2022年最新のEssentials試験問題集で最近更新された75問題 [Q11-Q30]

2022年最新のEssentials試験問題集で最近更新された75問題

WatchGuard Essentialsリアル2022年最新のブレーン問題集で模擬試験問題集

WatchGuard Essentials 認定試験の出題範囲：

トピック	出題範囲
トピック 1	サブスクリプションサービスの構成
トピック 2	ポリシーとプロキシの構成
トピック 3	デバイスの監視\| ロギング\| と報告

質問 11
Match each WatchGuard Subscription Service with its function.
Manages use of applications on your network. (Choose one).

A. Data Loss Prevention DLP
B. Reputation Enable Defense RED
C. APT Blocker
D. Intrusion Prevention Server IPS
E. Application Control

正解: E

解説:
Explanation/Reference:
Application Control keeps unproductive, inappropriate, and dangerous applications off-limits.
Stay on top of the applications running on your network for tight security and high productivity with a subscription to WatchGuard Application Control. It allows you to establish which applications can be used within your organization, by whom, and when.
Reference: http://www.watchguard.com/docs/brochure/wg_application-control_ds.pdf

質問 12
Which of these services would you use to allow the use of P2P programs for a specific department in your organization? (Select one.)

A. Reputation Enabled Defense
B. Data Loss Prevention
C. IPS
D. Application Control

正解: D

質問 13
Which of these threats can the Firebox prevent with the default packet handling settings? (Select four.)

A. Flood attacks
B. IP spoofing
C. Denial of service attacks
D. Port scans
E. Access to inappropriate websites
F. Viruses in email messages
G. Malware in downloaded files

正解: A,B,C,D

質問 14
You can use Firebox-DB authentication with any type of Mobile VPN.

A. False
B. True

正解: B

解説:
http://www.watchguard.com/help/docs/fireware/11/en-US/Content/en-US/mvpn/general/mobile_vpn_types_c.html

質問 15
Match the monitoring tool to the correct task.
Which tool can view a list of users connected to the Firebox? (Select one)

A. Traffic Monitor
B. FireWatch
C. Firebox System Manager - Subscription services
D. Log Server
E. FireBox System Manager - Blocked Sites list
F. Firebox System Manager - Authentication list

正解: F

解説:
You can viewa list of users connected to the Firebox through HostWatch, and you can also use Authentication List, which identifiesthe IP addresses and user names of all the users that are authenticated to the Firebox.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

質問 16
Which authentication servers can you use with your Firebox? (Select four.)

A. LDAP
B. RADIUS
C. TACACS+
D. Linux Authentication
E. Firebox databases
F. Active Directory
G. Kerberos

正解: A,B,E,F

解説:

質問 17
To prevent certificate error warnings in your browser when you use deep content inspection with the HTTPS proxy, you can export the proxy authority certificate from the Firebox and import that certificate to all client devices.

A. False
B. True

正解: B

質問 18
Match the monitoring tool to the correct task.
Which tool can ping the source of a denied packet? (Select one)

A. FireWatch
B. Traffic Monitor
C. Firebox System Manager - Subscription services
D. Firebox System Manager - Authentication list
E. Log Server
F. FireBox System Manager - Blocked Sites list

正解: B

解説:
Explanation/Reference:
For a quick look at the log messages generated by the Firebox, use Traffic Monitor. With Traffic Monitor, you can apply color to different types of messages, and ping or traceroute to the IP addresses of computers included in the log messages.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

質問 19
You can configure your Firebox to automatically redirect users to the Authentication Portal page.

A. True
B. False

正解: B

質問 20
Match the monitoring tool to the correct task.
Which is not a Fireware monitoring tool? (Select one)

A. Traffic Monitor
B. FireWatch
C. Firebox System Manager - Subscription services
D. Log Server
E. Firebox System Manager - Authentication list
F. FireBox System Manager - Blocked Sites list

正解: D

解説:
The Fireware monitor and configuration tools are: Edge Web Manager, Firebox System Manager, HostWatch, and Ping.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59,

質問 21
Which of these options are private IPv4 addresses you can assign to a trusted interface, as described in RFC
1918, Address Allocation for Private Internets? (Select three.)

A. 192.0.2.1/24
B. 198.51.100.1/24
C. 10.50.1.1/16
D. 192.168.50.1/24
E. 172.16.0.1/16

正解: C,D,E

解説:
Explanation/Reference:

質問 22
You configured four Device Administrator user accounts for your Firebox. To see a report of witch Device Management users have made changes to the device configuration, what must you do? (Select two.)

A. Configure your device to send audit trail log messages to your WatchGuard Log Server or Dimension Log Server.
B. Start Firebox System Manager for the device and review the activity for the Management Users on the Authentication List tab.
C. Open WatchGuard Server Center and review the configuration history for managed devices.
D. Connect to Report Manager or Dimension and view the Audit Trail report for your device.

正解: C,D

質問 23
After you enable Gateway AntiVirus, IPS, or Application control, how can you make sure the services protect your network from the latest known threats? (Select one.)

A. Enable automatic signature updates.
B. Enable HTTPS deep inspection.
C. Enable default packet handling.
D. Configure reputation Enabled Defense.

正解: A

質問 24
Only 50 clients on the trusted network of your Firebox can connect to the Internet at the same time. What could cause this? (Select one.)

A. The DHCP address pool on the trusted interface has only 50 IP addresses.
B. TheLiveSecurity feature key is expired.
C. The device feature key allows a maximum of 50 client connections.
D. The Outgoing policy allows a maximum of 50 client connections.

正解: A

質問 25
What settings must you device configuration file include for Gateway AntiVirus to protect users on your network? (Select two.)

A. Configure Gateway AntiVirus settings for a proxy action.
B. Configure a policy to use a proxy action that has AntiVirus settings configured.
C. Disable automatic signature updates.
D. Install the Gateway AntiVirus server on your network.
E. Decrease the scan limits

正解: A,B

解説:
Explanation/Reference:
When you enable Gateway AntiVirus, you must set the actions to be taken if a virus or error is found in an email message (SMTP or POP3 proxies), web page download or upload post (HTTP proxy), or uploaded or downloaded file (FTP proxy). When Gateway AntiVirus is enabled, it scans each file up to a specified kilobyte count. Any additional bytes in the file are not scanned. This allows the proxy to partially scan very large files without a large effect on performance.
Reference: http://watchguard.com/help/docs/webui/xtm_11/en-us/content/en-us/services/gateway_av/ av_actions_config_c.html

質問 26
When your users connect to the Authentication Portal page to authenticate, they see a security warning message in their browses, which they must accept before they can authenticate. How can you make sure they do not see this security warning message in their browsers? (Select one.)

A. Instruct them to disable security warning message in their preferred browsers.
B. Add the user accounts for your users who use the Authentication Portal to a list of trusted users on your Firebox.
C. Import a custom self-signed certificate or a third-party certificate to your Firebox and import the same certificate to all client computers or web browsers.
D. Replace the Firebox certificate with the trusted certificate from your web server.

正解: B

質問 27
Which tool can add an IP address for the Firebox to permanently block? (Select one)

A. Traffic Monitor
B. FireWatch
C. Firebox System Manager - Subscription services
D. Firebox System Manager - Authentication list
E. Log Server
F. FireBox System Manager - Blocked Sites list

正解: F

解説:
Block a site permanently
The Successful Company networkadministrator has been driven to distraction recently by a script kiddy using addresses in the 192.136.15.0/24 network to run probes of the Successful network. In this exercise, we permanently block all connections from that network.
1.From PolicyManager, select Setup > Default Threat Protection > Blocked Sites. The Blocked Sites Configuration dialog box opens.
2.On the Blocked Sites tab, click Add.
3.The Add Site dialog box opens. 3. Use the Choose Type drop-down list to select Network IP. In the Value text box, type 192.136.15.0/ 24.
4. Click OK.
The entry appears in the Blocked Sites list. With this configuration, the Firebox blocks all packets to and from the 192.136.15.0/24 network range.
Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

質問 28
The policies in a default Firebox configuration do not allow outgoing traffic from optional interfaces.