Free Essentials Exam Braindumps
Fireware Essentials Questions 26–30 (page: 7)

Updated On: 9-Feb-2026

You need to create an HTTP-proxy policy to a specific domain for software updates (example.com). The update site has multiple subdomains and dynamic IP addresses on a content delivery network. Which of these options is the best way to define the destination in your HTTP-proxy policy?

  1. Configure a host name for update.example.com.
  2. Configure an FQDN for *.example.com.
  3. Add IP addresses that correspond to each software update server in the domain.
  4. Create an alias for all subdomains and known IP addresses for example.com.

Answer(s): B



From the SMTP proxy action settings in this image, which of these options is configured for outgoing SMTP traffic?

  1. Rewrite the Mail From header for the example.com domain.
  2. Deny incoming mail from the example.com domain.
  3. Prevent mail relay for the example.com domain.
  4. Deny outgoing mail from the example.com domain.

Answer(s): B



You can configure the SMTP-proxy policy to restrict email messages and email content based on which of these message characteristics? (Select four.)

  1. Sender Mail From address
  2. Check URLs in message with WebBlocker
  3. Email message size
  4. Attachment file name and content type
  5. Maximum email recipients

Answer(s): A,C,D,E

Explanation:

A: Another way to protect your SMTP server is to restrict incoming traffic to only messages that use your company domain. In this example, we use the mywatchguard.com domain. You can use your own company domain.
1. From the SMTP-Incoming Categories list, select Address > Rcpt To.
2. In the Pattern text box, type *.mywatchguard.com. Click Add. This denies any email messages with a Rcpt To address that does not match the company domain.
3. Click OK to close the SMTP Proxy Action Configuration dialog box.
C: In this exercise we will reduce the maximum email size to 5 MB (5, 000 kilobytes).
1. From the SMTP Proxy Action dialog box under the Categories list, select General > General Settings.
2. Find the Limits section. In the Set the maximum email size value box, type 5000.
D: Example: He must configure the Firebox to allow Microsoft Access database files to go through the SMTP proxy. He must also configure the Firebox to deny
Apple iTunes MP4 files because of a recent vulnerability announced by Apple.
1. From the SMTP-Incoming Categories list, select Attachments > Content Types.
2. In the Actions to take section, use the None Matched drop-down list to select Allow.
This allows all content types through Firebox to the SMTP server. After Successful Company is able to add in the specific content types they want to allow, they set this parameter to strip content type that does not match their list of allowed content types.
From the SMTP-Incoming Categories list, select Attachments > Filenames.
4. The filename extension for Microsoft Access databases is ".mdb". In the list of filenames, find and select .mdb. Click Remove. Click Yes to confirm.
3. If no rules match, the Action to take option is set to allow the attachment. In this example, MS Access files are now allowed through the Firebox.
5. In the Pattern text box, type *.mp4. Click Add.
This rule configures the Firebox to deny all files with the Apple iTunes ".mp4" file extension bound for the SMTP server.
E: The Set the maximum email recipient checkbox is used to set the maximum number of email recipients to which a message can be sent in the adjacent text box that appears, type or select the number of recipients.
The XTM device counts and allows the specified number of addresses through, and then drops the other addresses. For example, if you set the value to 50 and there is a message for 52 addresses, the first 50 addresses get the email message. The last two addresses do not get a copy of the message.
Incorrect:
Not B: Webblocker is configured through a HTTP-policy, not through an SMTP policy.


Reference:

Fireware Basics, Courseware: WatchGuard System Manager 10, pages 125, 126
http://watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/proxies/smtp/proxy_smtp_gen_settings_c.html



After you enable spamBlocker, your users experience no reduction in the amount of spam they receive. What could explain this? (Select three.)

  1. Connections cannot be resolved to the spamBlocker servers because DNS is not configured on the Firebox.
  2. The spamBlocker action for Confirmed Spam is set to Allow.
  3. The Maximum File Size to Scan option is set too high.
  4. A spamBlocker exception is configured to allow traffic from sender *.
  5. spamBlocker Virus Outbreak Detection is not enabled.

Answer(s): A,B,D

Explanation:

A: Spamblocker requires DNS to be configured on your XTM device
B: If you use spamBlocker with the POP3 proxy, you have only two actions to choose from: Add Subject Tag and Allow. Allow lets spam email messages go through the Firebox without a tag.
D: The Firebox might sometimes identify a message as spam when it is not spam. If you know the address of the sender, you can configure the Firebox with an exception that tells it not to examine messages from that source address or domain.


Reference:

Fireware Basics, Courseware: WatchGuard System Manager 10, page 138



An email newsletter about sales from an external company is sometimes blocked by spamBlocker. What option could you choose to make sure the newsletter is delivered to your users?

  1. Add a spamBlocker exception based on the From field of the newsletter email.
  2. Set the spamBlocker action to quarantine the email for later retrieval.
  3. Add a spamBlocker subject tag for bulk email messages.
  4. Set the spamBlocker virus outbreak detection action to allow emails from the newsletter source.

Answer(s): C



Viewing page 7 of 16
Viewing questions 31 - 35 out of 75 questions


Post your Comments and Discuss WatchGuard Essentials exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!