WatchGuard Fireware Essentials ESSENTIALS Questions & Answers

• Question 11:

  Match each WatchGuard Subscription Service with its function. Manages use of applications on your network. (Choose one).

  A. Reputation Enable Defense RED

  B. Data Loss Prevention DLP

  C. Intrusion Prevention Server IPS

  D. Application Control

  E. APT Blocker

  Correct Answer: D

  Application Control keeps unproductive, inappropriate, and dangerous applications off-limits.

  Stay on top of the applications running on your network for tight security and high productivity with a

  subscription to WatchGuard Application Control. It allows you to establish which applications can be used

  within your organization, by whom, and when.

  Reference: http://www.watchguard.com/docs/brochure/wg_application-control_ds.pdf

• Question 12:

  Match each WatchGuard Subscription Service with its function.

  A repository where email messages can be sent based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention. (Choose one).

  A. Gateway / Antivirus

  B. Data Loss Prevention DLP

  C. Spam Blocker

  D. Intrusion Prevention Server IPS

  E. Quarantine Server

  Correct Answer: E

  The WatchGuard Quarantine Server provides a safe mechanism to quarantine any email messages that are suspected or known to be spam, or to contain viruses or sensitive data. The Quarantine Server is a repository for email messages that the SMTP proxy sends to quarantine based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention.

  Reference: https://www.watchguard.com/help/docs/webui/xtm_11/en-US/index.html#cshid=en-US/ quarantineserver/quar_server_about_c.html

• Question 13:

  Match each WatchGuard Subscription Service with its function.

  Cloud based service that controls access to website based on a site's previous behavior. (Choose one).

  A. Reputation Enable Defense RED

  B. Data Loss Prevention DLP

  C. WebBlocker

  D. Intrusion Prevention Server IPS

  E. Application Control

  F. Quarantine Server

  Correct Answer: A

  Reputation Enable Device (RED) is a cloud-based reputation service that controls user's ability to get main access to web malicious sites. Works in concert with the WebBlocker module.

  Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html

• Question 14:

  Which tool can add an IP address for the Firebox to permanently block? (Select one)

  A. FireBox System Manager – Blocked Sites list

  B. Log Server

  C. FireWatch

  D. Firebox System Manager – Subscription services

  E. Firebox System Manager – Authentication list

  F. Traffic Monitor

  Correct Answer: A

  Block a site permanently

  The Successful Company network administrator has been driven to distraction recently by a script kiddy

  using addresses in the 192.136.15.0/24 network to run probes of the Successful network. In this exercise,

  we permanently block all connections from that network.

  1.

  From Policy Manager, select Setup > Default Threat Protection > Blocked Sites.

  The Blocked Sites Configuration dialog box opens.

  2.

  On the Blocked Sites tab, click Add.

  3.

  The Add Site dialog box opens. 3. Use the Choose Type drop-down list to select Network IP. In the

  Value text box, type 192.136.15.0/ 24.

  4.

  Click OK.

  The entry appears in the Blocked Sites list. With this configuration, the Firebox blocks all packets to and

  from the 192.136.15.0/24 network range.

  Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

• Question 15:

  In a Mobile VPN configuration, why would you choose default route VPN over split tunnel VPN? (Select one.)

  A. Default route VPN allows your Firebox to examine all remote user traffic

  B. Default route VPN uses less bandwidth

  C. Default route VPN uses less processing power

  D. Default route VPN automatically allows dynamic NAT

  Correct Answer: D

• Question 16:

  You can use Firebox-DB authentication with any type of Mobile VPN.

  A. True

  B. False

  Correct Answer: A

• Question 17:

  Which tool is used to see a treemap visualization of the traffic through your Firebox? (Select one)

  A. FireBox System Manager – Blocked Sites list

  B. Log Server

  C. FireWatch

  D. Firebox System Manager – Subscription services

  E. Firebox System Manager – Authentication list

  F. Traffic Monitor

  Correct Answer: C

  The FireWatch page is separated into tabs of data that is presented in a Treemap Visualization. The treemap is a widget that proportionally sizes blocks in the display to represent the data for that tab. The largest blocks on the tab represent the largest data users. The data is sorted by the tab you select and the type you select from the drop-down list at the top right of the page.

  Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

• Question 18:

  How can you prevent connections to the Fireware Web UI from computers on optional interface Eth2? (Select one.)

  A. Remove Eth2 from the Any-Optional alias.

  B. Remove Any-Optional from the To list of the WatchGuard Web UI policy.

  C. Remove Any-Optional from the From list of the WatchGuard policy.

  D. Remove Any-Optional from the To list of the WatchGuard policy

  E. Remove Any-Optional from the From list of the WatchGuard Web UI policy

  Correct Answer: E

• Question 19:

  What is one reason that users could see a certificate warning in their web browsers when they connect to Fireware XTM Web UI? (Select one.)

  A. The Firebox or XTM device uses the default self-signed certificate.

  B. The authentication server does not respond after three minutes.

  C. The user has been previously added to the Blocked Sites list.

  D. The user or group is not present in the Firebox User database.

  Correct Answer: A

• Question 20:

  From the Fireware Web UI, you can generate a report that shows your device configuration settings.

  A. True

  B. False

  Correct Answer: A