Regarding the identity authentication method and authentication type, which of the following descriptions is correct?

User passed Agent The method can support three authentication types: local authentication, digital certificate authentication and system authentication.

User passed web The method can support two authentication types: local authentication and digital certificate authentication.

User passed web Agent The method can support two authentication types: digital certificate authentication and system authentication.

User passed Agent The method can support three authentication types: local authentication, digital certificate authentication and system authentication.

User passed web Agent The method can support two authentication types: digital certificate authentication and local authentication.

Regarding patch management and Windows patch checking strategies, which of the following descriptions is wrong?

Patch management focuses on checking whether the terminal host has installed the specified patch,Perform access control on the terminal host.

Patch management and Windows The patch check strategy can check whether the terminal host has installed the specified Windows Make system patches.

Windows Patch check strategy focuses on checking whether the terminal host is installed Windows Operating system patches.

When the terminal host does not install the specified Windows When making a system patch, according to Windows The patch check policy prohibits terminal hosts from accessing the controlled network.

Patch management focuses on checking whether the terminal host has installed the specified patch,Perform access control on the terminal host.

In the Agile Controller-Campus admission control technology framework, regarding the description of RADIUS, which of the following options is correct?

PADIUS Used in 802.1X Switch and AAA Information such as user name and password are passed between servers.

PADIUS Used on the client and 802.1X Information such as user names and passwords are passed between switches.

PADIUS Used in 802.1X Switch and AAA Information such as user name and password are passed between servers.

PADIUS Used for Portal Server pushes to users Web page.

PADIUS Used for server to SACG Security policy issued by the device

Which of the following options belongs to MC prioritized pail Authentication application scenarios?

User use Pota At the first certification, RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache, RAIUS The server directly searches the cache for the terminal's MAC The address is discussed.

User use portal Page for authentication

Users follow WeChat for authentication.

User use IAC Client authentication

User use Pota At the first certification, RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache, RAIUS The server directly searches the cache for the terminal's MAC The address is discussed.

A network adopts 802. 1X To authenticate access users, the access control equipment is deployed at the convergence layer, and after the deployment is completed, it is used on the access control equipment t-aa The command test is successful, but the user cannot access the network. The failure may be caused by the following reasons? (Multiple choice)

Connect to the terminal on the device to open 802.1X Function.

The Layer 2 link is used between the access device and the aggregation device, and it is not turned on 802 Instrument transparent transmission function

The aggregation layer device is not configured RADIUS Certification template.

Agile Controller-Campus The switch is not added on NAS equipment.

Connect to the terminal on the device to open 802.1X Function.

The Layer 2 link is used between the access device and the aggregation device, and it is not turned on 802 Instrument transparent transmission function

View on the switch Agile Controller-Campus The policy issued by the server is as follows:For this strategy, which of the following options are correct? (Multiple choice)

VIP Users can access Internet w H.

Common user Users can access Mail_ Sever resource.

Common_ user Users can access Internet www H.

VIP Users can access Internet w H.

Common user Users can access Mail_ Sever resource.

An enterprise adopts hardware SACG access method for admission control. The configuration commands are as follows, among which Key; Admin@123 [USG] right-manager server-group [USG-rightm] localip 10.1.10.2 [USG-rightm] serverip 10. 1.31.78 shared-key AdnIn@123 [USG2100-rightm] right-manager server-group enable.Assuming that the other configurations are correct, based on the above configuration only, which of the following options is correct?

After completing the configuration, SACG cannot successfully link with Agile Contrlle-Campus. P

After completing the configuration, SACG can successfully link with the Agile Controller-Campus.

After completing the configuration, SACG cannot successfully link with Agile Contrlle-Campus. P

Can issue pre-authentication domain ACL.

The linkage cannot be successful but the terminal can access the pre-authentication domain server.

Regarding the definition of WIPS/WIDS, which of the following statements is correct?

WIPS Is a wireless intrusion prevention system

WIDS Is a wireless intrusion prevention system

WIPS Wireless intrusion detection system

WIDS Is a wireless intrusion countermeasure system

WIPS Is a wireless intrusion prevention system

Deploying on Windows platform, using SQL Server database About the HA function of Agile Cotoller- Campus, which of the following descriptions Is it correct? (multiple choice)

Deploy business controller 3SC Time, support HA, Provide a backup solution in resource pool mode, which needs to be deployed N+1 indivual SC

Deploy the database DB Time, support HA use SQL Server Database mirroring technology requires the deployment of master DB+Mirroring DB+witness DB.

Deployment Management Center MC Time, support HA, Provide based on Keepalived Technical HA Active/standby switchover.

Deploy Business Manager SM Time, support HA, Provide based on Keepalived Technical HA Active/standby switchover.

Deploy business controller 3SC Time, support HA, Provide a backup solution in resource pool mode, which needs to be deployed N+1 indivual SC

Deploy the database DB Time, support HA use SQL Server Database mirroring technology requires the deployment of master DB+Mirroring DB+witness DB.

Regarding the description of the logic architecture of the business accompanying, which of the following options is correct?

The business management plane focuses on administrators, authentication servers, and policy servers.

The network equipment plane focuses on user terminals and static resources.

The user plane focuses on authentication points and policy enforcement points.

The business free mobility logic architecture includes a management subsystem, an authentication and authorization subsystem, and a business strategy subsystem.

Which of the following options is correct for the description of the role of the isolation domain?

Isolation domain refers to the area that is allowed to be accessed when the terminal user passes the identity authentication but fails the security authentication, such as patch server, virus database server. The area where the server is located.

Isolation domain refers to the area that the terminal host can access before passing the identity authentication, such as DNS server, external authentication source, business controller (SC)c The area where the service manager (SM) is located.

Isolation domain refers to the area that is allowed to be accessed when the terminal user passes the identity authentication but fails the security authentication, such as patch server, virus database server. The area where the server is located.

Isolation domain refers to the area that terminal users can access after passing identity authentication and security authentication, such as ERP system, financial system database system.The area where you are.

End users can access the isolated domain regardless of whether they pass identity authentication.

What are the three main steps of business free deployment? (Multiple choice)

Define and deploy group policies

Security group reported by the system

Which of the following options are correct for the description of visitor management? (Multiple choice)

Visitor registration account can be configured to be exempt from approval

Visitor account approval information can be notified to visitors via SMS

Visitor registration account can be configured to be exempt from approval

Guest login can only be configured as Web Way of webpage

Anonymous account authentication cannot be performed on the guest authentication page

Visitor account approval information can be notified to visitors via SMS

How to check whether the MC service has started 20?

View in task manager TMCServer with TMCSeverDaemon Whether the service is started.

View in task manager TMCSever Whether the service is started.

View in task manager TMCServerDaemon Whether the service is started.

View in task manager TMCServer with TMCSeverDaemon Whether the service is started.

Select on the server"Start>all programs> Huawei> Agile Cortroler> Sever rtrller",an examination MC Whether the status is"run".

Which of the following options is not a scenario supported by Free Mobility?

Realize mutual communication between devices.

Intranet users access the data center/Internet.

When traveling users access intranet resources, traveling users pass VPN Access to the intranet.

Realize mutual communication between devices.

When the -aa command is used on the access control device to test the connectivity with the Radius server, the running result shows success, but the user cannot Normal access, the possible reason does not include which of the following options?

The user account or password is incorrectly configured.

The access layer switch does not start EAP Transparent transmission function.

wireless 02K In the scenario, the access control device is not equipped with a security board

AD The service controller is not added in the authentication scenario AD area.

The user account or password is incorrectly configured.

Regarding the trigger mechanism of 802.1X authentication, which of the following descriptions is correct? (multiple choice)

8021X The client can trigger authentication through multicast or broadcast.

The authentication equipment department triggers authentication through multicast or unicast.

802.1X Authentication can only be initiated by the client.

802.1X Certification can only be done by certified equipment(like 802.1X switch)Initiate

8021X The client can trigger authentication through multicast or broadcast.

The authentication equipment department triggers authentication through multicast or unicast.

A policy template is a collection of several policies. In order to audit the security status of different terminal hosts and the behavior of end users, the administrator needs to customize.The same policy template is used to protect and manage terminal hosts. Regarding the policy template, which of the following option descriptions are correct? (multiple choice)

You can assign a policy template to a certain network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of the number is: account>department

When configuring the policy template, you can inherit the parent template and modify the parent template policy

Only the strategy in the strategy template can be used, and the administrator cannot customize the strategy.

You can assign a policy template to a certain network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of the number is: account>department

Regarding asset management, which of the following descriptions is wrong?

Manually registering assets means that the administrator I Way to create an asset record on the business manager, and put the asset number in Any Office Enter it to complete the asset registration process.

Asset management can register assets automatically or manually.

Enable the automatic asset registration mode, the asset registration process does not require end users to participate.

Automatic registration of assets is suitable for situations where the asset number is automatically maintained by the business manager.

Manually registering assets means that the administrator I Way to create an asset record on the business manager, and put the asset number in Any Office Enter it to complete the asset registration process.

Regarding MAC authentication and MAC bypass authentication, which of the following descriptions are correct? (multiple choice)

The biggest difference between the two is MAC Bypass authentication belongs to 802 1X Certification, while MAC Certification does not belong to 802 1X Certification.

If a network can connect to dumb terminals(printer,IP telephone), The text may be connected to a portable computer, please use MAC Bypass authentication:First try 802 1X Authentication, try again if authentication fails MAC Certification

If a network will only connect to dumb terminals(printer,IP telephone),please use MAC Certification in order to shorten the certification time.

The biggest difference between the two is MAC Bypass authentication belongs to 802 1X Certification, while MAC Certification does not belong to 802 1X Certification.

If a network can connect to dumb terminals(printer,IP telephone), The text may be connected to a portable computer, please use MAC Bypass authentication:First try 802 1X Authentication, try again if authentication fails MAC Certification

If a network will only connect to dumb terminals(printer,IP telephone),please use MAC Certification in order to shorten the certification time.

MAC Authentication MAC One more bypass authentication 802 In the instrument certification process, the open time is longer than MAC The bypass authentication time is long.

Guest management is Agile Controller-Campus Important function of, regarding visitor management, which of the following statements are correct? (Multiple choice)

Visitors can use their mobile phone number to quickly register an account

The administrator can assign different permissions to each visitor

Visitors can use their mobile phone number to quickly register an account

The administrator can assign different permissions to each visitor

Reception staff cannot create guest accounts

There is a violation of the guest account, and the administrator cannot retrospectively

Regarding the file source set in the software management, which of the following descriptions is correct?

The Microsoft Windows file sharing server uses the UNC (Universal Naming Conversion) path (beginning with "\\") to provide waiting. The path to distribute the software.

When the file source is an internal data source, when distributing software, the business manager will only send the path of the data source of the software to be distributed to Any Office

When the file source is an external data source, Any 0fce will obtain the software to be distributed.

External data sources cannot distribute files from FTP-type file servers.

The Microsoft Windows file sharing server uses the UNC (Universal Naming Conversion) path (beginning with "\\") to provide waiting. The path to distribute the software.

If you are deploying BYOD When the system is installed, use a stand-alone installation SM, Dualmachine installation SC, Stand-alone hardware deployment AE,Which of the following descriptions are correct? (Multiple choice)

Install AE When the server, you need to configure the main and standby SC Server IP address.

If the Lord SC After the server fails,AE The server will use the backup SC server.

AE Server priority use)SC server.

Install AE When the server, you need to configure the main and standby SC Server IP address.

If the Lord SC After the server fails,AE The server will use the backup SC server.

host SC After the server is restored,AE Server will not switch back to master SC The server handles the business.

The relationship between user groups and accounts in user management is stored in a tree on the Agile Controller-Campus. An account belongs to only one user group.Consistent with the corporate organizational structure: If the OU (OnizbonUnit) structure stored in the AD/LDAP server is consistent with the corporate organizational structure, users are stored Under 0OU, when the Agile Controller-Campus synchronizes AD/LDAP server accounts, which synchronization method can be used?

AO Synchronize by "group", "0U describes the organizational structure

AO Press "Group" "Synchronize," "Group" Jida organization structure

LDAP synchronization by "group"

In some scenarios, an anonymous account can be used for authentication. What are the correct descriptions of the following options for the anonymous account?? (Multiple choice)

The use of anonymous accounts for authentication is based on the premise of trusting the other party, and the authentication agency does not need the other party to provide identity information to provide services to the other party.

Administrators cannot delete anonymous accounts"~anonymous*.

The use of anonymous accounts for authentication is based on the premise of trusting the other party, and the authentication agency does not need the other party to provide identity information to provide services to the other party.

Agile Controller-Campus Need to be manually created"~anonymous"account number.

By default, the access control and policy of anonymous accounts cannot be performed. 1 Operations such as invoking patch templates and software distribution.

Administrators cannot delete anonymous accounts"~anonymous*.

Portal authentication on the Agile Controller-Campus has been configured and is correct.Configure the following commands on the access control switch:[S5720] authentication free-rule 1 destination ip 10.1.31.78 mask 255.255. 255.255 Which of the following options are correct? (multiple choice)

After the configuration is complete, the switch will automatically release the data flow to access the security controller, No need for manual configuration by the administrator.

This configuration allows users to access network resources before authentication.

After the configuration is complete, the switch will automatically release the data flow to access the security controller, No need for manual configuration by the administrator.

This configuration allows users to access network resources before authentication.

After the configuration is complete, the administrator still needs to manually configure the release network segment

Only after the authentication is passed, the terminal can access 10.1.31.78 Host.

Huawei H12-724 Practice Test 8 - Free Online Exam Questions 281-320

802.1X During the authentication, if the authentication point is at the aggregation switch, in addition to RADIUS,AAA,802.1X In addition to the conventional configuration, what special configuration is needed?

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-724 Practice Test 8

Question

Huawei H12-724 Practice Tests

Practice Tests