Watchguard Actual Tests Essentials Correct
100%
QUESTION 1
When your device is in a default state, to which interface do you connect your
management computer so you can use the Quick Setup Wizard or Web Setup
Wizard to configure the device?
A. Interface 0
B. Console Interface
C. Any Interface
D. Interface 1 - ANSWER To use the Quick Setup Wizard:
D. Connect your computer to interface 1 of the Firebox.
In the default Firebox configuration file, which policies control management access to
the device? (Select two)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing - ANSWER Answer: A & D
WatchGuard: The packet filter policy that controls administrative connections to the
Firebox is WG-Firebox-Mgmt. The Quick Setup Wizard adds this policy with the name
WatchGuard.
WatchGuard Web UI: By default, the Firebox allows connections to the WebUI from any
computer on a trusted or optional network. Access to
the WebUI is controlled by the WatchGuard Web UI policy. This policy is automatically
added to your device configuration when you run the Quick Setup Wizard.
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM
device, your computer must have an IP address on which subnet? (Select one)
A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24 - ANSWER B
To connect to the device when you use either setup wizard, your computer must have
an IP address on the 10.0.1.0/24 subnet. If your computer uses DHCP, it will get a new
IP address automatically after you connect to interface 1.
What is the best method to downgrade the version of Fireware OS on your Firebox
without losing all device configuration settings? (Select one)
A. Restore a saved backup image that was created for the device before the last
Fireware OS upgrade.
, B. Use the Upgrade OS feature in the Fireware Web UI to install the sysa_dl file for an
older version of Fireware OS.
C. Change the OS compatibility setting in Policy Manager to downgrade the device.
Then use Policy Manager to save the configuration to the device.
D. Use the downgrade feature on Policy Manager to select a previous version of
Fireware OS. - ANSWER A.
We recommend that you create a backup image of the Firebox before you make
significant changes to your device configuration file, or upgrade your Firebox OS.
It is especially important to save a device backup image before you upgrade the version
of FirewareOS on the Firebox. The backup image is the easiest way to
downgrade the Firebox, if you ever need to.
Which of these threats can the Firebox prevent with the default packet handling
settings? (Select four.)
A. Denial of service attacks.
B. Flood attacks.
C. Malware in downloaded files.
D. Port scans
E. .Virus' in email messages.
F. IP spoofing - ANSWER A, B, D, F
http://www.watchguard.com/training/fireware/82/defense3.htm
Users on the trusted network cannot browse Internet websites. Based on the
configuration shown in this image, what could be the problem with this policy
configuration? (Select one.)
<!--add policies here-->
1 FTP | Any-Tr,Any-Opt | External | tcp:21
2 HTTP-proxy | Any-Tr,Any-Opt | Any-Ext | tcp:80
3 HTTPS-proxy|Any-Tr,Any-Opt|Any-Ext|tcp:443
4 WG-Auth|Any-Tr,Any-Opt|Firebox|tcp:4100
5 WG Web UI|Any-Tr,Any-Opt|Firebox |tcp:8080
6 Ping|Any-Tr,Any-Opt|Any|ICMP (type:8,code:255)
7 WG-FireboxMgmt|Any-Tr,Any-Opt|Firebox|tcp:4105,tcp:4117
A. The default Outgoing policy has been removed and there is no policy to allow DNS
traffic.
B. The HTTP-proxy policy has higher precedence than the HTTPS-proxy policy.
C. The HTTP-proxy policy is configured for the wrong port.
D. The HTTP-proxy allows Any-Trusted and Any-Optional to Any-External. - ANSWER
Correct Answer: A
About the Outgoing Policy
The default Outgoing policy is a packet filter policy that is automatically added to your
Firebox configuration when you run the Quick Setup Wizard to set up your device and
create a basic device configuration file. The Outgoing policy allows all TCP and UDP
connections from any trusted or optional source on your network to any external
100%
QUESTION 1
When your device is in a default state, to which interface do you connect your
management computer so you can use the Quick Setup Wizard or Web Setup
Wizard to configure the device?
A. Interface 0
B. Console Interface
C. Any Interface
D. Interface 1 - ANSWER To use the Quick Setup Wizard:
D. Connect your computer to interface 1 of the Firebox.
In the default Firebox configuration file, which policies control management access to
the device? (Select two)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing - ANSWER Answer: A & D
WatchGuard: The packet filter policy that controls administrative connections to the
Firebox is WG-Firebox-Mgmt. The Quick Setup Wizard adds this policy with the name
WatchGuard.
WatchGuard Web UI: By default, the Firebox allows connections to the WebUI from any
computer on a trusted or optional network. Access to
the WebUI is controlled by the WatchGuard Web UI policy. This policy is automatically
added to your device configuration when you run the Quick Setup Wizard.
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM
device, your computer must have an IP address on which subnet? (Select one)
A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24 - ANSWER B
To connect to the device when you use either setup wizard, your computer must have
an IP address on the 10.0.1.0/24 subnet. If your computer uses DHCP, it will get a new
IP address automatically after you connect to interface 1.
What is the best method to downgrade the version of Fireware OS on your Firebox
without losing all device configuration settings? (Select one)
A. Restore a saved backup image that was created for the device before the last
Fireware OS upgrade.
, B. Use the Upgrade OS feature in the Fireware Web UI to install the sysa_dl file for an
older version of Fireware OS.
C. Change the OS compatibility setting in Policy Manager to downgrade the device.
Then use Policy Manager to save the configuration to the device.
D. Use the downgrade feature on Policy Manager to select a previous version of
Fireware OS. - ANSWER A.
We recommend that you create a backup image of the Firebox before you make
significant changes to your device configuration file, or upgrade your Firebox OS.
It is especially important to save a device backup image before you upgrade the version
of FirewareOS on the Firebox. The backup image is the easiest way to
downgrade the Firebox, if you ever need to.
Which of these threats can the Firebox prevent with the default packet handling
settings? (Select four.)
A. Denial of service attacks.
B. Flood attacks.
C. Malware in downloaded files.
D. Port scans
E. .Virus' in email messages.
F. IP spoofing - ANSWER A, B, D, F
http://www.watchguard.com/training/fireware/82/defense3.htm
Users on the trusted network cannot browse Internet websites. Based on the
configuration shown in this image, what could be the problem with this policy
configuration? (Select one.)
<!--add policies here-->
1 FTP | Any-Tr,Any-Opt | External | tcp:21
2 HTTP-proxy | Any-Tr,Any-Opt | Any-Ext | tcp:80
3 HTTPS-proxy|Any-Tr,Any-Opt|Any-Ext|tcp:443
4 WG-Auth|Any-Tr,Any-Opt|Firebox|tcp:4100
5 WG Web UI|Any-Tr,Any-Opt|Firebox |tcp:8080
6 Ping|Any-Tr,Any-Opt|Any|ICMP (type:8,code:255)
7 WG-FireboxMgmt|Any-Tr,Any-Opt|Firebox|tcp:4105,tcp:4117
A. The default Outgoing policy has been removed and there is no policy to allow DNS
traffic.
B. The HTTP-proxy policy has higher precedence than the HTTPS-proxy policy.
C. The HTTP-proxy policy is configured for the wrong port.
D. The HTTP-proxy allows Any-Trusted and Any-Optional to Any-External. - ANSWER
Correct Answer: A
About the Outgoing Policy
The default Outgoing policy is a packet filter policy that is automatically added to your
Firebox configuration when you run the Quick Setup Wizard to set up your device and
create a basic device configuration file. The Outgoing policy allows all TCP and UDP
connections from any trusted or optional source on your network to any external
