Fireware Essentials Practice Questions

Front 1

You can use Firebox-DB authentication with any type of Mobile VPN

True or False

Back 1

True

Front 2

From the Firebox System Manager > Authentication List tab, you can view all of the authenticated users connected to your Firebox and disconnect any of them

True or False?

Back 2

True

Front 3

To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM device, your computer must have an IP address on which subnet?

a. 192.168.1.0/24

b. 172.16.10.0/24

c. 10.0.1.0/24

d. 10.0.10.0/24

Back 3

C. 10.0.1.0/24

Front 4

When you configure the Global Application Control action, it is automatically applied to all policies?

True or False

Back 4

False

Front 5

You can configure your Firebox to automatically redirect users to the Authentication Portal page?

True or False

Back 5

True

Front 6

From the Fireware Web UI, you can generate a report that shows your device configuration settings

True or False?

Back 6

True

Front 7

Which takes precedence: WebBlocker category match or a WebBlocker Exception

Back 7

WebBlocker Exception

Front 8

Which of these actions adds a host to the temporary or permanent blocked sites list?

a. Enable the AUTO-block sites that attempt to connect option in a deny policy

b. Add the site to the Blocked Sites Exceptions List

c. Add Site to Blocked Sites List

Back 8

A: Enable the Auto-Block sites that attempt to connect option in a deny policy

C: Add site to blocked sites list

Front 9

You can configure the SMTP-proxy policy to restrict email messages and email content based on which of these message characteristics?

Back 9

a. Sender Mail From address

b. Attachment file and content type

C. Maximum Email Size

D. Number of Addresses

Front 10

After you enable Gateway AntiVirus, IPS, or Application Control, how can you make sure the services protect your network from the latest known threats?

Back 10

Enable automatic signature updates

Front 11

When your device is in a default state, to which interface do you connect your management computer so you can use the Quick Setup Wizard or Web Setup Wizard to configure the device?

Back 11

Interface 1

Front 12

How can you prevent connections to the Fireware Web UI from computers on optional interface Eth2?

Back 12

Remove the Optional Alias from Eth2

Front 13

The IP address for the trusted interface on your Firebox is 10.0.40.1/24, but you want to change the IP address for this interface. How can you avoid a network outage for clients on the trusted network when you change the interface IP address to 10.0.50.1/24?

Back 13

Add 10.0.40.1/24 as a secondary IP address for the interface.

Front 14

To enable remote devices to send log messages to Dimension through the gateway Firebox, what must you verify is included in your gateway Firebox configuration?

Back 14

Add the IP address for this instance of Dimension, and the Log Server Encryption Key you specified in the Setup Wizard, to the WatchGuard Log Server list.

Front 15

Which policies can use the Intrusion Prevention Service to block network attacks?

Back 15

All Policies

Front 16

Which items are included in a Firebox backup image?

Back 16

It includes the XTM device OS, configuration file, feature keys, Device Management users, passphrases, DHCP leases, and certificates. The backup image also includes any event notification settings that you configured in Traffic Monitor.

Front 17

When you examine the log messages In Traffic Monitor, you see that some network packets are denied with an unhandled packet log message. What does this log message mean?

Back 17

An unhandled packet is a packet that does not match any policy rule.

Front 18

If you use an external authentication server for mobile VPN, which option must you complete before remote users can authenticate?

Back 18

If you create a Mobile VPN user group that authenticates to a third-party server, make sure you create a group on the server that has the same name as the name you added for the Mobile VPN group.

Front 19

How can you include log messages from more than one Firebox in a single report generated by Dimension?

Back 19

1. Add the devices to one group

2. Include them in the scheduled reports

Front 20

You can configure your Firebox to send log messages to how many WatchGuard Log Servers at the same time?

Back 20

As many as you have configured on your network

Front 21

Which of these services would you use to allow the use of P2P programs for a specific department in your organization?

Back 21

Application Control

Front 22

Which WatchGuard Subscription Service must be enabled in a proxy policy before you can use APT Blocker?

Back 22

Gateway Antivirus

Front 23

Which of these threats can the Firebox prevent with the default packet handling settings?

Back 23

1. Spoofing

2. Flood Attacks (DDOS)

3. Block all traffic to and from an address

4. Probes

Front 24

When your users connect to the Authentication Portal page to authenticate, they see a security warning message in their browses, which they must accept before they can authenticate. How can you make sure they do not see this security warning message in their browsers?

Back 24

If you want to remove this warning, you can use a third-party certificate or create a custom certificate that matches the IP address or domain name used for authentication.

Front 25

The policies in a default Firebox configuration do not allow outgoing traffic from optional interfaces.

Back 25

False

Front 26

Only 50 clients on the trusted network of your Firebox can connect to the Internet at the same time. What could cause this?

Back 26

DHCP Address Pool only has 50 addresses

Front 27

You have a privately addressed email server behind your Firebox. If you want to make sure that all traffic from this server to the Internet appears to come from the public IP address 203.0.113.25, regardless of policies, which from of NAT would you use?

Back 27

1-to-1 NAT

Front 28

What settings must you device configuration file include for Gateway AntiVirus to protect users on your network?

Back 28

Configure a policy to use a proxy action that has AntiVirus settings configured.

Front 29

To prevent certificate error warnings in your browser when you use deep content inspection with the HTTPS proxy, you can export the proxy authority certificate from the Firebox and import that certificate to all client devices.

True or False?

Back 29

True

Front 30

While troubleshooting a branch office VPN tunnel, you see this log message:2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3DES, expecting AES. What settings could you modify in the local device configuration to resolve this issue?

Back 30

BOVPN GatewaySettings

Front 31

You configured four Device Administrator user accounts for your Firebox. To see a report of witch Device Management users have made changes to the device configuration, what must you do?

Back 31

Connect to Report Manager or Dimension and view the Audit Trail report for your device.

Front 32

For which of these third party authentication methods must you specify a search base?

Back 32

Active Directory and LDAP

Front 33

Which of these options are private IPv4 addresses you can assign to a trusted interface, as described in RFC 1918, Address Allocation for Private Internets?

Back 33

192.168.50.1/24

Front 34

In a Mobile VPN configuration, why would you choose default route VPN over split tunnel VPN?

Back 34

The most secure option is to require that all remote user Internet traffic is routed through the VPN tunnel to the XTM device. Then, the traffic is sent back out to the Internet. With this configuration (known as default-route VPN), the XTM device is able to examine all traffic and provide increased security, although it uses more processing power and bandwidth

Front 35

How is a proxy policy different from a packet filter policy?

Back 35

A Proxy examines the packet content.

A proxy operates at the application layer, as well as the network and transport layers of a TCP/IP packet, while a packet filter operates only at the network and transport protocol layer.

Front 36

You need to create an HTTP-proxy policy to a specific domain for software updates (example.com). The update site has multiple subdomains and dynamic IP addresses on a content delivery network. Which of these options is the best way to define the destination in your HTTPproxy policy?

Back 36

Add example.com to HTTP-Proxy exception

Front 37

What is the best method to downgrade the version of Fireware OS on your Firebox without losing all device configuration settings?

Back 37

Restore a saved backup image that was created for the device before the last Fireware OS upgrade.

Front 38

After you enable spamBlocker, your users experience no reduction in the amount of spam they receive. What could explain this?

Back 38

1. No POP3 or SMTP proxy to scan inbound mail

2. DNS is not configured to resolve the spamBlocker addresses

Front 39

In the default Firebox configuration file, which policies control management access to the device?

Back 39

Watchguard and Watchguard Web UI

Front 40

Which of these options must you configure in an HTTPS-proxy policy to detect credit card numbers in HTTP traffic that is encrypted with SSL?

Back 40

1. Deep inspection of HTTPS content

2. Data Loss Prevention

Front 41

Which authentication servers can you use with your Firebox?

Back 41

Fire-DB, RADIUS, VASCO, SecurID, LDAP and Active Directory

Front 42

Your company denies downloads of executable files from all websites. What can you do to allow users on the network to download executable files from the company’s remote website?

Back 42

Add a HTTP Request URL Path for executable set to allow or Add a HTTP Body Content Type Allow rule for executable

Front 43

You can use Firebox System Manager to download a PCAP file that includes packet information about the protocols that manage traffic on your network.

True or False?

Back 43

True

Front 44

Which diagnostic tasks can you run from the Traffic Monitor tab of Firebox System Manager?

Back 44

1. DNS Lookup

2. Ping

3. Traceroute

4. TCP Dump

Front 45

If your Firebox has a single public IP address, and you want to forward inbound traffic to internal hosts based on the destination port, which type of NAT should you use?

Back 45

Static NAT

Front 46

What is one reason that users could see a certificate warning in their web browsers when they connect to Fireware XTM Web UI?

Back 46

The Firebox or XTM device uses the default self-signed certificate.

Front 47

If you disable the Outgoing policy, which policies must you add to allow trusted users to connect to commonly used websites?

Back 47

1. HTTP Port 80

2. HTTPS 443

3. DNS Port 53

Front 48

A user receives a deny message that the installation file (install.exe) is blocked by the HTTP-proxy policy and cannot be downloaded. Which HTTP proxy action rule must you modify to allow download of the installation file?

Back 48

HTTP Request > URL Paths

Front 49

Which WatchGuard tools can you use to review the log messages generated by your Firebox?

Back 49

1. Firebox System Manager > Traffic Monitor

2. Web UI > Traffic Monitor

3. Dimension/Log Server

Front 50

An email newsletter about sales from an external company is sometimes blocked by spamBlocker. What option could you choose to make sure the newsletter is delivered to your users?

Back 50

Add sender's from address to the exception list and use the Allow action

Front 51

What uses Full system emulation (CPU and memory) to scan for advanced threats?

Back 51

APT Blocker

Front 52

What does this policy do?

Back 52

Prevent an email relay on the example.com domain

Front 53

What aliases is Eth 2 apart of?

Back 53

Any, Any-Trusted, Firebox

Front 54

NAT Loopback

Back 54

NAT loopback allows a user on the trusted or optional networks to connect to a public server with its public IP address or domain name if the server is on the same physical XTM device interface.

Front 55

Dynamic NAT

Back 55

Dynamic NAT is the most frequently used type of NAT. It changes the source IP address of an outgoing connection to the public IP address of the XTM device. Outside the XTM device, you see only the external interface IP address of the XTM device on outgoing packets.

Front 56

What is RED?

Back 56

Reputation Enabled Defense

Front 57

What is a SNAT?

Back 57

An SNAT action is a NAT mapping which replaces the original destination IP address (and optionally, port) with a new destination.