WatchGuard Essentials Exam Dumps

WatchGuard Essentials Sample Question Answers

WatchGuard Essentials Sample Questions

Question # 1

From the Firebox System Manager >Authentication List tab, you can view all of the authenticated users connected to your Firebox and disconnect any of them. 

A. True 
B. False 

Answer: B

Show Answer

Question # 2

After you enable spamBlocker, your users experience no reduction in the amount of spam they receive. What could explain this? (Select three.) 

A. Connections cannot be resolved to the spamBlocker servers because DNS is not configured on the Firebox. 
B. The spamBlocker action for Confirmed Spam is set to Allow. 
C. The Maximum File Size to Scan option is set too high. 
D. A spamBlocker exception is configured to allow traffic from sender *. X
E. spamBlocker Virus Outbreak Detection is not enabled. 

Answer: A,B,D

Show Answer

Question # 3

You need to create an HTTP-proxy policy to a specific domain for software updates (example.com). The update site has multiple subdomains and dynamic IP addresses on a content delivery network. Which of these options is the best way to define the destination in your HTTP-proxy policy? (Select one.) 

A. Configure a host name for update.example.com. 
B. Configure an FQDN for *.example.com. 
C. Add IP addresses that correspond to each software update server in the domain. 
D. Create an alias for all subdomains and known IP addresses for example.com. 

Answer: C

Show Answer

Question # 4

To enable remote devices to send log messages to Dimension through the gateway Firebox, what must you verify is included in your gateway Firebox configuration? (Select one.) 

A. You can only send log messages to Dimension from a computer that is on the network behind your gateway Firebox. 
B. You must change the connection settings in Dimension, not on the gateway Firebox. 
C. You must add a policy to the remote device configuration file to allow traffic to a Dimension. 
D. You must make sure that either the WG-Logging packet filter policy, or another policy that allows external connections to Dimension over port 4115, is included in the configuration file. 

Answer: C

Show Answer

Question # 5

What is the best method to downgrade the version of Fireware OS on your Firebox without losing all device configuration settings? (Select one.) 

A. Restore a saved backup image that was created for the device before the last Fireware OS upgrade. 
B. Use the Upgrade OS feature in Fireware Web UI to install the sysa_dl file for an order version of Fireware OS. 
C. Change the OS compatibility setting in Policy Manager to downgrade the device. Then use Policy Manager to save the configuration to the device. 
D. Use the downgrade feature on Policy Manager to select a previous of Fireware OS. 

Answer: A

Show Answer

Question # 6

Which authentication servers can you use with your Firebox? (Select four.) 

A. Active Directory 
B. RADIUS 
C. LDAP 
D. Linux Authentication 
E. Kerberos 
F. TACACS+ 
G. Firebox databases 

Answer: A,B,C,G

Show Answer

Question # 7

When your device is in a default state, to which interface do you connect your management computer so you can use the Quick Setup Wizard or Web Setup Wizard to configure the device? (Select one.) 

A. Interface 0 
B. Console interface 
C. Any interface 
D. Interface 1 

Answer: D

Show Answer

Question # 8

To prevent certificate error warnings in your browser when you use deep content inspection with the HTTPS proxy, you can export the proxy authority certificate from the Firebox and import that certificate to all client devices. 

A. True 
B. False 

Answer: A

Show Answer

Question # 9

You can configure your Firebox to automatically redirect users to the Authentication Portal page.

A. True 
B. False 

Answer: B

Show Answer

Question # 10

An email newsletter about sales from an external company is sometimes blocked by spamBlocker. What option could you choose to make sure the newsletter is delivered to your users? (Select one.) 

A. Add a spamBlocker exception based on the From field of the newsletter email. 
B. Set the spamBlocker action to quarantine the email for later retrieval. 
C. Add a spamBlocker subject tag for bulk email messages. 
D. Set the spamBlocker virus outbreak detection action to allow emails from the newsletter source. 

Answer: C

Show Answer

Question # 11

The policies in a default Firebox configuration do not allow outgoing traffic from optional interfaces. 

A. True 
B. False

Answer: B

Show Answer

Question # 12

Only 50 clients on the trusted network of your Firebox can connect to the Internet at the same time. What could cause this? (Select one.)

A. TheLiveSecurity feature key is expired. 
B. The device feature key allows a maximum of 50 client connections. 
C. The DHCP address pool on the trusted interface has only 50 IP addresses. 
D. The Outgoing policy allows a maximum of 50 client connections. 

Answer: C

Show Answer

Question # 13

The IP address for the trusted interface on your Firebox is 10.0.40.1/24, but you want to change the IP address for this interface. How can you avoid a network outage for clients on the trusted network when you change the interface IP address to 10.0.50.1/24? (Select one.) 

A. Create a 1-to-1 NAT rule for traffic from the 10.0.40.0/24 subnet to addresses on the 10.0.50.0/24 subnet. 
B. Add 10.0.40.1/24 as a secondary IP address for the interface. 
C. Add IP addresses on the 10.0.40.0/24 subnet to the DHCP Server IP address pool for this interface. 
D. Add a route to 10.0.40.0/24 with the gateway 10.0.50.1. 

Answer: B

Show Answer

Question # 14

Which takes precedence: WebBlocker category match or a WebBlocker exception? 

A. WebBlocker exception 
B. WebBlocker category match 

Answer: B

Show Answer

Question # 15

Which diagnostic tasks can you run from the Traffic Monitor tab of Firebox System Manager? (Select four.)

A. DNS lookup 
B. MAC address lookup 
C. Traceroute 
D. Reputation lookup 
E. Ping 
F. TCP dump 

Answer: A,C,E,F

Show Answer