Watchguard Network Security Essentials Cloud
Questions and Answers| Latest Update
While troubleshooting a branch office VPN tunnel, you see this log message:2014-07-23
12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3 DES,
expecting AESWhat settings could you modify in the local device configuration to resolve this
issue? (Select one.)
A. BOVPN Gateway settings
B. BOVPN-Allow policies
C. BOVPN Tunnel settings
D. BOVPN Tunnel Route settings BOVPN Gateway settings (Gateway is Phase 1, Tunnel
is Phase 2)
Allows a user on the trusted or optional network to connect to a public server that is on the same
physical Firebox interface by its public IP address or domain name. (Choose one)
A. 1-to1 NAT
B. Dynamic NAT
C. NAT Loopback NAT Loopback
True of false: a First Run/Last Run policy analyzes traffic at the application, transport, network
layers? False
There are two networks one on floor 1 subnet 192.168.3.0/24 and one network on floor 2
192.168.2.0/24. What route needs to be added so people on floor 1 can reach a server on floor 2.
, A. A static route from 1 to 2
B. No changes need to be made networks on the same subnet.
C. A static route from 2 to 1
D. A static route from 1 to 2 and 2 to 1 A static route from 1 to 2 and 2 to 1
If a connection fails to fail over and your boss wants you tell him why it didn't failover?
SDWAN ping policy wasn't setup
Link monitor failed
Link monitor was set to gradually fall back
Link Monitor was set tp ping the default gateway but the outage happened further upstream
Basically know exactly how link monitor works .
You can edit the Advanced settings in an outbound policy to override the global dynamic NAT
policy T/F ??
What does the Firebox do with Outgoing connections that don't apply to a policy?
A. Send traffic to the default gateway
B. Blocks traffic
C. Denies traffic
Questions and Answers| Latest Update
While troubleshooting a branch office VPN tunnel, you see this log message:2014-07-23
12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3 DES,
expecting AESWhat settings could you modify in the local device configuration to resolve this
issue? (Select one.)
A. BOVPN Gateway settings
B. BOVPN-Allow policies
C. BOVPN Tunnel settings
D. BOVPN Tunnel Route settings BOVPN Gateway settings (Gateway is Phase 1, Tunnel
is Phase 2)
Allows a user on the trusted or optional network to connect to a public server that is on the same
physical Firebox interface by its public IP address or domain name. (Choose one)
A. 1-to1 NAT
B. Dynamic NAT
C. NAT Loopback NAT Loopback
True of false: a First Run/Last Run policy analyzes traffic at the application, transport, network
layers? False
There are two networks one on floor 1 subnet 192.168.3.0/24 and one network on floor 2
192.168.2.0/24. What route needs to be added so people on floor 1 can reach a server on floor 2.
, A. A static route from 1 to 2
B. No changes need to be made networks on the same subnet.
C. A static route from 2 to 1
D. A static route from 1 to 2 and 2 to 1 A static route from 1 to 2 and 2 to 1
If a connection fails to fail over and your boss wants you tell him why it didn't failover?
SDWAN ping policy wasn't setup
Link monitor failed
Link monitor was set to gradually fall back
Link Monitor was set tp ping the default gateway but the outage happened further upstream
Basically know exactly how link monitor works .
You can edit the Advanced settings in an outbound policy to override the global dynamic NAT
policy T/F ??
What does the Firebox do with Outgoing connections that don't apply to a policy?
A. Send traffic to the default gateway
B. Blocks traffic
C. Denies traffic
