Exam (elaborations) SOPHOS EXAM (SOLVED)Test Prep

Exam (elaborations) SOPHOS EXAM (SOLVED)Test Prep information obtained from the user’s computer to an external party. Which mode of protection on the XG Firewall helps prevent the Trojan from being able to transmit out of the network in this scenario? 2. What type of threat is being described below? Spear phishing A targeted attack using spoof emails to persuade users to provide sensitive information or credentials. "Please review the information covered in Module 1, XG Firewall Overview." 2. Getting Started v17.0.0 1. You have received a new hardware XG Firewall and are preparing to connect to it for the first You need to DNAT for HTTPS and SSH from a WAN IP address on the XG Firewall to a server in the DMZ zone. SSH is running on a non-standard port on the server in the DMZ, so you will configure the DNAT rule to listen on 2222 to match the port on the server in the DMZ. br>How many DNAT rules do you need to create? time. What is the default IP address and port that is used to access the device? 2. Below is an image from the Initial Setup wizard SOPHOS EXAM (SOLVED)Test Prep Which 2 of the following will be enabled for the default outbound firewall rule once the Initial Setup wizard is complete? 3. You are preparing a physical XG Firewall device prior to installing it at a remote site. The order for the license has not yet been processed. START TRIAL Which device registration option do you select in the Initial Setup wizard? "Please review the information covered in Module 2, Getting Started with Sophos XG Firewall." 3. Network Protection v17.0.0 1. Your customer has configured a destination-based Security Heartbeat in the firewall rule shown here. WAN Which 4 zone(s) out of the following can the Security Heartbeat settings be applied to? "Please review the information covered in Module 3, Network Protection." 2. After creating various rules, you find that HTTP access is being blocked from the Internal network to the Internet. Looking at the firewall rules shown above, why is this happening? 3. You need to create a rule to allow traffic out to the Internet. What type of rule do you need to create? 4. Below is an image of the Intrusion Prevention rule editor. You want to create an IPS policy rule that will include all signatures for the FireFox browser. Which field do you need to use to filter the signatures? SMART FILTER "Please review the information covered in Module 3, Network Protection." 4. Firewall Icons v17.0.0 1. Which firewall icon from below would represent a disabled user rule? 5. Heartbeat v17.0.0 1. Your customer has recently deployed Sophos Central to their devices and has asked you to help configure Security Heartbeat in their firewall rules. You are configuring a rule to allows computers connected to the LAN to access intranet servers. Your customer wants to ensure that only computers that have a GREEN Security Heartbeat are able to access the intranet servers. Which of the configurations shown here should you use? 6. NAT Rules v17.0.0 1. You need to DNAT for HTTPS and SSH from a WAN IP address on the XG Firewall to a server in the DMZ zone. SSH is running on a non-standard port on the server in the DMZ, so you will configure the DNAT rule to listen on 2222 to match the port on the server in the DMZ. br>How many DNAT rules do you need to create? 1 "Please review the information covered in Module 3, Network Protection." 7. Site to Site Connections v17.0.0 1. You have been asked to create a site-to-site VPN connection with another company that will be involved in a large project with yours. Knowing that they do not have a XG Firewall, what is the best option for a site-to-site VPN protocol between two different devices? 2. Your XG Firewall has been replaced with a new XG Firewall and the previous device is no longer available. There were a number of RED devices attached to the previous unit that you would like to reprovision on the new firewall. These REDs were provisioned using the RED provisioning service. EMAIL Where would you be able to find the unlock codes ins to the new XG Firewall? "Please review the information covered in Module 4, Site-to-Site Connections." 3. When a RED is deployed in Standard/Unified mode, how do the computers on the remote network get their IP address? 8. Authentication v17.0.0 1. The XG Firewall provides two factor authentication using one-time passwords. Which 2 methods can be used to provide the one-time password in order to login? "Please review the information covered in Module 5, Authentication." 2. The XG Firewall supports multiple authentication servers. SOFTWARE TOKEN OR HAARD WARE Which 2 of the following statements are TRUE about how the XG Firewall uses authentication servers? "Please review the information covered in Module 5, Authentication." 3. When employing the Sophos Transparent Authentication Suite, where in the network is the agent software installed and configured? 9. Web Protection and Application Control v17.0.0 1. Below is an image of the XG Firewall Control Center. From here, what would you click to access the Policy Test simulator? 2. You are configuring malware scanning in your web protection policy for your security conscious company. They want to ensure that the most secure scanning settings are in place to protect users as they browse the web. REAL SINGLE DUAL What 3 options would you make sure are enabled? Please review the Web Protection and Application Control Module. 3. You have created a web policy that will allow only 5 different categories of web sites. You have then applied this policy to all relevant outbound traffic rules. When you sit down to test the rule, you are still able to access pages that should be blocked. What is the most likely reason for this? 10. Surfing Quota v17.0.0 1. You have been asked to create a surfing quota for guest access that allows users access to the internet for 20 hours in a week and then terminates the connection with no recurrence. 20 Hours Which image shows the best way to configure the surfing quota? Please review the surfing quota information in the Web Protection and Application Control module. 11. Email Protection v17.0.0 1. You need to enable recipient verification, where would you do this? 2. You want to encrypt emails that contain financial data using SPX before they leave the network. Which 2 steps do you need to take? 3. Your manager is interested in using SPX to allow users to encrypt emails that contain sensitive information. They want to know what options they have for setting the encryption password. SEND specify password in the subject Email to sender Receip E What 3 methods do you tell your manager that they can use? "Please review the information covered in Module 7, Email Protection." 12. Wireless Protection v17.0.0 1. You have deployed a number of access points in the network and are now in the process of configuring the wireless networks that will be broadcast from the AP's. There are no existing VLANS in the network and everything is connected using basic layer 2 switches. As part of the configuration, you are setting up a secure guest network that needs to have its traffic isolated. SEPARATE ZONE What security mode would allow this to be done without any additional changes to the network configuration? "Please review the information covered in Module 8, Wireless Protection." 2. After researching various wireless security options, you have decided