WatchGuard Essentials 問題集

質問 1：
Match each WatchGuard Subscription Service with its function.
Cloud based service that controls access to website based on a site's previous behavior. (Choose one).
A. Reputation Enable Defense RED
B. Data Loss Prevention DLP
C. Application Control
D. Intrusion Prevention Server IPS
E. QuarantineServer
F. WebBlocker
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Match each type of NAT with the correct description:
Changes and routes all incoming and outgoing packets sent from one range of addresses to a different range of addresses. (Choose one)
A. Dynamic NAT
B. 1-to1 NAT
C. NAT Loopback
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Your company denies downloads of executable files from all websites. What can you do to allow users on the network to download executable files from the company's remote website? (Select one.)
A. Create a Blocked Sites exception.
B. Create a WebBlocker exception to allow access to the company's remote website.
C. Configure HTTP Request > URL Paths to allow the company's remote website.
D. Create an IPS exception.
E. Add an HTTP proxy exception for the company's remote website.
正解：E

質問 4：
Match each WatchGuard Subscription Service with its function.
Uses signatures to provide real-time protection against network attacks. (Choose one).
A. Reputation Enable Defense RED
B. Data Loss Prevention DLP
C. Application Control
D. APT Blocker
E. Intrusion Prevention Server IPS
正解：E
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Only 50 clients on the trusted network of your Firebox can connect to the Internet at the same time. What could cause this? (Select one.)
A. The DHCP address pool on the trusted interface has only 50 IP addresses.
B. The Outgoing policy allows a maximum of 50 client connections.
C. The device feature key allows a maximum of 50 client connections.
D. TheLiveSecurity feature key is expired.
正解：A

質問 6：
Which tool can add an IP address for the Firebox to permanently block? (Select one)
A. Log Server
B. Firebox System Manager - Authentication list
C. Traffic Monitor
D. FireBox System Manager - Blocked Sites list
E. FireWatch
F. Firebox System Manager - Subscription services
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
With the policies configured as shown in this image, HTTP traffic can be sent and received through branch office VPN tunnel.1 and tunnel.2.

A. False
B. True
正解：B

質問 8：
You have a privately addressed email server behind your Firebox. If you want to make sure that all traffic from this server to the Internet appears to come from the public IP address 203.0.113.25, regardless of policies, which from of NAT would you use? (Select one.)
A. Create a static NAT action for traffic to the email server, and set the source IP address to
203.0.113.25.
B. Create a global dynamic NAT rule for traffic from the email server and set the source IP address to
203.0.113.25.
C. In the SMTP policy that handles traffic from the email server, select the option to apply dynamic NAT to all traffic in the policy and set the source IP address203.0.113.25.
正解：B