WATCHGUARD NETWORK SECURITY
ESSENTIALS EXPECTED QUESTIONS WITH
VERIFIED ANSWERS
• Rejects packets that could be a security risk like IP spoofing attack or SYN flood attack
Throttles a Distributed Denial of Service attack
Blocks and Drops traffic for dangerous activities/port scans . Answer: Default Packet
Handling
• Uses artificial intelligence and machine learning to identify known and unknown
malware. . Answer: IntelligentAV
Must enable Gateway Antivirus before you can enable IntelligentAV. Scans after
Gateway Antivirus
• What are Class A, B, and C IP/Subnets? . Answer: A: 1.0.0.0 - 126.255.255.255
255.0.0.0 or /8
B: 128.0.0.0 - 191.255.255.255
255.255.0.0 or /16
C. 192.0.0.0 - 223.255.255.255
255.255.255.0 or /24
• Allow or deny traffic based on both packet header information and connection content.
Control which security services and policy settings are available . Answer: Core Policies
• An interactive report tool that aggregates the traffic through your Fireboxes and shows
a visualization of the traffic flows through interfaces and policies . Answer: Policy Map
• Signature based, uses signature scans to find viruses . Answer: Gateway Antivirus
• Which policies can use the Intrusion Prevention Service to block network attacks?
(Select one?)
A. Only HTTP and HTTPS Proxy policies
B. Only proxy policies
C. All policies
D. Only packet filter policies
, E. Only inbound policies . Answer: C. All policies
• Cloud-based security service integrated with your firebox that monitors, resolves, and
filters OUTBOUND requests received from the firebox. Blocks connections from users
to malicious clickjacking and phishing domains . Answer: DNSWatch
• Signature based. Uses signatures to monitor and control the use of web-based
applications . Answer: Application Control
• If a connection fails to fail over and your boss wants you tell him why it didn't failover?
SDWAN ping policy wasn't setup
Link monitor failed
Link monitor was set to gradually fall back
Link Monitor was set tp ping the default gateway but the outage happened further
upstream
Basically know exactly how link monitor works . Answer: .
• A high-level view of security services activity on your Firebox, such as websites
blocked by WebBlocker and viruses detected by Gateway AntiVirus . Answer:
Subscription Dashboard
• What are Default Threat Protection's three components? . Answer: Default Packet
Handling
Blocked Sites
Blocked Ports
• Which of the below policies has the highest precedence?
1. default outgoing
2. from-any internal to any-external
3.from-usergroup to any external
4.From user@Firebox database to any external . Answer: From user@Firebox database
to any external
• Sees logs sent by your Firebox to WG Cloud. Has a log frequency graph that shows
the range of log message data for your selected device . Answer: Log Mangager
• *If you disable the Outgoing policy, which policies must you add to allow trusted users
to connect to commonly used websites? (Select three.)
A. HTTP port 80
B. NAT policy
C. FTP port 21
ESSENTIALS EXPECTED QUESTIONS WITH
VERIFIED ANSWERS
• Rejects packets that could be a security risk like IP spoofing attack or SYN flood attack
Throttles a Distributed Denial of Service attack
Blocks and Drops traffic for dangerous activities/port scans . Answer: Default Packet
Handling
• Uses artificial intelligence and machine learning to identify known and unknown
malware. . Answer: IntelligentAV
Must enable Gateway Antivirus before you can enable IntelligentAV. Scans after
Gateway Antivirus
• What are Class A, B, and C IP/Subnets? . Answer: A: 1.0.0.0 - 126.255.255.255
255.0.0.0 or /8
B: 128.0.0.0 - 191.255.255.255
255.255.0.0 or /16
C. 192.0.0.0 - 223.255.255.255
255.255.255.0 or /24
• Allow or deny traffic based on both packet header information and connection content.
Control which security services and policy settings are available . Answer: Core Policies
• An interactive report tool that aggregates the traffic through your Fireboxes and shows
a visualization of the traffic flows through interfaces and policies . Answer: Policy Map
• Signature based, uses signature scans to find viruses . Answer: Gateway Antivirus
• Which policies can use the Intrusion Prevention Service to block network attacks?
(Select one?)
A. Only HTTP and HTTPS Proxy policies
B. Only proxy policies
C. All policies
D. Only packet filter policies
, E. Only inbound policies . Answer: C. All policies
• Cloud-based security service integrated with your firebox that monitors, resolves, and
filters OUTBOUND requests received from the firebox. Blocks connections from users
to malicious clickjacking and phishing domains . Answer: DNSWatch
• Signature based. Uses signatures to monitor and control the use of web-based
applications . Answer: Application Control
• If a connection fails to fail over and your boss wants you tell him why it didn't failover?
SDWAN ping policy wasn't setup
Link monitor failed
Link monitor was set to gradually fall back
Link Monitor was set tp ping the default gateway but the outage happened further
upstream
Basically know exactly how link monitor works . Answer: .
• A high-level view of security services activity on your Firebox, such as websites
blocked by WebBlocker and viruses detected by Gateway AntiVirus . Answer:
Subscription Dashboard
• What are Default Threat Protection's three components? . Answer: Default Packet
Handling
Blocked Sites
Blocked Ports
• Which of the below policies has the highest precedence?
1. default outgoing
2. from-any internal to any-external
3.from-usergroup to any external
4.From user@Firebox database to any external . Answer: From user@Firebox database
to any external
• Sees logs sent by your Firebox to WG Cloud. Has a log frequency graph that shows
the range of log message data for your selected device . Answer: Log Mangager
• *If you disable the Outgoing policy, which policies must you add to allow trusted users
to connect to commonly used websites? (Select three.)
A. HTTP port 80
B. NAT policy
C. FTP port 21
