Watchguard Network Security Essentials for
Cloud-Managed Fireboxes Questions with 100%
Correct Solutions
Which WatchGuard tools can you use to review the log messages generated by
yourFirebox? (Select three) - ANSWER Firebox System Manager > Traffic Monitor
Fireware XTM Web UI > Traffic Monitor
Dimension > Log manager
To enable remote devices to send log messages to Dimension through the
gatewayFirebox, what must you verify is included in your gateway Firebox
configuration? (Selectone.) - ANSWER You must make sure that either the WG-Logging
packet filter policy, or another policy that allows external connections to Dimension
over port 4115, is included in the configuration file.
You have a privately addressed email server behind your Firebox. If you want to make
sure that all traffic from this server to the Internet appears to come from the public IP
address 203.0.113.25, regardless of policies, which from of NAT would you use? (Select
one.) - ANSWER In the SMTP policy that handles traffic from the email server, select the
option to apply dynamic NAT to all traffic in the policy and set the source IP address
203.0.113.25
The IP address for the trusted interface on your Firebox is 10.0.40.1/24, but you want to
change the IP address for this interface. How can you avoid a network outage for clients
on the trusted network when you change the interface IP address to 10.0.50.1/24?
(Select one.) - ANSWER Add 10.0.40.1/24 as a secondary IP address for the interface
Cloud-Managed Fireboxes Questions with 100%
Correct Solutions
Which WatchGuard tools can you use to review the log messages generated by
yourFirebox? (Select three) - ANSWER Firebox System Manager > Traffic Monitor
Fireware XTM Web UI > Traffic Monitor
Dimension > Log manager
To enable remote devices to send log messages to Dimension through the
gatewayFirebox, what must you verify is included in your gateway Firebox
configuration? (Selectone.) - ANSWER You must make sure that either the WG-Logging
packet filter policy, or another policy that allows external connections to Dimension
over port 4115, is included in the configuration file.
You have a privately addressed email server behind your Firebox. If you want to make
sure that all traffic from this server to the Internet appears to come from the public IP
address 203.0.113.25, regardless of policies, which from of NAT would you use? (Select
one.) - ANSWER In the SMTP policy that handles traffic from the email server, select the
option to apply dynamic NAT to all traffic in the policy and set the source IP address
203.0.113.25
The IP address for the trusted interface on your Firebox is 10.0.40.1/24, but you want to
change the IP address for this interface. How can you avoid a network outage for clients
on the trusted network when you change the interface IP address to 10.0.50.1/24?
(Select one.) - ANSWER Add 10.0.40.1/24 as a secondary IP address for the interface
