WATCHGUARD NETWORK SECURITY ESSENTIALS EXAM |
QUESTIONS AND ANSWERS | VERIFIED ANSWERS 100% CORRECT
| LATEST EXAM UPDATE
DNS port number
53
HTTP Port Number
80
DHCP Port Number
67, 68
HTTPS port number
443
SMTP Port Number
25
FTP Port Number
20, 21
Performance Metrics
SD-WAN
Ping an Option
Traffic Monitor
/25 add 101 Dalmatians
126 addresses
/26 First to Last- FTL
62 addresses
/27 score is 27, and the 3 point shot
30 addresses
/28 - house #28 now Cut the house in Half
,14 addresses
/29 Two swans flew away, now turn right one upside down
6 addresses
/30 30 your dirty send you to timbuck 2
2 addresses
Most Secure encryption algorithms
AES
How does default threat protection work?
Default Threat Protection has three configurable components:
Blocked Ports
Blocked Sites
Default Packet Handling
Default Threat Protection is the first line of defense, and takes precedence
over configured policy rules and other services.
How to configure logging for watchguard cloud?
You must add the device(Add Device) in WatchGuard Cloud, then add the
verification code (AKA configure on the Firebox). The other thing you must
do is make sure to enable logging on all the policies. Though if you focus on
"add the devices in WatchGuard Cloud" and "configure on the FB", then
you should be good to go.
How does SD-WAN work?
Software-Defined WAN (SD-WAN) is a software-based routing solution
that automatically distributes network traffic across multiple WAN
connections based on policies you define. SD-WAN is embedded in the
Firebox. The Firebox monitors your WAN connections, captures near real-
time performance data, and uses this data to make routing decisions. For
example, if a WAN connection becomes congested, the Firebox
automatically sends traffic over a different WAN connection.
SD-WAN works with different types of WAN connections, which means you
can configure a hybrid WAN. For example, if your Firebox has an MPLS
connection and a broadband Internet connection, you can use both in an
, SD-WAN configuration.
You can use SD-WAN to increase application availability and performance,
and to better utilize a hybrid WAN. For example, with SD-WAN, you can:
Send high-priority, latency-sensitive traffic such as VoIP and video
conferencing over higher-quality, more expensive WAN connections
Send lower-priority traffic over less expensive WAN connections
Specify performance thresholds so that connections fail over to a different
WAN connection when performance is less than ideal
What is Dynamic NAT?
HIDES INTERNAL TOPOLGY OF THE NETWORK-
Dynamic NAT is the most frequently used type of NAT. It changes the
source IP address of an outgoing connection to the public IP address of the
Firebox. Outside the Firebox, you see only the external interface IP address
of the Firebox on outgoing packets.
Many computers can connect to the Internet from one public IP address.
Dynamic NAT gives more security for internal hosts that use the Internet,
because it hides the IP addresses of hosts on your network. With dynamic
NAT, all connections must start from behind the Firebox. Malicious hosts
cannot start connections to the computers behind the Firebox when the
Firebox is configured for dynamic NAT.
What is 1 to 1 NAT?
EVERY COMPOUTER ON AN INTERNAL NETWORK WOULD HAVE
A (FAKE) EXTERNAL IP ADDRESS
When you enable 1-to-1 NAT, your Firebox maps one or more private IP
addresses to one or more public IP addresses. This allows you to make
internal network resources like a mail server accessible on the internet.
You can apply 1-to-1 NAT to one IP address, a range of addresses, or a
subnet. A 1-to-1 NAT rule always has precedence over dynamic NAT.
To connect to a computer located on a different interface that uses 1-to-1
NAT, you must use that computer's public (NAT base) IP address. If this is
QUESTIONS AND ANSWERS | VERIFIED ANSWERS 100% CORRECT
| LATEST EXAM UPDATE
DNS port number
53
HTTP Port Number
80
DHCP Port Number
67, 68
HTTPS port number
443
SMTP Port Number
25
FTP Port Number
20, 21
Performance Metrics
SD-WAN
Ping an Option
Traffic Monitor
/25 add 101 Dalmatians
126 addresses
/26 First to Last- FTL
62 addresses
/27 score is 27, and the 3 point shot
30 addresses
/28 - house #28 now Cut the house in Half
,14 addresses
/29 Two swans flew away, now turn right one upside down
6 addresses
/30 30 your dirty send you to timbuck 2
2 addresses
Most Secure encryption algorithms
AES
How does default threat protection work?
Default Threat Protection has three configurable components:
Blocked Ports
Blocked Sites
Default Packet Handling
Default Threat Protection is the first line of defense, and takes precedence
over configured policy rules and other services.
How to configure logging for watchguard cloud?
You must add the device(Add Device) in WatchGuard Cloud, then add the
verification code (AKA configure on the Firebox). The other thing you must
do is make sure to enable logging on all the policies. Though if you focus on
"add the devices in WatchGuard Cloud" and "configure on the FB", then
you should be good to go.
How does SD-WAN work?
Software-Defined WAN (SD-WAN) is a software-based routing solution
that automatically distributes network traffic across multiple WAN
connections based on policies you define. SD-WAN is embedded in the
Firebox. The Firebox monitors your WAN connections, captures near real-
time performance data, and uses this data to make routing decisions. For
example, if a WAN connection becomes congested, the Firebox
automatically sends traffic over a different WAN connection.
SD-WAN works with different types of WAN connections, which means you
can configure a hybrid WAN. For example, if your Firebox has an MPLS
connection and a broadband Internet connection, you can use both in an
, SD-WAN configuration.
You can use SD-WAN to increase application availability and performance,
and to better utilize a hybrid WAN. For example, with SD-WAN, you can:
Send high-priority, latency-sensitive traffic such as VoIP and video
conferencing over higher-quality, more expensive WAN connections
Send lower-priority traffic over less expensive WAN connections
Specify performance thresholds so that connections fail over to a different
WAN connection when performance is less than ideal
What is Dynamic NAT?
HIDES INTERNAL TOPOLGY OF THE NETWORK-
Dynamic NAT is the most frequently used type of NAT. It changes the
source IP address of an outgoing connection to the public IP address of the
Firebox. Outside the Firebox, you see only the external interface IP address
of the Firebox on outgoing packets.
Many computers can connect to the Internet from one public IP address.
Dynamic NAT gives more security for internal hosts that use the Internet,
because it hides the IP addresses of hosts on your network. With dynamic
NAT, all connections must start from behind the Firebox. Malicious hosts
cannot start connections to the computers behind the Firebox when the
Firebox is configured for dynamic NAT.
What is 1 to 1 NAT?
EVERY COMPOUTER ON AN INTERNAL NETWORK WOULD HAVE
A (FAKE) EXTERNAL IP ADDRESS
When you enable 1-to-1 NAT, your Firebox maps one or more private IP
addresses to one or more public IP addresses. This allows you to make
internal network resources like a mail server accessible on the internet.
You can apply 1-to-1 NAT to one IP address, a range of addresses, or a
subnet. A 1-to-1 NAT rule always has precedence over dynamic NAT.
To connect to a computer located on a different interface that uses 1-to-1
NAT, you must use that computer's public (NAT base) IP address. If this is
