Watchguard Essentials Questions

Front 1

You must have a WatchGuard management server to use drag-and-drop for VPN creation.

Back 1

True

Front 2

When you connect to a firebox from WSM, you should decrease the timeout setting in the Connect to firebox dialog box of you have a slow network or Internet connection.

Back 2

False

Front 3

You must install all WSM servers on the same management computer.

Back 3

False

Front 4

You do not have to install a WSM server to use WatchGuard Server Center.

Back 4

False

Front 5

Which of the following do you need before you use the Quick Setup Wizard in WSM to setup your Firebox with a basic working configuration?

Back 5

A feature key, IP address of the gateway router, and IP address to give to the external and trusted interfaces of the firebox.

Front 6

To save a changed device configuration file to the firebox, which pass-phrase do you use?

Back 6

Admin pass-phrase

Front 7

How frequently should you make a backup image of your firewall?

Back 7

Each time you make a substantial change to the configuration.

Front 8

Which information does Watchguard System manager use to identify a Firebox?

Back 8

External IP, Device name and Model Number.

Front 9

Which account can you use to login to the WebUI to change the configuration?

Back 9

admin

Front 10

What is the default port you use to login to the Web UI?

Back 10

8080

Front 11

You must install WSM software to use the Web UI.

Back 11

False

Front 12

How many users can simultaneously login to the Web UI with the admin account, if the option to allow more than one Device Administrator to login to the Firebox at the same time has been enabled?

Back 12

Unlimited

Front 13

How many users can login to the Web UI with the status account?

Back 13

Unlimited

Front 14

When you use a static IP address for the external interface, what information must you get from your ISP?

Back 14

IP address, Subnet Mask, & Default Gateway

Front 15

You can configure the firebox as a DHCP server?

Back 15

True

Front 16

If you use DHCP on the external interface of the firebox, you can configure a secondary network for the external interface.

Back 16

True

Front 17

You can add secondary networks only when the device is configured in Bridge mode.

Back 17

False

Front 18

Which two interfaces are necessary to create a basic network configuration in mixed routing mode?

Back 18

External and Trusted

Front 19

Which of these items is NOT a method used to assign an IP to an external interface on a firebox?

Back 19

PPPoA

Front 20

Only the trusted interface is able to assign IP addresses as a DHCP server.

Back 20

False

Front 21

Which type of NAT conserves IP addresses and hides the internal topology of your network?

Back 21

Dynamic NAT

Front 22

Which type of NAT is often used for policies that require more than one port, or port numbers that change dynamically, such as for many messaging and video conferencing applications?

Back 22

1-to-1 NAT

Front 23

Which of these entries are in the dynamic NAT configuration by default?

Back 23

192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8

Front 24

Static NAT for a policy is also known as:

Back 24

Port forwarding

Front 25

Dynamic NAT rewrites the source IP address of packets to use the IP address of the interface from which traffic leaves.

Back 25

True

Front 26

Performance Console displays graphs that show various Firebox functions based on performance counters.

Back 26

True

Front 27

You can add a site to the Blocked Sites list from HostWatch.

Back 27

True

Front 28

From the Service Watch tab, you can update your Gateway AV, Application Control and IPS Signatures.

Back 28

False

Front 29

What is a task that can be performed from traffic monitor?

Back 29

Ping the source of a denied packet.

Front 30

Firewatch allows you to see a treemap visualiztion of the traffic through your Firebox.

Back 30

True

Front 31

Which of these are part of the Watchguard reporting architecture?

Back 31

Report Server, Log Server, Firebox and Report Manager

Front 32

Which tool do you use to set the frequency that reports are generated?

Back 32

Report Server

Front 33

A report server can create reports based on log messages from more than one log server.

Back 33

True

Front 34

To connect to WatchGuard WebCenter, you use the IP address of your firebox.

Back 34

False

Front 35

In WSM log manager, you can search the log files of more than one firebox at the same time.

Back 35

False

Front 36

A packet filter policy examines the application layer content of a TCP/IP packet.

Back 36

False

Front 37

You can use the same operating schedule for multiple policies.

Back 37

True

Front 38

Which of the following protocols can be used in a custom policy.

Back 38

TCP, UDP and ICMP

Front 39

Policies are ordered primarily by name.

Back 39

False

Front 40

Policy event notification messages can be sent to which of the following destinations?

Back 40

Email messages, an SNMP trap,and pop-up message on your log server.

Front 41

To protect your DNS server from attack, you configure a DNS proxy policy with a DNS incoming proxy action.

Back 41

True

Front 42

What is the function of a DNS server?

Back 42

Translate readable internet addresses into IP addresses.

Front 43

An ALG is the same as a packet filter policy.

Back 43

False

Front 44

What is the best pattern match to block FTP uploads of Adobe PDF documents?

Back 44

*.pdf

Front 45

You can assign the same proxy action to more than one proxy policy.

Back 45

True

Front 46

Which of these VOIP protocols do fireware ALG's support?

Back 46

H.323 & SIP

Front 47

Fireware OS supports authentication to a Novell server.

Back 47

False

Front 48

You can configure a policy to a allow a single user.

Back 48

True

Front 49

Which of these authentication servers are compatible with Fireware OS?

Back 49

Firebox-DB, SecurID, RADIUS, LDAP & Active Directory

Front 50

What is the URL for the authentication server?

Back 50

https://{trusted or optional IP}:4100

Front 51

Which HTTP proxy action category controls content by MIME type?

Back 51

HTTP Response > Content Types

Front 52

Which security service cannot be used with the HTTP proxy?

Back 52

SpamBlocker

Front 53

A user does not have to be authenticated to the firebox to apply bandwidth and time quotas to web traffic.

Back 53

False

Front 54

How do you prevent traffic to a specific website from contributing to a user's quota?

Back 54

Add the site to the quota exceptions list.

Front 55

WebBlocker adds URL filtering to the SMTP proxy.

Back 55

False

Front 56

Which WebBlocker server option offers more categories?

Back 56

Websense cloud with Websense categories.

Front 57

You can create new WebBlocker categories.

Back 57

False

Front 58

You can create a WebBlocker exception that blocks a specific port in a URL.

Back 58

True

Front 59

You can allow a user to bypass the WebBlocker restrictions.

Back 59

True

Front 60

A WebBlocker exception can allow a site that is normally blocked to be allowed, or a site that is normally allowed to be blocked.

Back 60

True

Front 61

you must install a RED defense server to use the RED defense service.

Back 61

False

Front 62

When RED is enabled, local Gateway AV scans are done only for URLs that have an inconclusive reputation score (not good or bad).

Back 62

True

Front 63

Which SMTP proxy action can reduce the number of very large files your users receive by email.

Back 63

SMTP-Incoming

Front 64

Which SMTP proxy action can reduce the amount of spam received by your users?

Back 64

SMTP-Incoming

Front 65

Which rule in the SMTP-Outgoing proxy action can prevent your network from being used as a spam relay?

Back 65

Mail From

Front 66

Which SMTP-proxy action can block pornographic images from being received by your users?

Back 66

SMTP-Incoming

Front 67

Which SMTP-proxy actions can keep your users from sending MP3 files to their friends?

Back 67

SMTP-Outgoing

Front 68

You can use the POP3-Client proxy action to deny messages received from a POP3 server.

Back 68

False

Front 69

What actions can spamblocker take when configured to work with SMTP?

Back 69

Deny, tag, allow, drop and quarantine

Front 70

the confirmed spam category includes email messages that come from known spammers.

Back 70

True

Front 71

Which of these policies work with spamblocker?

Back 71

SMTP, POP3

Front 72

When you use spamblocker with the POP3-proxy, the firebox can deny, drop, allow or add a subject to any suspected spam message.

Back 72

True

Front 73

To use spamblocker, you must configure a Quarantine server.

Back 73

False

Front 74

A firewall-based IPS maintains a database of character strings that match known viruses and worms.

Back 74

False

Front 75

Which of these features are firewall-based intrusion prevention measures?

Back 75

Blocked sites, Default packet handling, blocked ports

Front 76

An unhandled packet is a packet that does not match any policy created in Policy Manager.

Back 76

True

Front 77

To block all traffic to and from a network, you add the address to the blocked __________ list.

Back 77

Sites

Front 78

When you enable IPS, IPS is automatically enabled for all policies.

Back 78

True

Front 79

Which IPS action adds the source IP address to the Blocked Sites list?

Back 79

Block

Front 80

What threat levels does IPS block by default?

Back 80

Critical, High, Medium and Low

Front 81

Can you disable IPS for a specific policy?

Back 81

Yes

Front 82

In the SMTP proxy, which proxy action deletes the attachment, sends nothing to the sender or recipient and adds the sender to the Blocked sites list?

Back 82

Block

Front 83

Which proxy action removes the attachment and allows the message through to the recipient?

Back 83

Remove

Front 84

Gateway AV can detect viruses in password-protected ZIP files.

Back 84

False

Front 85

If you use the POP3 proxy, you can send email messages with a virus or possible virus to the Quarantine server.

Back 85

False

Front 86

Which proxies does gateway AV operate with?

Back 86

SMTP, HTTP, FTP, POP3, and TCP-UDP

Front 87

Which proxies can use the Remove action when Gateway AV identified a virus?

Back 87

SMTP and POP3

Front 88

APT blocker requires that you also have Gateway AV enabled for the specified proxy.

Back 88

True

Front 89

APT blocker must have the latest signatures to detect zero-day advanced malware.

Back 89

False

Front 90

Which of these APT threat levels indicate the presence of advanced malware.

Back 90

High, Medium and Low

Front 91

The global application control action applies automatically to all policies in your configuration.

Back 91

False

Front 92

If you want to monitor application use on your network, you must enable application control in your policies and enable logging of allowed packets in those policies.

Back 92

True

Front 93

Which actions can the firebox take for traffic that matches an application control action?

Back 93

Allow and Drop

Front 94

Is it possible to enable application control without blocking and applications?

Back 94

Yes

Front 95

Where can you find out more information about an application that application control can block?

Back 95

On the WatchGuard Application Control Security Portal

Front 96

DLP scans both incoming and outgoing traffic

Back 96

False

Front 97

Which of these DLP sensors or rules would you use to scan for phrases specific to your organization in outbound email traffic?

Back 97

Custom Rule

Front 98

DLP cannot scan content in password protected files.

Back 98

True

Front 99

Before you can enable a DLP sensor for a HTTPS proxy policy, you must first enable deep inspection in the HTTPS-proxy action.

Back 99

True

Front 100

Which BOVPN method can you use between a WatchGuard device and a third party device?

Back 100

Manual BOVPN

Front 101

If you want to use policy based routing to send traffic through a VPN tunnel, which type of VPN must you use?

Back 101

BOVPN Virtual Interface

Front 102

Which VPN type do you configure on a WatchGuard management server?

Back 102

Managed VPN tunnel

Front 103

The main purpose of Phase 2 is to setup a secure encrypted channel through which the two devices can negotiate Phase 1.

Back 103

False

Front 104

In Phase 2 negotiations, the two peers agree on a set of communication parameters. When you configure the BOVPN tunnel, you specify the Phase 2 parameters.

Back 104

True

Front 105

Which step is not a part of Phase 1 negotiation?

Back 105

Assign name and pass-phrase to tunnel

Front 106

When you configure a BOVPN, three "Any" policies are automatically created to allow traffic to and from the tunnels.

Back 106

False

Front 107

Which of these VPN connection types can you configure in the native VPN client in Windows?

Back 107

PPTP and L2TP

Front 108

Split-tunneling is more secure than default route VPN.

Back 108

False

Front 109

A firebox can manage only one type of mobile VPN at a time.

Back 109

False

Front 110

Which mobile VPN clients can users download by authenticating to a web page on a Firebox?

Back 110

Mobile VPN with SSL

Front 111

When does the user need to know the Mobile VPN with IPSec tunnel pass-phrase?

Back 111

To import the client profile to the Mobile VPN with IP Sec client.

Front 112

What is the purpose of the "WatchGuard" policy?

Back 112

Allows management connections to the firebox from WSM

Front 113

You can use LDAP authentication for the PPTP or L2TP Mobile VPNs.

Back 113

False

Front 114

When your firebox has an application control license, which policies have application control enabled by default?

Back 114

None

Front 115

While troubleshooting a branch office VPN tunnel, you see the log message below. What settings could you modify inthe local device configuration to resolve the configuration issue?

Back 115

BOVPN Tunnel settings

Front 116

You can use the TCP-UDP proxy to control Web, FTP, and SIP traffic on ports other than 80, 21, and 5060

Back 116

True