WatchGuard Essentials 問題集

質問 1：
To use the Web Setup Wizard or Quick Setup Wizard to configure your Firebox or XTM device, your computer must have an IP address on which subnet? (Select one.)
A. 172.16.10.0/24
B. 192.168.1.0/24
C. 10.0.1.0/24
D. 10.0.10.0/24
正解：C

質問 2：
When your users connect to the Authentication Portal page to authenticate, they see a security warning message in their browses, which they must accept before they can authenticate. How can you make sure they do not see this security warning message in their browsers? (Select one.)
A. Add the user accounts for your users who use the Authentication Portal to a list of trusted users on your Firebox.
B. Instruct them to disable security warning message in their preferred browsers.
C. Import a custom self-signed certificate or a third-party certificate to your Firebox and import the same certificate to all client computers or web browsers.
D. Replace the Firebox certificate with the trusted certificate from your web server.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A local branch office VPN tunnel route is configured as shown in this image. On the remote peer device, what must be configured as the remote network address for this tunnel route? (Select one.)

A. 10.0.20.0/24
B. 10.0.1.0/24
C. 10.0.10.0/24
正解：C

質問 4：
Match the monitoring tool to the correct task.
Which tool can learn the status of your IPS signature database? (Select one)
A. Log Server
B. Firebox System Manager - Authentication list
C. Traffic Monitor
D. FireBox System Manager - Blocked Sites list
E. FireWatch
F. Firebox System Manager - Subscription services
正解：F
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Your company denies downloads of executable files from all websites. What can you do to allow users on the network to download executable files from the company's remote website? (Select one.)
A. Create a Blocked Sites exception.
B. Create a WebBlocker exception to allow access to the company's remote website.
C. Configure HTTP Request > URL Paths to allow the company's remote website.
D. Create an IPS exception.
E. Add an HTTP proxy exception for the company's remote website.
正解：E

質問 6：
You can configure the SMTP-proxy policy to restrict email messages and email content based on which of these message characteristics? (Select four.)
A. Email message size
B. Check URLs in message with WebBlocker
C. Attachment file name and content type
D. Sender Mail From address
E. Maximum email recipients
正解：A,C,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 7：
How can you prevent connections to the Fireware Web UI from computers on optional interface Eth2? (Select one.)
A. RemoveAny-Optional from theFromlist of the WatchGuard Web UI policy
B. Remove Eth2 from the Any-Optional alias.
C. Remove Any-Optional from theFromlist of the WatchGuard policy.
D. Remove Any-Optional from theTolist of the WatchGuard Web UI policy.
E. Remove Any-Optional from theTolist of the WatchGuard policy
正解：D

質問 8：
While troubleshooting a branch office VPN tunnel, you see this log message:
2014-07-23 12:29:15 iked (203.0.113.10<->203.0.113.20) Peer proposes phase one encryption 3DES, expecting AES What settings could you modify in the local device configuration to resolve this issue? (Select one.)
A. BOVPN Tunnel Route settings
B. BOVPN Tunnel settings
C. BOVPN-Allow policies
D. BOVPN Gateway settings
正解：D
解説: (Topexam メンバーにのみ表示されます)