WATCHGUARD EXAM QUESTIONS
WITH ANSWERS NEW UPDATE (A+
PASS)
Dynamic NAT ANSW✅✅enables clients on a private network to connect to servers on the
Internet.
dynamic NAT use case ANSW✅✅In an example use case, two internal clients use the same source
port to access the same web server. However, the source IP address is always changed when
dynamic NAT is applied. When the response returns to the same Firebox interface from which the
original connection exited, the Firebox examines its connection state table and finds the original
source IP address. It reverses the NAT process to send the packet to the correct host.
Static NAT ANSW✅✅also known as port forwarding, allows inbound connections on specific ports
to one or more public servers from a single external IP address. The Firebox changes the destination
IP address of the packets and forwards them based on the original destination port number. You can
also translate the original destination port to an alternative port on which the server is listening.
1-to-1 NAT ANSW✅✅When you enable 1-to-1 NAT, your Firebox maps one or more private IP
addresses to one or more public IP addresses. This allows you to make internal network resources
accessible on the Internet.
NAT loopback ANSW✅✅local network users can connect to an internal server with the public IP
address or domain name of that server.
Traffic management ANSW✅✅also known as traffic shaping, enables you to set the maximum
bandwidth available for different types of traffic, and to guarantee a minimum amount of bandwidth
for specific traffic flows.
USE CASE: Many organizations have mission-critical, real-time network applications that must take
priority over other traffic. You can use bandwidth restrictions and reservations, together with
prioritization, to make sure critical applications have the bandwidth they need.
Should you use QOS on T series fireboxes? ANSW✅✅We do not recommend QoS for tabletop
Firebox models such as T Series Fireboxes. QoS significantly impacts performance on these models
, What are the fireboxes four hidden policies? ANSW✅✅unhandled internal packets
unhandled external packkets
any from firebox
built in IPsec policy
What would you do if a client wanted to have certain policies at certain times of day, what could you
use to control this? ANSW✅✅Policy schedules
Fireware supports two types of policies, what are they? ANSW✅✅Packet filter and proxy policy
There are 14 security services please list them? ANSW✅✅Access Portal
Application Control
APT Blocker
Botnet Blocker
Data Loss Prevention
DNS Watch
Gateway Antivirus
Geolocation
IntelligentAV
Intrusion Prevention Service
Reputation Enabled Defense
Spamblocker
Threat Detection and Response
WebBlocker
What does Access Portal do? ANSW✅✅Clientless VPN solution that provides a central location for
your users to connect to cloud-hosted applications and internal resources.
Application Control ANSW✅✅Monitors and controls the use of applications on your network.
Application Control uses signatures that can identify and deny over 1000 applications.
WITH ANSWERS NEW UPDATE (A+
PASS)
Dynamic NAT ANSW✅✅enables clients on a private network to connect to servers on the
Internet.
dynamic NAT use case ANSW✅✅In an example use case, two internal clients use the same source
port to access the same web server. However, the source IP address is always changed when
dynamic NAT is applied. When the response returns to the same Firebox interface from which the
original connection exited, the Firebox examines its connection state table and finds the original
source IP address. It reverses the NAT process to send the packet to the correct host.
Static NAT ANSW✅✅also known as port forwarding, allows inbound connections on specific ports
to one or more public servers from a single external IP address. The Firebox changes the destination
IP address of the packets and forwards them based on the original destination port number. You can
also translate the original destination port to an alternative port on which the server is listening.
1-to-1 NAT ANSW✅✅When you enable 1-to-1 NAT, your Firebox maps one or more private IP
addresses to one or more public IP addresses. This allows you to make internal network resources
accessible on the Internet.
NAT loopback ANSW✅✅local network users can connect to an internal server with the public IP
address or domain name of that server.
Traffic management ANSW✅✅also known as traffic shaping, enables you to set the maximum
bandwidth available for different types of traffic, and to guarantee a minimum amount of bandwidth
for specific traffic flows.
USE CASE: Many organizations have mission-critical, real-time network applications that must take
priority over other traffic. You can use bandwidth restrictions and reservations, together with
prioritization, to make sure critical applications have the bandwidth they need.
Should you use QOS on T series fireboxes? ANSW✅✅We do not recommend QoS for tabletop
Firebox models such as T Series Fireboxes. QoS significantly impacts performance on these models
, What are the fireboxes four hidden policies? ANSW✅✅unhandled internal packets
unhandled external packkets
any from firebox
built in IPsec policy
What would you do if a client wanted to have certain policies at certain times of day, what could you
use to control this? ANSW✅✅Policy schedules
Fireware supports two types of policies, what are they? ANSW✅✅Packet filter and proxy policy
There are 14 security services please list them? ANSW✅✅Access Portal
Application Control
APT Blocker
Botnet Blocker
Data Loss Prevention
DNS Watch
Gateway Antivirus
Geolocation
IntelligentAV
Intrusion Prevention Service
Reputation Enabled Defense
Spamblocker
Threat Detection and Response
WebBlocker
What does Access Portal do? ANSW✅✅Clientless VPN solution that provides a central location for
your users to connect to cloud-hosted applications and internal resources.
Application Control ANSW✅✅Monitors and controls the use of applications on your network.
Application Control uses signatures that can identify and deny over 1000 applications.
