WatchGuard Fireware Essentials ESSENTIALS Questions & Answers

• Question 1:

  Match each WatchGuard Subscription Service with its function.

  Uses signatures to provide real-time protection against network attacks. (Choose one).

  A. Reputation Enable Defense RED

  B. Data Loss Prevention DLP

  C. Intrusion Prevention Server IPS

  D. Application Control

  E. APT Blocker

  Correct Answer: C

  Intrusion Prevention Service (IPS) -- As with the other IPS offers, the IPS module is intended to detect and in real time mitigate intrusions coming into a network. This includes a large signature data base that monitors for spyware, SQL injections, cross-site scripting (XSS), and buffer overflows.

  Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

• Question 2:

  Match each WatchGuard Subscription Service with its function.

  Uses rules, pattern matching, and sender reputation to block unwanted email messages. (Choose one).

  A. Reputation Enable Defense RED

  B. Gateway / Antivirus

  C. Spam Blocker

  D. Intrusion Prevention Server IPS

  E. APT Blocker

  Correct Answer: C

  SpamBlocker provides a spam scanning engine that works in concert with WatchGuard's cloud-based technology to prevent spam from gaining access to the email servers (and clients).

  Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

• Question 3:

  Match each WatchGuard Subscription Service with its function.

  Controls access to website based on content categories. . (Choose one).

  A. Reputation Enable Defense RED

  B. Gateway / Antivirus

  C. WebBlocker

  D. Intrusion Prevention Server IPS

  E. Application Control

  Correct Answer: C

  WebBlocker controls access to the good and bad places that are reachable on the web, preventing users from gaining access to sites that have evil intentions. If you configure WebBlocker to use the Websense cloud for WebBlocker lookups, WebBlocker uses the Websense content categories. A web site is added to a category when the content of the web site meets the criteria for the content category.

  Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

• Question 4:

  Match each type of NAT with the correct description:

  Allows a user on the trusted or optional network to connect to a public server that is on the same physical Firebox interface by its public IP address or domain name. (Choose one)

  A. 1-to1 NAT

  B. Dynamic NAT

  C. NAT Loopback

  Correct Answer: C

  NAT loopback allows a user on the trusted or optional networks to get access to a public server that is on the same physical Firebox or XTM device interface by its public IP address or domain name.

  Reference: http://www.watchguard.com/help/docs/wsm/11/en-US/index_Left.html#CSHID=en-US%2Fnat

  %2Fnat_loopback_c.html|StartTopic=Content%2Fen-US%2Fnat%2Fnat_loopback_c.html

• Question 5:

  Match each type of NAT with the correct description:

  Changes and routes all incoming and outgoing packets sent from one range of addresses to a different range of addresses. (Choose one)

  A. 1-to1 NAT

  B. Dynamic NAT

  C. NAT Loopback

  Correct Answer: A

  When you enable 1-to-1 NAT, the Firebox changes and routes all incoming and outgoing packets sent from one range of addresses to a different range of addresses.

  Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 74

• Question 6:

  Match each WatchGuard Subscription Service with its function.

  Scans files to detect malicious software infections. (Choose one).

  A. Reputation Enable Defense RED

  B. Gateway / Antivirus

  C. Data Loss Prevention DLP

  D. Spam Blocker

  E. Quarantine Server

  Correct Answer: B

  Gateway Antivirus provides a virus scanner that uses both an extensive signature database (updated through subscription) and a heuristic analysis engine.

  Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

• Question 7:

  Match each WatchGuard Subscription Service with its function.

  Prevents accidental or unauthorized transmission of confidential information outside your network. (Choose one).

  A. Reputation Enable Defense RED

  B. Gateway / Antivirus

  C. Data Loss Prevention DLP

  D. Intrusion Prevention Server IPS

  E. APT Blocker

  Correct Answer: C

  Data Loss Prevention (DLP) watches for accidental and intentional breaches of private/sensitive data through an organizational policy. Provides a library of over 200 rules to protect organization data and has the ability to parse over 30 different file formats including Microsoft Office formats and PDFs.

  Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

• Question 8:

  Match the monitoring tool to the correct task.

  Which tool can ping the source of a denied packet? (Select one)

  A. FireBox System Manager – Blocked Sites list

  B. Log Server

  C. FireWatch

  D. Firebox System Manager – Subscription services

  E. Firebox System Manager – Authentication list

  F. Traffic Monitor

  Correct Answer: F

  For a quick look at the log messages generated by the Firebox, use Traffic Monitor. With Traffic Monitor, you can apply color to different types of messages, and ping or traceroute to the IP addresses of computers included in the log messages.

  Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

• Question 9:

  Match the monitoring tool to the correct task.

  Which tool can learn the status of your IPS signature database? (Select one)

  A. FireBox System Manager – Blocked Sites list

  B. Log Server

  C. FireWatch

  D. Firebox System Manager – Subscription services

  E. Firebox System Manager – Authentication list

  F. Traffic Monitor

  Correct Answer: D

  To look up information about an IPS signature:

  1.

  Open Firebox System Manager.

  2.

  Select the Subscription Services tab.

  3.

  In the Intrusion Prevention section, click Show.

  Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

• Question 10:

  Match the monitoring tool to the correct task.

  Which tool can view a list of users connected to the Firebox? (Select one)

  A. FireBox System Manager – Blocked Sites list

  B. Log Server

  C. FireWatch

  D. Firebox System Manager – Subscription services

  E. Firebox System Manager – Authentication list

  F. Traffic Monitor

  Correct Answer: E

  You can view a list of users connected to the Firebox through HostWatch, and you can also use Authentication List, which identifies the IP addresses and user names of all the users that are authenticated to the Firebox.

  Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181