Give Push to your Success with Fireware Essentials Essentials Exam Questions [Q10-Q31]

Give Push to your Success with Fireware Essentials Essentials Exam Questions [Q10-Q31]

November 6, 2023 latestexam 0 Comments

Rate this post

Give Push to your Success with Fireware Essentials Essentials Exam Questions

Essentials 100% Guarantee Download Essentials Exam PDF Q&A

Q10. When your device is in a default state, to which interface do you connect your management computer so you can use the Quick Setup Wizard or Web Setup Wizard to configure the device? (Select one.)

Interface 0

Console interface

Any interface

Interface 1

Q11. Match the monitoring tool to the correct task.
Which tool can learn the status of your IPS signature database? (Select one)

FireBox System Manager – Blocked Sites list

Log Server

FireWatch

Firebox System Manager – Subscription services

Firebox System Manager – Authentication list

Traffic Monitor

Explanation/Reference:
To look up information about an IPS signature:
1. Open Firebox System Manager.
2. Select the Subscription Services tab.
3. In the Intrusion Prevention section, click Show.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

Q12. Which of these threats can the Firebox prevent with the default packet handling settings? (Select four.)

Access to inappropriate websites

Denial of service attacks

Flood attacks

Malware in downloaded files

Port scans

Viruses in email messages

IP spoofing

Q13. With the policies configured as shown in this image, HTTP traffic can be sent and received through branch office VPN tunnel.1 and tunnel.2.

True

False

Q14. While troubleshooting a branch office VPN tunnel, you see this log message:
2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3DES, expecting AES
What settings could you modify in the local device configuration to resolve this issue? (Select one.)

BOVPN Gateway settings

BOVPN-Allow policies

BOVPN Tunnel settings

BOVPN Tunnel Route settings

The WatchGuard BOVPN settings error in this example states phase one encryption. Only the BOVPN Gateway settings can specify phase one settings. BOVPN Tunnel settings specify phase 2 settings.

Q15. Which of these actions adds a host to the temporary or permanent blocked sites list? (Select three.)

Enable the AUTO-block sites that attempt to connect option in a deny policy.

Add the site to the Blocked Sites Exceptions list.

On the Firebox System Manager >Blocked Sites tab, select Add.

In Policy Manager, select Setup> Default Threat Protection > Blocked Sites and click Add.

Explanation/Reference:
A: You can configure a deny policy to automatically block sites that originate traffic that does not comply with the policy rulese
1. From Policy Manager, double-click the PCAnywhere policy.
2. Click the Properties tab. Select the Auto-block sites that attempt to connect checkbox.
Reference: https://www.watchguard.com/training/fireware/80/defense8.htm C: The blocked sites list shows all the sites currently blocked as a result of the rules defined in Policy Manager. From this tab, you can add sites to the temporary blocked sites list, or remove temporary blocked sites.
Reference: http://www.watchguard.com/training/fireware/82/monitoa6.htm
D: You can use Policy Manager to permanently add sites to the Blocked Sites list.
1. select Setup > Default Threat Protection > Blocked Sites.
2. Click Add.
The Add Site dialog box appears.
Reference: http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#cshid=en-US/ intrusionprevention/blocked_sites_permanent_c.html

Q16. You can configure your Firebox to send log messages to how many WatchGuard Log Servers at the same time? (Select one.)

One

Two

As many as you have configured on your network.

http://www.watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/logging/logging_and_logfiles_about_c.html

Q17. When you examine the log messages In Traffic Monitor, you see that some network packets are denied with an unhandled packet log message. What does this log massage mean? (Select one.)

The packet is denied because the site is on the Blocked Sites List.

The packet is denied because it matched a policy.

The packet is denied because it matched an IPS signature.

The packet is denied because it does not match any firewall policies.

Q18. Match each type of NAT with the correct description:
Conserves IP addresses and hides the internal topology of your network. (Choose one)

1-to1 NAT

Dynamic NAT

NAT Loopback

Q19. How is a proxy policy different from a packet filter policy? (Select two.)

Only a proxy policy examines information in the IP header.

Only a proxy policy uses the IP source, destination, and port to control network traffic.

Only a proxy policy can prevent specific threats without blocking the entire connection.

Only a proxy works ta the application, network, and transport layers to examine all connection data.

Q20. You can use Firebox System Manager to download a PCAP file that includes packet information about the protocols that manage traffic on your network.

True

False

Q21. Match the monitoring tool to the correct task.
Which is not a Fireware monitoring tool? (Select one)

FireBox System Manager – Blocked Sites list

Log Server

FireWatch

Firebox System Manager – Subscription services

Firebox System Manager – Authentication list

Traffic Monitor

The Fireware monitor and configuration tools are: Edge Web Manager, Firebox System Manager, HostWatch, and Ping.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59,

Q22. From the Firebox System Manager >Authentication List tab, you can view all of the authenticated users connected to your Firebox and disconnect any of them.

True

False

Q23. The policies in a default Firebox configuration do not allow outgoing traffic from optional interfaces.

True

False

Q24. Which of these actions adds a host to the temporary or permanent blocked sites list? (Select three.)

Enable the AUTO-block sites that attempt to connect option in a deny policy.

Add the site to the Blocked Sites Exceptions list.

On the Firebox System Manager >Blocked Sites tab, select Add.

In Policy Manager, select Setup> Default Threat Protection > Blocked Sites and click Add.

Q25. How is a proxy policy different from a packet filter policy? (Select two.)

Only a proxy policy examines information in the IP header.

Only a proxy policy uses the IP source,destination, and port to control network traffic.

Only a proxy policy can prevent specific threats without blocking the entire connection.

Only a proxy works at the application, network, and transport layers to examine all connection data.

C: Proxies can prevent potential threats from reaching your network without blocking the entire connection.
D: A proxy operates at the application layer, as well as the network and transport layers of a TCP/IP packet, while a packet filter operates onlyat the network and transport protocol layers.
Incorrect:
Not A: A packet filter examines each packet’s IP header to control the network traffic into and out of your network.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 95

Q26. If your Firebox has a single public IP address, and you want to forward inbound traffic to internal hosts based on the destination port, which type of NAT should you use? (Select one.)

Static NAT

1-to-1 NAT

Dynamic NAT

https://www.watchguard.com/training/fireware/10/fireware10_basics.pdf
See page 76: Static NAT allows inbound connections on specific ports to one or more public servers from a single external IP address. The Firebox changes the destination IP address of the packets and forwards them based on the original destination port number.

Q27. Clients on the trusted network need to connect to a server behind a router on the optional network. Based on this image, what static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100? (Select one.)

Route to 10.0.20.0/24, Gateway 10.0.2.1

Route to 10.0.20.0/24, Gateway 10.0.2.254

Route to 10.0.20.0, Gateway 10.0.2.254

Route to 10.0.10.0/24, Gateway 10.0.10.1

We must add a trusted static route to the 10.0.20.0/24 network through the 10.0.2.254 gateway.

Q28. Which authentication servers can you use with your Firebox? (Select four.)

Active Directory

RADIUS

LDAP

Linux Authentication

Kerberos

TACACS+

Firebox databases

Q29. You can use Firebox-DB authentication with any type of Mobile VPN.

True

False

Q30. In the default Firebox configuration file, which policies control management access to the device? (Select two.)

WatchGuard

FTP

Ping

WatchGuard Web UI

Outgoing

Ping is generated by default as the explanation states but Ping does not manage the device. The policies that manage the device are WatchGuard & WatchGuard Web UI

Q31. Which of these services would you use to allow the use of P2P programs for a specific department in your organization? (Select one.)

Reputation Enabled Defense

Application Control

Data Loss Prevention

IPS

Loading …

Get Essentials Actual Free Exam Q&As to Prepare Certification: https://www.latestcram.com/Essentials-exam-cram-questions.html

Related Certifications

C-TS452-2022 (1)
C-BW4H-2404 (1)
C_S4CS_2302 (1)
C-C4H620-34 (1)
C-THR81-2211 (1)
C_SACP_2114 (1)
C-S4CSC-2202 (1)
C_ARSCC_2208 (1)
C_THR82_2205 (1)
C_ARSOR_2302 (1)

Free Cram & Latest Exams Dumps

Give Push to your Success with Fireware Essentials Essentials Exam Questions [Q10-Q31]

leave a comment Cancel reply

Related Certifications

Recent Posts

Archives

Categories