Regarding intrusion detection I defense equipment, which of the following statements are correct?(multiple choice)

The number of applications that NIP6000 can recognize reaches 6000+, which realizes refined application protection, saves export bandwidth, and guarantees key business services Experience.

Protect the intranet from external attacks, and inhibit malicious flows, such as spyware, worms, etc. from flooding and spreading to the intranet.

Ability to quickly adapt to threat changes

It cannot effectively prevent the virus from spreading from the Internet to the intranet.

The number of applications that NIP6000 can recognize reaches 6000+, which realizes refined application protection, saves export bandwidth, and guarantees key business services Experience.

Protect the intranet from external attacks, and inhibit malicious flows, such as spyware, worms, etc. from flooding and spreading to the intranet.

Ability to quickly adapt to threat changes

Threats detected by the big data intelligent security analysis platform will be synchronized to each network device at the same time C and then collected from the network device Collect it in the log for continuous learning and optimization.

True155955cc-666171a2-20fac832-0c042c0433

Which of the following options are the possible reasons why a certain signature is not included after the IPS policy configuration is completed? (multiple choice)

The direction is turned on, but no specific direction is selected

The severity level of the configuration is too high

The protocol selection technique is correct

The direction is turned on, but no specific direction is selected

The severity level of the configuration is too high

The protocol selection technique is correct

Which of the following descriptions about viruses and Trojans are correct? (multiple choices)

Viruses are triggered by computer users

Viruses can replicate themselves

Viruses are triggered by computer users

Viruses can replicate themselves

Trojan horses are triggered by computer users

Trojans can replicate themselves

After enabling the IP policy, some services are found to be unavailable. Which of the following may be caused by? (multiple choice)

Only packets in one direction pass through the firewall

The same message passes through the firewall multiple times

Only packets in one direction pass through the firewall

The same message passes through the firewall multiple times

Excessive traffic causes the Bypass function to be enabled

Which of the following options is correct for the sequence of the flow-by-stream detection of AntiDDoS?

Discover the DDoS attack stream;

The Netflow analysis device samples the current network flow;

Send a drainage command to the cleaning center;

Discover the DDoS attack stream;

Netior: analysis equipment sends alarms to ATIC management center

The abnormal flow is diverted to the cleaning center for further inspection and cleaning; 6. The cleaning center sends the host route of the attacked target IF address server to the router to achieve drainage 7. The cleaning log is sent to the management center to generate a report; 8. The cleaned traffic is sent to the original destination server.

The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are the possible reasons? (multiple choice)

The security policy does not reference the anti-virus configuration file.

The anti-virus configuration file is configured incorrectly.

The virus signature database version is older.

The security policy does not reference the anti-virus configuration file.

The anti-virus configuration file is configured incorrectly.

The virus signature database version is older.

No virus exceptions are configured.

Which of the following descriptions are correct for proxy-based anti-virus gateways? (multiple choice)

The detection rate is higher than the flow scanning method

Cache all files through the gateway's own protocol stack

More advanced operations such as decompression, shelling, etc. can be performed

The detection rate is higher than the flow scanning method

System overhead will be relatively small

Cache all files through the gateway's own protocol stack

More advanced operations such as decompression, shelling, etc. can be performed

For the description of the principles of HTTP Flood and HTTPS Flood blow defense, which of thefollowing options are correct? (multiple choice)

HTTPS Flood defense can perform source authentication by limiting the request rate of packets.

The principle of HTTPS Flood attack is to request URIs involving database operations or other URIsthat consume system resources, causing server resource consumption.Failed to respond to normal requests.

The principle of HTTPS Flood attack is to initiate a large number of HTTPS connections to thetarget server, causing the server resources to be exhausted and unable to respond to regularrequests.begging.

HTTPS Flood defense modes include basic mode, enhanced mode and 302 redirection.

HTTPS Flood defense can perform source authentication by limiting the request rate of packets.

The principle of HTTPS Flood attack is to request URIs involving database operations or other URIsthat consume system resources, causing server resource consumption.Failed to respond to normal requests.

The principle of HTTPS Flood attack is to initiate a large number of HTTPS connections to thetarget server, causing the server resources to be exhausted and unable to respond to regularrequests.begging.

Which of the following statement is correct about Policy Center system client function?

NAC Agent support MAC account login.

Web page login for authentication and can perform checks Strategy.

Web Agent login for identity certification and security certification.

NAC Agent cannot be installed on Windows Vista operating system.

Place refers to the terminal environment when end-user use strategy management center access to controlled network office, which options are correct about place? (Choose 2 answers)

when allocation strategy template for the end user, need to select the corresponding places

strategy management center only support the default place

The default place only support by way of cable access network scenario

when allocation strategy template for the end user, need to select the corresponding places

An enterprise has 3 server, which is the most reasonable plan when deploy Policy Center system planning?

manager + controller + FTP + witness database, controller + master database + FTP, controller + mirror database+ FTP

manager + controller + FTP + master database, controller + FTP + witness database, controller + FTP + mirror database

manager + controller + FTP + mirror database, controller + FTP + witness database, controller + FTP + master database

manager + controller + FTP, controller + FTP + witness databases, controller + FTP + master database

SACG query right-manager information as follows, which options are correct? (Select 2 answers)

SACG and IP address 2.1.1.1 server linkage is not successful

SACG linkage success with controller.

SACG and IP address 2.1.1.1 server linkage is not successful

SACG linkage success with controller.

master controller IP address is 1.1.1.2.

master controller IP address is 2.1.1.1.

What equipment do Policy Center supported servers include? (Choose 3 answers)

Internet behavior management equipment

Which is correct about the following Policy Center troubleshooting process?

Hardware fault-> connection fault-> NAC client fault-> Policy Center server fault

connection fault-> Hardware fault-> NAC client fault-> Policy Center server fault

Hardware fault-> connection fault-> Policy Center server fault-> NAC client fault

hardware fault-> NAC client fault-> connection fault-> Policy Center server fault

The following is a hardware SACG increase firewall configuration, which statement below is true?

Primary IP: 10.1.3.6 on behalf of SM Manager IP address.

Primary IP: 10.1.3.6 on behalf of Policy Center linkage firewall interface IP address, the standby IP can enter another alternate firewall interface IP address.

Primary IP: 10.1.3.6 on behalf of SM Manager IP address.

Primary IP: 10.1.3.6 on behalf of Policy Center linkage firewall interface IP address, the standby IP can enter another interface IP address of the firewall.

Primary IP: 10.1.3.6 on behalf of Policy Center linkage firewall interface IP address, the standby IP can enter another alternate firewall interface IP address.

Main IP is the Policy Center reaches the next-hop firewall device interface address

Which of the following statement on the scanner is wrong?

When deploying NAC Agent, can use scanner to scan and assess the number of installed and noninstalled agent.

scanner and Policy Center controller linkage scan tasks.

When deploying NAC Agent, can use scanner to scan and assess the number of installed and noninstalled agent.

When the terminal NAC Agent uninstall, the scanner can send alarm information.

the scanner by the SNMP protocol to obtain network equipment resources information.

scanner and Policy Center controller linkage scan tasks.

Server Fault information collection tool Server Collector, which of the following does collected information items not include?

sharing information and system account information

processes, services and startup

When configuring the terminal visits, we put some equipment configured exception equipment ,which of the following statements are true about the exception equipment?

the exception equipment IP is not in controlled network segment.

through identity authentication terminals can access exception equipment.

the exception equipment IP is not in controlled network segment.

terminal in isolation domain can not access exception equipment .

only through security authentication terminals can access exception equipment.

through identity authentication terminals can access exception equipment.

Which patches does Policy Center support to management?(Choose 3 answers)

Microsoft Windows operating system patches

Microsoft SQL Windows database patch

Microsoft Internet Explorer patches

Microsoft Windows operating system patches

Microsoft SQL Windows database patch

Microsoft Internet Explorer patches

SQI Server2005 may not be properly installed, which of the following may be the possible reasons?

1433 port are occupied by the other processes

without prior installation of Microsoft SQL Server 2005 Toolkit

The operating system is Microsoft Windows Server 2003

Which of the following options are right 802. 1X The description of the access process is correct?(Multiple choice).

Terminal and 802.1X Switch EAP Message interaction,802.1X Switch and server use Radius Message exchange information

use MD5 The algorithm checks the information.

Through the entire authentication process, the terminal passes EAP The message exchanges information with the server.

Terminal and 802.1X Switch EAP Message interaction,802.1X Switch and server use Radius Message exchange information

802.1X Authentication does not require security policy checks.

use MD5 The algorithm checks the information.

For the terminal Wi-Fi The order of the push, which of the following is correct?

The administrator configures the enterprise Wi-Fi Push.

Any Office Mobile office system push Wi-Fi Configuration

Any Office The mobile office department automatically applies for a certificate.

The administrator configures the enterprise Wi-Fi Push.

The terminal automatically connects to the enterprise Wi-Fi.

Which of the following options is right PKI The sequence description of the work process is correct?

PKI Entity direction CA Send a certificate registration request message.

PKI Entity direction CA ask CA Certificate. .

PKI Entity received CA After the certificate, install CA Certificate.

CA receive PKI Entity CA When requesting a certificate, add your own CA Certificate reply to PKI entity.

PKI Entity direction CA Send a certificate registration request message.

PKI When the entities communicate with each other, they need to obtain and install the local certificate of the opposite entity.

PKI Entity received CA The certificate information sent.

PKI After the entity installs the local certificate of the opposite entity,Verify the validity of the local certificate of the peer entity. When the certificate is valid,PC The public key of the certificate is used for encrypted communication between entities.

CA receive PKI The entity's certificate registration request message.

Huawei H12-724 Practice Test 5 - Free Online Exam Prep & Questions

When you suspect that the company's network has been attacked by hackers, you have carried out a technical investigation. Which of the following options does not belong to the behavior that occurred in the early stage of the attack?

Planting malware

Vulnerability attack"

We6 Application Click

Brute force

Comment (0)

Huawei H12-724 Practice Test 5

Question

Huawei H12-724 Practice Tests

Practice Tests