The Best WatchGuard Essentials Study Guides and Dumps of 2021
Top WatchGuard Essentials Exam Audio Study Guide! Practice Questions Edition
NEW QUESTION 24
You can use Firebox-DB authentication with any type of Mobile VPN.
- A. False
- B. True
Answer: A
NEW QUESTION 25
Match each WatchGuard Subscription Service with its function.
Uses rules, pattern matching, and sender reputation to block unwanted email messages. (Choose one).
- A. Spam Blocker
- B. APT Blocker
- C. Gateway / Antivirus
- D. Reputation Enable Defense RED
- E. Intrusion Prevention Server IPS
Answer: A
Explanation:
Explanation/Reference:
SpamBlocker provides a spam scanning engine that works in concert with WatchGuard's cloud-based technology to prevent spam from gaining access to the email servers (and clients).
Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html
NEW QUESTION 26
Clients on the trusted network need to connect to a server behind a router on the optional network. Based on this image, what static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100? (Select one.)
- A. Route to 10.0.20.0, Gateway 10.0.2.254
- B. Route to 10.0.10.0/24, Gateway 10.0.10.1
- C. Route to 10.0.20.0/24, Gateway 10.0.2.1
- D. Route to 10.0.20.0/24, Gateway 10.0.2.254
Answer: D
Explanation:
Explanation/Reference:
We must add a trusted static route to the 10.0.20.0/24 network through the 10.0.2.254 gateway.
NEW QUESTION 27
For which of these third party authentication methods must you specify a search base? (Select two.)
- A. LDAP
- B. Active Directory
- C. RADIUS
- D. SecurID
Answer: A,B
Explanation:
Explanation/Reference:
B: Configuring the Firebox to use Active Directory authentication is similar to the process for LDAP authentication. You must set a search base to put limits on the directories on the authentication server the Firebox searches in for an authentication match.
D: When you configure the Firebox to use LDAP authentication, you must set a search base to put limits on the directories on the authentication server the Firebox searches in for an authentication match Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 83-84
NEW QUESTION 28
You can configure the SMTP-proxy policy to restrict email messages and email content based on which of these message characteristics? (Select four.)
- A. Check URLs in message with WebBlocker
- B. Maximum email recipients
- C. Email message size
- D. Sender Mail From address
- E. Attachment file name and content type
Answer: B,C,D,E
Explanation:
A: Another way to protect your SMTP server is to restrict incoming traffic to only messages that use your company domain. In this example, we use the mywatchguard.com domain. You can use your own company domain.
1.From the SMTP-Incoming Categories list, select Address > Rcpt To.
2.In the Pattern text box, type*.mywatchguard.com. Click Add.This denies anyemail messages with a Rcpt To address that does not match the company domain.
3.Click OK to close the SMTP Proxy Action Configuration dialog box.
C: In this exercise we will reduce the maximum email size to 5 MB (5, 000 kilobytes).
1.From the SMTP ProxyAction dialog box under the Categories list, select General > General Settings.
2.Find the Limits section. In the Set the maximum email size value box, type 5000.
D: Example: He must configure the Firebox to allow Microsoft Access database files to go through the SMTP proxy. He must also configure the Firebox to deny Apple iTunes MP4 files because of a recent vulnerability announced by Apple.
1.From the SMTP-Incoming Categories list, select Attachments > Content Types.
2.In the Actions to take section,use the None Matched drop-down list to select Allow.
This allows all content types through Firebox to the SMTP server. After Successful Company is able to add in the specific content types they want to allow, they set this parameter to strip content typethat does not match their list of allowed content types.
From the SMTP-Incoming Categories list, select Attachments > Filenames.
4. The filename extension for Microsoft Access databases is ".mdb". In the list of filenames, find and select .mdb. Click Remove. Click Yes to confirm.
3. If no rules match, the Action to take option is set to allow the attachment. In this example, MS Access files are now allowed through the Firebox.
5. In the Pattern text box, type *.mp4. Click Add.
This rule configures the Firebox to deny all files with the Apple iTunes ".mp4" file extension bound for the SMTP server.
E: The Set the maximum email recipient checkbox is used to set the maximum number of email recipients to which a message can be sent in the adjacent text box thatappears, type or select the number of recipients.
The XTM device counts and allows the specified number of addresses through, and then drops the other addresses. For example, if you set the value to 50 and there is a message for 52 addresses, the first 50addresses get the email message. The last two addresses do not get a copy of the message.
Incorrect:
Not B: Webblocker is configured through a HTTP-policy, not through an SMTP policy.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10,pages 125, 126
Reference:http://watchguard.com/help/docs/wsm/xtm_11/en-us/content/enus/proxies/smtp/proxy_smtp_gen_settings_c.html
NEW QUESTION 29
Match each WatchGuard Subscription Service with its function.
A repository where email messages can be sent based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention. (Choose one).
- A. Gateway / Antivirus
- B. Spam Blocker
- C. Intrusion Prevention Server IPS
- D. Quarantine Server
- E. Data Loss Prevention DLP
Answer: D
Explanation:
Explanation/Reference:
The WatchGuard Quarantine Server provides a safe mechanism to quarantine any email messages that are suspected or known to be spam, or to contain viruses or sensitive data. The Quarantine Server is a repository for email messages that the SMTP proxy sends to quarantine based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention.
Reference: https://www.watchguard.com/help/docs/webui/xtm_11/en-US/index.html#cshid=en-US/ quarantineserver/quar_server_about_c.html
NEW QUESTION 30
You can configure your Firebox to send log messages to how many WatchGuard Log Servers at the same time? (Select one.)
- A. Two
- B. One
- C. As many as you have configured on your network.
Answer: C
NEW QUESTION 31
From the SMTP proxy action settings in this image, which of these options is configured for outgoing SMTP traffic? (Select one.)
- A. Rewrite the Mail From header for the example.comdomain.
- B. Prevent mail relay for the example.comdomain.
- C. Deny incoming mail from the example.comdomain.
- D. Deny outgoing mail from the example.comdomain.
Answer: C
NEW QUESTION 32
While troubleshooting a branch office VPN tunnel, you see this log message:
2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3DES, expecting AES What settings could you modify in the local device configuration to resolve this issue? (Select one.)
- A. BOVPN Tunnel settings
- B. BOVPN Gateway settings
- C. BOVPN-Allow policies
- D. BOVPN Tunnel Route settings
Answer: B
Explanation:
The WatchGuard BOVPN settings error in this example states phase one encryption. Only the BOVPN Gateway settings can specify phase one settings. BOVPN Tunnel settings specify phase 2 settings.
NEW QUESTION 33
In the network configuration in this image, which aliases is Eth2 a member of? (Select three.)
- A. Any
- B. Optional-1
- C. Any-External
- D. Any-optional
- E. Any-Trusted
Answer: A,B,D
NEW QUESTION 34
Match each WatchGuard Subscription Service with its function.
Prevents accidental or unauthorized transmission of confidential information outside your network. (Choose one).
- A. Data Loss Prevention DLP
- B. APT Blocker
- C. Gateway / Antivirus
- D. Reputation EnableDefense RED
- E. Intrusion Prevention Server IPS
Answer: A
Explanation:
Data Loss Prevention (DLP) watches for accidental and intentional breaches of private/sensitive data through an organizational policy. Provides a library of over 200 rules to protect organization data and has the ability to parse over 30 different file formats including Microsoft Office formats and PDFs.
Reference:http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html
NEW QUESTION 35
How can you include log messages from more than one Firebox in a single report generated by Dimension?
(Select two.)
- A. Create a device group and view the reports for that group.
- B. Export report data as a single PDF file for all the devices you want to include in the report.
- C. You cannot see report data in Dimension for more than one device.
- D. Create a report schedule that includes all the devices you want to include in the report.
Answer: A,D
NEW QUESTION 36
Which tool can add an IP address for the Firebox to permanently block? (Select one)
- A. Log Server
- B. Traffic Monitor
- C. Firebox System Manager - Subscription services
- D. FireWatch
- E. FireBox System Manager - Blocked Sites list
- F. Firebox System Manager - Authentication list
Answer: E
Explanation:
Block a site permanently
The Successful Company networkadministrator has been driven to distraction recently by a script kiddy using addresses in the 192.136.15.0/24 network to run probes of the Successful network. In this exercise, we permanently block all connections from that network.
1.From PolicyManager, select Setup > Default Threat Protection > Blocked Sites. The Blocked Sites Configuration dialog box opens.
2.On the Blocked Sites tab, click Add.
3.The Add Site dialog box opens. 3. Use the Choose Type drop-down list to select Network IP. In the Value text box, type 192.136.15.0/ 24.
4. Click OK.
The entry appears in the Blocked Sites list. With this configuration, the Firebox blocks all packets to and from the 192.136.15.0/24 network range.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181
NEW QUESTION 37
Match the monitoring tool to the correct task.
Which tool can view a list of users connected to the Firebox? (Select one)
- A. Log Server
- B. Firebox System Manager - Authentication list
- C. Traffic Monitor
- D. Firebox System Manager - Subscription services
- E. FireWatch
- F. FireBox System Manager - Blocked Sites list
Answer: B
Explanation:
Explanation/Reference:
You can view a list of users connected to the Firebox through HostWatch, and you can also use Authentication List, which identifies the IP addresses and user names of all the users that are authenticated to the Firebox.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181
NEW QUESTION 38
If your Firebox has a single public IP address, and you want to forward inbound traffic to internal hosts based on the destination port, which type of NAT should you use? (Select one.)
- A. Static NAT
- B. 1-to-1 NAT
- C. Dynamic NAT
Answer: A
Explanation:
https://www.watchguard.com/training/fireware/10/fireware10_basics.pdf
See page 76: Static NAT allows inbound connections on specific ports to one or more public servers from a single external IP address. The Firebox changes the destination IP address of the packets and forwards them based on the original destination port number.
NEW QUESTION 39
Which authentication servers can you use with your Firebox? (Select four.)
- A. LDAP
- B. Active Directory
- C. Linux Authentication
- D. Kerberos
- E. Firebox databases
- F. TACACS+
- G. RADIUS
Answer: A,B,E,G
Explanation:
NEW QUESTION 40
......
Understanding functional and technical aspects of Essentials Policies, Proxies, and Security Services
The following will be discussed here:
- Policy precedence
- Packet filter policies and proxy policies
- HTTP proxy
- Understand how to configure Firebox policies, proxies, and security services.
- Content actions and domain name rules
- Fireware subscription security services
- HTTPS proxy content inspection
Valid Essentials Exam Updates - 2021 Study Guide: https://www.pass4leader.com/WatchGuard/Essentials-exam.html
Essentials Certification - The Ultimate Guide: https://drive.google.com/open?id=1zP58QG8aPLYmf60QRMZ4MXK_MlD3y_BB