WATCHGUARD ESSENTIALS FOR
LOCALLY MANAGED FIREBOXES
COMPREHENSIVE EXAM REVIEW
TESTED QUESTIONS ACCURATE
SOLUTIONS
◉ In the default Firebox configuration file, which policies control
management access to the device? (Select two.)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing. Answer : AD
◉ To use the Web Setup Wizard or Quick Setup Wizard to configure
your Firebox or XTM device, your computer must have an IP address on
which subnet? (Select one.)
A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24. Answer : B
,◉ What is the best method to downgrade the version of Fireware OS on
your Firebox without losing all device configuration settings? (Select
one.)
A. Restore a saved backup image that was created for the device before
the last Fireware OS upgrade.
B. Use the Upgrade OS feature in Fireware Web UI to install the sysa_dl
file for an order version of Fireware OS.
C. Change the OS compatibility setting in Policy Manager to downgrade
the device. Then use Policy Manager to save the configuration to the
device.
D. Use the downgrade feature on Policy Manager to select a previous of
Fireware OS.. Answer : A
◉ You configured four Device Administrator user accounts for your
Firebox. To see a report of witch Device Management users have made
changes to the device configuration, what must you do? (Select two.)
A. Start Firebox System Manager for the device and review the activity
for the Management Users on the Authentication List tab.
B. Connect to Report Manager or Dimension and view the Audit Trail
report for your device.
C. Open WatchGuard Server Center and review the configuration history
for managed devices.
D. Configure your device to send audit trail log messages to your
WatchGuard Log Server or Dimension Log Server. Answer : BC
, ◉ Which items are included in a Firebox backup image? (Select four.)
A. Support snapshot
B. Fireware OS
C. Configuration file
D. Log file
E. Feature keys
F. Certificates. Answer : BCEF
◉ Only 50 clients on the trusted network of your Firebox can connect to
the Internet at the same time. What could cause this? (Select one.)
A. The Live Security feature key is expired.
B. The device feature key allows a maximum of 50 client connections.
C. The DHCP address pool on the trusted interface has only 50 IP
addresses.
D. The Outgoing policy allows a maximum of 50 client connections..
Answer : C
◉ The IP address for the trusted interface on your Firebox is
10.0.40.1/24, but you want to change the IP address for this interface.
How can you avoid a network outage for clients on the trusted network
when you change the interface IP address to 10.0.50.1/24? (Select one.)
A. Create a 1-to-1 NAT rule for traffic from the 10.0.40.0/24 subnet to
addresses on the 10.0.50.0/24 subnet.
B. Add 10.0.40.1/24 as a secondary IP address for the interface.
LOCALLY MANAGED FIREBOXES
COMPREHENSIVE EXAM REVIEW
TESTED QUESTIONS ACCURATE
SOLUTIONS
◉ In the default Firebox configuration file, which policies control
management access to the device? (Select two.)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing. Answer : AD
◉ To use the Web Setup Wizard or Quick Setup Wizard to configure
your Firebox or XTM device, your computer must have an IP address on
which subnet? (Select one.)
A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24. Answer : B
,◉ What is the best method to downgrade the version of Fireware OS on
your Firebox without losing all device configuration settings? (Select
one.)
A. Restore a saved backup image that was created for the device before
the last Fireware OS upgrade.
B. Use the Upgrade OS feature in Fireware Web UI to install the sysa_dl
file for an order version of Fireware OS.
C. Change the OS compatibility setting in Policy Manager to downgrade
the device. Then use Policy Manager to save the configuration to the
device.
D. Use the downgrade feature on Policy Manager to select a previous of
Fireware OS.. Answer : A
◉ You configured four Device Administrator user accounts for your
Firebox. To see a report of witch Device Management users have made
changes to the device configuration, what must you do? (Select two.)
A. Start Firebox System Manager for the device and review the activity
for the Management Users on the Authentication List tab.
B. Connect to Report Manager or Dimension and view the Audit Trail
report for your device.
C. Open WatchGuard Server Center and review the configuration history
for managed devices.
D. Configure your device to send audit trail log messages to your
WatchGuard Log Server or Dimension Log Server. Answer : BC
, ◉ Which items are included in a Firebox backup image? (Select four.)
A. Support snapshot
B. Fireware OS
C. Configuration file
D. Log file
E. Feature keys
F. Certificates. Answer : BCEF
◉ Only 50 clients on the trusted network of your Firebox can connect to
the Internet at the same time. What could cause this? (Select one.)
A. The Live Security feature key is expired.
B. The device feature key allows a maximum of 50 client connections.
C. The DHCP address pool on the trusted interface has only 50 IP
addresses.
D. The Outgoing policy allows a maximum of 50 client connections..
Answer : C
◉ The IP address for the trusted interface on your Firebox is
10.0.40.1/24, but you want to change the IP address for this interface.
How can you avoid a network outage for clients on the trusted network
when you change the interface IP address to 10.0.50.1/24? (Select one.)
A. Create a 1-to-1 NAT rule for traffic from the 10.0.40.0/24 subnet to
addresses on the 10.0.50.0/24 subnet.
B. Add 10.0.40.1/24 as a secondary IP address for the interface.
