Updated Oct 29, 2022 Certification Exam Essentials Dumps - Practice Test Questions
Updated Verified Essentials dumps Q&As - Pass Guarantee or Full Refund
NEW QUESTION 26
How can you prevent connections to the Fireware Web UI from computers on optional interface Eth2? (Select one.)
- A. Remove Any-Optional from theTolist of the WatchGuard policy
- B. RemoveAny-Optional from theFromlist of the WatchGuard Web UI policy
- C. Remove Eth2 from the Any-Optional alias.
- D. Remove Any-Optional from theFromlist of the WatchGuard policy.
- E. Remove Any-Optional from theTolist of the WatchGuard Web UI policy.
Answer: E
NEW QUESTION 27
Which policies can use the Intrusion Prevention Service to block network attacks? (Select one?)
- A. All policies
- B. Only proxy policies
- C. Only packet filter policies
- D. Only inbound policies
- E. Only HTTP and HTTPS Proxy policies
Answer: C
NEW QUESTION 28
Only 50 clients on the trusted network of your Firebox can connect to the Internet at the same time. What could cause this? (Select one.)
- A. TheLiveSecurity feature key is expired.
- B. The DHCP address pool on the trusted interface has only 50 IP addresses.
- C. The device feature key allows a maximum of 50 client connections.
- D. The Outgoing policy allows a maximum of 50 client connections.
Answer: B
NEW QUESTION 29
While troubleshooting a branch office VPN tunnel, you see this log message:
2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3DES, expecting AES What settings could you modify in the local device configuration to resolve this issue? (Select one.)
- A. BOVPN Tunnel settings
- B. BOVPN Tunnel Route settings
- C. BOVPN Gateway settings
- D. BOVPN-Allow policies
Answer: C
Explanation:
Explanation/Reference:
The WatchGuard BOVPN settings error in this example states phase one encryption. Only the BOVPN Gateway settings can specify phase one settings. BOVPN Tunnel settings specify phase 2 settings.
NEW QUESTION 30
Match the monitoring tool to the correct task.
Which tool can view a list of users connected to the Firebox? (Select one)
- A. FireWatch
- B. Firebox System Manager - Authentication list
- C. Traffic Monitor
- D. Log Server
- E. Firebox System Manager - Subscription services
- F. FireBox System Manager - Blocked Sites list
Answer: B
Explanation:
You can viewa list of users connected to the Firebox through HostWatch, and you can also use Authentication List, which identifiesthe IP addresses and user names of all the users that are authenticated to the Firebox.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181
NEW QUESTION 31
In the default Firebox configuration file, which policies control management access to the device? (Select two.)
- A. WatchGuard
- B. WatchGuard Web UI
- C. FTP
- D. Outgoing
- E. Ping
Answer: A,B
Explanation:
Ping is generated by default as the explanation states but Ping does not manage the device. The policies that manage the device are WatchGuard & WatchGuard Web UI
NEW QUESTION 32
Which of these options are private IPv4 addresses you can assign to a trusted interface, as described in RFC 1918, Address Allocation for Private Internets? (Select three.)
- A. 198.51.100.1/24
- B. 192.0.2.1/24
- C. 10.50.1.1/16
- D. 172.16.0.1/16
- E. 192.168.50.1/24
Answer: C,D,E
NEW QUESTION 33
You can use Firebox System Manager to download a PCAP file that includes packet information about the protocols that manage traffic on your network.
- A. True
- B. False
Answer: A
NEW QUESTION 34
HOTSPOT
Match each WatchGuard Subscription Service with its function:
Answer:
Explanation:
Explanation:
WebBlocker
Spam Blocker Gateway / Antivirus APT Blocker Application Control Quarantee Server Intrusion Prevention Server IPS Data Loss Prvention DLP Reputation Enable Defense RED
NEW QUESTION 35
Which authentication servers can you use with your Firebox? (Select four.)
- A. Linux Authentication
- B. TACACS+
- C. Kerberos
- D. Active Directory
- E. Firebox databases
- F. LDAP
- G. RADIUS
Answer: D,E,F,G
Explanation:
Explanation/Reference:
NEW QUESTION 36
What is the best method to downgrade the version of Fireware OS on your Firebox without losing all device configuration settings? (Select one.)
- A. Change the OS compatibility setting in Policy Manager to downgrade the device. Then use Policy Manager to save the configuration to the device.
- B. Restore a saved backup image that was created for the device before the last Fireware OS upgrade.
- C. Use the downgrade feature on Policy Manager to select a previous of Fireware OS.
- D. Use the Upgrade OS feature in Fireware Web UI to install the sysa_dl file for an order version of Fireware OS.
Answer: B
NEW QUESTION 37
For which of these third party authentication methods must you specify a search base? (Select two.)
- A. SecurID
- B. RADIUS
- C. Active Directory
- D. LDAP
Answer: C,D
Explanation:
Explanation/Reference:
B: Configuring the Firebox to use Active Directory authentication is similar to the process for LDAP authentication. You must set a search base to put limits on the directories on the authentication server the Firebox searches in for an authentication match.
D: When you configure the Firebox to use LDAP authentication, you must set a search base to put limits on the directories on the authentication server the Firebox searches in for an authentication match Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 83-84
NEW QUESTION 38
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM device, your computer must have an IP address on which subnet? (Select one.)
- A. 192.168.1.0/24
- B. 10.0.10.0/24
- C. 10.0.1.0/24
- D. 172.16.10.0/24
Answer: C
NEW QUESTION 39
How can you include log messages from more than one Firebox in a single report generated by Dimension?
(Select two.)
- A. You cannot see report data in Dimension for more than one device.
- B. Export report data as a single PDF file for all the devices you want to include in the report.
- C. Create a report schedule that includes all the devices you want to include in the report.
- D. Create a device group and view the reports for that group.
Answer: C,D
NEW QUESTION 40
Match the monitoring tool to the correct task.
Which tool can ping the source of a denied packet? (Select one)
- A. Firebox System Manager - Authentication list
- B. Traffic Monitor
- C. FireWatch
- D. Log Server
- E. Firebox System Manager - Subscription services
- F. FireBox System Manager - Blocked Sites list
Answer: B
Explanation:
Explanation/Reference:
For a quick look at the log messages generated by the Firebox, use Traffic Monitor. With Traffic Monitor, you can apply color to different types of messages, and ping or traceroute to the IP addresses of computers included in the log messages.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181
NEW QUESTION 41
How can you include log messages from more than one Firebox in a single report generated by Dimension? (Select two.)
- A. You cannot see report data in Dimension for more than one device.
- B. Export report data as a single PDF file for all the devices you want to include in the report.
- C. Create a report schedule that includes all the devices you want to include in the report.
- D. Create a device group and view the reports for that group.
Answer: C,D
NEW QUESTION 42
Match each type of NAT with the correct description:
Allows a user on the trusted or optional network to connect to a public server that is on the same physical Firebox interface by its public IP address or domain name. (Choose one)
- A. Dynamic NAT
- B. NAT Loopback
- C. 1-to1 NAT
Answer: B
Explanation:
Explanation/Reference:
NAT loopback allows a user on the trusted or optional networks to get access to a public server that is on the same physical Firebox or XTM device interface by its public IP address or domain name.
Reference: http://www.watchguard.com/help/docs/wsm/11/en-US/index_Left.html#CSHID=en-US%2Fnat
%2Fnat_loopback_c.html|StartTopic=Content%2Fen-US%2Fnat%2Fnat_loopback_c.html
NEW QUESTION 43
What settings must you device configuration file include for Gateway AntiVirus to protect users on your network? (Select two.)
- A. Configure a policy to use a proxy action that has AntiVirus settings configured.
- B. Install the Gateway AntiVirus server on your network.
- C. Disable automatic signature updates.
- D. Decrease the scan limits
- E. Configure Gateway AntiVirus settings for a proxy action.
Answer: A,E
NEW QUESTION 44
With the policies configured as shown in this image, HTTP traffic can be sent and received through branch office VPN tunnel.1 and tunnel.2.
- A. True
- B. False
Answer: B
NEW QUESTION 45
If you disable the Outgoing policy, which policies must you add to allow trusted users to connect to commonly used websites? (Select three.)
- A. FTP port 21
- B. HTTPS port 443
- C. HTTP port 80
- D. DNS port 53
- E. NAT policy
Answer: B,C,D
Explanation:
TCP-UDP packet filter
If you decide to remove the Outgoing policy, you must add a policy for any type of traffic you want to allow through the Firebox. If you remove the Outgoing policy and then decide you want to allow all TCPand UDP connections through the Firebox again, you must add the TCP-UDP packet filter to provide the same function. This is because the Outgoing policy does not appear in the list of standard policies available from Policy Manager.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 97
NEW QUESTION 46
Match each WatchGuard Subscription Service with its function.
Scans files to detect malicious software infections. (Choose one).
- A. Reputation Enable Defense RED
- B. Spam Blocker
- C. Gateway / Antivirus
- D. Data Loss Prevention DLP
- E. Quarantine Server
Answer: C
Explanation:
Gateway Antivirus provides a virus scanner that uses both an extensive signature database (updated through subscription) and a heuristic analysis engine.
Reference:http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html
NEW QUESTION 47
......
Exam Engine for Essentials Exam Free Demo & 365 Day Updates: https://www.passleader.top/WatchGuard/Essentials-exam-braindumps.html
Essentials PDF Questions and Testing Engine With 75 Questions: https://drive.google.com/open?id=16tmlRnk2r8B1UqvXXXqxx7iNKj2kM4gb