Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Network Security Essentials for Locally-Managed Fireboxes Practice Questions

Question # 11

If policies are automatically ordered, which of these policies has the highest precedence? (Select one.)

Options:

A.  

HTTPS policy - From: Any-Trusted, Any-Optional To: Any-External

B.  

HTTPS policy - From: Trusted To: Any-External

C.  

Outgoing policy - From: Any-Trusted, Any-Optional To: Any-External

D.  

HTTPS policy - From: User1@Firebox-DB To: Any-External

Discussion 0
Question # 12

Which of these is a valid host IP address in the subnet 10.0.1.0/24? (Select one.)

Options:

A.  

10.0.10.24/24

B.  

10.0.1.255/24

C.  

10.0.1.100/24

D.  

10.0.0.1/24

E.  

10.0.1.0/24

Discussion 0
Question # 13

You can run TCP Dump directly from the Firebox.

Options:

A.  

True

B.  

False

Discussion 0
Question # 14

When you configure a Branch Office VPN tunnel to a third-party device, AES-GCM encryption is recommended for:

Options:

A.  

Better performance and throughput when supported by both VPN endpoints

B.  

Troubleshooting purposes

C.  

Better uptime because of additional keep-alive options

D.  

Routing over a BOVPN

E.  

Connections to third-party firewalls only

Discussion 0
Question # 15

As you troubleshoot a Branch Office VPN tunnel, you see the log message below. Which settings can you modify in the BOVPN virtual interface configuration to resolve this issue? (Select one.)

(Log message: msg='iprocess: SA Proposal mismatch on Phase 2 negotiation')

Options:

A.  

Phase 1 Settings

B.  

Phase 2 Settings

C.  

VPN Routes

D.  

BOVPN-Allow policies

E.  

Gateway Settings

Discussion 0
Question # 16

With the policies configured as shown in this image, HTTP traffic can be sent and received through Branch Office VPN tunnel 1 and tunnel 2.

Options:

A.  

True

B.  

False

Discussion 0
Question # 17

What does a Firebox configured with default firewall policies do with outbound traffic that does not have a configured route? (Select one.)

Options:

A.  

Sends the traffic to the loopback interface

B.  

Drops the traffic

C.  

Denies the traffic

D.  

Sends the traffic to the default gateway

Discussion 0
Question # 18

Based on the configuration shown in this image, clients on the network can successfully connect to https://www.watchguard.com.

Question # 18

Options:

A.  

True

B.  

False

Discussion 0

Network-Security-Essentials PDF

Network-Security-Essentials PDF (Printable)
$46.5
$154.99

Network-Security-Essentials Testing Engine

Network-Security-Essentials PDF (Printable)
$51
$169.99

Network-Security-Essentials PDF + Testing Engine

Network-Security-Essentials PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions