WATCHGUARD EXAM LABS
QUESTIONS WITH COMPLETE
SOLUTIONS
You configured four Device Administrator user accounts for your Firebox. To see a report
of witch Device Management users have made changes to the device configuration, what
must you do? (Select two.)
A. Start Firebox System Manager for the device and review the activity for the Management Users
on the Authentication List tab.
B. Connect to Report Manager or Dimension and view the Audit Trail report for your device.
C. Open WatchGuard Server Center and review the configuration history for managed devices.
D. Configure your device to send audit trail log messages to your WatchGuard Log Server or
Dimension Log Server. ANSW✅✅B. Connect to Report Manager or Dimension and view the Audit
Trail report for your device.
D. Configure your device to send audit trail log messages to your WatchGuard Log Server or
Dimension Log Server.
Which authentication servers can you use with your Firebox? (Select four.)
A. Active Directory
B. RADIUS
C. LDAP
D. Linux Authentication
E. Kerberos
F. TACACS+
G. Firebox databases ANSW✅✅A. Active Directory
B. RADIUS
C. LDAP
G. Firebox databases
What settings must you device configuration file include for Gateway AntiVirus to protect
users on your network? (Select two.)
,A. Configure a policy to use a proxy action that has AntiVirus settings configured.
B. Install the Gateway AntiVirus server on your network.
C. Configure Gateway AntiVirus settings for a proxy action.
D. Disable automatic signature updates.
E. Decrease the scan limits ANSW✅✅A. Configure a policy to use a proxy action that has AntiVirus
settings configured.
C. Configure Gateway AntiVirus settings for a proxy action.
How can you prevent connections to the Fireware Web UI from computers on optional
interface Eth2? (Select one.)
A. Remove Eth2 from the Any-Optional alias.
B. Remove Any-Optional from the To list of the WatchGuard Web UI policy.
C. Remove Any-Optional from the From list of the WatchGuard policy.
D. Remove Any-Optional from the To list of the WatchGuard policy
E. Remove Any-Optional from the From list of the WatchGuard Web UI policy ANSW✅✅E.
Remove Any-Optional from the From list of the WatchGuard Web UI policy
While troubleshooting a branch office VPN tunnel, you see this log message:
2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one
encryption 3DES, expecting AES
What settings could you modify in the local device configuration to resolve this issue?
(Select one.)
A. BOVPN Gateway settings
B. BOVPN-Allow policies
C. BOVPN Tunnel settings
D. BOVPN Tunnel Route settings ANSW✅✅A. BOVPN Gateway settings
From the Fireware Web UI, you can generate a report that shows your device configuration
settings.
A. True
, B. False ANSW✅✅A. True
Which of these actions adds a host to the temporary or permanent blocked sites list?
(Select three.)
A. Enable the AUTO-block sites that attempt to connect option in a deny policy.
B. Add the site to the Blocked Sites Exceptions list.
C. On the Firebox System Manager >Blocked Sites tab, select Add.
D. In Policy Manager, select Setup> Default Threat Protection > Blocked Sites and click Add.
ANSW✅✅A. Enable the AUTO-block sites that attempt to connect option in a deny policy.
C. On the Firebox System Manager >Blocked Sites tab, select Add.
D. In Policy Manager, select Setup> Default Threat Protection > Blocked Sites and click Add.
You need to create an HTTP-proxy policy to a specific domain for software updates
(example.com). The update site has multiple subdomains and dynamic IP addresses on a
content delivery network. Which of these options is the best way to define the destination in
your HTTP-proxy policy? (Select one.)
A. Configure a host name for update.example.com.
B. Configure an FQDN for *.example.com.
C. Add IP addresses that correspond to each software update server in the domain.
D. Create an alias for all subdomains and known IP addresses for example.com. ANSW✅✅B.
Configure an FQDN for *.example.com.
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM
device, your computer must have an IP address on which subnet? (Select one.)
A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24 ANSW✅✅B. 10.0.1.0/24
You can configure your Firebox to automatically redirect users to the Authentication Portal
QUESTIONS WITH COMPLETE
SOLUTIONS
You configured four Device Administrator user accounts for your Firebox. To see a report
of witch Device Management users have made changes to the device configuration, what
must you do? (Select two.)
A. Start Firebox System Manager for the device and review the activity for the Management Users
on the Authentication List tab.
B. Connect to Report Manager or Dimension and view the Audit Trail report for your device.
C. Open WatchGuard Server Center and review the configuration history for managed devices.
D. Configure your device to send audit trail log messages to your WatchGuard Log Server or
Dimension Log Server. ANSW✅✅B. Connect to Report Manager or Dimension and view the Audit
Trail report for your device.
D. Configure your device to send audit trail log messages to your WatchGuard Log Server or
Dimension Log Server.
Which authentication servers can you use with your Firebox? (Select four.)
A. Active Directory
B. RADIUS
C. LDAP
D. Linux Authentication
E. Kerberos
F. TACACS+
G. Firebox databases ANSW✅✅A. Active Directory
B. RADIUS
C. LDAP
G. Firebox databases
What settings must you device configuration file include for Gateway AntiVirus to protect
users on your network? (Select two.)
,A. Configure a policy to use a proxy action that has AntiVirus settings configured.
B. Install the Gateway AntiVirus server on your network.
C. Configure Gateway AntiVirus settings for a proxy action.
D. Disable automatic signature updates.
E. Decrease the scan limits ANSW✅✅A. Configure a policy to use a proxy action that has AntiVirus
settings configured.
C. Configure Gateway AntiVirus settings for a proxy action.
How can you prevent connections to the Fireware Web UI from computers on optional
interface Eth2? (Select one.)
A. Remove Eth2 from the Any-Optional alias.
B. Remove Any-Optional from the To list of the WatchGuard Web UI policy.
C. Remove Any-Optional from the From list of the WatchGuard policy.
D. Remove Any-Optional from the To list of the WatchGuard policy
E. Remove Any-Optional from the From list of the WatchGuard Web UI policy ANSW✅✅E.
Remove Any-Optional from the From list of the WatchGuard Web UI policy
While troubleshooting a branch office VPN tunnel, you see this log message:
2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one
encryption 3DES, expecting AES
What settings could you modify in the local device configuration to resolve this issue?
(Select one.)
A. BOVPN Gateway settings
B. BOVPN-Allow policies
C. BOVPN Tunnel settings
D. BOVPN Tunnel Route settings ANSW✅✅A. BOVPN Gateway settings
From the Fireware Web UI, you can generate a report that shows your device configuration
settings.
A. True
, B. False ANSW✅✅A. True
Which of these actions adds a host to the temporary or permanent blocked sites list?
(Select three.)
A. Enable the AUTO-block sites that attempt to connect option in a deny policy.
B. Add the site to the Blocked Sites Exceptions list.
C. On the Firebox System Manager >Blocked Sites tab, select Add.
D. In Policy Manager, select Setup> Default Threat Protection > Blocked Sites and click Add.
ANSW✅✅A. Enable the AUTO-block sites that attempt to connect option in a deny policy.
C. On the Firebox System Manager >Blocked Sites tab, select Add.
D. In Policy Manager, select Setup> Default Threat Protection > Blocked Sites and click Add.
You need to create an HTTP-proxy policy to a specific domain for software updates
(example.com). The update site has multiple subdomains and dynamic IP addresses on a
content delivery network. Which of these options is the best way to define the destination in
your HTTP-proxy policy? (Select one.)
A. Configure a host name for update.example.com.
B. Configure an FQDN for *.example.com.
C. Add IP addresses that correspond to each software update server in the domain.
D. Create an alias for all subdomains and known IP addresses for example.com. ANSW✅✅B.
Configure an FQDN for *.example.com.
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM
device, your computer must have an IP address on which subnet? (Select one.)
A. 10.0.10.0/24
B. 10.0.1.0/24
C. 172.16.10.0/24
D. 192.168.1.0/24 ANSW✅✅B. 10.0.1.0/24
You can configure your Firebox to automatically redirect users to the Authentication Portal
