Watchguard Network Security Essentials (Exam Questions with answers),

Watchguard Network Security |\ |\ |\




Essentials (Exam Questions with |\ |\ |\




answers)
|\




Allow Incoming connections to the example.com domain only
|\ |\ |\ |\ |\ |\ |\




.From the SMTP proxy action settings in this image, which of
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


these options is configured for incoming SMTP traffic? (Select
|\ |\ |\ |\ |\ |\ |\ |\ |\


one.)

Allow Incoming connections to the example.com domain only
|\ |\ |\ |\ |\ |\ |\


Allow Outgoing connection from example.com
|\ |\ |\ |\


Deny Incoming connections to the example.com domain only
|\ |\ |\ |\ |\ |\ |\


Deny outgoing connections from example.com
|\ |\ |\ |\




Any-optional
Optional-1
Any
***In the network configuration in this image, which aliases is
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


Eth2 a member of? (Select three.)
|\ |\ |\ |\ |\


A. Any-optional
|\


B. Any-External
|\


C. Optional-1
|\


D. Any|\


E. Any-Trusted
|\




***When your device is in a default state, to which interface do
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


you connect your management computer so you can use the
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


Quick Setup Wizard or Web SetupWizard to configure the device?
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


(Select one.) |\

,A. Interface 0
|\ |\


B. Console interface
|\ |\


C. Any interface
|\ |\


D. Interface 1
|\ |\




Interface 1 |\




***In the default Firebox configuration file, which policies control
|\ |\ |\ |\ |\ |\ |\ |\ |\


management access to the device? (Select two.) |\ |\ |\ |\ |\ |\




A. WatchGuard
|\


B. FTP
|\


C. Ping
|\


D. WatchGuard Web UI
|\ |\ |\


E. Outgoing
|\




WatchGuard
WatchGuard Web UI |\ |\




To use the Web Setup Wizard or Quick Setup Wizard to configure
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


your Firebox or XTM device, your computer must have an IP
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


address on which subnet? (Select one.)
|\ |\ |\ |\ |\




A. 10.0.10.0/24
|\


B. 10.0.1.0/24
|\


C. 172.16.10.0/24
|\


D. 192.168.1.0/24
|\




10.0.1.0/24
***What is the best method to downgrade the version of Fireware
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


OS on your Firebox without losing all device configuration
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


settings? (Select one.) |\ |\




A. Restore a saved backup image that was created for the device
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


before the last Fireware OS upgrade.
|\ |\ |\ |\ |\ |\


B. Use the Upgrade OS feature in Fireware Web UI to install the
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


sysa_dl file for an order version of Fireware OS.
|\ |\ |\ |\ |\ |\ |\ |\

,C. Change the OS compatibility setting in Policy Manager to
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


downgrade the device. Then use Policy Manager to save the |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


configuration to the device. |\ |\ |\


D. Use the downgrade feature on Policy Manager to select a
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


previous of Fireware OS. |\ |\ |\




Restore a saved backup image that was created for the device
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


before the last Fireware OS upgrade.
|\ |\ |\ |\ |\




***You configured four Device Administrator user accounts for
|\ |\ |\ |\ |\ |\ |\ |\


your Firebox. To see a report of which Device Management users
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


have made changes to the device configuration, what must you
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


do? (Select two.)
|\ |\




A. Start Firebox System Manager for the device and review the
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


activity for the Management Users on the Authentication List tab.
|\ |\ |\ |\ |\ |\ |\ |\ |\


B. Connect to Report Manager or Dimension and view the Audit
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


Trail report for your device.
|\ |\ |\ |\


C. Open WatchGuard Server Center and review the configuration
|\ |\ |\ |\ |\ |\ |\ |\ |\


history for managed devices.|\ |\ |\


D. Configure your device to send audit trail log messages to your
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


WatchGuard Log Server or Dimension Log Server.
|\ |\ |\ |\ |\ |\ |\




Connect to Report Manager or Dimension and view the Audit Trail
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


report for your device.
|\ |\ |\ |\




Open WatchGuard Server Center and review the configuration
|\ |\ |\ |\ |\ |\ |\ |\


history for managed devices.|\ |\ |\




***Which items are included in a Firebox backup image file?
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


(Select four.) |\




A. Support snapshot
|\ |\


B. Fireware OS
|\ |\


C. Configuration file
|\ |\


D. Log file
|\ |\


E. Feature keys
|\ |\

, F. Certificates
|\


G. Passwords
|\




This question was on the exam but it had different answers.
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


One of the answer options was policies. I don't believe feature
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


keys was on there. Also users and roles were on there.
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\




Configuration file |\


Certificates
Passwords
Feature key |\




***Only 50 clients on the trusted network of your Firebox can
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


connect to the Internet at the same time. What could cause this?
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


(Select one.) |\




A. The Live Security feature key is expired.
|\ |\ |\ |\ |\ |\ |\


B. The device feature key allows a maximum of 50 client
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


connections.
C. The DHCP address pool on the trusted interface has only 50 IP
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


addresses.
D. The Outgoing policy allows a maximum of 50 client
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\


connections.
The DHCP address pool on the trusted interface has only 50 IP
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


addresses.
Route to 10.0.20.0/24, Gateway 10.0.2.254
|\ |\ |\ |\




Clients on the trusted network need to connect to a server
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


behind a router on the optional network. Based on this image,
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


what static route must be added to the Firebox for traffic from
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


clients on the trusted network to reach a server at 10.0.20.100?
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\


(Select one.) |\




A. Route to 10.0.20.0/24, Gateway 10.0.2.1
|\ |\ |\ |\ |\


B. Route to 10.0.20.0/24, Gateway 10.0.2.254
|\ |\ |\ |\ |\