Actual4Exams Essentials Dumps PDF - 100% Passing Guarantee
Essentials Braindumps Real Exam Updated on Nov 22, 2021 with 75 Questions
NEW QUESTION 23
What settings must you device configuration file include for Gateway AntiVirus to protect users on your network? (Select two.)
- A. Configure Gateway AntiVirus settings for a proxy action.
- B. Decrease the scan limits
- C. Install the Gateway AntiVirus server on your network.
- D. Configure a policy to use a proxy action that has AntiVirus settings configured.
- E. Disable automatic signature updates.
Answer: A,D
Explanation:
Explanation/Reference:
When you enable Gateway AntiVirus, you must set the actions to be taken if a virus or error is found in an email message (SMTP or POP3 proxies), web page download or upload post (HTTP proxy), or uploaded or downloaded file (FTP proxy). When Gateway AntiVirus is enabled, it scans each file up to a specified kilobyte count. Any additional bytes in the file are not scanned. This allows the proxy to partially scan very large files without a large effect on performance.
Reference: http://watchguard.com/help/docs/webui/xtm_11/en-us/content/en-us/services/gateway_av/ av_actions_config_c.html
NEW QUESTION 24
From the Firebox System Manager >Authentication List tab, you can view all of the authenticated users connected to your Firebox and disconnect any of them.
- A. True
- B. False
Answer: B
NEW QUESTION 25
Match each WatchGuard Subscription Service with its function.
A repository where email messages can be sent based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention. (Choose one).
- A. Spam Blocker
- B. Quarantine Server
- C. Intrusion Prevention Server IPS
- D. Gateway / Antivirus
- E. Data Loss Prevention DLP
Answer: B
Explanation:
The WatchGuard Quarantine Server provides a safe mechanism to quarantine any email messages that are suspected or known to be spam, or to contain viruses or sensitive data. The QuarantineServer is a repository for email messages that the SMTP proxy sends to quarantine based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention.
Reference:https://www.watchguard.com/help/docs/webui/xtm_11/en-US/index.html#cshid=en-US/quarantineserver/quar_server_about_c.html
NEW QUESTION 26
In this diagram, which branch office VPN tunnel route must you add on the Site A Firebox to allow traffic between devices on the trusted network at Site A and the trusted network at site B? (Select one.)
- A. Local: 10.0.10.0/24 <--> Remote: 192.168.1.0/24
- B. Local: 10.0.10.1/24 <--> Remote: 192.168.1.1/24
- C. Local: 203.0.113.10/24 <--> Remote: 198.151.100.2/24
- D. Local: 192.168.1.0/24 <--> Remote: 10.0.10.0/24
Answer: B
Explanation:
Explanation/Reference:
The local, Site A, network is 10.0.10.1/24 while the remote, Site B, network is 192.168.1.1/24.
NEW QUESTION 27
How can you include log messages from more than one Firebox in a single report generated by Dimension?
(Select two.)
- A. You cannot see report data in Dimension for more than one device.
- B. Create a report schedule that includes all the devices you want to include in the report.
- C. Create a device group and view the reports for that group.
- D. Export report data as a single PDF file for all the devices you want to include in the report.
Answer: B,C
NEW QUESTION 28
If you use an external authentication server for mobile VPN, which option must you complete before remote users can authenticate? (Select one.)
- A. Reboot the authentication server.
- B. Add the remote users to a Mobile VPN user group on your Firebox.
- C. Add the Mobile VPN user group and remote users to your authentication server.
- D. Create aliases for each remote user's virtual IP address.
Answer: D
NEW QUESTION 29
Which items are included in a Firebox backup image? (Select four.)
- A. Support snapshot
- B. Log file
- C. Configuration file
- D. Certificates
- E. Feature keys
- F. Fireware OS
Answer: C,D,E,F
Explanation:
Explanation/Reference:
A Firebox backup image is a saved copy of the working image from the Firebox flash disk. The backup image includes the Firebox appliance software, configuration file, licenses, and certificates.
When you purchase an option for your Firebox, you add a new feature key to your configuration file.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 14, 57
NEW QUESTION 30
Match each type of NAT with the correct description:
Conserves IP addresses and hides the internal topology of your network. (Choose one)
- A. NAT Loopback
- B. 1-to1 NAT
- C. Dynamic NAT
Answer: A
Explanation:
Dynamic NAT is also known as IP masquerading.With dynamic NAT many computers can connect to the Internet from one public IP address. Dynamic NAT gives more security for internal hosts that use the Internet, because it hides the IP addresses of hosts on your network.
Reference:http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#en-US/nat/nat_dynamic_use_c.html%3FTocPath%3DNetwork%2520Address%2520Translation%252 0(NAT)%7CAbout%2520Dynamic%2520NAT%7C_____0
NEW QUESTION 31
Which items are included in a Firebox backup image? (Select four.)
- A. Certificates
- B. Log file
- C. Configuration file
- D. Fireware OS
- E. Feature keys
- F. Support snapshot
Answer: B,C,E,F
NEW QUESTION 32
How is a proxy policy different from a packet filter policy? (Select two.)
- A. Only a proxy policy uses the IP source, destination, and port to control network traffic.
- B. Only a proxy policy can prevent specific threats without blocking the entire connection.
- C. Only a proxy works at the application, network, and transport layers to examine all connection data.
- D. Only a proxy policy examines information in the IP header.
Answer: B,C
Explanation:
Explanation/Reference:
C: Proxies can prevent potential threats from reaching your network without blocking the entire connection.
D: A proxy operates at the application layer, as well as the network and transport layers of a TCP/IP packet, while a packet filter operates only at the network and transport protocol layers.
Incorrect:
Not A: A packet filter examines each packet's IP header to control the network traffic into and out of your network.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 95
NEW QUESTION 33
You need to create an HTTP-proxy policy to a specific domain for software updates (example.com). The update site has multiple subdomains and dynamic IP addresses on a content delivery network. Which of these options is the best way to define the destination in your HTTP-proxy policy? (Select one.)
- A. Configure a host name for update.example.com.
- B. Add IP addresses that correspond to each software update server in the domain.
- C. Create an alias for all subdomains and known IP addresses for example.com.
- D. Configure an FQDN for *.example.com.
Answer: D
NEW QUESTION 34
Match each WatchGuard Subscription Service with its function.
Uses signatures to provide real-time protection against network attacks. (Choose one).
- A. Reputation Enable Defense RED
- B. Application Control
- C. APT Blocker
- D. Intrusion Prevention Server IPS
- E. Data Loss Prevention DLP
Answer: D
Explanation:
Explanation/Reference:
Intrusion Prevention Service (IPS) -- As with the other IPS offers, the IPS module is intended to detect and in real time mitigate intrusions coming into a network. This includes a large signature data base that monitors for spyware, SQL injections, cross-site scripting (XSS), and buffer overflows.
Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html
NEW QUESTION 35
Clients on the trusted network need to connect to a server behind a router on the optional network. Based on this image, what static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100? (Select one.)
- A. Route to 10.0.20.0/24, Gateway 10.0.2.254
- B. Route to 10.0.20.0/24, Gateway 10.0.2.1
- C. Route to 10.0.20.0, Gateway 10.0.2.254
- D. Route to 10.0.10.0/24, Gateway 10.0.10.1
Answer: A
Explanation:
Explanation/Reference:
We must add a trusted static route to the 10.0.20.0/24 network through the 10.0.2.254 gateway.
NEW QUESTION 36
With the policies configured as shown in this image, HTTP traffic can be sent and received through branch office VPN tunnel.1 and tunnel.2.
- A. True
- B. False
Answer: B
NEW QUESTION 37
If your Firebox has a single public IP address, and you want to forward inbound traffic to internal hosts based on the destination port, which type of NAT should you use? (Select one.)
- A. 1-to-1 NAT
- B. Dynamic NAT
- C. Static NAT
Answer: C
Explanation:
https://www.watchguard.com/training/fireware/10/fireware10_basics.pdf
See page 76: Static NAT allows inbound connections on specific ports to one or more public servers from a single external IP address. The Firebox changes the destination IP address of the packets and forwards them based on the original destination port number.
NEW QUESTION 38
Match each type of NAT with the correct description:
Conserves IP addresses and hides the internal topology of your network. (Choose one)
- A. 1-to1 NAT
- B. NAT Loopback
- C. Dynamic NAT
Answer: C
Explanation:
Explanation/Reference:
Dynamic NAT is also known as IP masquerading. With dynamic NAT many computers can connect to the Internet from one public IP address. Dynamic NAT gives more security for internal hosts that use the Internet, because it hides the IP addresses of hosts on your network.
Reference: http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#en-US/nat/ nat_dynamic_use_c.html%3FTocPath%3DNetwork%2520Address%2520Translation%2520(NAT)%
7CAbout%2520Dynamic%2520NAT%7C_____0
NEW QUESTION 39
Which WatchGuard tools can you use to review the log messages generated by your Firebox? (Select three).
- A. WatchGuard System Manager > Policy Manager
- B. Dimension > Log manager
- C. Fireware XTM Web UI > Traffic Monitor
- D. Firebox System Manager > Traffic Monitor
- E. Firebox System Manager > Status Report
Answer: B,D,E
NEW QUESTION 40
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM device, your computer must have an IP address on which subnet? (Select one.)
- A. 10.0.1.0/24
- B. 10.0.10.0/24
- C. 192.168.1.0/24
- D. 172.16.10.0/24
Answer: A
NEW QUESTION 41
HOTSPOT
Match each WatchGuard Subscription Service with its function:
Answer:
Explanation:
Explanation:
WebBlocker
Spam Blocker Gateway / Antivirus APT Blocker Application Control Quarantee Server Intrusion Prevention Server IPS Data Loss Prvention DLP Reputation Enable Defense RED
NEW QUESTION 42
......
Essentials Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund: https://www.actual4exams.com/Essentials-valid-dump.html
Latest Essentials PDF Dumps & Real Tests Free Updated Today: https://drive.google.com/open?id=1jv2CndJ0cusCvwEdpyGvg7QUWD5W0jy2