IDENTITY SECURITY ESSENTIALS
WATCHGUARD TEST SCRIPT 2026
TEST PAPER QUESTIONS AND
SOLUTIONS CERTIFICATION
REVIEW GRADED A+
◉ Users on the trusted network cannot browse Internet websites.
Based on the configuration shown in this image, what could be the
problem with this policy configuration? (Select one.)
A. The default Outgoing policy has been removed and there is no policy
to allow DNS traffic.
B. The HTTP-proxy policy has higher precedence than the HTTPS-proxy
policy.
C. The HTTP-proxy policy is configured for the wrong port.
D. The HTTP-proxy allows Any-Trusted and Any-Optional to Any-
External.. Answer: A. The default Outgoing policy has been removed
and there is no policy to allow DNS traffic.
◉ To prevent certificate error warnings in your browser when you use
deep content inspection with the HTTPS proxy, you can export the
proxy authority certificate from the Firebox and import that certificate
to all client devices.
A. True
B. False. Answer: A. True
,◉ Which of these options must you configure in an HTTPS-proxy policy
to detect credit card numbers in HTTP traffic that is encrypted with
SSL? (Select two.)
A. WebBlocker
B. Gateway AntiVirus
C. Application Control
D. Deep inspection of HTTPS content
E. Data Loss Prevention. Answer: D. Deep inspection of HTTPS content
E. Data Loss Prevention
◉ Match each WatchGuard Subscription Service with its function.Uses
full-system emulation analysis to identify characteristics and behavior
of zero-day malware. (Choose one).
A. Reputation Enable Defense RED
B. Gateway / Antivirus
C. Data Loss Prevention DLP
D. Spam Blocker
E. WebBlocker
F. Intrusion Prevention Server IPS
G. Application Control
H. Quarantine Server
I. Advanced Persistent Thread Blocker (APT Blocker). Answer: I.
Advanced Persistent Thread Blocker (APT Blocker)
, ◉ When your device is in a default state, to which interface do you
connect your management computer so you can use the Quick Setup
Wizard or Web SetupWizard to configure the device? (Select one.)
A. Interface 0
B. Console interface
C. Any interface
D. Interface 1. Answer: D. Interface 1
◉ In the default Firebox configuration file, which policies control
management access to the device? (Select two.)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing. Answer: A. WatchGuard
D. WatchGuard Web UI
◉ To use the Web Setup Wizard or Quick Setup Wizard to configure
your Firebox or XTM device, your computer must have an IP address on
which subnet? (Select one.)
A. 10.0.10.0/24
B. 10.0.1.0/24
WATCHGUARD TEST SCRIPT 2026
TEST PAPER QUESTIONS AND
SOLUTIONS CERTIFICATION
REVIEW GRADED A+
◉ Users on the trusted network cannot browse Internet websites.
Based on the configuration shown in this image, what could be the
problem with this policy configuration? (Select one.)
A. The default Outgoing policy has been removed and there is no policy
to allow DNS traffic.
B. The HTTP-proxy policy has higher precedence than the HTTPS-proxy
policy.
C. The HTTP-proxy policy is configured for the wrong port.
D. The HTTP-proxy allows Any-Trusted and Any-Optional to Any-
External.. Answer: A. The default Outgoing policy has been removed
and there is no policy to allow DNS traffic.
◉ To prevent certificate error warnings in your browser when you use
deep content inspection with the HTTPS proxy, you can export the
proxy authority certificate from the Firebox and import that certificate
to all client devices.
A. True
B. False. Answer: A. True
,◉ Which of these options must you configure in an HTTPS-proxy policy
to detect credit card numbers in HTTP traffic that is encrypted with
SSL? (Select two.)
A. WebBlocker
B. Gateway AntiVirus
C. Application Control
D. Deep inspection of HTTPS content
E. Data Loss Prevention. Answer: D. Deep inspection of HTTPS content
E. Data Loss Prevention
◉ Match each WatchGuard Subscription Service with its function.Uses
full-system emulation analysis to identify characteristics and behavior
of zero-day malware. (Choose one).
A. Reputation Enable Defense RED
B. Gateway / Antivirus
C. Data Loss Prevention DLP
D. Spam Blocker
E. WebBlocker
F. Intrusion Prevention Server IPS
G. Application Control
H. Quarantine Server
I. Advanced Persistent Thread Blocker (APT Blocker). Answer: I.
Advanced Persistent Thread Blocker (APT Blocker)
, ◉ When your device is in a default state, to which interface do you
connect your management computer so you can use the Quick Setup
Wizard or Web SetupWizard to configure the device? (Select one.)
A. Interface 0
B. Console interface
C. Any interface
D. Interface 1. Answer: D. Interface 1
◉ In the default Firebox configuration file, which policies control
management access to the device? (Select two.)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing. Answer: A. WatchGuard
D. WatchGuard Web UI
◉ To use the Web Setup Wizard or Quick Setup Wizard to configure
your Firebox or XTM device, your computer must have an IP address on
which subnet? (Select one.)
A. 10.0.10.0/24
B. 10.0.1.0/24
