Network-Security-Essentials問題集、WatchGuard実際の試験問題

質問 1

Which of these is a network IP address? (Select one.)

A. 10 10 10 255/24

B. 1G2 153 10 O 1

C. 1Q2 158.10 0-24

D. 172 16 100 1/12

E. 10 0.1 255 8

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

You recently installed network monitoring software on your server and then performed a port scan for each IP address in the network. When the scan finishes, you notice that the server lost access to the Internet. What is the most likely cause of this issue? (Select one.)

A. The policy that handles outbound traffic was automatically disabled because the Firebox was port scanned

B. The server IP address was added to the Blocked Sites list because an IPS signature was matchedduring the port scan

C. The port scan traffic matched a default HTTP proxy content type rule configured with a Block action

D. The server IP address was added to the Blocked Sites list because the network was flooded with ESP traffic during the port scan

E. The server IP address was added to the Blocked Sites list because of the default packet handling port scan rule

正解: E

解説: (PassTest メンバーにのみ表示されます)

質問 3

The Audit Trail report shows information about Firebox configuration changes. How can you makesure the Audit Trail report includes the names of the specific person that made each change? (Select one.)

A. Configure all Firebox administrators to use the Authentication Portal to log in to the Firebox

B. Enable the Logging > AuditTrack feature

C. Configure your RADIUS server to send accounting messages to the Firebox

D. Create unique device administrator accounts for each Firebox administrative user

E. Install the SSO Client on each computer used by Firebox administrators

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

The Firebox can scan the contents of encrypted zip files with Gateway AntiVirus when HTTPS content inspection is enabled.

A. True

B. False

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

If the Firebox does not have a feature key installed, which of these statements are true? (Select three.)

A. You cannot upgrade the Firebox

B. You cannot configure subscription services

C. Only one user can connect to the Internet through the Firebox

D. You cannot run the Web Setup Wizard

E. You cannot save configuration changes to the Firebox

正解: A,B,E

解説: (PassTest メンバーにのみ表示されます)

質問 6

Match each type of NAT with the correct descriptor

正解:

Explanation:

Here are the correct answers for matching each NAT type with its descriptor:
* Changes incoming packets sent to a public IP address to different internal IP addresses based on the destination portanswer:Static NAT Explanation: Static NAT maps a public IP address to multiple internal IP addresses based on the port, allowing specific services or applications to be routed to various internal destinations.
* Allows a user on the trusted or optional network to connect to a public server that is on the same physical Firebox interface by its public IP address or domain nameanswer:NAT loopback Explanation: NAT loopback (or NAT reflection) allows internal users to access a public IP address or domain name that resolves to the same local network, making it appear as if they are connecting from outside the network.
* Conserves IP addresses and hides the internal topology of your networkanswer:Dynamic NAT Explanation: Dynamic NAT (or PAT - Port Address Translation) conserves public IP addresses by allowing multiple internal devices to share a single public IP address. This setup is commonly used for outbound internet connections from a private network.
* Changes all incoming and outgoing packets sent from one range of addresses to a different range of addressesanswer:1-to-1 NAT Explanation: 1-to-1 NAT maps each internal IP address to a unique public IP address, providing a one-to-one relationship. This type of NAT is often used for networks that require external access to specific internal resources.

WatchGuard Network Security Essentials for Locally-Managed Fireboxes - Network-Security-Essentials 模擬練習