Exam (elaborations)
Watchguard Ultimate Exam with correct Answers
- Course
- Institution
Watchguard Ultimate Exam with correct Answers
[Show more]
Content preview
Watchguard Ultimate Exam with correctAnswers
"Chooose the appropriate policy types for this task: - Correct Answers -
Examine the header information- Packet Filter or Proxy" - Correct Answers -Both-
Packet Filter and Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
Strip an attachment-Packet Filter or Proxy" - Correct Answers -Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
Examine the Application layer content - Correct Answers -
Packet Filter or Proxy" - Correct Answers -Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
Check for RFC compliance - Correct Answers -
Packet Filter or Proxy" - Correct Answers -Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
Block based on server command type - Correct Answers -
Packet Filter or Proxy" - Correct Answers -Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
Check the source against a list of blocked sites- - Correct Answers -
Packet Filter or Proxy" - Correct Answers -Both- Packet Filter and Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
,Verify that the destination is a valid location on the trusted - Packet Filter or Proxy" -
Correct Answers -Both- Packet Filter and Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
Send a log message if the packet is malformed- - Correct Answers -
Packet Filter or Proxy" - Correct Answers -Both- Packet Filter and Proxy
"Choose the appropriate policy types for this task: - Correct Answers -
Generate a report on network traffic- - Correct Answers -
Packet Filter or Proxy" - Correct Answers -None
"True or False? - Correct Answers -
You can use the same operating schedule for multiple policies" - Correct Answers -
TRUE
"Which of the following protocols can be used in a custom policy? - Correct Answers -
A. TCP - Correct Answers -
B. Frame Relay - Correct Answers -
C. ATM - Correct Answers -
D. UDP - Correct Answers -
E. ICMP" - Correct Answers -TCP, UDP and ICMP
"True or False? - Correct Answers -
Policies are ordered primarily by name" - Correct Answers -FALSE
"True or false? - Correct Answers -
You cannot use SNMP for policy event notifcations." - Correct Answers -"False
" - Correct Answers -
"True or False? - Correct Answers -
You can only apply a policy tag to a single policy." - Correct Answers -FALSE
,"True or False? - Correct Answers -
You cannot save a filter to apply it again later." - Correct Answers -FALSE
"True or False? - Correct Answers -
If you select Match All when you apply a filter, all policies that have any of the policy
tags you include in the filter will appear in the filtered policy list." - Correct Answers -
False. If you select Match All, only policies that have all of the policy tags you specify in
the filter will appear in the filtered policy list.
When you enable Mobile VPN with IPSec for the group VPNusers, which policy or
policies are automatically created? - Correct Answers -A single Mobile VPN with IPSec
policy: VPNusers-Any
"True or False? - Correct Answers -
If you use a third-party server for VPN authentication, that server must have a user
group with a name that exactly matches the group name in the VPN configuration." -
Correct Answers -TRUE
True or False? Slit tunnel is more secure that default route VPN. - Correct Answers -
FALSE
"True or False? - Correct Answers -
If you add a new Allowed Resource in a Mobile VPN with IPSec policy, that resource is
automatically added to the VPN configuration" - Correct Answers -FALSE
Which Mobile VPN clients can users download from a Firebox? - Correct Answers -
Mobile VPN with SSL
When must a user know the Mobile VPN with IPSec tunnel passphrase? - Correct
Answers -To import the client configuration file to the Mobile VPN with IPSec client
"True or False? - Correct Answers -
Mobile VPN with IPSec is the only VPN type that can use different VPN configurations
for different user groups at the same time." - Correct Answers -TRUE
Which of these VPN connection types can you configure in the native VPN client in
Windows? - Correct Answers -PPTP, L2TP
You must have a WatchGuard management server to use drag-and-drop for VPN
creation. - Correct Answers -TRUE
, When you connect to a firebox from WSM, you should decrease the timeout setting in
the Connect to firebox dialog box of you have a slow network or Internet connection. -
Correct Answers -FALSE
You must install all WSM servers on the same management computer. - Correct
Answers -FALSE
You do not have to install a WSM server to use WatchGuard Server Center. - Correct
Answers -FALSE
Which of the following do you need before you use the Quick Setup Wizard in WSM to
setup your Firebox with a basic working configuration? - Correct Answers -A feature
key, IP address of the gateway router, and IP address to give to the external and trusted
interfaces of the firebox.
To save a changed device configuration file to the firebox, which pass-phrase do you
use? - Correct Answers -Admin pass-phrase
How frequently should you make a backup image of your firewall? - Correct Answers -
Each time you make a substantial change to the configuration.
Which information does Watchguard System manager use to identify a Firebox? -
Correct Answers -External IP, Device name and Model Number.
Which account can you use to login to the WebUI to change the configuration? - Correct
Answers -admin
What is the default port you use to login to the Web UI? - Correct Answers -8080
You must install WSM software to use the Web UI. - Correct Answers -FALSE
How many users can simultaneously login to the Web UI with the admin account, if the
option to allow more than one Device Administrator to login to the Firebox at the same
time has been enabled? - Correct Answers -Unlimited
How many users can login to the Web UI with the status account? - Correct Answers -
Unlimited
When you use a static IP address for the external interface, what information must you
get from your ISP? - Correct Answers -IP address, Subnet Mask, & Default Gateway
You can configure the firebox as a DHCP server? - Correct Answers -TRUE
If you use DHCP on the external interface of the firebox, you can configure a secondary
network for the external interface. - Correct Answers -TRUE
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller millyphilip. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
76462 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now