SNSP EXAM BEST PRACTICES AND OTHER BASICS EXAM 2024-2025 QUESTIONS AND CORRECT VERIFIED ANSWERS /100% PASS SOLUTION / ALREADY GRADED A+ What should you enable under DPI-SSL/TLS Client - ANSWER-- Always authenticate server for decrypted connections What does DPI-SSL do - ANSWER--Enables the firewall to act as a proxy to inspect encrypted communications such as webmail, social media, and other web contacts by leveraging HTTPS connections If you enable Always authenticate server for decrypted connections in DPI-SSL/TLS Client setting, what else should you enable? - ANSWER--Skip CFS Categorybased Exclusion option under DPI-SSL/TLS Server > Common Name settings to exclude a particular domain or domains from this global authenticate option. This is useful to override any server authentication related failures of trusted sites. True or False: Setting up Automation under Log Settings can put a huge strain on the firewalls Core0 - ANSWER--True What is the recommended methods for capturing firewall logs - ANSWER--Using syslog or traffic Flows to SW GMS, CSC, or syslogs to Analyzer or send to a 3rd party Syslog Collector What can Sonicwall's GMS Live monitor do - ANSWER--Can send a more detailed email alert and an SNMP trap How does the firewall use DNS or NetBIOS