WatchGuard Fireware Essentials ESSENTIALS Questions & Answers

• Question 31:

  Which policies can use the Intrusion Prevention Service to block network attacks? (Select one?)

  A. Only HTTP and HTTPS Proxy policies

  B. Only proxy policies

  C. All policies

  D. Only packet filter policies

  E. Only inbound policies

  Correct Answer: C

• Question 32:

  Which of these services would you use to allow the use of P2P programs for a specific department in your organization? (Select one.)

  A. Reputation Enabled Defense

  B. Application Control

  C. Data Loss Prevention

  D. IPS

  Correct Answer: B

• Question 33:

  You can use Firebox System Manager to download a PCAP file that includes packet information about the protocols that manage traffic on your network.

  A. True

  B. False

  Correct Answer: A

• Question 34:

  A. True

  B. False

  Correct Answer: A

• Question 35:

  Match the monitoring tool to the correct task.

  Which is not a Fireware monitoring tool? (Select one)

  A. FireBox System Manager – Blocked Sites list

  B. Log Server

  C. FireWatch

  D. Firebox System Manager – Subscription services

  E. Firebox System Manager – Authentication list

  F. Traffic Monitor

  Correct Answer: B

  The Fireware monitor and configuration tools are: Edge Web Manager, Firebox System Manager, HostWatch, and Ping.

  Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

• Question 36:

  A. DNS lookup

  B. MAC address lookup

  C. Traceroute

  D. Reputation lookup

  E. Ping

  F. TCP dump

  Correct Answer: ACEF

  From Firebox System Manager, you can run diagnostic tasks to review information in all the log messages from your Firebox or XTM device. This can help you debug problems on your network.

  1.

  On the Traffic Monitor tab, right-click a message and select Diagnostic Tasks. Or, select Tools > Diagnostic Tasks.

  2.

  From the Task drop-down list, select the task to run. Ping IPv4 Ping IPv6 traceroute DNS Lookup TCP Dump

  Reference: http://watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/fsm/ log_message_learn_more_wsm.html

• Question 37:

  An email newsletter about sales from an external company is sometimes blocked by spamBlocker. What option could you choose to make sure the newsletter is delivered to your users? (Select one.)

  A. Add a spamBlocker exception based on the From field of the newsletter email.

  B. Set the spamBlocker action to quarantine the email for later retrieval.

  C. Add a spamBlocker subject tag for bulk email messages.

  D. Set the spamBlocker virus outbreak detection action to allow emails from the newsletter source.

  Correct Answer: C

• Question 38:

  Your company denies downloads of executable files from all websites. What can you do to allow users on the network to download executable files from the company's remote website? (Select one.)

  A. Add an HTTP proxy exception for the company's remote website.

  B. Create a WebBlocker exception to allow access to the company's remote website.

  C. Create an IPS exception.

  D. Create a Blocked Sites exception.

  E. Configure HTTP Request > URL Paths to allow the company's remote website.

  Correct Answer: A

• Question 39:

  A user receives a deny message that the installation file (install.exe) is blocked by the HTTP-proxy policy and cannot be downloaded. Which HTTP proxy action rule must you modify to allow download of the installation file? (Select one.)

  A. HTTP Request > Request Methods

  B. HTTP Response > Body Content Types

  C. HTTP Response > Header Fields

  D. WebBlocker

  E. HTTP Request > Authorization

  Correct Answer: B

• Question 40:

  Which takes precedence: WebBlocker category match or a WebBlocker exception?

  A. WebBlocker exception

  B. WebBlocker category match

  Correct Answer: A