WatchGuard NetWork Security eSSeNtialS
teSt QueStioNS With 100% correct aNSWerS |
expert Verified (exam paper 2021 reVieW)
◉ Which WatchGuard tools can you use to review the log messages generated
by your Firebox? (Select three).
A. Firebox System Manager > Traffic Monitor
B. Fireware XTM Web UI > Traffic Monitor
C. Firebox System Manager > Status Report
D. Dimension > Log manager
E. WatchGuard System Manager > Policy Manager. Answer Firebox System
Manager > Traffic Monitor
Fireware XTM Web UI > Traffic Monitor
Dimension > Log manager
◉ You can configure your Firebox to send log messages to how many
WatchGuard Log Servers at the same time? (Select one.)
A. One
B. Two
C. As many as you have configured on your network.. Answer two
◉ How can you prevent connections to the Fireware Web UI from computers
on optional interface Eth2? (Select one.)
,A. Remove Eth2 from the Any-Optional alias.
B. Remove Any-Optional from the To list of the WatchGuard Web UI policy.
C. Remove Any-Optional from the From list of the WatchGuard policy.
D. Remove Any-Optional from the To list of the WatchGuard policy
E. Remove Any-Optional from the From list of the WatchGuard Web UI policy
Hide Solution Discussion. Answer Remove Any-Optional from the From list of
the WatchGuard Web UI policy
◉ What is one reason that users could see a certificate warning in their web
browsers when they connect to Fireware XTM Web UI? (Select one.)
A. The Firebox or XTM device uses the default self-signed certificate.
B. The authentication server does not respond after three minutes.
C. The user has been previously added to the Blocked Sites list.
D. The user or group is not present in the Firebox User database.. Answer The
Firebox or XTM device uses the default self-signed certificate.
◉ From the Fireware Web UI, you can generate a report that shows your
device configuration settings.
A. True
B. False. Answer True
,◉ A. Local: 192.168.1.0/24 <--> Remote: 10.0.10.0/24. Answer In this
diagram, which branch office VPN tunnel route must you add on the Site B
Firebox to allow traffic between devices on the trusted network at Site B and
the trusted network at site A? (Select one.)
A. Local: 192.168.1.0/24 <--> Remote: 10.0.10.0/24
B. Local: 203.0.113.10/24 <--> Remote: 198.151.100.2/24
C. Local: 10.0.10.1/24 <--> Remote: 192.168.1.1/24
D. Local: 10.0.10.0/24 <--> Remote: 192.168.1.0/24
◉ 10.0.10.0/24. Answer A local branch office VPN tunnel route is configured
as shown in this image. On the remote peer device, what must be configured
as the remote network address for this tunnel route? (Select one.)
A. 10.0.1.0/24
B. 10.0.10.0/24
C. 10.0.20.0/24
◉ false. Answer ***With the policies configured as shown in this image, HTTP
traffic can be sent and received through branch office VPN tunnel.1 and
tunnel.2.
A. True
B. False
◉ ***While troubleshooting a branch office VPN tunnel, you see this log
message:2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer
proposes phase one encryption 3 DES, expecting AES
, What settings could you modify in the local device configuration to resolve
this issue? (Select one.)
A. BOVPN Gateway settings
B. BOVPN-Allow policies
C. BOVPN Tunnel settings
D. BOVPN Tunnel Route settings
Hide Solution Discussion 1. Answer BOVPN Gateway settings
◉ ***The IP address for the trusted interface on your Firebox is 10.0.40.1/24, but
you want to change the IP address for this interface. How can you avoid a network
outage for clients on the trusted network when you change the interface IP address
to 10.0.50.1/24? (Select one.)
A. Create a 1-to-1 NAT rule for traffic from the 10.0.40.0/24 subnet to addresses
on the 10.0.50.0/24 subnet.
B. Add 10.0.40.1/24 as a secondary IP address for the interface.
C. Add IP addresses on the 10.0.40.0/24 subnet to the DHCP Server IP address
pool for this interface.
D. Add a route to 10.0.40.0/24 with the gateway 10.0.50.1.. Answer Add
10.0.40.1/24 as a secondary IP address for the interface.
◉ ***Which of these options are private IPv4 addresses you can assign to a trusted
interface, as described in RFC 1918, Address Allocation for Private
Internets?(Select three.)
teSt QueStioNS With 100% correct aNSWerS |
expert Verified (exam paper 2021 reVieW)
◉ Which WatchGuard tools can you use to review the log messages generated
by your Firebox? (Select three).
A. Firebox System Manager > Traffic Monitor
B. Fireware XTM Web UI > Traffic Monitor
C. Firebox System Manager > Status Report
D. Dimension > Log manager
E. WatchGuard System Manager > Policy Manager. Answer Firebox System
Manager > Traffic Monitor
Fireware XTM Web UI > Traffic Monitor
Dimension > Log manager
◉ You can configure your Firebox to send log messages to how many
WatchGuard Log Servers at the same time? (Select one.)
A. One
B. Two
C. As many as you have configured on your network.. Answer two
◉ How can you prevent connections to the Fireware Web UI from computers
on optional interface Eth2? (Select one.)
,A. Remove Eth2 from the Any-Optional alias.
B. Remove Any-Optional from the To list of the WatchGuard Web UI policy.
C. Remove Any-Optional from the From list of the WatchGuard policy.
D. Remove Any-Optional from the To list of the WatchGuard policy
E. Remove Any-Optional from the From list of the WatchGuard Web UI policy
Hide Solution Discussion. Answer Remove Any-Optional from the From list of
the WatchGuard Web UI policy
◉ What is one reason that users could see a certificate warning in their web
browsers when they connect to Fireware XTM Web UI? (Select one.)
A. The Firebox or XTM device uses the default self-signed certificate.
B. The authentication server does not respond after three minutes.
C. The user has been previously added to the Blocked Sites list.
D. The user or group is not present in the Firebox User database.. Answer The
Firebox or XTM device uses the default self-signed certificate.
◉ From the Fireware Web UI, you can generate a report that shows your
device configuration settings.
A. True
B. False. Answer True
,◉ A. Local: 192.168.1.0/24 <--> Remote: 10.0.10.0/24. Answer In this
diagram, which branch office VPN tunnel route must you add on the Site B
Firebox to allow traffic between devices on the trusted network at Site B and
the trusted network at site A? (Select one.)
A. Local: 192.168.1.0/24 <--> Remote: 10.0.10.0/24
B. Local: 203.0.113.10/24 <--> Remote: 198.151.100.2/24
C. Local: 10.0.10.1/24 <--> Remote: 192.168.1.1/24
D. Local: 10.0.10.0/24 <--> Remote: 192.168.1.0/24
◉ 10.0.10.0/24. Answer A local branch office VPN tunnel route is configured
as shown in this image. On the remote peer device, what must be configured
as the remote network address for this tunnel route? (Select one.)
A. 10.0.1.0/24
B. 10.0.10.0/24
C. 10.0.20.0/24
◉ false. Answer ***With the policies configured as shown in this image, HTTP
traffic can be sent and received through branch office VPN tunnel.1 and
tunnel.2.
A. True
B. False
◉ ***While troubleshooting a branch office VPN tunnel, you see this log
message:2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer
proposes phase one encryption 3 DES, expecting AES
, What settings could you modify in the local device configuration to resolve
this issue? (Select one.)
A. BOVPN Gateway settings
B. BOVPN-Allow policies
C. BOVPN Tunnel settings
D. BOVPN Tunnel Route settings
Hide Solution Discussion 1. Answer BOVPN Gateway settings
◉ ***The IP address for the trusted interface on your Firebox is 10.0.40.1/24, but
you want to change the IP address for this interface. How can you avoid a network
outage for clients on the trusted network when you change the interface IP address
to 10.0.50.1/24? (Select one.)
A. Create a 1-to-1 NAT rule for traffic from the 10.0.40.0/24 subnet to addresses
on the 10.0.50.0/24 subnet.
B. Add 10.0.40.1/24 as a secondary IP address for the interface.
C. Add IP addresses on the 10.0.40.0/24 subnet to the DHCP Server IP address
pool for this interface.
D. Add a route to 10.0.40.0/24 with the gateway 10.0.50.1.. Answer Add
10.0.40.1/24 as a secondary IP address for the interface.
◉ ***Which of these options are private IPv4 addresses you can assign to a trusted
interface, as described in RFC 1918, Address Allocation for Private
Internets?(Select three.)
