Get 100% Success with Latest Fireware Essentials Essentials Exam Dumps May 16, 2023
The Best Essentials Exam Study Material and Preparation Test Question Dumps
NEW QUESTION # 36
Match each WatchGuard Subscription Service with its function.
Uses full-system emulation analysis to identify characteristics and behavior of zero-day malware. (Choose one).
- A. Gateway / Antivirus
- B. Spam Blocker
- C. Application Control
- D. Intrusion Prevention Server IPS
- E. APT Blocker
- F. Reputation Enable Defense RED
- G. Data Loss Prevention DLP
- H. Quarantine Server
- I. WebBlocker
Answer: E
Explanation:
Explanation/Reference:
APT Blocker is intended to stop malware and zero-day threats that are trying to invade an organization's network.
APT Blocker uses a next-gen sandbox to get detailed views into the execution of a malware program. After first running through other security services, files are fingerprinted and checked against an existing database - first on the appliance and then in the cloud. If the file has never been seen before, it is analyzed using the system emulator, which monitors the execution of all instructions. It can spot the evasion techniques that other sandboxes miss.
Reference: http://www.watchguard.com/wgrd-products/security-modules/apt-blocker
NEW QUESTION # 37
What is the best method to downgrade the version of Fireware OS on your Firebox without losing all device configuration settings? (Select one.)
- A. Restore a saved backup image that was created for the device before the last Fireware OS upgrade.
- B. Use the Upgrade OS feature in Fireware Web UI to install the sysa_dl file for an order version of Fireware OS.
- C. Change the OS compatibility setting in Policy Manager to downgrade the device. Then use Policy Manager to save the configuration to the device.
- D. Use the downgrade feature on Policy Manager to select a previous of Fireware OS.
Answer: A
NEW QUESTION # 38
In a Mobile VPN configuration, why would you choose default route VPN over split tunnel VPN? (Select one.)
- A. Default route VPN automatically allows dynamic NAT
- B. Default route VPN uses less processing power
- C. Default route VPN uses less bandwidth
- D. Default route VPN allows your Firebox to examine all remote user traffic
Answer: A
NEW QUESTION # 39
Match the monitoring tool to the correct task.
Which tool can learn the status of your IPS signature database? (Select one)
- A. Traffic Monitor
- B. FireBox System Manager - Blocked Sites list
- C. Firebox System Manager - Subscription services
- D. Firebox System Manager - Authentication list
- E. Log Server
- F. FireWatch
Answer: C
Explanation:
To look up information about an IPS signature:
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181
NEW QUESTION # 40
Which takes precedence: WebBlocker category match or a WebBlocker exception?
- A. WebBlocker exception
- B. WebBlocker category match
Answer: B
NEW QUESTION # 41
You can configure your Firebox to automatically redirect users to the Authentication Portal page.
- A. False
- B. True
Answer: B
NEW QUESTION # 42
After you enable Gateway AntiVirus, IPS, or Application control, how can you make sure the services protect your network from the latest known threats? (Select one.)
- A. Enable HTTPS deep inspection.
- B. Enable automatic signature updates.
- C. Enable default packet handling.
- D. Configure reputation Enabled Defense.
Answer: B
NEW QUESTION # 43
Which authentication servers can you use with your Firebox? (Select four.)
- A. Linux Authentication
- B. Firebox databases
- C. LDAP
- D. TACACS+
- E. Active Directory
- F. RADIUS
- G. Kerberos
Answer: B,C,E,F
Explanation:
NEW QUESTION # 44
How can you prevent connections to the Fireware Web UI from computers on optional interface Eth2?
(Select one.)
- A. Remove Any-Optional from the To list of the WatchGuard Web UI policy.
- B. Remove Any-Optional from the From list of the WatchGuard Web UI policy
- C. Remove Any-Optional from the From list of the WatchGuard policy.
- D. Remove Any-Optional from the To list of the WatchGuard policy
- E. Remove Eth2 from the Any-Optional alias.
Answer: B
NEW QUESTION # 45
You can configure the SMTP-proxy policy to restrict email messages and email content based on which of these message characteristics? (Select four.)
- A. Email message size
- B. Check URLs in message with WebBlocker
- C. Attachment file name and content type
- D. Sender Mail From address
- E. Maximum email recipients
Answer: A,C,D,E
Explanation:
Explanation/Reference:
A: Another way to protect your SMTP server is to restrict incoming traffic to only messages that use your company domain. In this example, we use the mywatchguard.com domain. You can use your own company domain.
1. From the SMTP-Incoming Categories list, select Address > Rcpt To.
2. In the Pattern text box, type *.mywatchguard.com. Click Add. This denies any email messages with a Rcpt To address that does not match the company domain.
3. Click OK to close the SMTP Proxy Action Configuration dialog box.
C: In this exercise we will reduce the maximum email size to 5 MB (5, 000 kilobytes).
1. From the SMTP Proxy Action dialog box under the Categories list, select General > General Settings.
2. Find the Limits section. In the Set the maximum email size value box, type 5000.
D: Example: He must configure the Firebox to allow Microsoft Access database files to go through the SMTP proxy. He must also configure the Firebox to deny Apple iTunes MP4 files because of a recent vulnerability announced by Apple.
1. From the SMTP-Incoming Categories list, select Attachments > Content Types.
2. In the Actions to take section, use the None Matched drop-down list to select Allow.
This allows all content types through Firebox to the SMTP server. After Successful Company is able to add in the specific content types they want to allow, they set this parameter to strip content type that does not match their list of allowed content types.
From the SMTP-Incoming Categories list, select Attachments > Filenames.
4. The filename extension for Microsoft Access databases is ".mdb". In the list of filenames, find and select
.mdb. Click Remove. Click Yes to confirm.
3. If no rules match, the Action to take option is set to allow the attachment. In this example, MS Access files are now allowed through the Firebox.
5. In the Pattern text box, type *.mp4. Click Add.
This rule configures the Firebox to deny all files with the Apple iTunes ".mp4" file extension bound for the SMTP server.
E: The Set the maximum email recipient checkbox is used to set the maximum number of email recipients to which a message can be sent in the adjacent text box that appears, type or select the number of recipients.
The XTM device counts and allows the specified number of addresses through, and then drops the other addresses. For example, if you set the value to 50 and there is a message for 52 addresses, the first 50 addresses get the email message. The last two addresses do not get a copy of the message.
Incorrect:
Not B: Webblocker is configured through a HTTP-policy, not through an SMTP policy.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 125, 126 Reference: http://watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/proxies/smtp/ proxy_smtp_gen_settings_c.html
NEW QUESTION # 46
Clients on the trusted network need to connect to a server behind a router on the optional network. Based on this image, what static route must be added to the Firebox for traffic from clients on the trusted network to reach a server at 10.0.20.100? (Select one.)
- A. Route to 10.0.20.0/24, Gateway 10.0.2.254
- B. Route to 10.0.10.0/24, Gateway 10.0.10.1
- C. Route to 10.0.20.0, Gateway 10.0.2.254
- D. Route to 10.0.20.0/24, Gateway 10.0.2.1
Answer: A
Explanation:
Explanation/Reference:
We must add a trusted static route to the 10.0.20.0/24 network through the 10.0.2.254 gateway.
NEW QUESTION # 47
Which policies can use the Intrusion Prevention Service to block network attacks? (Select one?)
- A. All policies
- B. Only proxy policies
- C. Only packet filter policies
- D. Only HTTP and HTTPS Proxy policies
- E. Only inbound policies
Answer: A
NEW QUESTION # 48
To prevent certificate error warnings in your browser when you use deep content inspection with the HTTPS proxy, you can export the proxy authority certificate from the Firebox and import that certificate to all client devices.
- A. False
- B. True
Answer: B
NEW QUESTION # 49
How is a proxy policy different from a packet filter policy? (Select two.)
- A. Only a proxy works at the application, network, and transport layers to examine all connection data.
- B. Only a proxy policy can prevent specific threats without blocking the entire connection.
- C. Only a proxy policy examines information in the IP header.
- D. Only a proxy policy uses the IP source, destination, and port to control network traffic.
Answer: A,B
Explanation:
Explanation/Reference:
C: Proxies can prevent potential threats from reaching your network without blocking the entire connection.
D: A proxy operates at the application layer, as well as the network and transport layers of a TCP/IP packet, while a packet filter operates only at the network and transport protocol layers.
Incorrect:
Not A: A packet filter examines each packet's IP header to control the network traffic into and out of your network.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 95
NEW QUESTION # 50
While troubleshooting a branch office VPN tunnel, you see this log message:
2 014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3DES, expecting AES
What settings could you modify in the local device configuration to resolve this issue? (Select one.)
- A. BOVPN Tunnel settings
- B. BOVPN Tunnel Route settings
- C. BOVPN-Allow policies
- D. BOVPN Gateway settings
Answer: D
Explanation:
Explanation/Reference:
The WatchGuard BOVPN settings error in this example states phase one encryption. Only the BOVPN Gateway settings can specify phase one settings. BOVPN Tunnel settings specify phase 2 settings.
NEW QUESTION # 51
Match the monitoring tool to the correct task.
Which is not a Fireware monitoring tool? (Select one)
- A. Traffic Monitor
- B. Firebox System Manager - Subscription services
- C. FireBox System Manager - Blocked Sites list
- D. Log Server
- E. Firebox System Manager - Authentication list
- F. FireWatch
Answer: D
Explanation:
The Fireware monitor and configuration tools are: Edge Web Manager, Firebox System Manager, HostWatch, and Ping.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59,
NEW QUESTION # 52
......
Get Ready to Pass the Essentials exam Right Now Using Our Fireware Essentials Exam Package: https://passguide.validtorrent.com/Essentials-valid-exam-torrent.html