Quality Essentials PDF Dumps - Essentials Exam Questions
Most UptoDate WatchGuard Essentials Exam Dumps PDF 2022
Understanding functional and technical aspects of Essentials Administration and Setup
The following will be discussed here:
- Firebox backup and restore
- Firebox default policies and network settings
- Configuration file migration
- Feature keys
- Understand how to set up a Firebox with a basic configuration, and complete basic Firebox administration tasks.
WatchGuard Essentials Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION 12
Which of these options must you configure in an HTTPS-proxy policy to detect credit card numbers in HTTP traffic that is encrypted with SSL? (Select two.)
- A. Data Loss Prevention
- B. Application Control
- C. WebBlocker
- D. Gateway AntiVirus
- E. Deep inspection of HTTPS content
Answer: E
NEW QUESTION 13
In this diagram, which branch office VPN tunnel route must you add on the Site A Firebox to allow traffic between devices on the trusted network at Site A and the trusted network at site B? (Select one.)
- A. Local: 10.0.10.0/24 <--> Remote: 192.168.1.0/24
- B. Local: 192.168.1.0/24 <--> Remote: 10.0.10.0/24
- C. Local: 203.0.113.10/24 <--> Remote: 198.151.100.2/24
- D. Local: 10.0.10.1/24 <--> Remote: 192.168.1.1/24
Answer: D
Explanation:
Explanation/Reference:
The local, Site A, network is 10.0.10.1/24 while the remote, Site B, network is 192.168.1.1/24.
NEW QUESTION 14
A user receives a deny message that the installation file (install.exe) is blocked by the HTTP-proxy policy and cannot be downloaded. Which HTTP proxy action rule must you modify to allow download of the installation file? (Select one.)
- A. HTTP Request > Request Methods
- B. HTTP Response > Body Content Types
- C. HTTP Response > Header Fields
- D. HTTP Request > Authorization
- E. WebBlocker
Answer: B
NEW QUESTION 15
Which tool can add an IP address for the Firebox to permanently block? (Select one)
- A. Firebox System Manager - Authentication list
- B. Traffic Monitor
- C. Log Server
- D. Firebox System Manager - Subscription services
- E. FireWatch
- F. FireBox System Manager - Blocked Sites list
Answer: A
Explanation:
Block a site permanently
The Successful Company networkadministrator has been driven to distraction recently by a script kiddy using addresses in the 192.136.15.0/24 network to run probes of the Successful network. In this exercise, we permanently block all connections from that network.
1.From PolicyManager, select Setup > Default Threat Protection > Blocked Sites. The Blocked Sites Configuration dialog box opens.
2.On the Blocked Sites tab, click Add.
3.The Add Site dialog box opens. 3. Use the Choose Type drop-down list to select Network IP. In the Value text box, type 192.136.15.0/ 24.
4. Click OK.
The entry appears in the Blocked Sites list. With this configuration, the Firebox blocks all packets to and from the 192.136.15.0/24 network range.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181
NEW QUESTION 16
When you configure the Global Application Control action, it is automatically applied to all policies.
- A. False
- B. True
Answer: A
NEW QUESTION 17
Match each WatchGuard Subscription Service with its function.
Uses rules, pattern matching, and sender reputation to block unwanted email messages. (Choose one).
- A. Gateway / Antivirus
- B. Intrusion Prevention Server IPS
- C. Reputation Enable Defense RED
- D. Spam Blocker
- E. APTBlocker
Answer: D
Explanation:
SpamBlocker provides a spam scanning engine that works in concert with WatchGuard's cloud-based technology to prevent spam from gaining access to the email servers (and clients).
Reference:http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html
NEW QUESTION 18
How can you include log messages from more than one Firebox in a single report generated by Dimension? (Select two.)
- A. Create a device group and view the reports for that group.
- B. You cannot see report data in Dimension for more than one device.
- C. Create a report schedule that includes all the devices you want to include in the report.
- D. Export report data as a single PDF file for all the devices you want to include in the report.
Answer: A,C
NEW QUESTION 19
Which of these services would you use to allow the use of P2P programs for a specific department in your organization? (Select one.)
- A. Data Loss Prevention
- B. Reputation Enabled Defense
- C. IPS
- D. Application Control
Answer: D
NEW QUESTION 20
HOTSPOT
Match each WatchGuard Subscription Service with its function:
Answer:
Explanation:
Explanation:
WebBlocker
Spam Blocker Gateway / Antivirus APT Blocker Application Control Quarantee Server Intrusion Prevention Server IPS Data Loss Prvention DLP Reputation Enable Defense RED
NEW QUESTION 21
Users on the trusted network cannot browse Internet websites.
Based on the configuration shown in this image, what could be the problem with this policy configuration? (Select one.)
- A. The default Outgoing policy has been removed and there is no policy to allow DNS traffic.
- B. The HTTP-proxy allows Any-Trusted and Any-Optional to Any-External.
- C. The HTTP-proxy policy has higher precedence than the HTTPS-proxy policy.
- D. The HTTP-proxy policy is configured for the wrong port.
Answer: D
NEW QUESTION 22
When you examine the log messages In Traffic Monitor, you see that some network packets are denied with an unhandled packet log message. What does this log massage mean? (Select one.)
- A. The packet is denied because it does not match any firewall policies.
- B. The packet is denied because the site is on the Blocked Sites List.
- C. The packet is denied because it matched a policy.
- D. The packet is denied because it matched an IPS signature.
Answer: A
NEW QUESTION 23
What is the best method to downgrade the version of Fireware OS on your Firebox without losing all device configuration settings? (Select one.)
- A. Change the OS compatibility setting in Policy Manager to downgrade the device. Then use Policy Manager to save the configuration to the device.
- B. Restore a saved backup image that was created for the device before the last Fireware OS upgrade.
- C. Use the downgrade feature on Policy Manager to select a previous of Fireware OS.
- D. Use the Upgrade OS feature in Fireware Web UI to install the sysa_dl file for an order version of Fireware OS.
Answer: B
NEW QUESTION 24
Which items are included in a Firebox backup image? (Select four.)
- A. Certificates
- B. Feature keys
- C. Configuration file
- D. Log file
- E. Fireware OS
- F. Support snapshot
Answer: B,C,D,F
NEW QUESTION 25
A local branch office VPN tunnel route is configured as shown in this image.
On the remote peer device, what must be configured as the remote network address for this tunnel route? (Select one.)
- A. 10.0.1.0/24
- B. 10.0.20.0/24
- C. 10.0.10.0/24
Answer: C
NEW QUESTION 26
If your Firebox has a single public IP address, and you want to forward inbound traffic to internal hosts based on the destination port, which type of NAT should you use? (Select one.)
- A. 1-to-1 NAT
- B. Dynamic NAT
- C. Static NAT
Answer: A
NEW QUESTION 27
After you enable spamBlocker, your users experience no reduction in the amount of spam they receive. What could explain this? (Select three.)
- A. The Maximum File Size to Scan option is set too high.
- B. A spamBlocker exception is configured to allow traffic from sender *.
- C. spamBlocker Virus Outbreak Detection is not enabled.
- D. Connections cannot be resolved to the spamBlocker servers because DNS is not configured on the Firebox.
- E. The spamBlocker action for Confirmed Spam is set to Allow.
Answer: B,D,E
Explanation:
Explanation/Reference:
A: Spamblocker requires DNS to be configured on your XTM device
B: If you use spamBlocker with the POP3 proxy, you have only two actions to choose from: Add Subject Tag and Allow. Allow lets spam email messages go through the Firebox without a tag.
D: The Firebox might sometimes identify a message as spam when it is not spam. If you know the address of the sender, you can configure the Firebox with an exception that tells it not to examine messages from that source address or domain.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 138
NEW QUESTION 28
If you disable the Outgoing policy, which policies must you add to allow trusted users to connect to commonly used websites? (Select three.)
- A. HTTPS port 443
- B. DNS port 53
- C. HTTP port 80
- D. FTP port 21
- E. NAT policy
Answer: A,B,C
Explanation:
Explanation/Reference:
TCP-UDP packet filter
If you decide to remove the Outgoing policy, you must add a policy for any type of traffic you want to allow through the Firebox. If you remove the Outgoing policy and then decide you want to allow all TCP and UDP connections through the Firebox again, you must add the TCP-UDP packet filter to provide the same function.
This is because the Outgoing policy does not appear in the list of standard policies available from Policy Manager.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 97
NEW QUESTION 29
......
100% Free Fireware Essentials Essentials Dumps PDF Demo Cert Guide Cover: https://examsboost.dumpstorrent.com/Essentials-exam-prep.html