Watchguard Test - Essential Questions With
Accurate Solutions
In the default Firebox configuration file, which policies control
management access to the device? (Select two)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing Correct Answer - Answer: A & D
WatchGuard: The packet filter policy that controls administrative
connections to the Firebox is WG-Firebox-Mgmt. The Quick Setup
Wizard adds this policy with the name WatchGuard.
WatchGuard Web UI: By default, the Firebox allows connections to
the WebUI from any computer on a trusted or optional network.
Access to
the WebUI is controlled by the WatchGuard Web UI policy. This
policy is automatically added to your device configuration when you
run the Quick Setup Wizard.
To use the Web Setup Wizard or Quick Setup Wizard to configure
your Firebox or XTM device, your computer must have an IP address
on which subnet? (Select one)
,A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24 Correct Answer - B
To connect to the device when you use either setup wizard, your
computer must have an IP address on the 10.0.1.0/24 subnet. If
your computer uses DHCP, it will get a new IP address automatically
after you connect to interface 1.
What is the best method to downgrade the version of Fireware OS
on your Firebox without losing all device configuration settings?
(Select one)
A. Restore a saved backup image that was created for the device
before the last Fireware OS upgrade.
B. Use the Upgrade OS feature in the Fireware Web UI to install the
sysa_dl file for an older version of Fireware OS.
C. Change the OS compatibility setting in Policy Manager to
downgrade the device. Then use Policy Manager to save the
configuration to the device.
D. Use the downgrade feature on Policy Manager to select a previous
version of Fireware OS. Correct Answer - A.
We recommend that you create a backup image of the Firebox
before you make significant changes to your device configuration
file, or upgrade your Firebox OS.
, It is especially important to save a device backup image before you
upgrade the version of FirewareOS on the Firebox. The backup
image is the easiest way to
downgrade the Firebox, if you ever need to.
You configured four Device Administrator user accounts for your
Firebox. To see a report of which Device Management users have
made changes to the device configuration, what must you do?
(Select two)
A. Start WatchGuard System Manager for the device and review the
activity for the Management Users on the Authentication List tab.
B. Connect to Report Manager or Dimension and view the Audit Trail
report for your device.
C. Start WatchGuard System Manager connect to WatchGuard
Management Server and review the configuration history for
managed devices.
D. Configure your device to send audit trail log messages to your
WatchGuard Log Server or Dimension Log Server. Correct Answer
- B, C.
The audit trail will show that the example-co_admin user account
made the changes to the configuration.
The policies in a default Firebox configuration do not allow outgoing
traffic from optional interfaces.
A. True
Accurate Solutions
In the default Firebox configuration file, which policies control
management access to the device? (Select two)
A. WatchGuard
B. FTP
C. Ping
D. WatchGuard Web UI
E. Outgoing Correct Answer - Answer: A & D
WatchGuard: The packet filter policy that controls administrative
connections to the Firebox is WG-Firebox-Mgmt. The Quick Setup
Wizard adds this policy with the name WatchGuard.
WatchGuard Web UI: By default, the Firebox allows connections to
the WebUI from any computer on a trusted or optional network.
Access to
the WebUI is controlled by the WatchGuard Web UI policy. This
policy is automatically added to your device configuration when you
run the Quick Setup Wizard.
To use the Web Setup Wizard or Quick Setup Wizard to configure
your Firebox or XTM device, your computer must have an IP address
on which subnet? (Select one)
,A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24 Correct Answer - B
To connect to the device when you use either setup wizard, your
computer must have an IP address on the 10.0.1.0/24 subnet. If
your computer uses DHCP, it will get a new IP address automatically
after you connect to interface 1.
What is the best method to downgrade the version of Fireware OS
on your Firebox without losing all device configuration settings?
(Select one)
A. Restore a saved backup image that was created for the device
before the last Fireware OS upgrade.
B. Use the Upgrade OS feature in the Fireware Web UI to install the
sysa_dl file for an older version of Fireware OS.
C. Change the OS compatibility setting in Policy Manager to
downgrade the device. Then use Policy Manager to save the
configuration to the device.
D. Use the downgrade feature on Policy Manager to select a previous
version of Fireware OS. Correct Answer - A.
We recommend that you create a backup image of the Firebox
before you make significant changes to your device configuration
file, or upgrade your Firebox OS.
, It is especially important to save a device backup image before you
upgrade the version of FirewareOS on the Firebox. The backup
image is the easiest way to
downgrade the Firebox, if you ever need to.
You configured four Device Administrator user accounts for your
Firebox. To see a report of which Device Management users have
made changes to the device configuration, what must you do?
(Select two)
A. Start WatchGuard System Manager for the device and review the
activity for the Management Users on the Authentication List tab.
B. Connect to Report Manager or Dimension and view the Audit Trail
report for your device.
C. Start WatchGuard System Manager connect to WatchGuard
Management Server and review the configuration history for
managed devices.
D. Configure your device to send audit trail log messages to your
WatchGuard Log Server or Dimension Log Server. Correct Answer
- B, C.
The audit trail will show that the example-co_admin user account
made the changes to the configuration.
The policies in a default Firebox configuration do not allow outgoing
traffic from optional interfaces.
A. True
