When the account assigned by the administrator for the guest is connected to the network, the audit action that the administrator can perform on the guest does not include which of the following options?

Send a warning message to the user

Regarding the application scenarios of Agile Controller-Campus centralized deployment and distributed deployment, which of the following options are correct? (Multiple select)

If most end users work in one area and a few end users work in branch offices, centralized deployment is recommended.

If end users are scattered in different geographical locations, a distributed deployment solution is recommended.

If most end users work in one area and a few end users work in branch offices, centralized deployment is recommended.

If most end users are concentrated on--Offices in several regions, and a small number of end users work in branches. Distributed deployment is recommended.

If end users are scattered in different geographical locations, a distributed deployment solution is recommended.

If end users are scattered in different regions, a centralized deployment solution is recommended.

Portal At the time of certification, pass Web After the browser enters the account password for authentication, it prompts" Authenticating.."The status lasts for a long time before it shows that the authentication is successful. Which of the following reasons may cause this phenomenon?

Multiple Agile Controller The same terminal IP Address added Portal" Access terminal IP Address list", Some of them Agile Controller The server and the terminal cannot communicate normally.

Portal The template is configured with an incorrect password.

Agile Controller-Campus There are too many authorization rules on the "It takes a lot of time to find 835

Insufficient curtains of the terminal equipment result in a relatively large delay.

When a guest needs to access the network through an account, which of the following methods can be used to access? (Multiple choice)

Use existing social media accounts

No authentication, no account required

Use existing social media accounts

No authentication, no account required

Which of the following options is for Portal The statement of the gateway access process is correct?

The Portal server needs to pass the security check result to the access gateway device

Portal gateway initiates Radius Challenge request message, including user name and password information

The ACL issued by the server to the access gateway is carried in the Portal protocol message

Issue policies while performing identity authentication

The Portal server needs to pass the security check result to the access gateway device

The traditional campus network is based on IP As the core network, if there are mobile office users, which of the following options is not the problem that mobile office users face when deploying access authentication?

The user distribution range is large, and the access control requirements are high.

The deployment of the access control strategy is significant.

Access rights are difficult to control.

The following is the 802.1X access control switch configuration:[S5720]dot1x authentication-method eap[S5720-GigabitEthernet0/0/1] port link-type access[S5720-GigabitEthemet0/0/1] port default vlan 11[S5720-GigabitEthernet0/0/1] authentication dot1xAssuming that GE0/0/1 is connected to user 1 and user 2 through the HUB, which of the following options is correct?

After user 1 is authenticated, user 2 can access network resources without authentication

User 1 and User 2 must be individually authenticated before they can access network resources

GE0/0/1 does not need to enable dot1X

Neither user 1 nor user 2 can pass the authentication and access network resources.

Jailbroken mobile terminal\Mobile terminals with non-compliant applications installed or terminals with non-compliant lock screen passwords connecting to the corporate network for office operations are not safe for companies. Any 0ficeHow to solve the problem of mobile office system?

Check for non-compliant terminals, Prohibit unsafe devices from accessing the network.

Directly discard data sent by devices that do not comply with regulations

Certification of non-compliant equipment.

Check for non-compliant terminals, Prohibit unsafe devices from accessing the network.

Send alarm information to notify the administrator to deal with it.

For the convenience of visitors, different authentication and master pages can be distributed for different visitors. When configuring the push page strategy, different matching conditions need to be defined, so which of the following options can be used as the limited matching conditions? (Multiple choice)

Location information of the access device

In the terminal security management, the black and white list mode is used to check the terminal host software installation status. Which of the following situations is a compliant behavior?

The terminal host installs all the software in the whitelist, but does not install the software in the blacklist.

The terminal host does not install the software in the whitelist, nor the software in the blacklist.

The terminal host installs all the software in the whitelist, but does not install the software in the blacklist.

The terminal host installs part of the software in the whitelist, but does not install the software in the blacklist.

The terminal host installs all the software in the whitelist, and also installs some of the software in the blacklist.

The terminal host access control function does not take effect, the following is SACG View information on:<FW> display right- manager role-id rule Advanced ACL 3099 ,25 rules,not bingding with vpn-instance Ad's step is 1 rule 1000 permit ip (1280 times matched) rule 1001 permit ip destination 172.18.11.2210 (581 times matched) rule 1002 permit ip destination 172:18.11.2230 (77 times matched) rule 1003 permit ip destination 172.19.0.0 0.0 255.255 (355 Book times matched) rule 1004 deny ip (507759 times matched) Which of the following statements is correct?

172.18.11.221 It is the server of the isolation domain.

172.18.11.223 It is a post-domain server.

The terminal host stream is the default ACL Blocked.

Which of the following equipment is suitable for use MAC Authentication access network?

Mobile client, such as smart phone, etc

For hardware SACC Access control, if the terminal does not pass the authentication, it can access the resources of the post-authentication domain. This phenomenon may be caused by the following reasons? (Multiple choice)

SACG Enable the default inter-domain packet filtering.

Privileges are misconfigured IP

Authentication data flow has passed SACG filter.

TSM No hardware is added to the system SACG equipment.

SACG Enable the default inter-domain packet filtering.

Privileges are misconfigured IP

If you use a normal account for authentication, which of the following descriptions is wrong?

User can't use web Way to authenticate.

Users can use Any Office Perform authentication.

User can't use web Way to authenticate.

Users can use Web Agent Perform authentication.

Users can use their own 802. 1X The client authenticates.

Regarding uninstalling the Agile Controller-Campus in Windows and Linux systems, which of the following descriptions is correct?

On the Windows platform, select "Start>All Programs> Huawei> Agile Controller>Uninstall

Use a common account to execute sh uninstall.sh in the Agile Controller/Uninstall directory to start the uninstallation program.

Use the root account to execute sh uninstall.sh in the Agile Controller directory to start the uninstallation program. :

On the Windows platform, select "Start>All Programs>Huawei>Agile Controller>Server Startup config".

On the Windows platform, select "Start>All Programs> Huawei> Agile Controller>Uninstall

In enterprises where terminal host access control management is relatively strict, administrators hope to bind terminal hosts and accounts to prevent terminal users from accessing the controlled network from unauthorized terminal hosts at will. Regarding the description of binding the terminal host and account, which of the following is correct?

Binding terminal hosts and accounts is only applicable to terminal users through Any Office Scenarios for authentication, Not applicable Web Agent Plugins and Web The scenario where the client authenticates.

exist Any Office When logging in with an account for the first time, the terminal host is automatically bound to the current account, but the automatic binding process requires administrator approval

When other accounts need to be authenticated on the bound terminal host, there is no need to find the asset owner who is bound for the first time to authorize themselves.

Binding terminal hosts and accounts is only applicable to terminal users through Any Office Scenarios for authentication, Not applicable Web Agent Plugins and Web The scenario where the client authenticates.

There are only consoles in the account binding terminal host, which cannot be configured by the administrator.

Regarding the way SACG devices connect to the network, which of the following descriptions are correct? (multiple choice)

SACG It is usually connected to the core switch equipment and uses policy routing to divert traffic.

SACG Support hanging on non-Huawei devices.

SACG The equipment requires Layer 3 intercommunication with the terminal.

SACG It is usually connected to the core switch equipment and uses policy routing to divert traffic.

SACG Support hanging on non-Huawei devices.

SACG Equipment requirements and Agile Controller-Campus Interoperability on the second floor.

About the software SACG And hardware SACG Description, which of the following is correct?

software SACG use Any Office Perform admission control.

hardware SACG use Any Office Perform admission control.

software SACG use Any Office Perform admission control.

hardware SACG Than software SACG cut costs.

hardware SACG The security is higher.

Secure email is Any ffice Solution for corporate office 0A The killer application provided, it provides powerful email business capabilities and rich email strategies. For secure mail, which of the following descriptions are correct? (Multiple choice)

Through the mail client, you can connect No or Exchange Mail system.

Support MAP4/SMTP/EAS Send and receive emails with standard protocols such as, and support real-time email push.

Through the mail client, you can connect No or Exchange Mail system.

Support automatic mail transmission encryption, transmission encryption method supports a full range of IPSec/TLS protocol.

Online survey of attached documents is not supported.

Support MAP4/SMTP/EAS Send and receive emails with standard protocols such as, and support real-time email push.

The user accesses the network through the network access device, and the third-party RADIUS server authenticates and authorizes the user. Regarding the certification process, which of the following options is wrong?

Configure the Agile Controller-Campus for local data source authentication, receive the packets sent by the device, and perform authentication.

Configure RADIUS authentication and accounting on the RADIUS server.

Configure the Agile Controller-Campus for local data source authentication, receive the packets sent by the device, and perform authentication.

Configure RADIUS authentication and accounting on the device side. W"

Configure RADIUS authentication and authorization on the Agile Controller-Campus.

The use of the 802.1X authentication scheme generally requires the terminal to install specific client software. For large-scale deployment of client software, the methods that can be taken. What are the cases? (multiple choices)

Enable Guest VLAN so that users can obtain the installation package in Guest VLAN

Configure Free-rule and web push functions on the switch to push the installation package to users.

Enable Guest VLAN so that users can obtain the installation package in Guest VLAN

Configure Free-rule and web push functions on the switch to push the installation package to users.

Copy the installation packages to each other via U disk.

Installed by the administrator for each user.

For the scenario where the authentication server adopts distributed deployment, which of the following descriptions are correct? (multiple choice)

The enterprise network is relatively scattered, there are multiple branches, and the branch users are larger in scale.

It is difficult to guarantee the quality of the network between the branch and the headquarters, and the network between the headquarters and the branch may be interrupted, making the terminal of the branch no longer available.

The enterprise network is relatively scattered, there are multiple branches, and the branch users are larger in scale.

A scenario where there are less than 2,000 branch users, and the headquarters and branch networks are relatively stable.

The terminal security management business between the branch and the headquarters is relatively independent, and the headquarters provides supervision and control over the branch terminal security management business.

It is difficult to guarantee the quality of the network between the branch and the headquarters, and the network between the headquarters and the branch may be interrupted, making the terminal of the branch no longer available.

Regarding the description of the security zone in the Agile Controller-Campus, which of the following options are correct? (multiple choice)

The user domain is generally composed of various terminal users. The terminals in this area have the characteristics of large numbers, wide distribution, and strong mobility.

The service domain is the area that provides security services for the corporate intranet. This area is generally composed of systems that provide security services such as antivirus servers, patch management servers, and terminal security servers.

The user domain is generally composed of various terminal users. The terminals in this area have the characteristics of large numbers, wide distribution, and strong mobility.

The business domain is a platform for the heavy load of business flows. According to the needs of the enterprise, security technology is used to logically divide the business to realize the security of the network.

The network domain is the most concerned security protection area of various enterprises, and it carries the important and core information assets of the enterprise.

The service domain is the area that provides security services for the corporate intranet. This area is generally composed of systems that provide security services such as antivirus servers, patch management servers, and terminal security servers.

Huawei H12-724 Practice Test 7 - Free Online Exam Prep & Questions

Which of the following options are relevant to Any Office The description of the solution content is correct? (Multiple choice)

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-724 Practice Test 7

Question

Huawei H12-724 Practice Tests

Practice Tests