ESSENTIALS Online Practice Questions and Answers

Correct Answer: ACD

Correct Answer: B

We must add a trusted static route to the 10.0.20.0/24 network through the 10.0.2.254 gateway.

Correct Answer: D

Correct Answer: A

Correct Answer: ACDE

A: Another way to protect your SMTP server is to restrict incoming traffic to only messages that use your

company domain. In this example, we use the mywatchguard.com domain. You can use your own

company domain.

1.

From the SMTP-Incoming Categories list, select Address > Rcpt To.

2.

In the Pattern text box, type *.mywatchguard.com. Click Add. This denies any email messages with a

Rcpt To address that does not match the company domain.

3.

Click OK to close the SMTP Proxy Action Configuration dialog box.

C: In this exercise we will reduce the maximum email size to 5 MB (5, 000 kilobytes).

1.

From the SMTP Proxy Action dialog box under the Categories list, select General > General Settings.

2.

Find the Limits section. In the Set the maximum email size value box, type 5000.

D: Example: He must configure the Firebox to allow Microsoft Access database files to go through the

SMTP proxy. He must also configure the Firebox to deny Apple iTunes MP4 files because of a recent

vulnerability announced by Apple.

1.

From the SMTP-Incoming Categories list, select Attachments > Content Types.

2.

In the Actions to take section, use the None Matched drop-down list to select Allow.

This allows all content types through Firebox to the SMTP server. After Successful Company is able to add

in the specific content types they want to allow, they set this parameter to strip content type that does not

match their list of allowed content types.

From the SMTP-Incoming Categories list, select Attachments > Filenames.

4. The filename extension for Microsoft Access databases is “.mdb”. In the list of filenames, find and select

.mdb. Click Remove. Click Yes to confirm.

3. If no rules match, the Action to take option is set to allow the attachment. In this example, MS Access

files are now allowed through the Firebox.

5. In the Pattern text box, type *.mp4. Click Add.

This rule configures the Firebox to deny all files with the Apple iTunes “.mp4” file extension bound for the

SMTP server.

E: The Set the maximum email recipient checkbox is used to set the maximum number of email recipients

to which a message can be sent in the adjacent text box that appears, type or select the number of

recipients.

The XTM device counts and allows the specified number of addresses through, and then drops the other

addresses. For example, if you set the value to 50 and there is a message for 52 addresses, the first 50

addresses get the email message. The last two addresses do not get a copy of the message.

Incorrect:

Not B: Webblocker is configured through a HTTP-policy, not through an SMTP policy.

Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 125, 126

Reference: http://watchguard.com/help/docs/wsm/xtm_11/en-us/content/en-us/proxies/smtp/

proxy_smtp_gen_settings_c.html

Correct Answer: E

Correct Answer: B

Correct Answer: A

Block a site permanently

The Successful Company network administrator has been driven to distraction recently by a script kiddy

using addresses in the 192.136.15.0/24 network to run probes of the Successful network. In this exercise,

we permanently block all connections from that network.

1.

From Policy Manager, select Setup > Default Threat Protection > Blocked Sites.

The Blocked Sites Configuration dialog box opens.

2.

On the Blocked Sites tab, click Add.

3.

The Add Site dialog box opens. 3. Use the Choose Type drop-down list to select Network IP. In the

Value text box, type 192.136.15.0/ 24.

4.

Click OK.

The entry appears in the Blocked Sites list. With this configuration, the Firebox blocks all packets to and

from the 192.136.15.0/24 network range.

Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

Correct Answer: F

For a quick look at the log messages generated by the Firebox, use Traffic Monitor. With Traffic Monitor, you can apply color to different types of messages, and ping or traceroute to the IP addresses of computers included in the log messages.

Reference: Fireware Basics, Courseware: WatchGuard System Manager 10, pages 15, 34, 59, 181

Correct Answer: E

The WatchGuard Quarantine Server provides a safe mechanism to quarantine any email messages that are suspected or known to be spam, or to contain viruses or sensitive data. The Quarantine Server is a repository for email messages that the SMTP proxy sends to quarantine based on analysis by spamBlocker, Gateway AntiVirus, or Data Loss Prevention.

Reference: https://www.watchguard.com/help/docs/webui/xtm_11/en-US/index.html#cshid=en-US/ quarantineserver/quar_server_about_c.html