MGRADES
Watchguard Fireware Essentials Online
Course UPDATED ACTUAL Exam
Questions and CORRECT Answers
How is a proxy policy different from a packet filter policy? - CORRECT ANSWER - Only
a proxy policy uses IP source, destination and port to control network traffic.
Only a proxy works the application, network and transport layers to examine all connection data.
If you disable the outgoing policy, which policies must you add to allow trusted users to connect
to commonly used websites? - CORRECT ANSWER - HTTP Port 80
HTTPS Port 443
DNS Port 53
If your firebox has a single public IP address and you want to forward inbound traffic to internal
hosts based on the desintation port, which type of NAT should you use? - CORRECT
ANSWER - STATIC NAT
You can configure the SMTP-Proxy to restrict email messages and content based on which of
these message characteristics? - CORRECT ANSWER - Email message size
Attachment file name and content type
Maximum e-mail recipients
DYNAMIC NAT - CORRECT ANSWER - Conserves IP addresses and hides the internal
topology of your network.
LOOPBACK NAT - CORRECT ANSWER - Allows a user on the trusted or optional
network to connect to a public server that is on the same physical firebox interface by its public
IP address or domain name.
, MGRADES
1-to-1 NAT - CORRECT ANSWER - changes all incoming and outgoing packets sent
from one range of addresses to a different range of addresse
An e-mail newsletter about sales from an external company is sometimes blocked by
spamBlocker. What option could you use to make sure the newsletter is delivered to your users?
- CORRECT ANSWER - Add a spamBlocker exception based on the From field of the
newsletter e-mail.
The policies in a default firebox configuration do not allow outgoing traffic from optional
interfaces. - CORRECT ANSWER - false
Which treats can the firebox prevent with default packet handling settings? - CORRECT
ANSWER - DOS
Flood attacks
Port Scans
IP Spoofing
After you enable spamBLocker, your users experience no reduction in the amount of spam they
receive. What could explain this? (Select three) - CORRECT ANSWER - A. Connections
cannot be resolved to the spamBlocker servers because DNS is not configured on the Firebox.
B. The spamBlocker action for confirmed spam is set to allow
C. a spam locker exception is configured to allow traffic from sender.
Which of these third party authentication methods must you specify a search base? - CORRECT
ANSWER - Active Directory
LDAP
Only 50 clients on the trusted network of your firebox can connect to the internet at the same
time. What could cause this? - CORRECT ANSWER - The DHCP Address pool on the
trusted only has 50 IP addresses
Watchguard Fireware Essentials Online
Course UPDATED ACTUAL Exam
Questions and CORRECT Answers
How is a proxy policy different from a packet filter policy? - CORRECT ANSWER - Only
a proxy policy uses IP source, destination and port to control network traffic.
Only a proxy works the application, network and transport layers to examine all connection data.
If you disable the outgoing policy, which policies must you add to allow trusted users to connect
to commonly used websites? - CORRECT ANSWER - HTTP Port 80
HTTPS Port 443
DNS Port 53
If your firebox has a single public IP address and you want to forward inbound traffic to internal
hosts based on the desintation port, which type of NAT should you use? - CORRECT
ANSWER - STATIC NAT
You can configure the SMTP-Proxy to restrict email messages and content based on which of
these message characteristics? - CORRECT ANSWER - Email message size
Attachment file name and content type
Maximum e-mail recipients
DYNAMIC NAT - CORRECT ANSWER - Conserves IP addresses and hides the internal
topology of your network.
LOOPBACK NAT - CORRECT ANSWER - Allows a user on the trusted or optional
network to connect to a public server that is on the same physical firebox interface by its public
IP address or domain name.
, MGRADES
1-to-1 NAT - CORRECT ANSWER - changes all incoming and outgoing packets sent
from one range of addresses to a different range of addresse
An e-mail newsletter about sales from an external company is sometimes blocked by
spamBlocker. What option could you use to make sure the newsletter is delivered to your users?
- CORRECT ANSWER - Add a spamBlocker exception based on the From field of the
newsletter e-mail.
The policies in a default firebox configuration do not allow outgoing traffic from optional
interfaces. - CORRECT ANSWER - false
Which treats can the firebox prevent with default packet handling settings? - CORRECT
ANSWER - DOS
Flood attacks
Port Scans
IP Spoofing
After you enable spamBLocker, your users experience no reduction in the amount of spam they
receive. What could explain this? (Select three) - CORRECT ANSWER - A. Connections
cannot be resolved to the spamBlocker servers because DNS is not configured on the Firebox.
B. The spamBlocker action for confirmed spam is set to allow
C. a spam locker exception is configured to allow traffic from sender.
Which of these third party authentication methods must you specify a search base? - CORRECT
ANSWER - Active Directory
LDAP
Only 50 clients on the trusted network of your firebox can connect to the internet at the same
time. What could cause this? - CORRECT ANSWER - The DHCP Address pool on the
trusted only has 50 IP addresses
