H19-376問題集、Huawei実際の試験問題

質問 1

What information can the Huawei sandbox obtain in the sample test report?

A. Basic information of the document

B. Behavior capture chart

C. Threat behavior classification

D. Dynamic behavior flow

E. Document dissemination information

正解: A,B,C,D,E

質問 2

Which of the following functions is not what ASG can do?

A. Linkage sandbox

B. Prevent data leakage

C. Bandwidth control

D. VPN

正解: A

質問 3

Regarding the application identification of Huawei's USG6000 next-generation firewall, what is the correct statement?

A. Ability to distinguish between different functions of the application, such as distinguishing uploads and downloads of network disk applications.

B. When the application characteristics change, you need to upgrade the firewall software.

C. Ability to identify applications based on statistical features and associated features

D. Identify Shuliang more than 6000

正解: A,C,D

質問 4

NGFW IP-LINK is a health check mechanism for the IP address of a remote network node. Which working modes are included:

A. Answer mode

B. Netbios mode

C. ARP mode, can only be used for directly connected network nodes

D. ICMP mode, can be used for directly connected network nodes, mostly for non-directly connected network nodes

正解: C,D

質問 5

Huawei is the only security vendor in China to enter the Gartner Firewall MQ Challenger Quadrant

A. True

B. False

正解: A

質問 6

What is the distribution number of Huawei FireHunter?

A. 6300

B. 6200

C. 6100

正解: C

質問 7

The basic implementation process of NGFW Intrusion Prevention (IPS) is:

A. Protocol identification and protocol analysis are performed first, then IP fragment message reassembly and TCP stream reassembly are performed, then feature matching is performed to wake up intrusion detection, and finally response processing is performed.

B. Threat identification based on message port number

C. First, reassemble IP fragmented packets and TCP streams, then match characteristics, then perform protocol identification and protocol analysis to complete detection, and finally respond to processing.

D. First, reassemble IP fragmented packets and TCP streams, then perform protocol identification and protocol analysis, then perform feature matching to wake up intrusion detection, and finally perform response processing.

正解: C

質問 8

The defense methods in the Anti-Ddos solution that can alleviate the true source attack are

A. DNS domain name monitoring

B. HTTP proxy detection

C. Global filter

D. TCP RATIO

正解: B

Huawei HCS-Pre-sales-IP(Security) - H19-376 模擬練習