The WatchGuard Essentials Questions & Practice Test are Available On-Demand [Q17-Q31]

Rate this post

The WatchGuard Essentials Questions & Practice Test are Available On-Demand

Valid Essentials Exam Dumps Ensure you a HIGH SCORE

Difficulty in Writing Essential Exam

Essential is one of the basic level certification conducted by the watchgaurd. It could be challenging for the candidates to pass the Essential exam with good grades if they underestimate or they didn’t utilized proper study preparation material. PrepAwayPDF contains all the genuine questions answers along with the description so that it could be easier for the participants to understand and grab the knowledge about watchgaurd fireware network security. Certification questions have valid Essential exam dumps with most recent and important questions and answers, even in PDF format it is available for the participants, they can download it directly from our website. PrepAwayPDF is sure about the exactness and legitimacy of Essential exam dumps which are validated and updated by our WatchGaurd certified experts on regular basis. Candidates can easily pass the Essential exam with our provided Essential Dumps and get WatchGaurd certification. These exam dumps are viewed as the best source to understand the Essential.

Introduction to Essentials Exam

The Essential exam tests your knowledge of basic networking and how to configure, manage, and monitor a WatchGuard Firebox. This exam is appropriate for network administrators who have experience configuring and managing Firebox devices that run Fireware. This is one of the basic level exam conducted by the WatchGaurd.

QUESTION 17
Which items are included in a Firebox backup image? (Select four.)

Support snapshot

Fireware OS

Configuration file

Log file

Feature keys

Certificates

Explanation/Reference:
A Firebox backup image is a saved copy of the working image from the Firebox flash disk. The backup image includes the Firebox appliance software, configuration file, licenses, and certificates.
When you purchase an option for your Firebox, you add a new feature key to your configuration file.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 14, 57

QUESTION 18
Match each WatchGuard Subscription Service with its function.
A repository where email messages can be sent based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention. (Choose one).

Gateway / Antivirus

Data Loss Prevention DLP

Spam Blocker

Intrusion Prevention Server IPS

Quarantine Server

Explanation/Reference:
The WatchGuard Quarantine Server provides a safe mechanism to quarantine any email messages that are suspected or known to be spam, or to contain viruses or sensitive data. The Quarantine Server is a repository for email messages that the SMTP proxy sends to quarantine based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention.
Reference: https://www.watchguard.com/help/docs/webui/xtm_11/en-US/index.html#cshid=en-US/ quarantineserver/quar_server_about_c.html

QUESTION 19
When your device is in a default state, to which interface do you connect your management computer so you can use the Quick Setup Wizard or Web Setup Wizard to configure the device? (Select one.)

Interface 0

Console interface

Any interface

Interface 1

Explanation/Reference:
To start the Web Setup Wizard, connect your computer to interface number 1 of your XTM device with an Ethernet cable. This is the trusted interface.
Reference: http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#en-US/installation/ qsw_web_about_c.html

QUESTION 20
While troubleshooting a branch office VPN tunnel, you see this log message:
2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3DES, expecting AES
What settings could you modify in the local device configuration to resolve this issue? (Select one.)

BOVPN Gateway settings

BOVPN-Allow policies

BOVPN Tunnel settings

BOVPN Tunnel Route settings

The WatchGuard BOVPN settings error in this example states phase one encryption. Only the BOVPN Gateway settings can specify phase one settings. BOVPN Tunnel settings specify phase 2 settings.

QUESTION 21
Match the monitoring tool to the correct task.
Which tool can view a list of users connected to the Firebox? (Select one)

FireBox System Manager – Blocked Sites list

Log Server

FireWatch

Firebox System Manager – Subscription services

Firebox System Manager – Authentication list

Traffic Monitor

Explanation/Reference:
You can view a list of users connected to the Firebox through HostWatch, and you can also use Authentication List, which identifies the IP addresses and user names of all the users that are authenticated to the Firebox.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

QUESTION 22
Which tool is used to see a treemap visualization of the traffic through your Firebox? (Select one)

FireBox System Manager – Blocked Sites list

Log Server

FireWatch

Firebox System Manager – Subscription services

Firebox System Manager – Authentication list

Traffic Monitor

Explanation/Reference:
The FireWatch page is separated into tabs of data that is presented in a Treemap Visualization. The treemap is a widget that proportionally sizes blocks in the display to represent the data for that tab. The largest blocks on the tab represent the largest data users. The data is sorted by the tab you select and the type you select from the drop-down list at the top right of the page.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

QUESTION 23
Clients on the trusted network need to connect to a server behind a router on the optional network. Based on this image, what static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100? (Select one.)

Route to 10.0.20.0/24, Gateway 10.0.2.1

Route to 10.0.20.0/24, Gateway 10.0.2.254

Route to 10.0.20.0, Gateway 10.0.2.254

Route to 10.0.10.0/24, Gateway 10.0.10.1

We must add a trusted static route to the 10.0.20.0/24 network through the 10.0.2.254 gateway.

QUESTION 24
Match each WatchGuard Subscription Service with its function.
Scans files to detect malicious software infections. (Choose one).

Reputation Enable Defense RED

Gateway / Antivirus

Data Loss Prevention DLP

Spam Blocker

Quarantine Server

Explanation/Reference:
Gateway Antivirus provides a virus scanner that uses both an extensive signature database (updated through subscription) and a heuristic analysis engine.
Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

QUESTION 25
Match each WatchGuard Subscription Service with its function.
Uses signatures to provide real-time protection against network attacks. (Choose one).

Reputation Enable Defense RED

Data Loss Prevention DLP

Intrusion Prevention Server IPS

Application Control

APT Blocker

Explanation/Reference:
Intrusion Prevention Service (IPS) — As with the other IPS offers, the IPS module is intended to detect and in real time mitigate intrusions coming into a network. This includes a large signature data base that monitors for spyware, SQL injections, cross-site scripting (XSS), and buffer overflows.
Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

QUESTION 26
Match each WatchGuard Subscription Service with its function.
Uses signatures to provide real-time protection against network attacks. (Choose one).

Reputation Enable Defense RED

Data Loss Prevention DLP

Intrusion Prevention Server IPS

Application Control

APT Blocker

Intrusion PreventionService (IPS) — As with the other IPS offers, the IPS module is intended to detect and in real time mitigate intrusions coming into a network. This includes a large signaturedata base that monitors for spyware, SQL injections, cross-site scripting (XSS),and buffer overflows.
Reference:http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

QUESTION 27
You can configure the SMTP-proxy policy to restrict email messages and email content based on
which of these message characteristics? (Select four.)

Sender Mail From address

Check URLs in message with WebBlocker

Email message size

Attachment file name and content type

Maximum email recipients

QUESTION 28
Which WatchGuard Subscription Service must be enabled in a proxy policy before you can use APT Blocker? (Select one.)

RED

Application Control

Gateway Antivirus

WebBlocker

IPS

QUESTION 29
When you examine the log messages In Traffic Monitor, you see that some network packets are denied with an unhandled packet log message. What does this log massage mean? (Select one.)

The packet is denied because the site is on the Blocked Sites List.

The packet is denied because it matched a policy.

The packet is denied because it matched an IPS signature.

The packet is denied because it does not match any firewall policies.

QUESTION 30
When your users connect to the Authentication Portal page to authenticate, they see a security warning message in their browses, which they must accept before they can authenticate. How can you make sure they do not see this security warning message in their browsers? (Select one.)

Import a custom self-signed certificate or a third-party certificate to your Firebox and import the same certificate to all client computers or web browsers.

Replace the Firebox certificate with the trusted certificate from your web server.

Add the user accounts for your users who use the Authentication Portal to a list of trusted users on your Firebox.

Instruct them to disable security warning message in their preferred browsers.

QUESTION 31
You have a privately addressed email server behind your Firebox. If you want to make sure that all traffic from this server to the Internet appears to come from the public IP address 203.0.113.25, regardless of policies, which from of NAT would you use? (Select one.)

In the SMTP policy that handles traffic from the email server, select the option to apply dynamic NAT to all traffic in the policy and set the source IP address 203.0.113.25.

Create a global dynamic NAT rule for traffic from the email server and set the source IP address to
203.0.113.25.

Create a static NAT action for traffic to the email server, and set the source IP address to 203.0.113.25.

Loading …

Essentials Exam Practice Questions prepared by WatchGuard Professionals: https://www.prepawaypdf.com/WatchGuard/Essentials-practice-exam-dumps.html

No related posts.

Difficulty in Writing Essential Exam

Introduction to Essentials Exam

admin

Leave a Reply Cancel reply