Practice Essentials Questions With Certification guide Q&A from Training Expert VCEEngine
Free WatchGuard Essentials Test Practice Test Questions Exam Dumps
NEW QUESTION 45
An email newsletter about sales from an external company is sometimes blocked by spamBlocker. What option could you choose to make sure the newsletter is delivered to your users? (Select one.)
- A. Add a spamBlocker exception based on the From field of the newsletter email.
- B. Set the spamBlocker action to quarantine the email for later retrieval.
- C. Set the spamBlocker virus outbreak detection action to allow emails from the newsletter source.
- D. Add a spamBlocker subject tag for bulk email messages.
Answer: D
NEW QUESTION 46
Which of these threats can the Firebox prevent with the default packet handling settings? (Select four.)
- A. Access to inappropriate websites
- B. Malware in downloaded files
- C. Denial of service attacks
- D. Flood attacks
- E. IP spoofing
- F. Port scans
- G. Viruses in email messages
Answer: C,D,E,F
Explanation:
B:The default configuration of the XTM device is to block DDoS attacks.
C: In a flood attack, attackers send a very high volume of traffic to a system so it cannot examine and allow permitted network traffic. For example, an ICMP flood attack occurs when a system receives too many ICMP ping commands and must use all of its resources to send reply commands. The XTM device can protect against these types of flood attacks: IPSec, IKE, ICMP. SYN, and UDP.
E: When the Block Port Space Probes (port scans) and Block Address Space Probes check boxes are selected, all incoming traffic on all interfaces is examined by the XTM device.
CG: Default packet handling can reject a packet that could be a security risk, including packets that could be part of a spoofing attack or SYN flood attack
Reference:http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#en-US/intrusionprevention/default_pkt_handling_opt_about_c.html%3FTocPath%3DDefault%2520Thr eat%2520Protection%7CAbout%2520Default%2520Packet%2520Handling%2520Options%7C__ ___0
NEW QUESTION 47
After you enable spamBlocker, your users experience no reduction in the amount of spam they receive. What could explain this? (Select three.)
- A. The Maximum File Size to Scan option is set too high.
- B. A spamBlocker exception is configured to allow traffic from sender *.
- C. spamBlocker Virus Outbreak Detection is not enabled.
- D. Connections cannot be resolved to the spamBlocker servers because DNS is not configured on the Firebox.
- E. The spamBlocker action for Confirmed Spam is set to Allow.
Answer: B,D,E
Explanation:
Explanation/Reference:
A: Spamblocker requires DNS to be configured on your XTM device
B: If you use spamBlocker with the POP3 proxy, you have only two actions to choose from: Add Subject Tag and Allow. Allow lets spam email messages go through the Firebox without a tag.
D: The Firebox might sometimes identify a message as spam when it is not spam. If you know the address of the sender, you can configure the Firebox with an exception that tells it not to examine messages from that source address or domain.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 138
NEW QUESTION 48
Match each WatchGuard Subscription Service with its function.
Uses full-system emulation analysis to identify characteristics and behavior of zero-day malware. (Choose one).
- A. Application Control
- B. Gateway / Antivirus
- C. Spam Blocker
- D. DataLoss Prevention DLP
- E. Intrusion Prevention Server IPS
- F. APT Blocker
- G. Reputation Enable Defense RED
- H. Quarantine Server
- I. WebBlocker
Answer: F
Explanation:
APT Blocker is intended to stop malware and zero-day threats that are trying to invade anorganization's network.
APT Blocker uses a next-gen sandbox to get detailed views into the execution of a malware program. After first running through other security services, files are fingerprinted and checked against an existing database - first on theappliance and then in the cloud. If the file has never been seen before, it is analyzed using the system emulator, which monitors the execution of all instructions. It can spot the evasion techniques that other sandboxes miss.
Reference:http://www.watchguard.com/wgrd-products/security-modules/apt-blocker
NEW QUESTION 49
Which takes precedence: WebBlocker category match or a WebBlocker exception?
- A. WebBlocker exception
- B. WebBlocker category match
Answer: A
NEW QUESTION 50
If you disable the Outgoing policy, which policies must you add to allow trusted users to connect to commonly used websites? (Select three.)
- A. HTTPS port 443
- B. DNS port 53
- C. HTTP port 80
- D. FTP port 21
- E. NAT policy
Answer: A,B,C
Explanation:
TCP-UDP packet filter
If you decide to remove the Outgoing policy, you must add a policy for any type of traffic you want to allow through the Firebox. If you remove the Outgoing policy and then decide you want to allow all TCPand UDP connections through the Firebox again, you must add the TCP-UDP packet filter to provide the same function. This is because the Outgoing policy does not appear in the list of standard policies available from Policy Manager.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 97
NEW QUESTION 51
Clients on the trusted network need to connect to a server behind a router on the optional network. Based on this image, what static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100? (Select one.)
- A. Route to 10.0.20.0/24, Gateway 10.0.2.254
- B. Route to 10.0.10.0/24, Gateway 10.0.10.1
- C. Route to 10.0.20.0/24, Gateway 10.0.2.1
- D. Route to 10.0.20.0, Gateway 10.0.2.254
Answer: A
Explanation:
Explanation/Reference:
We must add a trusted static route to the 10.0.20.0/24 network through the 10.0.2.254 gateway.
NEW QUESTION 52
What settings must you device configuration file include for Gateway AntiVirus to protect users on your network? (Select two.)
- A. Install the Gateway AntiVirus server on your network.
- B. Disable automatic signature updates.
- C. Configure Gateway AntiVirus settings for a proxy action.
- D. Configure a policy to use a proxy action that has AntiVirus settings configured.
- E. Decrease the scan limits
Answer: C,D
NEW QUESTION 53
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM device, your computer must have an IP address on which subnet? (Select one.)
- A. 10.0.1.0/24
- B. 10.0.10.0/24
- C. 192.168.1.0/24
- D. 172.16.10.0/24
Answer: A
NEW QUESTION 54
Which items are included in a Firebox backup image? (Select four.)
- A. Feature keys
- B. Log file
- C. Certificates
- D. Fireware OS
- E. Configuration file
- F. Support snapshot
Answer: A,C,D,E
Explanation:
A Firebox backup imageis a saved copy of the working image from the Firebox flash disk. The backup image includes the Firebox appliance software, configuration file, licenses, and certificates.
When you purchase an option for your Firebox, you add a new feature key to your configuration file.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 14, 57
NEW QUESTION 55
You can use Firebox-DB authentication with any type of Mobile VPN.
- A. True
- B. False
Answer: A
Explanation:
http://www.watchguard.com/help/docs/fireware/11/en-US/Content/en-US/mvpn/general/mobile_vpn_types_c.html
NEW QUESTION 56
To prevent certificate error warnings in your browser when you use deep content inspection with the HTTPS proxy, you can export the proxy authority certificate from the Firebox and import that certificate to all client devices.
- A. True
- B. False
Answer: A
NEW QUESTION 57
Which diagnostic tasks can you run from the Traffic Monitor tab of Firebox System Manager? (Select four.)
- A. Traceroute
- B. DNS lookup
- C. MAC address lookup
- D. Ping
- E. Reputation lookup
- F. TCP dump
Answer: A,B,D,F
Explanation:
Explanation/Reference:
From Firebox System Manager, you can run diagnostic tasks to review information in all the log messages from your Firebox or XTM device. This can help you debug problems on your network.
1. On the Traffic Monitor tab, right-click a message and select Diagnostic Tasks.
Or, select Tools > Diagnostic Tasks.
2. From the Task drop-down list, select the task to run.
Ping IPv4
Ping IPv6
traceroute
DNS Lookup
TCP Dump
Reference: http://watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/fsm/ log_message_learn_more_wsm.html
NEW QUESTION 58
You can use Firebox System Manager to download a PCAP file that includes packet information about the protocols that manage traffic on your network.
- A. True
- B. False
Answer: A
NEW QUESTION 59
You can configure your Firebox to send log messages to how many WatchGuard Log Servers at the same time? (Select one.)
- A. Two
- B. As many as you have configured on your network.
- C. One
Answer: B
Explanation:
http://www.watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/logging/logging_and_logfiles_about_c.html
NEW QUESTION 60
Which of these options must you configure in an HTTPS-proxy policy to detect credit card numbers in HTTP traffic that is encrypted with SSL? (Select two.)
- A. Application Control
- B. WebBlocker
- C. Gateway AntiVirus
- D. Deep inspection of HTTPS content
- E. Data Loss Prevention
Answer: D,E
NEW QUESTION 61
If you disable the Outgoing policy, which policies must you add to allow trusted users to connect to commonly used websites? (Select three.)
- A. HTTPS port 443
- B. HTTP port 80
- C. NAT policy
- D. DNS port 53
- E. FTP port 21
Answer: A,B,E
NEW QUESTION 62
......
Understanding functional and technical aspects of Essentials Administration and Setup
The following will be discussed here:
- Configuration file migration
- Understand how to set up a Firebox with a basic configuration, and complete basic Firebox administration tasks.
- Firebox default policies and network settings
Prepare Top WatchGuard Essentials Exam Audio Study Guide Practice Questions Edition: https://testking.vceengine.com/Essentials-vce-test-engine.html
