WATCHGUARD ENDPOINT SECURITY
QUESTIONS WITH COMPLETE
ANSWERS
Contextual Detections for Fileless Attacks Layer ANSW✅✅(Layered Protection) Refers to the
many components that run in the background and perform behavioral analysis to automatically
detect threats, trigger alerts, and block malicious content
Fileless Attacks ANSW✅✅(Layered Protection)
-Script-based attacks
-Web Browser vulnerabilities
-Attacks that use existing legitimate software tools
Anti-Exploit Technology Layer ANSW✅✅(Layered Protection) Protects running process on
endpoints from compromise. This helps to prevent fileless malware from gaining a foothold on the
system
Zero-Trust Application Service Layer ANSW✅✅(Layered Protection) combination of security
solutions and technologies that operate across the network to analyze endpoints, users, data,
applications, and cloud communications
Threat Hunting Service Layer ANSW✅✅(Layered Protection) Detects anomalous use of trusted
applications on endpoints. It uses hacker detection to find attackers who use LOTL techniques as
well as behavior modeling to identify malicious use by employees
Computers Page ANSW✅✅(Computer management) add, group, and manage all the devices
managed by watchguard endpoint security
General Settings ANSW✅✅(Computer management) -User Audit Logs
-Per-Computer Settings
-Network Settings
-Network Services
-Computer Maintenance
, -Alerts
Status Page ANSW✅✅(Computer management) Use dashboards, lists and tasks to monitor
threats to the computers and devices on your network
Security Settings ANSW✅✅(Computer management) -Workstation and server settings
- Indicators of Attack
- Risks
- Program Blocking
- Authorized Software
- Mobile Devices
- Patch Managment
Workstations and Servers ANSW✅✅(Computer management) - General
- Advanced Protection
- Antivirus
- Firewall
- Device Control
- Web Access Control
Audit Mode ANSW✅✅Reports detected threats on dashboards and lists, but does not block or
disinfect files.
Audit Mode ANSW✅✅Prevents the execution of all programs classified as malware and disinfects
or deletes programs classified as malware based on antivirus settings. Allows unknown programs to
run.
Hardening Mode ANSW✅✅Allows execution of unknown programs already installed on user
computers. Blocks unknown programs that originate from an untrusted source until classification is
returned. Disinfects or deletes programs classified as malware.
QUESTIONS WITH COMPLETE
ANSWERS
Contextual Detections for Fileless Attacks Layer ANSW✅✅(Layered Protection) Refers to the
many components that run in the background and perform behavioral analysis to automatically
detect threats, trigger alerts, and block malicious content
Fileless Attacks ANSW✅✅(Layered Protection)
-Script-based attacks
-Web Browser vulnerabilities
-Attacks that use existing legitimate software tools
Anti-Exploit Technology Layer ANSW✅✅(Layered Protection) Protects running process on
endpoints from compromise. This helps to prevent fileless malware from gaining a foothold on the
system
Zero-Trust Application Service Layer ANSW✅✅(Layered Protection) combination of security
solutions and technologies that operate across the network to analyze endpoints, users, data,
applications, and cloud communications
Threat Hunting Service Layer ANSW✅✅(Layered Protection) Detects anomalous use of trusted
applications on endpoints. It uses hacker detection to find attackers who use LOTL techniques as
well as behavior modeling to identify malicious use by employees
Computers Page ANSW✅✅(Computer management) add, group, and manage all the devices
managed by watchguard endpoint security
General Settings ANSW✅✅(Computer management) -User Audit Logs
-Per-Computer Settings
-Network Settings
-Network Services
-Computer Maintenance
, -Alerts
Status Page ANSW✅✅(Computer management) Use dashboards, lists and tasks to monitor
threats to the computers and devices on your network
Security Settings ANSW✅✅(Computer management) -Workstation and server settings
- Indicators of Attack
- Risks
- Program Blocking
- Authorized Software
- Mobile Devices
- Patch Managment
Workstations and Servers ANSW✅✅(Computer management) - General
- Advanced Protection
- Antivirus
- Firewall
- Device Control
- Web Access Control
Audit Mode ANSW✅✅Reports detected threats on dashboards and lists, but does not block or
disinfect files.
Audit Mode ANSW✅✅Prevents the execution of all programs classified as malware and disinfects
or deletes programs classified as malware based on antivirus settings. Allows unknown programs to
run.
Hardening Mode ANSW✅✅Allows execution of unknown programs already installed on user
computers. Blocks unknown programs that originate from an untrusted source until classification is
returned. Disinfects or deletes programs classified as malware.
