QUESTION: 17

If you disable the Outgoing policy, which policies must you add to allow trusted users to connect to commonly used websites? (Select three.)

HTTP port 80
NAT policy
FTP port 21
HTTPS port 443
DNS port 53

Answer(s): A,D,E

Explanation:

TCP-UDP packet filter
If you decide to remove the Outgoing policy, you must add a policy for any type of traffic you want to allow through the Firebox. If you remove the Outgoing policy and then decide you want to allow all TCP and UDP connections through the Firebox again, you must add the TCP-UDP packet filter to provide the same function.
This is because the Outgoing policy does not appear in the list of standard policies available from Policy Manager.

Reference:

Fireware Basics, Courseware: WatchGuard System Manager 10, page 97

Reveal Solution Next Question

QUESTION: 18

How is a proxy policy different from a packet filter policy? (Select two.)

Only a proxy policy examines information in the IP header.
Only a proxy policy uses the IP source, destination, and port to control network traffic.
Only a proxy policy can prevent specific threats without blocking the entire connection.
Only a proxy works at the application, network, and transport layers to examine all connection data.

Answer(s): C,D

Explanation:

C: Proxies can prevent potential threats from reaching your network without blocking the entire connection.
D: A proxy operates at the application layer, as well as the network and transport layers of a TCP/IP packet, while a packet filter operates only at the network and transport protocol layers.
Incorrect:
Not A: A packet filter examines each packets IP header to control the network traffic into and out of your network.

Reference:

Fireware Basics, Courseware: WatchGuard System Manager 10, page 95

Reveal Solution Next Question

QUESTION: 19

Which authentication servers can you use with your Firebox? (Select four.)

Active Directory
RADIUS
LDAP
Linux Authentication
Kerberos
TACACS+
Firebox databases

Answer(s): A,B,C,G

Explanation:

Reveal Solution Next Question

QUESTION: 20

When your users connect to the Authentication Portal page to authenticate, they see a security warning message in their browses, which they must accept before they can authenticate. How can you make sure they do not see this security warning message in their browsers?

Import a custom self-signed certificate or a third-party certificate to your Firebox and import the same certificate to all client computers or web browsers.
Replace the Firebox certificate with the trusted certificate from your web server.
Add the user accounts for your users who use the Authentication Portal to a list of trusted users on your Firebox.
Instruct them to disable security warning message in their preferred browsers.

Answer(s): A

Reveal Solution Next Question

Free Essentials Exam Braindumps (page: 5)

QUESTION: 17

Explanation:

Reference:

QUESTION: 18

Explanation:

Reference:

QUESTION: 19

Explanation:

QUESTION: 20