SNSA Practice Test

SNSA practice test: what's covered

• SonicWall NSA / TZ
• SonicOS 7.1
• CFS
• IPS
• Capture ATP
• VPN
• HA

Free SNSA sample questions

1. Out of the box, a SonicWall TZ Series boots with default LAN IP 192.168.168.168/24. Which is TRUE about initial management?

   • A. Use IPv6 link-local only
   • B. Connect a PC to the X0 (LAN) port and browse to https://192.168.168.168 — default credentials admin/password (must be changed on first login)
   • C. Telnet to 192.168.168.168 port 23
   • D. You must call SonicWall support to access the box
   Show answer

   Correct: B. X0 is the default LAN port. https://192.168.168.168 launches Setup Wizard. SonicOS forces an admin password change on first login. Telnet is disabled by default; SSH via port 22 is the CLI path.

2. SonicOS 7.X management UI is organised into "Modes". Which TRUE about Modes?

   • A. Object / Policy / Monitor / Device / Network are top-level Modes that group related configuration; switching Mode reveals different left-nav menus
   • B. There is only one Mode
   • C. Mode switching requires reboot
   • D. Mode is a billing tier
   Show answer

   Correct: A. SonicOS 7 reorganised the UI into Modes for clarity. Objects (addresses/services/apps), Policy (access/NAT/CFS), Monitor (dashboards/logs), Device (admin/firmware/HA), Network (interfaces/routing/DNS). Mental model shift from SonicOS 6.X.

3. A new firewall must be registered to access security services (GAV, IPS, CFS subscriptions). Which step is REQUIRED?

   • A. Print the manual
   • B. Register the box at mysonicwall.com (with serial + auth code) and associate it to a customer account — license file then activates subscribed services
   • C. Disable the firewall
   • D. Replace the SSD
   Show answer

   Correct: B. mysonicwall.com is the registration portal. Auth code (printed on box / in email) ties the unit to the account. Subscriptions (GAV/IPS/CFS/Capture ATP/Sandstorm/etc.) require registration first.

4. Which TWO are valid CLI access methods on SonicOS 7? (Choose 2)

   • A. SSH on TCP/22 to the management IP (default disabled, must be enabled on Device > Settings > Administration)
   • B. Console / Serial cable for emergency access
   • C. Telnet on TCP/23 (modern default)
   • D. FTP
   Show answer

   Correct: A and B. SSH is the supported network CLI (must be enabled). Console = local recovery / OOB. Telnet is plaintext and discouraged; FTP isn't a mgmt path. Always disable Telnet and use SSH key-based auth where possible.

5. Pending configuration changes in SonicOS 7 are committed when the admin:

   • A. Reboots the firewall
   • B. Clicks "Accept" / "Apply" (or commits the pending-changes queue) — SonicOS shows count of pending changes and requires explicit commit
   • C. Waits 24 hours
   • D. Closes the browser
   Show answer

   Correct: B. Pending-changes model in SonicOS 7 allows staging multiple edits before committing. Cancel discards. Accept applies atomically. Helps with multi-edit reviews.

Last updated: 2026-10-19

SNSA practice test FAQ