WatchGuard NetWork Security eSSeNtialS
certificatioN exam – 2025 updated
QueStioNS & aNSWerS
◉ During a recent investigation, an auditor discovered that an engineer's
compromised workstation
was being used to connect to SCADA systems while the engineer was not
logged in. The engineer
is responsible for administering the SCADA systems and cannot be blocked
from connecting to
them. The SCADA systems cannot be modified without vendor approval which
requires months of
testing.
Which of the following is MOST likely to protect the SCADA systems from
misuse?
A. Update anti-virus definitions on SCADA systems
B. Audit accounts on the SCADA systems
C. Install a firewall on the SCADA network
D. Deploy NIPS at the edge of the SCADA network - Ans:
◉ Which of the following should be used to filter out activities such as instant
messaging?
-IP proxy
-Application level gateway
-Internet content filter
-Honeypot - Ans:
,◉ Mike, a network administrator, has been asked to passively monitor
network traffic to the company's sales websites. Which of the following would
be BEST suited for this task?
A. HIDS
B. Firewall
C. NIPS
D. Spam filter - Ans: NIPS
◉ Which of the following devices should you use to keep machines behind it
anonymous?
-Caching proxy
-IP proxy
-Circuit level gateway
-Firewall
- UTM - Ans: IP Proxy
◉ WPA2 has a typical key size of 128 bits. T/F - Ans: False
◉ The act of splitting the wires of a twisted-pair cable connection would be an
example of which of the following?
A. Wardriving
B. Data emanation
C. Wiretapping
D. Spectral analyzing - Ans: Wiretapping
,◉ Which of the following cables suffers from chromatic dispersion if the cable
is too long?
-Twisted-pair cable
-Fiber-optic cable
-Coaxial cable
-USB cables - Ans: Fiber-optic cable
◉ RFI is a disturbance that can affect electrical circuits, devices, and cables
due to electromagnetic conduction or radiation. T/F - Ans: False
◉ Which of the following is not a good strategy for securing a WAP?
- Use NAT filtering
-Turn off the SSID
-Place it in a Faraday cage
-Use PNAC - Ans: Place it in a Faraday cage
◉ One way to secure the administration interface of WAP is to turn it off when
not in use. T/F - Ans: False
◉ What should you configure to improve wireless security?
- Enable the SSID
-IP spoofing
-Remove repeaters
-Use MAC filtering - Ans: MAC filtering
, ◉ You can find a rogue access point on your network. What should you do
with it?
- Remove it
-Disable the SSID
-Use strong encryption
-Use PNAC - Ans:
◉ Pete, the security engineer, would like to prevent wireless attacks on his
network. Pete has implemented a
security control to limit the connecting MAC addresses to a single port. Which
of the following wireless attacks
would this address?
A. Interference
B. Man-in-the-middle
C. ARP poisoning
D. Rogue access point - Ans: Rogue Access point
◉ Fiber-optic cable is not susceptible to data emanations. T/F - Ans: True
certificatioN exam – 2025 updated
QueStioNS & aNSWerS
◉ During a recent investigation, an auditor discovered that an engineer's
compromised workstation
was being used to connect to SCADA systems while the engineer was not
logged in. The engineer
is responsible for administering the SCADA systems and cannot be blocked
from connecting to
them. The SCADA systems cannot be modified without vendor approval which
requires months of
testing.
Which of the following is MOST likely to protect the SCADA systems from
misuse?
A. Update anti-virus definitions on SCADA systems
B. Audit accounts on the SCADA systems
C. Install a firewall on the SCADA network
D. Deploy NIPS at the edge of the SCADA network - Ans:
◉ Which of the following should be used to filter out activities such as instant
messaging?
-IP proxy
-Application level gateway
-Internet content filter
-Honeypot - Ans:
,◉ Mike, a network administrator, has been asked to passively monitor
network traffic to the company's sales websites. Which of the following would
be BEST suited for this task?
A. HIDS
B. Firewall
C. NIPS
D. Spam filter - Ans: NIPS
◉ Which of the following devices should you use to keep machines behind it
anonymous?
-Caching proxy
-IP proxy
-Circuit level gateway
-Firewall
- UTM - Ans: IP Proxy
◉ WPA2 has a typical key size of 128 bits. T/F - Ans: False
◉ The act of splitting the wires of a twisted-pair cable connection would be an
example of which of the following?
A. Wardriving
B. Data emanation
C. Wiretapping
D. Spectral analyzing - Ans: Wiretapping
,◉ Which of the following cables suffers from chromatic dispersion if the cable
is too long?
-Twisted-pair cable
-Fiber-optic cable
-Coaxial cable
-USB cables - Ans: Fiber-optic cable
◉ RFI is a disturbance that can affect electrical circuits, devices, and cables
due to electromagnetic conduction or radiation. T/F - Ans: False
◉ Which of the following is not a good strategy for securing a WAP?
- Use NAT filtering
-Turn off the SSID
-Place it in a Faraday cage
-Use PNAC - Ans: Place it in a Faraday cage
◉ One way to secure the administration interface of WAP is to turn it off when
not in use. T/F - Ans: False
◉ What should you configure to improve wireless security?
- Enable the SSID
-IP spoofing
-Remove repeaters
-Use MAC filtering - Ans: MAC filtering
, ◉ You can find a rogue access point on your network. What should you do
with it?
- Remove it
-Disable the SSID
-Use strong encryption
-Use PNAC - Ans:
◉ Pete, the security engineer, would like to prevent wireless attacks on his
network. Pete has implemented a
security control to limit the connecting MAC addresses to a single port. Which
of the following wireless attacks
would this address?
A. Interference
B. Man-in-the-middle
C. ARP poisoning
D. Rogue access point - Ans: Rogue Access point
◉ Fiber-optic cable is not susceptible to data emanations. T/F - Ans: True
