WATCHGUARD SECURE WI-FI ESSENTIALS
EXAM questions and CORRECT Answers
Which of these wireless modes are supported on the 5 GHz radio band? (Select two.)
a. 802.11a and 802.11n
b. 802.11b and 802.11g
c. 802.11x
d. 802.11ac - CORRECT ANSWERS ad
What action must you perform before you can manage an AP with a Firebox? (Select one.)
a. Configure the AP radios for the 2.4 and 5 GHz bands
b. Create an SSID to broadcast
c. Pair the AP with the Gateway Wireless Controller
d. Reset the AP to factory-default settings - CORRECT ANSWERS c
It is a best practice to place APs near walls, corners, and metal objects to boost the signal distance.
a. True
b. False - CORRECT ANSWERS b
Which tool can you use on the Gateway Wireless Controller to check for channel conflicts on your
wireless network? (Select one.)
a. Access points tab on the Dashboard
b. Auto-deployment configuration
c. Rogue AP detection
d. Wireless maps - CORRECT ANSWERS d
In Wi-Fi Cloud Manage, which of these Monitoring pages shows WIPS classifications for clients?
(Select one.)
a. Monitoring > Managed Devices
b. Monitoring > Security > Clients
c. Monitoring > Wi-Fi > Clients
,d. Monitoring > Applications - CORRECT ANSWERS b
In Wi-Fi Cloud, where do you set the security mode and encryption type for a wireless network?
(Select one.)
a. Device template
b. Authorized WLAN Policy
c. Security profile d. SSID profile - CORRECT ANSWERS d
In Wi-Fi Cloud, Device Templates applied to a location are inherited by location sub-folders.
a. True
b. False - CORRECT ANSWERS b
Which of these AP WIPS classifications refers to an device outside your network? (Select one.)
a. External
b. Authorized
c. Rogue
d. Uncategorized - CORRECT ANSWERS a
Which Wi-Fi Cloud application do you use to create captive portal splash pages? (Select one.)
a. Discover
b. Engage
c. Go
d. Manage
e. Analyze - CORRECT ANSWERS b
In Wi-Fi Cloud, what is the third-radio used for on tri-radio APs? (Select one.)
a. Additional 5 GHz radio
b. Captive portal
c. WIPS Sensor
d. Guest SSID Broadcast - CORRECT ANSWERS c
,What functionality do Firebox and XTM wireless devices have - CORRECT ANSWERS •One
built-in radio supports up to three SSIDs
•Can be configured to use wireless for external (as a wireless client)
•Each wireless access point or client is configured as a network interface
When two AP devices paired to the same Firebox use the same SSID, what controls wireless roaming
behavior for wireless clients? (Select one.)
a. The Gateway Wireless Controller on the Firebox
b. The two AP devices
c. The wireless clients - CORRECT ANSWERS c. Roaming behavior is controlled by the wireless
clients, not the AP devices or the Gateway Wireless Controller
What functionality do both Firebox - XTM wireless devices and WatchGuard AP devices share -
CORRECT ANSWERS Support 2.4 GHz and 5 GHz, 802.11a/b/g/n (802.11ac for T30-W, T50-W,
AP300)
Managed by WatchGuard System Manager, Fireware XTM Web UI, or CLI
Name the Firebox and XTM devices with built-in wireless - CORRECT ANSWERS Firebox T10-W,
T30-W, T50-W
XTM 25-W, XTM 26-W, XTM 33-W
Which of these options can you configure in the hotspot connection settings? (Select three.)
a. Allow hotspot users to connect without credentials.
b. Allow hotspot users to connect without accepting Terms and Conditions.
c. Require hotspot users to authenticate with a user name and passphrase.
d. Require hotspot users to authenticate with only a passphrase.
e. Require users to authenticate with a VPN client. - CORRECT ANSWERS a, c, d. There are no
options to skip the Terms and Conditions or require a VPN client
, Which passphrase does the Gateway Wireless Controller use to connect to a paired WatchGuard AP
device? (Select one.)
a. WPA/WPA2 (PSK) passphrase
b. Firebox configuration passphrase
c. Pairing passphrase
d. WatchGuard AP passphrase - CORRECT ANSWERS d. The Gateway Wireless Controller uses
the WatchGuard AP passphrase to connect to all paired AP devices
If you enable VLAN tagging in an SSID, you must also enable management VLAN tagging in the
Gateway Wireless Controller settings.
a. True
b. False - CORRECT ANSWERS b. (False) You can optionally enable management VLAN tagging,
but it is not required.
What happens if you configure an access point to support more than one mode - CORRECT
ANSWERS Overall radio performance can decrease
Are management frames sent at the lowest or highest rate Sent at the lowest rate supported by
connected clients
Which of these wireless modes are supported on the 5 GHz radio band? (Select two.)
a. 802.11a
b. 802.11b
c. 802.11g
d. 802.11n - CORRECT ANSWERS a, d. The 5 GHz radio band supports 802.11a and 802.11n
wireless modes
When two AP devices paired to the same Firebox use the same SSID, what controls wireless roaming
behavior for wireless clients? (Select one.)
a. The Gateway Wireless Controller on the Firebox
b. The two AP devices
EXAM questions and CORRECT Answers
Which of these wireless modes are supported on the 5 GHz radio band? (Select two.)
a. 802.11a and 802.11n
b. 802.11b and 802.11g
c. 802.11x
d. 802.11ac - CORRECT ANSWERS ad
What action must you perform before you can manage an AP with a Firebox? (Select one.)
a. Configure the AP radios for the 2.4 and 5 GHz bands
b. Create an SSID to broadcast
c. Pair the AP with the Gateway Wireless Controller
d. Reset the AP to factory-default settings - CORRECT ANSWERS c
It is a best practice to place APs near walls, corners, and metal objects to boost the signal distance.
a. True
b. False - CORRECT ANSWERS b
Which tool can you use on the Gateway Wireless Controller to check for channel conflicts on your
wireless network? (Select one.)
a. Access points tab on the Dashboard
b. Auto-deployment configuration
c. Rogue AP detection
d. Wireless maps - CORRECT ANSWERS d
In Wi-Fi Cloud Manage, which of these Monitoring pages shows WIPS classifications for clients?
(Select one.)
a. Monitoring > Managed Devices
b. Monitoring > Security > Clients
c. Monitoring > Wi-Fi > Clients
,d. Monitoring > Applications - CORRECT ANSWERS b
In Wi-Fi Cloud, where do you set the security mode and encryption type for a wireless network?
(Select one.)
a. Device template
b. Authorized WLAN Policy
c. Security profile d. SSID profile - CORRECT ANSWERS d
In Wi-Fi Cloud, Device Templates applied to a location are inherited by location sub-folders.
a. True
b. False - CORRECT ANSWERS b
Which of these AP WIPS classifications refers to an device outside your network? (Select one.)
a. External
b. Authorized
c. Rogue
d. Uncategorized - CORRECT ANSWERS a
Which Wi-Fi Cloud application do you use to create captive portal splash pages? (Select one.)
a. Discover
b. Engage
c. Go
d. Manage
e. Analyze - CORRECT ANSWERS b
In Wi-Fi Cloud, what is the third-radio used for on tri-radio APs? (Select one.)
a. Additional 5 GHz radio
b. Captive portal
c. WIPS Sensor
d. Guest SSID Broadcast - CORRECT ANSWERS c
,What functionality do Firebox and XTM wireless devices have - CORRECT ANSWERS •One
built-in radio supports up to three SSIDs
•Can be configured to use wireless for external (as a wireless client)
•Each wireless access point or client is configured as a network interface
When two AP devices paired to the same Firebox use the same SSID, what controls wireless roaming
behavior for wireless clients? (Select one.)
a. The Gateway Wireless Controller on the Firebox
b. The two AP devices
c. The wireless clients - CORRECT ANSWERS c. Roaming behavior is controlled by the wireless
clients, not the AP devices or the Gateway Wireless Controller
What functionality do both Firebox - XTM wireless devices and WatchGuard AP devices share -
CORRECT ANSWERS Support 2.4 GHz and 5 GHz, 802.11a/b/g/n (802.11ac for T30-W, T50-W,
AP300)
Managed by WatchGuard System Manager, Fireware XTM Web UI, or CLI
Name the Firebox and XTM devices with built-in wireless - CORRECT ANSWERS Firebox T10-W,
T30-W, T50-W
XTM 25-W, XTM 26-W, XTM 33-W
Which of these options can you configure in the hotspot connection settings? (Select three.)
a. Allow hotspot users to connect without credentials.
b. Allow hotspot users to connect without accepting Terms and Conditions.
c. Require hotspot users to authenticate with a user name and passphrase.
d. Require hotspot users to authenticate with only a passphrase.
e. Require users to authenticate with a VPN client. - CORRECT ANSWERS a, c, d. There are no
options to skip the Terms and Conditions or require a VPN client
, Which passphrase does the Gateway Wireless Controller use to connect to a paired WatchGuard AP
device? (Select one.)
a. WPA/WPA2 (PSK) passphrase
b. Firebox configuration passphrase
c. Pairing passphrase
d. WatchGuard AP passphrase - CORRECT ANSWERS d. The Gateway Wireless Controller uses
the WatchGuard AP passphrase to connect to all paired AP devices
If you enable VLAN tagging in an SSID, you must also enable management VLAN tagging in the
Gateway Wireless Controller settings.
a. True
b. False - CORRECT ANSWERS b. (False) You can optionally enable management VLAN tagging,
but it is not required.
What happens if you configure an access point to support more than one mode - CORRECT
ANSWERS Overall radio performance can decrease
Are management frames sent at the lowest or highest rate Sent at the lowest rate supported by
connected clients
Which of these wireless modes are supported on the 5 GHz radio band? (Select two.)
a. 802.11a
b. 802.11b
c. 802.11g
d. 802.11n - CORRECT ANSWERS a, d. The 5 GHz radio band supports 802.11a and 802.11n
wireless modes
When two AP devices paired to the same Firebox use the same SSID, what controls wireless roaming
behavior for wireless clients? (Select one.)
a. The Gateway Wireless Controller on the Firebox
b. The two AP devices
