Watchguard Endpoint Security Exam with precise ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
detailed answers ||//\\||
Zero-day attacks and APTs - correct answer✔✔New threats that have never been seen before
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Fileless malware - correct answer✔✔Malicious software that runs in memory instead of as a
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
physical file on the endpoint. ||//\\|| ||//\\|| ||//\\|| ||//\\||
How does fileless malware operate? - correct answer✔✔Exploits trusted processes in
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
memory to remain undetected. ||//\\|| ||//\\|| ||//\\||
"Living Off- the Land" Attack - correct answer✔✔Attacks where a malicious user gain access
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
to an endpoint and uses legitimately installed software to perform further attacks.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Exploits - correct answer✔✔A software tool designed to take advantage of a flaw in a
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
computer system. ||//\\||
Ransomware - correct answer✔✔Malicious software that encrypts and locks the contents ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
and files of computers and demands a ransom for the encryption to unlock the data.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
The Protection Cycle - correct answer✔✔1) Visibility
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
2) Detection
||//\\||
3) Remediation/response
||//\\||
4) Prevention
||//\\||
, Visibility - correct answer✔✔(Protection Cycle)Trace every action taken by running
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
applications.
Detection - correct answer✔✔(Protection Cycle)Monitor active processes and preform real- ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
time blocking of zero-day attacks, targeted attacks, and other advanced threats designed to
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
bypass traditional antivirus and anti-malware solutions.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Remediation/response - correct answer✔✔(Protection Cycle)Use collected forensic ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
information to complete in-depth analysis of every attempted attack. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Prevention - correct answer✔✔(Protection Cycle)Edit the protection model settings and ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
patches for vulnerabilities ||//\\|| ||//\\||
Watchguard Endpoint Protection Platform (EPP) - correct answer✔✔(Watchguard Endpoint ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Security) Protects endpoints from threats and reduces the attack surface. Includes a full
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
range of protection features(antivirus, firewall, device control, URL filtering)
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Watchgurad Endpoint Detection and Response (EDR) - correct answer✔✔(Watchguard ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Endpoint Security) Detects and responds effectively to any type of unknown malware, as well
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
as the fileless and malwareless attacks that traditional solutions cannot detect. Uses Zero-
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Trust application service to prevent applications and processes from running until they are
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
validated as trusted. ||//\\|| ||//\\||
Watchguard Endpoint Protection Detection and Response (EPDR) - correct ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
answer✔✔(Watchguard Endpoint Security) Prevents, detects, and responds to any type of ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
known and unknown malware, as well as fileless and malwareless attacks. Uses Zero-Trust
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Application Service alongside anitvirus, firewall, device control, URL filtering, and more. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Watchguard Advanced EPDR - correct answer✔✔(Watchguard Endpoint Security) Extends ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
EPDR functionality with additional capabilities that enable security operations teams to
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
discover undetected threats on their customers endpoints. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
detailed answers ||//\\||
Zero-day attacks and APTs - correct answer✔✔New threats that have never been seen before
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Fileless malware - correct answer✔✔Malicious software that runs in memory instead of as a
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
physical file on the endpoint. ||//\\|| ||//\\|| ||//\\|| ||//\\||
How does fileless malware operate? - correct answer✔✔Exploits trusted processes in
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
memory to remain undetected. ||//\\|| ||//\\|| ||//\\||
"Living Off- the Land" Attack - correct answer✔✔Attacks where a malicious user gain access
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
to an endpoint and uses legitimately installed software to perform further attacks.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Exploits - correct answer✔✔A software tool designed to take advantage of a flaw in a
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
computer system. ||//\\||
Ransomware - correct answer✔✔Malicious software that encrypts and locks the contents ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
and files of computers and demands a ransom for the encryption to unlock the data.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
The Protection Cycle - correct answer✔✔1) Visibility
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
2) Detection
||//\\||
3) Remediation/response
||//\\||
4) Prevention
||//\\||
, Visibility - correct answer✔✔(Protection Cycle)Trace every action taken by running
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
applications.
Detection - correct answer✔✔(Protection Cycle)Monitor active processes and preform real- ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
time blocking of zero-day attacks, targeted attacks, and other advanced threats designed to
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
bypass traditional antivirus and anti-malware solutions.
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Remediation/response - correct answer✔✔(Protection Cycle)Use collected forensic ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
information to complete in-depth analysis of every attempted attack. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Prevention - correct answer✔✔(Protection Cycle)Edit the protection model settings and ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
patches for vulnerabilities ||//\\|| ||//\\||
Watchguard Endpoint Protection Platform (EPP) - correct answer✔✔(Watchguard Endpoint ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Security) Protects endpoints from threats and reduces the attack surface. Includes a full
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
range of protection features(antivirus, firewall, device control, URL filtering)
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Watchgurad Endpoint Detection and Response (EDR) - correct answer✔✔(Watchguard ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Endpoint Security) Detects and responds effectively to any type of unknown malware, as well
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
as the fileless and malwareless attacks that traditional solutions cannot detect. Uses Zero-
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Trust application service to prevent applications and processes from running until they are
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
validated as trusted. ||//\\|| ||//\\||
Watchguard Endpoint Protection Detection and Response (EPDR) - correct ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
answer✔✔(Watchguard Endpoint Security) Prevents, detects, and responds to any type of ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
known and unknown malware, as well as fileless and malwareless attacks. Uses Zero-Trust
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Application Service alongside anitvirus, firewall, device control, URL filtering, and more. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
Watchguard Advanced EPDR - correct answer✔✔(Watchguard Endpoint Security) Extends ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
EPDR functionality with additional capabilities that enable security operations teams to
||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
discover undetected threats on their customers endpoints. ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\|| ||//\\||
