Free WatchGuard Network-Security-Essentials Exam Dumps Questions & Answers

What type of NAT enables clients on a private network to connect to servers on the Internet? (Select one.)

• A.  Hairpin NAT
• B.  NAT loopback
• C.  Dynamic NAT
• D.  Static NAT

You can run TCP Dump directly from the Firebox.

• A.  False
• B.  True

You configured email notifications in WatchGuard Cloud for your Firebox Device Alarms and want to receive an email when your users download any .exe files through an HTTP proxy. You must enable what type of log message in the Firebox configuration? (Select one.)

• A.  Allowed traffic logs for the HTTP proxy policy
• B.  Diagnostic logs for Gateway AntiVirus
• C.  Alarm logs for the EXE/DLL Body Content rule in the HTTP proxy
• D.  Alarm logs for when a virus is detected in the HTTP proxy
• E.  Denied traffic logs for the HTTP proxy policy

After you enable content inspection, your users see a certificate warning when they browse the Internet. What is one way to resolve this? (Select one.)

• A.  Install the current Firebox Proxy Authority certificate on your user workstations
• B.  Configure the HTTPS proxy policy to allow inbound traffic from your CA
• C.  Configure a WebBlocker exception for your certificate server
• D.  Import a trusted web server certificate to the Firebox

A Firebox has an external IP address of 203.0.113.100. A public web server with the IP address 10.0.1.80 is connected to a Firebox internal network. What is the effect of the policy shown in this image? (Select one.)

• A.  Applies dynamic NAT to the 10.0.1.80 IP address of the web server to allow inbound connections
• B.  Allows users on the Internet and the 10.0.1.0/24 network to use the external IP address of the Firebox to connect to the web server
• C.  Allows users on the Internet and the 10.0.1.0/24 network to use the internal IP address of the Firebox to connect to the web server
• D.  Allows users on the Internet to connect to the 10.0.1.80 IP address of the web server