最新2023年03月05日リアルなH12-724試験問題集解答で有効なH12-724問題集PDF
Huawei H12-724試験問題集でPDF問題とテストエンジン
質問 82
In the deployment of Huawei NIP6000 products, only port mirroring can be used for streaming replication.
- A. False
- B. True
正解: A
質問 83
When the device recognizes a keyword during content filtering detection, which response actions can the device perform? (multiple choice)
- A. Declare
- B. Warning
- C. Operate by weight
- D. Block
正解: B,C,D
質問 84
When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.
- A. True
- B. False
正解: A
質問 85
Which of the following options is correct for the sequence of the flow-by-stream detection of AntiDDoS?
1. The Netflow analysis device samples the current network flow;
2. Send a drainage command to the cleaning center;
3. Discover the DDoS attack stream;
4.Netior: analysis equipment sends alarms to ATIC management center
5. The abnormal flow is diverted to the cleaning center for further inspection and cleaning;
6. The cleaning center sends the host route of the attacked target IF address server to the router to achieve drainage
7. The cleaning log is sent to the management center to generate a report;
8. The cleaned traffic is sent to the original destination server.
- A. 1-3-4-2-5-6-7-8
- B. 1-3-4-2-6-5-8-7
- C. 1-3-2-4-6-5-7-8
- D. 1-3-24-6-5-8-7
正解: B
質問 86
Which of the following options is about SACG The description of the online process is wrong?
- A. Terminal and Agile Controller-Campus Server communication SSL encryption
- B. Agile Controller-Campus Server gives SACG Carrying domain parameters in the message
- C. Authentication fails, end users can only access resources in the pre-authentication domain
- D. Security check passed,Agile Controller-Campus Server notification SACG Will end user's IP Address switch to isolated domain
正解: D
質問 87
For the basic mode of HTTP Flood source authentication, which of the following options are correct?
(multiple choice)
- A. The basic mode can effectively block the access from the Feng Explor client.
- B. The bot tool does not implement a complete HTTP protocol stack and does not support automatic redirection, so the basic mode can effectively defend against HTTP Flood attacks.
hit. - C. The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.
- D. When there is an HTTP proxy server in the network, the firewall will add the IP address of the proxy server to the whitelist, but it will recognize the basic source of the zombie host.
The certificate is still valid.
正解: A,B
質問 88
Which of the following protocols can be used to construct attack messages for special control message attacks? (multiple choice)
- A. ICMP protocol
- B. UDP protocol
- C. CIP protocol
- D. FTP protocol
正解: A,B,C
質問 89
In the Policy Center strategy configuration, how many violations rating of definition are there?
- A. 0
- B. 1
- C. 2
- D. 3
正解: C
質問 90
IPS is an intelligent intrusion detection and defense product. It can not only detect the occurrence of intrusions, but also can respond in real time through certain response methods.
Stop the occurrence and development of intrusions, and protect the information system from substantial attacks in real time. According to the description of PS, the following items are wrong?
- A. Common IPS deployment modes are in-line deployment,
- B. IPS must use bypass deployment in the network
- C. IPS is an intrusion detection system that can block real-time intrusions when found
- D. IPS unifies IDS and firewall
正解: B
質問 91
The status code in the HTTP response message indicates the type of the response message, and there are many possible values. Which of the following status codes represents the client request The resource does not exist?
- A. 0
- B. 1
- C. 400.
- D. 2
正解: B
質問 92
If you use a normal account for authentication, which of the following descriptions is wrong?
- A. Users can use Any Office Perform authentication.
- B. Users can use Web Agent Perform authentication.
- C. Users can use their own 802. 1X The client authenticates.
- D. User can't use web Way to authenticate.
正解: D
質問 93
There is a three-layer forwarding device between the authentication client and the admission control device:If at this time Portal The certified three-layer authentication device can also obtain the authentication client's MAC address,So you can use IP Address and MC The address serves as the information to identify the user.
- A. False
- B. True
正解: A
質問 94
Huawei USG6000 products can scan and process certain file transfer protocols for viruses, but which of the following protocols is not included?
- A. FTP
- B. TFTP
- C. POP3
- D. IMAP
正解: B
質問 95
Which of the following options will not pose a security threat to the network?
- A. Failure to update the virus database in time
- B. Open company confidential files
- C. Hacking
- D. Weak personal safety awareness
正解: B
質問 96
In the scenario of SACG linkage in bypass mode, only the traffic initiated by the terminal user will pass through the firewall, and the server will return to the terminal in use.
The traffic does not need to go through the firewall y. For the firewall, it belongs to the scenario of inconsistent traffic back and forth paths, this needs to turn off the session state check function.
- A. True
- B. False
正解: A
質問 97
Use on access control equipment test-aaa Command test and Radius When the server is connected, the running result shows a timeout, which may be caused by incorrect account or password configuration.
- A. False
- B. True
正解: A
質問 98
......
信頼できるHCIP-Security H12-724問題集PDF2023年03月05日最近更新された問題：https://www.passtest.jp/Huawei/H12-724-shiken.html
最新H12-724試験問題集には合格保証付きます：https://drive.google.com/open?id=1hxXxTll_fPMRpobkmJrIWn2nRNza5fh5