Network Security Essentials for Locally-Managed Fireboxes (Network-Security-Essentials) Free Practice Test

Question 1

Your users have no network connectivity on their computers in the 10.0.40.0/24 network. You investigate and discover the DHCP address pool for this network is exhausted, but there are no available IP addresses in the network to assign. Which of these options can you use to expand the IP address space of this network? (Select two.)

A. Create a Dynamic NAT rule for traffic from the 10.0.40.1/24 network going to the 10.0.50.1/24 network

B. Add 10.0.50.1/24 to the 10.0.40.1/24 network as a secondary network

C. Enable a wireless SSID for the 10.0.40.1/24 network

D. Bridge the 10.0.40.1/24 network across additional interfaces

E. Change the IP address of the 10.0.40.1/24 network to 10.0.40.123/24

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which of these is a network IP address? (Select one.)

A. 172 16 100 1/12

B. 10 0.1 255 8

C. 10 10 10 255/24

D. 1G2 153 10 O 1

E. 1Q2 158.10 0-24

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which WatchGuard tools can you use to review the traffic log messages generated by your Firebox? (Select three.)

A. Dimension

B. FireWatch

C. Policy Manager

D. Traffic Monitor

E. Status Report

F. WatchGuard Cloud

Correct Answer: A,B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

You lost access to a Firebox because no one knows the administrator passphrase. How can you regain access to the Firebox? (Select one.)

A. Call WatchGuard Support for a passphrase reset

B. Restore a backup image of the Firebox

C. Plug in a USB flash drive with the WatchGuard Password Reset utility loaded

D. Connect with a console cable to reset the passphrase

E. Reset the Firebox to its factory defaults

Correct Answer: E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

In a Mobile VPN configuration, why would you choose default-route (full tunnel) VPN instead of split tunnel VPN? (Select one.)

A. Default-route VPN uses less processing power.

B. Default-route VPN uses less bandwidth.

C. Default-route VPN is the only option you can use to apply security services to connections routed to your internal servers.

D. Default-route VPN enables your Firebox to examine all remote user traffic.

E. Default-route VPN automatically allows dynamic NAT.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

You can run TCP Dump directly from the Firebox.

A. False

B. True

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

WatchGuard Network Security Essentials for Locally-Managed Fireboxes (Network-Security-Essentials) Free Practice Test