ESSENTIALS Online Practice Questions and Answers

Correct Answer: B

Correct Answer: ACD

A: You can configure a deny policy to automatically block sites that originate traffic that does not comply

with the policy rulese

1.

From Policy Manager, double-click the PCAnywhere policy.

2.

Click the Properties tab. Select the Auto-block sites that attempt to connect checkbox.

Reference: https://www.watchguard.com/training/fireware/80/defense8.htm

C: The blocked sites list shows all the sites currently blocked as a result of the rules defined in Policy

Manager. From this tab, you can add sites to the temporary blocked sites list, or remove temporary

blocked sites.

Reference: http://www.watchguard.com/training/fireware/82/monitoa6.htm

D: You can use Policy Manager to permanently add sites to the Blocked Sites list.

1.

select Setup > Default Threat Protection > Blocked Sites.

2.

Click Add.

The Add Site dialog box appears.

Reference: http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#cshid=en-US/

intrusionprevention/blocked_sites_permanent_c.html

Correct Answer: ADE

TCP-UDP packet filter If you decide to remove the Outgoing policy, you must add a policy for any type of traffic you want to allow through the Firebox. If you remove the Outgoing policy and then decide you want to allow all TCP and UDP connections through the Firebox again, you must add the TCP-UDP packet filter to provide the same function. This is because the Outgoing policy does not appear in the list of standard policies available from Policy Manager.

Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 97

Correct Answer: A

Correct Answer: BD

B: Configuring the Firebox to use Active Directory authentication is similar to the process for LDAP authentication. You must set a search base to put limits on the directories on the authentication server the Firebox searches in for an authentication match.

D: When you configure the Firebox to use LDAP authentication, you must set a search base to put limits on the directories on the authentication server the Firebox searches in for an authentication match Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, page 83-84

Correct Answer: B

Correct Answer: A

Correct Answer: A

Correct Answer: A

Block a site permanently

The Successful Company network administrator has been driven to distraction recently by a script kiddy

using addresses in the 192.136.15.0/24 network to run probes of the Successful network. In this exercise,

we permanently block all connections from that network.

1.

From Policy Manager, select Setup > Default Threat Protection > Blocked Sites.

The Blocked Sites Configuration dialog box opens.

2.

On the Blocked Sites tab, click Add.

3.

The Add Site dialog box opens. 3. Use the Choose Type drop-down list to select Network IP. In the

Value text box, type 192.136.15.0/ 24.

4.

Click OK.

The entry appears in the Blocked Sites list. With this configuration, the Firebox blocks all packets to and

from the 192.136.15.0/24 network range.

Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

Correct Answer: B

Gateway Antivirus provides a virus scanner that uses both an extensive signature database (updated through subscription) and a heuristic analysis engine.

Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide, 2-866-6.html