H12-724問題集には練習試験問題解答
H12-724はHCIP-Security実際の無料試験練習テスト
質問 # 158
Which of the following options is Agile Controller-Campus middle SC The main function of the component?
- A. Integrated with standards RADIUS server,Porta Server, etc., responsible for linking with network access equipment to realize user-based network access control Strategy.
- B. As Agile Controller-Campus 'S security assistance server, responsible for iRadar Analysis and calculation of reported security incidents.
- C. As Agile Controller-Campus The management interface is used to configure and monitor the system.
- D. As Agile Controller-Campus The management center is responsible for formulating the overall strategy.
正解：A
質問 # 159
When a virus is detected in an email, which of the following is not the corresponding action for detection?
- A. Declare
- B. Block
- C. Delete attachments
- D. Warning
正解：B
質問 # 160
An enterprise administrator configures the Web reputation system as shown in the figure. Regarding the configuration, which of the following statements is correct?
- A. The content in No. 4 must be configured.
- B. The content in No. 2 must be configured.
- C. After the configuration is completed, you need to submit the configuration to take effect.
- D. In addition to this page configuration, you also need to enable the firewall and sandbox linkage, otherwise the page configuration is invalid
正解：D
質問 # 161
When configuring the URL filtering configuration file, www.bt.com is configured in the URL blacklist-item:
At the same time, set it in the custom URL category.
A URL is set as bt.com, and the action of customizing URL classification is a warning. Regarding the above configuration, which of the following statements are correct? (More select)
- A. When users visit www.bt. com, they will be blocked.
- B. The user can visit the www.bt.com website, but the administrator will receive a warning message.
- C. Users can visit www.videobt.com website.
- D. User cannot access all the sites ending with bt com.
正解：A、C
質問 # 162
There are three roles in the XMPP protocol: server, gateway, and client. Corresponding to the free mobility solution: Agile Controller-Campus as For the server, Huawei USG6000 series firewall acts as the gateway; the agile switch acts as the client.
- A. False
- B. True
正解：A
質問 # 163
When using local guest account authentication, usually use(Portal The authentication method pushes the authentication page to the visitor. Before the user is authenticated, when the admission control device receives the HTTP The requested resource is not Portal Server authentication URL When, how to deal with the access control equipment.
- A. URL Address redirected to Portal Authentication page
- B. Send authentication information to authentication server
- C. Direct travel
- D. Discard message
正解：A
質問 # 164
The virus signature database on the device needs to be continuously upgraded from the security center platform. Which of the following is the website of the security center platform?
- A. support.huaver: com
- B. security.. huawei. com
- C. sec. huawei. com.
- D. www. huawei. com
正解：C
質問 # 165
Which of the following options is about SACG The description of the online process is wrong?
- A. Security check passed,Agile Controller-Campus Server notification SACG Will end user's IP Address switch to isolated domain
- B. Terminal and Agile Controller-Campus Server communication SSL encryption
- C. Authentication fails, end users can only access resources in the pre-authentication domain
- D. Agile Controller-Campus Server gives SACG Carrying domain parameters in the message
正解：A
質問 # 166
802.1X During the authentication, if the authentication point is at the aggregation switch, in addition to RADIUS,AAA,802.1X In addition to the conventional configuration, what special configuration is needed?
- A. Access layer switch needs to be configured 802. 1X Transparent transmission of messages.
- B. No special configuration required
- C. Both the aggregation layer and the access layer switches need to be turned on 802.1X Function.
- D. The aggregation switch needs to be configured 802 1X Transparent transmission of messages.
正解：A
質問 # 167
For the description of the Anti DDOS system, which of the following options is correct? C
- A. The firewall can only be used for inspection equipment
- B. The detection center is mainly to pull and clean the attack flow according to the control strategy of the security management center, and re-inject the cleaned normal flow back to the customer.
User network, send to the real destination. - C. The management center mainly completes the processing of attack events, controls the drainage strategy and cleaning strategy of the cleaning center, and responds to various attack events and attack flows.
View in categories and generate reports. - D. The main function of the Green Washing Center is to detect and analyze DDoS attack traffic on the flow from mirroring or splitting, and provide analysis data to The management center makes a judgment.
正解：C
質問 # 168
Which of the following elements does PDCA include? (Choose 3 answers)
- A. Plan
- B. Implementation
- C. Monitoring
- D. termination
正解：A、B、C
質問 # 169
An account can only belong to one user group, that is, a user can only belong to one department.
- A. False
- B. True
正解：B
質問 # 170
A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)
- A. The Layer 2 link is used between the access device and the aggregation device, and it is not turned on
802 Instrument transparent transmission function - B. Connect to the terminal on the device to open 802.1X Function.
- C. Agile Controller-Campus The switch is not added on NAS equipment.
- D. The aggregation layer device is not configured RADIUS Certification template.
正解：A、B
質問 # 171
Portal At the time of certification, pass Web After the browser enters the account password for authentication, it prompts"Authenticating.."The status lasts for a long time before it shows that the authentication is successful. Which of the following reasons may cause this phenomenon?
- A. Agile Controller-Campus There are too many authorization rules on the "It takes a lot of time to find
835 - B. Insufficient curtains of the terminal equipment result in a relatively large delay.
- C. Portal The template is configured with an incorrect password.
- D. Multiple Agile Controller The same terminal IP Address added Portal"Access terminal IP Address list",Some of them Agile Controller The server and the terminal cannot communicate normally.
正解：D
質問 # 172
The service free mobility function of the Agile Controller can guide the flow to the security center for processing according to the service, improving the utilization of physical equipment.
- A. False
- B. True
正解：A
質問 # 173
In enterprises where terminal host access control management is relatively strict, administrators hope to bind terminal hosts and accounts to prevent terminal users from accessing the controlled network from unauthorized terminal hosts at will. Regarding the description of binding the terminal host and account, which of the following is correct?
- A. Binding terminal hosts and accounts is only applicable to terminal users through Any Office Scenarios for authentication, Not applicable Web Agent Plugins and Web The scenario where the client authenticates.
- B. exist Any Office When logging in with an account for the first time, the terminal host is automatically bound to the current account, but the automatic binding process requires administrator approval
- C. There are only consoles in the account binding terminal host, which cannot be configured by the administrator.
- D. When other accounts need to be authenticated on the bound terminal host, there is no need to find the asset owner who is bound for the first time to authorize themselves.
正解：A
質問 # 174
In order to protect the security of data transmission, more and more websites or companies choose to use SSL to encrypt transmissions in the stream. About using Huawei NIP6000 The product performs threat detection on (SSL stream boy, which of the following statements is correct?
- A. NIP can directly crack and detect SSL encryption.
- B. The traffic after threat detection is sent directly to the server without encryption
- C. NIP0OO does not support SSL Threat Detection.
- D. After the process of "decryption", "threat detection", and "encryption"
正解：D
質問 # 175
Which of the following options is for Portal The statement of the gateway access process is correct?
- A. Portal gateway initiates Radius Challenge request message, including user name and password information
- B. The ACL issued by the server to the access gateway is carried in the Portal protocol message
- C. Issue policies while performing identity authentication
- D. The Portal server needs to pass the security check result to the access gateway device
正解：D
質問 # 176
Regarding intrusion detection I defense equipment, which of the following statements are correct? (multiple choice)
- A. Ability to quickly adapt to threat changes
- B. The number of applications that NIP6000 can recognize reaches 6000+, which realizes refined application protection, saves export bandwidth, and guarantees key business services Experience.
- C. Protect the intranet from external attacks, and inhibit malicious flows, such as spyware, worms, etc.
from flooding and spreading to the intranet. - D. It cannot effectively prevent the virus from spreading from the Internet to the intranet.
正解：A、B、C
質問 # 177
In the following options, which of the two attacks use similar attack methods, they will generate a large number of useless response packets, occupying network bandwidth, Consume equipment resources?
- A. Fraggle and Smurt
- B. Land and Smurf
- C. Teardrop and Land35
- D. Fraggle and Land
155955cc-666171a2-20fac832-0c042c0423
正解：A
質問 # 178
......
無料HCIP-Security H12-724試験問題：https://www.passtest.jp/Huawei/H12-724-shiken.html
H12-724問題集でHCIP-Security必ず合格できる練習問題集：https://drive.google.com/open?id=1lhV-tVO_3mDhxTp0cT9UX2XmPLu1gi9O