HCIP-Security (Fast track) H12-724-ENU Exam Dumps Released Online

dumps2022-10-18T08:37:26+08:00

There are two paths to achieve the HCIP-Security certification:

Path 1: If you do not have a higher-level certification as the prerequisite, you can choose to pass three exams, including H12-721_V3.0, H12-722_V3.0, H12-723_V3.0.

Path 2: If you meet the requirement of an equivalent or higher-level from other vendor, for example Cisco CCNP or CCIE, you can choose to pass H12-724-ENU HCIP-Security (Fast track) certification exam for HCIP-Security certification.

Today, we want to share the H12-724-ENU exam free demo online.

Page 1 of 11

1. Business accompanying is-A special access control method, according to the user's access location, access time, access method and terminal use to grant designated investment limits, among which the physical connection can be divided into 3 Class, excluding which of the following access methods?

Wired access

Wireless access

VPN Access

802.1X Access

2. Which of the following files can the sandbox detect? (multiple choice)

www file

PE file

Picture file

Mail

3. View on the switch Agile Controller-Campus The policy issued by the server is as follows:

For this strategy, which of the following options are correct? (Multiple choice)

Common_ user Users can access Internet www

VIP Users can access Internet w

VIP Can visit Mail Server

Common user Users can access Mail_ Sever resource.

4. Identity authentication determines whether to allow access by identifying the identity of the access device or user.

True

False

5. Regarding the enhanced mode in HTTP Flood source authentication, which of the following descriptions are correct? Multiple choices

Enhanced mode refers to the authentication method using verification code.

Some bots have a redirection function, or the free proxy used during the attack supports the redirection function, which leads to the failure of the basic mode of defense Effective, enhanced mode can effectively defend.

The enhanced mode is superior to the basic mode in terms of user experience.

Enhanced mode supports all HTTP Flood source authentication fields. "

6. Prosecution in the cloud sandbox

For the ordering of the process, which of the following options is correct?

1-3-4-2

1-4-2-3

1-4-3-2

3-1-4-2:

7. The following is the 802.1X access control switch configuration:

[S5720] dot1x authentication-method eap

[S5720-GigabitEthernet0/0/1] port link-type access

[S5720-GigabitEthemet0/0/1] port default vlan 11

[S5720-GigabitEthernet0/0/1] authentication dot1x

Assuming that GE0/0/1 is connected to user 1 and user 2 through the HUB, which of the following options is correct?

After user 1 is authenticated, user 2 can access network resources without authentication

User 1 and User 2 must be individually authenticated before they can access network resources

GE0/0/1 does not need to enable dot1X

Neither user 1 nor user 2 can pass the authentication and access network resources.

8. Tianyu Nei answered the role of safety filtering technology, which of the following is still correct? (multiple choice)

File filtering can reduce the risk of malicious code execution and virus infection in the internal network by blocking the transmission of fixed types of files, and it can also prevent Prevent employees from leaking company confidential documents to the Internet.

Content filtering can prevent the disclosure of confidential information and the transmission of illegal information

The application behavior control function can finely control common HTTP behaviors and FTP behaviors.

Mail filtering refers to the management and control of mail sending and receiving, including preventing the flooding of spam and anonymous emails, and controlling the sending and receiving of illegal emails.

9. In the security protection system of the cloud era, reforms need to be carried out in the three stages before, during and after the event, and a closed-loop continuous improvement should be formed.

And development .

Which of the following key points should be done in "things"? (multiple choice)

Vulnerability intelligence

Defense in Depth

Offensive and defensive situation

Fight back against hackers

10. In the scenario of SACG linkage in bypass mode, only the traffic initiated by the terminal user will pass through the firewall, and the server will return to the terminal in use.

The traffic does not need to go through the firewall y. For the firewall, it belongs to the scenario of inconsistent traffic back and forth paths, this needs to turn off the session state check function.

True

False

Page 2 of 11

11. Deployed by an enterprise network manager Agile Controller-Campus with SACG Later; Identity authentication is successful but cannot access the post-authentication domain, This phenomenon may be caused by any reason? (Multiple choice)

A serious violation will prohibit access to the post-authentication domain.

The access control list of the post-authentication domain has not been delivered SAC

ALC The number of rules issued is too many, and a lot of time is required to match, causing interruption of access services.

Agile Controller-Campus Wrong post-authentication domain resources are configured on the server.

12. In the construction of information security, the intrusion detection system plays the role of a monitor. It monitors the flow of key nodes in the information system.

In-depth analysis to discover security incidents that are occurring .

Which of the following are its characteristics?

IDS can be linked with firewalls and switches to become a powerful "assistant" of firewalls, which can better and more accurately control access between domains.

It is impossible to correctly analyze the malicious code doped in the allowed application data stream.

Unable to detect malicious operations or misoperations from internal killings.

Cannot do in-depth inspection

13. Which way can NAC Agent upgrade package be deployed?

By IP addresses

By terminal type

By account

By user information

14. Submit

3->1->4->2->5

3->2->4->1->5

3->2->1->4->5

3->1->2->4->5

15. Which of the following is the default port number of Portal authentication service?

1812

1813

50200

50300

16. Regarding WLAN, which of the following descriptions is correct?

WLAN Is to adopt 80211 Technical WiFi

WLAN There are two basic architectures: FAT AP with AC+FIT AP

AC+FATAP The architecture is suitable for medium and large use scenarios

AC+FITAP Autonomous network architecture

17. If the processing strategy for SMTP virus files is set to alert, which of the following options is correct?

Generate logs and discard

Generate logs and forward them

Delete the content of the email attachment

Add announcement and generate log

18. Which of the following options belong to the upgrade method of the anti-virus signature database of Huawei USG6000 products? (multiple choice)

Local upgrade

Manual upgrade

Online upgrade

Automatic upgrade

19. Regarding the application scenarios of Agile Controller-Campus centralized deployment and distributed deployment, which of the following options are correct? (Multiple select)

If most end users work in one area and a few end users work in branch offices, centralized deployment is recommended.

If most end users are concentrated on--Offices in several regions, and a small number of end users work in branches. Distributed deployment is recommended.

If end users are scattered in different geographical locations, a distributed deployment solution is recommended.

If end users are scattered in different regions, a centralized deployment solution is recommended.

20. Remote control and penetration

Regarding the order of these four stages, which of the following options is correct?

2-3-4-1

1-2-4-3

1-4-2-3

2-1-4-3

Page 3 of 11

21. Configuring WLAN device detection can realize the monitoring of the entire network, but you need to set the working mode of the AP first, which of the following options are.

What is the working mode of AP? (multiple choice)

access mode

Normal mode

Mixed mode

Monitoring mode

22. An enterprise adopts hardware SACG access method for admission control. The configuration commands are as follows, among which Key; Admin@123

[USG] right-manager server-group

[USG-rightm] localip 10.1.10.2

[USG-rightm]serverip 10. 1.31.78 shared-key AdnIn@123

[USG2100-rightm] right-manager server-group enable.

Assuming that the other configurations are correct, based on the above configuration only, which of the following options is correct?

After completing the configuration, SACG can successfully link with the Agile Controller-Campus.

After completing the configuration, SACG cannot successfully link with Agile Contrlle-Campus. P

Can issue pre-authentication domain AC

The linkage cannot be successful but the terminal can access the pre-authentication domain server.

23. 802.1X During the authentication, if the authentication point is at the aggregation switch, in addition to RADIUS,AAA,802.1X.

In addition to the conventional configuration, what special configuration is needed?

Both the aggregation layer and the access layer switches need to be turned on 802.1X Function.

Access layer switch needs to be configured 802. 1X Transparent transmission of messages.

The aggregation switch needs to be configured 802 1X Transparent transmission of messages.

No special configuration required

24. If the user's FTP operation matches the FTP filtering policy, what actions can be performed? (multiple choice)

Block

Declare

Alarm

Execution

25. Jailbroken mobile terminalMobile terminals with non-compliant applications installed or terminals with non-compliant lock screen passwords connecting to the corporate network for office operations are not safe for companies. Any 0fice How to solve the problem of mobile office system?

Directly discard data sent by devices that do not comply with regulations

Certification of non-compliant equipment.

Check for non-compliant terminals, Prohibit unsafe devices from accessing the network.

Send alarm information to notify the administrator to deal with it.

26. When using local guest account authentication, usually use(Portal The authentication method pushes the authentication page to the visitor. Before the user is authenticated, when the admission control device receives the HTTP The requested resource is not Portal Server authentication URL When, how to deal with the access control equipment.

Discard message

URL Address redirected to Portal Authentication page

Direct travel

Send authentication information to authentication server

27. Sort all services according to user group and account: By the end IP The address range is time-sharing, if it is a user group, a small terminal with an account IP Address range allocation for the same business(Chen Gongji outside business) I The business assigned to the one with the highest priority will take effect.

Which of the following is correct regarding the order of priority?

account>user group>terminal IP Address range

By the end P Address range>account number>user group

account>Terminal protection address range>user group

user group>terminal P Address range>Account

28. Analysis is the core function of intrusion detection. The analysis and processing process of intrusion detection can be divided into three phases; build an analyzer to perform analysis on actual field data.

Which of the analysis, feedback and refinement is the function included in the first two stages?

Data analysis, data classification, post-processing

Data processing, data classification, post-processing

Data processing, attack classification, post-processing

Data processing, data classification, attack playback

29. Which of the following options will not pose a security threat to the network?

Hacking

Weak personal safety awareness

Open company confidential files

Failure to update the virus database in time

30. Which of the following options are relevant to Any Office The description of the solution content is correct? (Multiple choice)

Provide unified and secure access to enterprise mobile applications on mobile terminals.

The tunnel is dedicated and cannot be penetrated by viruses.

Applications are quickly integrated and can be extended.

It can be quickly integrated and docked with the enterprise application cloud platform.

Page 4 of 11

31. Regarding the processing process of file overwhelming, which of the following statements is correct?

The file filtering module will compare the application type, file type, and transmission direction of the file identified by the previous module with the file filtering rules configured by the administrator. Then the lookup table performs matching from top to bottom.

If all the parameters of Wenzhu can match all file filtering rules, then the module will execute the action of this file filtering rule.

There are two types of actions: warning and blocking.

If the file type is a compressed file, then after the file filtering check, the female file will be sent to the file decompression module for decompression and decompression. Press out the original file. If the decompression fails, the file will not be re-filed.

32. Regarding the 3 abnormal situations of the file type recognition result, which of the following option descriptions is wrong?

File extension mismatch means that the file type is inconsistent with the file extension.

Unrecognized file type means that the file type cannot be recognized and there is no file extension.

File damage means that the file type cannot be identified because the file is damaged.

Unrecognized file type means that the file type cannot be recognized, and the file extension cannot be recognized.

33. In order to increase AP The security can be AC Going online AP Perform authentication. Currently Huawei AC What are the supported authentication methods? (Multiple choice)

MAC Certification

Password authentication

Not certified:

SN Certification

34. Which of the following options belong to the network layer attack of the TCP/IP protocol stack? (multiple choice)

Address scanning

Buffer overflow p

Port scan

IP spoofing

35. The cleaned traffic is sent to the original destination server.

1-3-4-2-5-6-7-8

1-3-2-4-6-5-7-8

1-3-4-2-6-5-8-7

1-3-24-6-5-8-7

36. In the visitor reception hall of a company, there are many temporary terminal users, and the administrator hopes that users do not need to provide any account numbers and passwords. access Internet .

Which of the following authentication methods can be used for access?

Local account authentication

Anonymous authentication

AD Account Verification

MAC Certification

37. Security zone division means to better protect the internal network security, Based on the business type and security requirements of the intranet, divide the intranet into several granularities.

Logical area .

Which of the following options does not belong Agile Controller-Campus Security domain?

User domain

Network domain

Business domain:

Attack domain

38. Which of the following options belong to the keyword matching mode? (multiple choice)

Text

Regular expressions

Community word

Custom keywords

39. The realization of content security filtering technology requires the support of the content security combination license.

True

False

40. About the software SACG And hardware SACG Description, which of the following is correct?

hardware SACG use Any Office Perform admission control.

software SACG use Any Office Perform admission control.

hardware SACG Than software SACG cut costs.

hardware SACG The security is higher.

Page 5 of 11

41. When managing guest accounts, you need to create a guest account policy and set the account creation method.

For the account creation method, which of the following descriptions is wrong?

When adding accounts individually, you can choose to create them individually.

If there are a lot of users, you can choose to create in batches.

If there are many users, you can choose database synchronization

In order to facilitate management and improve user experience, self-registration can be used.

42. Which of the following technology, administrators can according to business requirements, to scale to achieve load sharing of business flow?

Resource pool mechanism

weighting mechanism

load balancing

Hot Standby

43. In the Agile Controller-Campus admission control scenario, regarding the role description of the RADIUS server I client, which of the following is positive True?

Agile Controller-Campus Integrated RADIUS All functions of server and client."

Agile Controller-Campus As RADIUS On the server side, the user terminal acts as RADIUS Client.

Certified equipment (like 802. 1X switch) As RADIUS On the server side, the user terminal acts as RADIUS Client.

Agile Controller-Campus As RADIUS Server side, authentication device (like 802.1X switch) As RADIUS Client.

44. For Huawei USG600 products, which of the following statements about mail filtering configuration is correct?

Cannot control the number of received email attachments

When the spam processing action is an alert, the email will be blocked and an alert will be generated

You can control the size of the attachment of the received mail

Cannot perform keyword filtering on incoming mail

45. When a data file hits the whitelist of the firewall's anti-virus module, the firewall will no longer perform virus detection on the file.

True

False

46. Import the user information of the AD server on the Agile Controller-Campus to realize the user's access authentication. If the user is in the Agile.

The user information is not found on the Controller-Campus .

Which of the following actions will be performed in the next step?

Straight forward to return authentication failure information.

Discard user information.

User 91 Information sent to AD The server performs verification.

Synchronize the database again.

47. Regarding the file filtering technology in the USG6000 product, which of the following options is wrong?

It can identify the application that carries the file, the file transfer direction, the file type and the file extension.

Even if the file type is modified, it can also identify the true type of the file

It can identify the type of files transmitted by itself, and can block, alert and announce specific types of files.

It supports filtering the contents of compressed files after decompression. "

48. Which of the following series of devices does not support the function of accompanying business?

S5720HI Series Switch:

AR Series router

USG6000 Series firewall

SVN5600 series

49. Single-packet attacks are divided into scanning and snooping attacks, malformed packet attacks, and special packet attacks. Ping of death is a special packet attack.

True

False

50. If a company wants to detect image files, Shellcode code files and PDF files, which of the following types of sandboxes can be used? (More select)

PDF heuristic sandbox

PE heuristic sandbox

Web heuristic sandbox

Heavyweight sandbox (virtual execution)

Page 6 of 11

51. In WPA2, because of the more secure encryption technology-TKIP/MIC, WPA2 is more secure than WPA.

True

False

52. Regarding CAPWAP encryption, which of the following statements is wrong?

CAPWAP The data tunnel can be used DTLS Encrypted.

DTLS Support two authentication methods: Certificate authentication(out AC,AP Already brought)with PSK Password authentication.

DTLS Encryption can guarantee AC The issued control messages will not be eavesdropped on.

Use the certificate method to carry out DTLS Negotiation, the certificate is only used to generate the key, not right AP Perform authentication.

53. Which of the following attacks are attacks against web servers? (multiple choices)

Website phishing deception

Website Trojan

SQL injection

Cross-site scripting attacks 2335

54. The relationship between user groups and accounts in user management is stored in a tree on the Agile Controller-Campus. An account belongs to only one user group.

Consistent with the corporate organizational structure: If the OU (OnizbonUnit) structure stored in the AD/LDAP server is consistent with the corporate organizational structure, users are stored Under 0OU, when the Agile Controller-Campus synchronizes AD/LDAP server accounts, which synchronization method can be used?

Press "0U" to synchronize

AO Synchronize by "group", "0U describes the organizational structure

AO Press "Group" "Synchronize," "Group" Jida organization structure

LDAP synchronization by "group"

55. The following commands are configured on the Huawei firewall:

[USG] firewall defend ip-fragment enable

Which of the following situations will be recorded as an offensive behavior? (multiple choice)

DF, bit is down, and MF bit is also 1 or Fragment Offset is not 0

DF bit is 023, MF bit is 1 or Fragment Offset is not 0,

DF bit is 0, and Fragment Offset + Length> 65535.

The DF bit is 1, and Fragment Ofset + Length <65535.

56. There are three roles in the XMPP protocol: server, gateway, and client. Corresponding to the free mobility solution: Agile Controller-Campus as For the server, Huawei USG6000 series firewall acts as the gateway; the agile switch acts as the client.

True

False

57. How to check whether the SM and SC silverware start normally after installing the Agile Controller-Campus) (multiple delivery)

Open https://SM server IP:8943 in the browser, enter the account admin and the default password Changeme123, if the login is successful, it will be explained. The SIM components are normal.

After logging in to SC, select Resources>Users>User Management to create a common account. Open https://SM server IP: 8447 in the browser newauth, if you can successfully log in using the account created in the previous step, the SM component is normal.

Open https://SC Server IP:8443 in the browser and enter the account admin and the default password Changeme123. If the login is successful, it will be explained. The SC component is normal.

After logging in to SM, select Ziyuan>User>User Management, and Xinlu has a common part number. Open https://SC server IP: 8447 newauth in the browser. If you can successfully log in with the account created in the previous step, it means that the SC component is Wang Chang.

58. In enterprises where terminal host access control management is relatively strict, administrators hope to bind terminal hosts and accounts to prevent terminal users from accessing the controlled network from unauthorized terminal hosts at will. Regarding the description of binding the terminal host and account, which of the following is correct?

exist Any Office When logging in with an account for the first time, the terminal host is automatically bound to the current account, but the automatic binding process requires administrator approval

When other accounts need to be authenticated on the bound terminal host, there is no need to find the asset owner who is bound for the first time to authorize themselves.

Binding terminal hosts and accounts is only applicable to terminal users through Any Office Scenarios for authentication, Not applicable Web Agent Plugins and Web The scenario where the client authenticates.

There are only consoles in the account binding terminal host, which cannot be configured by the administrator.

59. Windows in environment,Agile Controller-Campus After the installation is successful, how to manually start the management center(MC)? (Multiple choice)

Double click on the desktop"Start Server"The shortcut starts.

choose"Start>all programs> Huawei> MCServer> StartServer.

choose"Start>all programs> Huawei> Agile Controller> Server Startup Config"To manually start the required components.

choose"Start 3 all programs> Huawei> MCServer> Sever Startup Conig",Manually start the required components

60. Typical application scenarios of terminal security include: Desktop management, illegal outreach and computer peripheral management.

True

False

Page 7 of 11

61. Regarding the Anti-DDoS cloud cleaning solution; which of the following statements is wrong?

Ordinary attacks will usually be cleaned locally first.

If there is a large traffic attack on the network, send it to the cloud cleaning center to share the cleaning pressure.

Since the Cloud Cleaning Alliance will direct larger attack flows to the cloud for cleaning, it will cause network congestion.

The closer to the attacked self-labeled cloud cleaning service, the priority will be called.

62. Terminal fault diagnosis tool can diagnose fault, also can collect terminal information.

TRUE

FALSE

63. Which of the following are typical intrusions? "Multiple choice)

Computer is infected by U disk virus

Abnormal power interruption in the computer room

Tampering with Web pages

Copy/view sensitive data

64. Which of the following options is not included in the mobile terminal life cycle?

Obtain

deploy

run

Uninstall

65. When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.

True

False

66. Use hardware SACG Access control, In hardware SACG View the results of the conversation table on the deduction.

Which of the following statements are correct? (Multiple choice)

192.168.1.0 definitely is Agile Controller-Campus Manager IP address

if 192.126.200.11 Is the server of the post-authentication domain, then IP Address is 192.18.0.1 If your terminal has not passed the authentication, it is possible to access the server.

192.168.100.1 definitely is Agile Controller-Campus Controller IP address.

If in 6 Within minutes of the conversation 192.168.0.19 154->/192.162.0.11: 15080 Not refreshed, IP Address is 192.168.0.119 If the device wants to IP Address is 192.168.200.11 For device communication, the session must be re-established.

67. Viruses can damage computer systems. v Change and damage business data: spyware collects, uses, and disperses sensitive information of corporate employees.

These malicious pastoral software seriously disturb the normal business of the enterprise. Desktop anti-disease software can solve the problem of central virus and indirect software from the overall situation.

True

False

68. Malicious code usually uses RootKit technology in order to hide itself. RootKit modifies the kernel of the system by loading a special driver.

To hide itself and the role of designated files.

True

False

69. Which of the following iterations is correct for the description of the management center?

The management server of the management center is responsible for the cleaning of abnormal flow, as well as the collection and analysis of business data, and storage, and is responsible for the summary The stream is reported to the management server for report presentation.

The data coking device is responsible for the cleaning of abnormal flow, the centralized management and configuration of equipment, and the presentation of business reports.

The data collector and management server support distributed deployment and centralized deployment. Centralized deployment has good scalability.

The management center is divided into two parts: management server and teaching data collector.

70. Regarding asset management, which of the following descriptions is wrong?

Asset management can register assets automatically or manually.

Enable the automatic asset registration mode, the asset registration process does not require end users to participate.

Automatic registration of assets is suitable for situations where the asset number is automatically maintained by the business manager.

Manually registering assets means that the administrator I Way to create an asset record on the business manager, and put the asset number in Any Office Enter it to complete the asset registration process.

Page 8 of 11

71. If the regular expression is "abc. de", which of the following will not match the regular expression?

abcde

abcdde

abclde

abc+de

72. The most common form of child-like attack is to send a large number of seemingly legitimate packets to the target host through Flood, which ultimately leads to network bandwidth.

Or the equipment resources are exhausted .

Which of the following options is not included in traffic attack packets?

TCP packets

UDP packet

ICMP message

FTP message

73. Which of the following options are correct for the configuration description of the management center ATIC? (multiple choice)

The drainage task needs to be configured on the management center, and when an attack is discovered, it will be issued to the cleaning center.

It is necessary to configure the protection object on the management center to guide the abnormal access flow in etpa

Port mirroring needs to be configured on the management center to monitor abnormal traffic.

The reinjection strategy needs to be configured on the management center to guide the flow after cleaning. Q:

74. What content can be filtered by the content filtering technology of Huawei USG6000 products?

File content filtering

Voice content filtering

Apply content filtering..

The source of the video content

75. A policy template is a collection of several policies. In order to audit the security status of different terminal hosts and the behavior of end users, the administrator needs to customize.

The same policy template is used to protect and manage terminal hosts. Regarding the policy template, which of the following option descriptions are correct? (Multiple choice)

When configuring the policy template, you can inherit the parent template and modify the parent template policy

Only the strategy in the strategy template can be used, and the administrator cannot customize the strategy.

You can assign a policy template to a certain network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of the number is: account>department

76. Which of the following options are correct for the description of visitor management? (Multiple choice)

Visitor registration account can be configured to be exempt from approval

Guest login can only be configured as Web Way of webpage

Anonymous account authentication cannot be performed on the guest authentication page

Visitor account approval information can be notified to visitors via SMS

77. In some scenarios, an anonymous account can be used for authentication .

What are the correct descriptions of the following options for the anonymous account?? (Multiple choice)

The use of anonymous accounts for authentication is based on the premise of trusting the other party, and the authentication agency does not need the other party to provide identity information to provide services to the other party.

Agile Controller-Campus Need to be manually created"~anonymous"account number.

By default, the access control and policy of anonymous accounts cannot be performed. 1 Operations such as invoking patch templates and software distribution.

Administrators cannot delete anonymous accounts"~anonymous*.

78. On WIDS functional WLAN Regarding the judgment of illegal devices in the network, which of the following statements are correct? (Multiple choice)

all Ad-hoc The device will be directly judged as an illegal device

Not this AC Access AP Is illegal AP

Not this AC Access STA Is illegal STA

Not this AC Access STA, Also need to check access AP Does it contain law

79. Which of the following options is for Portal The description of the role of each role in the authentication system is correct?

The client is Any 0fice software.

Portal The role of the server is to receive client authentication requests, provide free portal services and authentication interfaces, and exchange client authentication information with access devices.

RADIUS The role of the server is to authenticate all the users in the network segment HTTP Requests are redirected to Portal server.

The role of admission control equipment is to complete the authentication, authorization and accounting of users.

80. Regarding the strong statement of DNS Request Flood attack, which of the following options is correct?

The DNS Request Flood attack on the cache server can be redirected to verify the legitimacy of the source

For the DNS Reguest Flood attack of the authorization server, the client can be triggered to send DINS requests in TCP packets: to verify The legitimacy of the source I

In the process of source authentication, fire prevention will trigger the client to send DINS request via TCP report to verify the legitimacy of the source IP, but in a certain process It will consume the TCP connection resources of the OINS cache server.

Redirection should not be implemented on the source IP address of the attacked domain name, and the destination P address of the attacked domain name should be implemented in the wild.

Page 9 of 11

81. For the basic mode of HTTP Flood source authentication, which of the following options are correct? (multiple choice)

The basic mode can effectively block the access from the Feng Explor client.

The bot tool does not implement a complete HTTP protocol stack and does not support automatic redirection, so the basic mode can effectively defend against HTTP Flood attacks

When there is an HTTP proxy server in the network, the firewall will add the IP address of the proxy server to the whitelist, but it will recognize the basic source of the zombie host. The certificate is still valid.

The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.

82. Regarding the basic principles of user access security, it is wrong not to list any description?

When a terminal device accesses the network, it first authenticates the user's identity through the access device, and the access device cooperates with the authentication server to complete the user Authentication.

The terminal device directly interacts with the security policy server, and the terminal reports its own status information, including virus database version, operating system version, and terminal Information such as the patch version installed on the device.

The security policy server checks the status information of the terminal, and for terminal devices that do not meet the corporate security standards, the security policy server reissues. The authorization information is given to the access device.

The terminal device selects the answer to the resource to be accessed according to the result of the status check.

83. The AD/LDAP account can be synchronized to the Agile Controller-Campus or not to the Agile Controller-Campus. Synchronize.

The Agile Controller-Campus can only be authorized by user group. If it is not synchronized to the Agile Controller-Campus, it can be fine-tuned based on the account.

Authorization

True

False

84. Place refers to the terminal environment when end-user use strategy management center access to controlled network office, which options are correct about place? (Choose 2 answers)

strategy management center only support the default place

The default place only support by way of cable access network scenario

can be customized places

when allocation strategy template for the end user, need to select the corresponding places

85. For the description of the Anti DDOS system, which of the following options is correct? C

The detection center is mainly to pull and clean the attack flow according to the control strategy of the security management center, and re-inject the cleaned normal flow back to the customer. User network, send to the real destination.

The management center mainly completes the processing of attack events, controls the drainage strategy and cleaning strategy of the cleaning center, and responds to various attack events and attack flows. View in categories and generate reports.

The main function of the Green Washing Center is to detect and analyze DDoS attack traffic on the flow from mirroring or splitting, and provide analysis data to The management center makes a judgment.

The firewall can only be used for inspection equipment

86. Which of the following law items is the most blessed for safety? This should be true?

Checking strategies are mainly used to check some static settings of the terminal, such as whether the screen saver is set, whether the antivirus software is installed; whether there is illegal Outreach etc. z00

Monitoring strategies are mainly used for real-time monitoring of events that occur in the system, such as whether anti-virus software is installed and whether PPPOE dial-up access is used Network, etc.-Once an incident is detected, some control can be taken.

The security check strategy only includes two types of end-host check-type strategies and end-user behavior check-type strategies.

Terminal host security management is mainly implemented by inspection strategies, and end user behavior management is mainly implemented by monitoring strategies.

87. BY00 The products and textiles provided by the history solution program cover the entire terminal networkApplication and management and other fields/include: Serialization BC Equipment, paperless network system network access support, VPN Gateway, terminal security customer ladder software, authentication system, mobile device management(MDN),move eSpace UC.

True

False

88. Which of the following options are common reasons for IPS detection failure? (multiple choices)

IPS policy is not submitted for compilation

False Policy IDs are associated with IPS policy domains

The IPS function is not turned on

Bypass function is closed in IPS

89. MAC Certification refers to 802.1x In the protocol authentication environment, the terminal does not respond to the connection control device after accessing the network 802.1x When protocol authentication is requested, the access control does not automatically obtain the terminal’s MAC The address is sent as a credential to access the network RADIUS The server performs verification.

True

False

90. Which of the following options is not a feature of big data technology?

The data boy is huge

A wide variety of data

Low value density

Slow processing speed

Page 10 of 11

91. Regarding MAC authentication and MAC bypass authentication, which of the following descriptions are correct? (multiple choice)

The biggest difference between the two is MAC Bypass authentication belongs to 802 1X Certification, while MAC Certification does not belong to 802 1X Certification.

If a network can connect to dumb terminals(printer,IP telephone), The text may be connected to a portable computer, please use MAC Bypass authentication: First try 802 1X Authentication, try again if authentication fails MAC Certification

If a network will only connect to dumb terminals(printer,IP telephone),please use MAC Certification in order to shorten the certification time.

MAC Authentication MAC One more bypass authentication 802 In the instrument certification process, the open time is longer than MAC The bypass authentication time is long.

92. What equipment do Policy Center supported servers include? (Choose 3 answers)

remote control device

mail server

Internet behavior management equipment

log collection server

93. Regarding Huawei's anti-virus technology, which of the following statements is wrong?

The virus detection system cannot directly detect compressed files

The anti-virus engine can detect the file type through the file extension

Gateway antivirus default file maximum decompression layer is 3 layers

The implementation of gateway antivirus is based on proxy scanning and stream scanning

94. If you use a normal account for authentication, which of the following descriptions is wrong?

Users can use Any Office Perform authentication.

User can't use web Way to authenticate.

Users can use Web Agent Perform authentication.

Users can use their own 802. 1X The client authenticates.

95. Based on the anti-virus gateway of streaming scan, which of the following descriptions is wrong?

Rely on state detection technology and protocol analysis technology

The performance is higher than the agent-based method

The cost is smaller than the agent-based approach

The detection rate is higher than the proxy-based scanning method

96. When the license of Huawei USG6000 product expires, the RBL function will be unavailable, and users can only use the local black and white list to filter junk mail.

True

False

97. In the Agile Controller-Campus solution, which device is usually used as the hardware SACG?

router

switch

Firewall

IPS

98. An enterprise administrator configures a Web reputation website in the form of a domain name, and configures the domain name as www. abc; example. com. .

Which of the following is the entry that the firewall will match when looking up the website URL?

example

www. abc. example. com

www.abc. example

example. com

99. In Huawei USG6000 products, IAE provides an integrated solution, all content security detection functions are integrated in a well-designed

In the high-performance engine .

Which of the following is not the content security detection function supported by this product?

Application recognition and perception

URL classification and filtering

Video content filtering

Intrusion prevention

100. In the big data intelligent security analysis platform, it is necessary to collect data from data sources, and then complete a series of actions such as data processing, detection and analysis, etc. do .

Which of the following options does not belong to the action that needs to be completed in the data processing part?

Data preprocessing

Threat determination

Distributed storage

Distributed index

Page 11 of 11

101. Which three aspects should be considered in the design of cloud platform security solutions? (multiple choice)

Infrastructure security

Tenant security

How to do a good job in management, operation and maintenance

Hardware maintenance

102. Regarding the global configuration of file filtering configuration files for Huawei USG6000 products, which of the following descriptions is correct?

File filtering, content filtering and anti-virus detection cannot be performed when the file is damaged. At this time, the documents can be released or blocked according to business requirements.

When the file extension does not match, if the action is "Allow" or "Alarm", file filtering, content filtering and anti-virus are performed according to the file type Detection.

When the number of compression layers of a file is greater than the configured "Maximum Decompression Layers", the firewall cannot filter the file.

When the file type cannot be recognized, file filtering, content filtering and anti-virus detection are not performed.

HCIP-Security (Fast track) H12-724-ENU Exam Dumps Released Online

HCIP-Security (Fast track) H12-724-ENU Exam Dumps Released Online

Share this post

Leave a Reply Cancel reply

Related Posts