2023 Valid Essentials Real Exam Questions, practice Fireware Essentials [Q22-Q37] – IT Certification Exam Questions & Answers

Rate this post

2023 Valid Essentials Real Exam Questions, practice Fireware Essentials

Latest Success Metrics For Actual Essentials Exam (Updated 75 Questions)

QUESTION 22
Clients on the trusted network need to connect to a server behind a router on the optional network.

Based on this image, what static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100? (Select one.)

Route to 10.0.20.0/24,Gateway 10.0.2.1

Route to 10.0.20.0/24,Gateway 10.0.2.254

Route to 10.0.20.0, Gateway 10.0.2.254

Route to 10.0.10.0/24, Gateway 10.0.10.1

QUESTION 23
If you disable the Outgoing policy, which policies must you add to allow trusted users to connect to commonly used websites? (Select three.)

HTTP port 80

NAT policy

FTP port 21

HTTPS port 443

DNS port 53

Explanation/Reference:
TCP-UDP packet filter
If you decide to remove the Outgoing policy, you must add a policy for any type of traffic you want to allow through the Firebox. If you remove the Outgoing policy and then decide you want to allow all TCP and UDP connections through the Firebox again, you must add the TCP-UDP packet filter to provide the same function.
This is because the Outgoing policy does not appear in the list of standard policies available from Policy Manager.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 97

QUESTION 24
You need to create an HTTP-proxy policy to a specific domain for software updates (example.com). The update site has multiple subdomains and dynamic IP addresses on a content delivery network. Which of these options is the best way to define the destination in your HTTP-proxy policy? (Select one.)

Configure a host name forupdate.example.com.

Configure an FQDN for*.example.com.

Add IP addresses that correspond to each software update server in the domain.

Create an alias for all subdomains and known IP addresses forexample.com.

http://www.watchguard.com/help/docs/fireware/11/en-US/Content/en-US/policies/fqdn_about_c.html

QUESTION 25
After you enable spamBlocker, your users experience no reduction in the amount of spam they receive.
What could explain this? (Select three.)

Connections cannot be resolved to the spamBlocker servers because DNS is not configured on the Firebox.

The spamBlocker action for Confirmed Spam is set to Allow.

The Maximum File Size to Scan option is set too high.

A spamBlocker exception is configured to allow traffic from sender *.

spamBlocker Virus Outbreak Detection is not enabled.

Explanation/Reference:
A: Spamblocker requires DNS to be configured on your XTM device
B: If you use spamBlocker with the POP3 proxy, you have only two actions to choose from: Add Subject Tag and Allow. Allow lets spam email messages go through the Firebox without a tag.
D: The Firebox might sometimes identify a message as spam when it is not spam. If you know the address of the sender, you can configure the Firebox with an exception that tells it not to examine messages from that source address or domain.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 138

QUESTION 26
The policies in a default Firebox configuration do not allow outgoing traffic from optional interfaces.

True

False

QUESTION 27
An email newsletter about sales from an external company is sometimes blocked by spamBlocker. What option could you choose to make sure the newsletter is delivered to your users? (Select one.)

Add a spamBlocker exception based on the From field of the newsletter email.

Set the spamBlocker action to quarantine the email for later retrieval.

Add a spamBlocker subject tag for bulk email messages.

Set the spamBlocker virus outbreak detection action to allow emails from the newsletter source.

QUESTION 28
If your Firebox has a single public IP address, and you want to forward inbound traffic to internal hosts based on the destination port, which type of NAT should you use? (Select one.)

Static NAT

1-to-1 NAT

Dynamic NAT

QUESTION 29
If you use an external authentication server for mobile VPN, which option must you complete before remote users can authenticate? (Select one.)

Create aliases for each remote user’s virtual IP address.

Reboot the authentication server.

Add the Mobile VPN user group and remote users to your authentication server.

Add the remote users to a Mobile VPN user group on your Firebox.

QUESTION 30
A user receives a deny message that the installation file (install.exe) is blocked by the HTTP-proxy policy and cannot be downloaded. Which HTTP proxy action rule must you modify to allow download of the installation file? (Select one.)

HTTP Request > Request Methods

HTTP Response > Body Content Types

HTTP Response > Header Fields

WebBlocker

HTTP Request > Authorization

http://www.watchguard.com/training/fireware/82/httppro8.htm

QUESTION 31
To enable remote devices to send log messages to Dimension through the gateway Firebox, what must you verify is included in your gateway Firebox configuration? (Select one.)

You can only send log messages to Dimension from a computer that is on the network behind your gateway Firebox.

You must change the connection settings in Dimension, not on the gateway Firebox.

You must add a policy to the remote device configuration file to allow traffic to a Dimension.

You must make sure that either the WG-Logging packet filter policy, or another policy that allows external connections to Dimension over port 4115, is included in the configuration file.

QUESTION 32
If you use an external authentication server for mobile VPN, which option must you complete before remote users can authenticate? (Select one.)

Create aliases for each remote user’s virtual IP address.

Reboot the authentication server.

Add the Mobile VPN user group and remote users to your authentication server.

Add the remote users to a Mobile VPN user group on your Firebox.

http://www.watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/mvpn/ipsec/mvpn_ipsec_ext_auth_server_config_wsm.html

QUESTION 33
Which policies can use the Intrusion Prevention Service to block network attacks? (Select one?)

Only HTTP and HTTPS Proxy policies

Only proxy policies

All policies

Only packet filter policies

Only inbound policies

QUESTION 34
What is the best method to downgrade the version of Fireware OS on your Firebox without losing all device configuration settings? (Select one.)

Restore a saved backup image that was created for the device before the last Fireware OS upgrade.

Use the Upgrade OS feature in Fireware Web UI to install the sysa_dl file for an order version of Fireware OS.

Change the OS compatibility setting in Policy Manager to downgrade the device. Then use Policy Manager to save the configuration to the device.

Use the downgrade feature on Policy Manager to select a previous of Fireware OS.

QUESTION 35
When your users connect to the Authentication Portal page to authenticate, they see a security warning message in their browses, which they must accept before they can authenticate. How can you make sure they do not see this security warning message in their browsers? (Select one.)

Import a custom self-signed certificate or a third-party certificate to your Firebox and import the same certificate to all client computers or web browsers.

Replace the Firebox certificate with the trusted certificate from your web server.

Add the user accounts for your users who use the Authentication Portal to a list of trusted users on your Firebox.

Instruct them to disable security warning message in their preferred browsers.

QUESTION 36
From the SMTP proxy action settings in this image, which of these options is configured for outgoing SMTP traffic? (Select one.)

Rewrite the Mail From header for the example.comdomain.

Deny incoming mail from the example.comdomain.

Prevent mail relay for the example.comdomain.

Deny outgoing mail from the example.comdomain.

QUESTION 37
After you enable Gateway AntiVirus, IPS, or Application control, how can you make sure the services protect your network from the latest known threats? (Select one.)

Enable default packet handling.

Configure reputation Enabled Defense.

Enable automatic signature updates.

Enable HTTPS deep inspection.

Loading …