Free Essentials sample questions

Correct answer: FireBox System Manager - Blocked Sites list

Explanation: Block a site permanently The Successful Company network administrator has been driven to distraction recently by a script kiddy using addresses in the 192.136.15.0/24 network to run probes of the Successful network. In this exercise, we permanently block all connections from that network. 1. From Policy Manager, select Setup > Default Threat Protection > Blocked Sites. The Stocked Sites Configuration dialog box opens. 2. Onttie Blocked Sites tab, click Add. 3. The Add Site dialog box opens. 3. Use the Choose Type drop-down list to select Network IP. In the Value text box, type 192.136.15.0/ 24. 4. Click OK. The entry appears in the Blocked Sites list. With this configuration, the Firebox blocks all packets to and from the 192.136.15.0/24 network range. Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

Correct answer: Enable automatic signature updates.

C

Correct answer: Dynamic NAT

Explanation: Dynamic NAT is also known as IP masquerading. With dynamic NAT many computers can connect to the Internet from one public IP address. Dynamic NAT gives more security for internal hosts that use Reference: http://www.watchguard.com/help/docs/wsm/xtm 11/en-US/index.html#en-US/nat/nat dynamic use c.html%3FTocPath%3DNetwork%2520Address%2520Translation%2520(NAT)%7CAbout(?

Correct answer: Log Server

Explanation: The Fireware monitor and configuration tools are: Edge Web Manager, Firebox System Manager, HostWatch, and Ping. Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

Correct answer: Intrusion Prevention Server IPS

Explanation: Intrusion Prevention Service (IPS) -- As with the other IPS offers, the IPS module is intended to detect and in real time mitigate intrusions coming into a network. This includes a large signature data base that monitors for spyware, SQL injections, cross-site scripting (XSS), and buffer overflows. Reference: http://www.tomsitpro.com/articles/network-security-solutions-guide. 2-866-6.html

Correct answer: Firebox System Manager - Subscription services.

Explanation: To look up information about an IPS signature: • Open Firebox System Manager. • ect the Subscription Services tab. • In the Intrusion Prevention section, click Show. Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181