices and other Basics RATED A.
3 views 0 purchase
Course
SNSA.
Institution
SNSA.
SNSP Exam - Best Practices and other Basics RATED A.SNSP Exam - Best Practices and other Basics RATED A.SNSP Exam - Best Practices and other Basics RATED A.SNSP Exam - Best Practices and other Basics RATED A.SNSP Exam - Best Practices and other Basics RATED A.SNSP Exam - Best Practices and oth...
SNSP Exam - Best Practices and other Basics RATED A. Which interfaces cannot be configured as WAN interfaces ✔✔X0 and MGMT What is the default configuration of X1 ✔✔Static mode with IP of 0.0.0.0 To avoid routing issues of X1 what should you ensure ✔✔It's assigned with a valid non-zero IP address or configuring for DHCP or PPPoE True or False: It is recommended to disassociate the from the WAN zone if not in use ✔✔True - Unassigned True or False: You should open HTTPS Mgmt up on the WAN interface ✔✔False True or False: Check the "Add rule to enable redirect from HTTP to HTTPS" option when configuring HTTPM management ✔✔False What can result from incorrect duplex settings on the WAN ✔✔Inconsistent Internet connection, slow throughput, dropped packets, and inability to negotiate to an ISP connection What settings are default on the advanced tab of a WAN interface ✔✔Link Speed to Auto Negotiate User Default MAC address Enable Flow Reporting Fragment non -VPN outbound packets larger than this Interfaces MTU MTU stands for what ✔✔Maximum Transmission Unit On DSL and cable connections is the MTU size generally lower or higher ✔✔Lower How do you change the value of MTU ✔✔In increments of 8 bytes True or False: Confirm that Ignore Don't Fragment DF bit is unchecked ✔✔True True or False: Even if you only have 1 WAN connection you should still enable "Enable Load Balancing" ✔✔True Why must you enable load balancing with only 1 WAN connection ✔✔To access the LB Groups and LB Statistics sections of Failover and Load Balancing configuration Which Probe menu should you select when configuring WAN probes ✔✔Probe Succeeds when either main or alternate target responds Why should you always use X0 as a backup heartbeat link ✔✔Because it is hardcoded in SonicOS True or False: You should always configure X0's monitoring IP ✔✔True What happens if the WAN interface does not have the monitoring IP configured ✔✔The secondary/Standby unit directs the path to the Internet for GRID and License Manager communication True or False: The secondary unit is licensed automatically ✔✔False Why would you want to use Virtual MAC with an HA pair ✔✔To reduce ARP convergence time during a failover When using an HA pair what should you ensure is disabled on the switchports on the switch ✔✔Spanning Tree Protocol which can cause flapping effects when virtual MAC is seen on multiple interfaces True or False: Ensure all security services are enabled on proper zones ✔✔True If you do not plan on using BWM, should it still be enabled ✔✔No What settings use BWM ✔✔Access Rules with BWM setting use the throttles, interface BWM settings, and priority queues True or False: Do not disable Allow Fragmented Packets on access rules ✔✔True What application firewall rules should be created to prevent malware ✔✔Rules that restrict DNS, SSH, and Proxy -Access applications What can malicious applications leverage to redirect traffic to illegitmate sites ✔✔DNS Cache Poisoning True or False: You should create an Address Object and AppRule to restrict the DNS protocol to only the Trusted DNS Host ✔✔True What is the recommend way to restrict SSH Protocol ✔✔By using an Application Firewall rule since it's possible to deviate from the standard SSH TCP 22 configuration What additional CFS categories should be blocked ✔✔CAT28 Hacking/Proxy Avoidence
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller saraciousstuvia. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $14.49. You're not tied to anything after your purchase.
