Use hardware SACG Access control,,In hardware SACG View the results of the conversation table on the deduction.Which of the following statements are correct? (Multiple choice)

192.168.1.0 definitely is Agile Controller-Campus Manager IP address

if 192.126.200.11 Is the server of the post-authentication domain, then IP Address is 192.18.0.1 If your terminal has not passed the authentication, it is possible to access the server.

If in 6 Within minutes of the conversation 192.168.0.19 154->/192.162.0.11: 15080 Not refreshed,IP Address is 192.168.0.119 If the device wants to IP Address is 192.168.200.11 For device communication, the session must be re-established.

192.168.1.0 definitely is Agile Controller-Campus Manager IP address

if 192.126.200.11 Is the server of the post-authentication domain, then IP Address is 192.18.0.1 If your terminal has not passed the authentication, it is possible to access the server.

192.168.100.1 definitely is Agile Controller-Campus Controller IP address.

If in 6 Within minutes of the conversation 192.168.0.19 154->/192.162.0.11: 15080 Not refreshed,IP Address is 192.168.0.119 If the device wants to IP Address is 192.168.200.11 For device communication, the session must be re-established.

The following configuration is in A with B The authentication commands are configured on the two admission control devices. For the analysis of the following configuration commands, which ones are correct? (Multiple choice)

A What is configured on the device is MAC Bypass authentication

A On the device 2GE1/01 Can access PC Can also access dumb terminal equipment

A What is configured on the device is MAC Bypass authentication

B What is configured on the device is MAC Bypass authentication o

A On the device 2GE1/01 Can access PC Can also access dumb terminal equipment

B On the device GE1/0/1 Can access PC It can also access dumb terminal equipment. Upper

SACG Inquire right-manager The information is as follows, which options are correct? (Multiple choice)

SACG The linkage with the controller is successful.

main controller IP address is 1.1.1.2.

SACG and IP Address is 2.1.1.1 The server linkage is unsuccessful.

SACG The linkage with the controller is successful.

main controller IP address is 1.1.1.2.

main controller IP address is 2.1.1.1.

Regarding CAPWAP encryption, which of the following statements is wrong?

CAPWAP The data tunnel can be used DTLS Encrypted.

DTLS Support two authentication methods:Certificate authentication(out AC,AP Already brought)with PSK Password authentication.

DTLS Encryption can guarantee AC The issued control messages will not be eavesdropped on.

Use the certificate method to carry out DTLS Negotiation, the certificate is only used to generate the key, not right AP Perform authentication.

According to different reliability requirements, centralized networking can provide different reliability networking solutions. Regarding these solutions, which of the following descriptions are correct? (Multiple choice)

Basic networking includes deploying one SM Server, one SC Server, one DB and a AE server.

DB In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup DB..

Basic networking includes deploying one SM Server, one SC Server, one DB and a AE server.

AE In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SC server.

SC In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SM server.

DB In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup DB..

Regarding the role of each role in the Portal authentication framework, which of the following descriptions are correct? (multiple choice)

The AAA server saves information such as usernames and passwords for authentication of access users.

The AAA server is used to push the Portal authentication page to the user.

The AAA server saves information such as usernames and passwords for authentication of access users.

The Web server saves information such as user names and passwords for authentication of access users.

The AAA server is used to push the Portal authentication page to the user.

The web server is used to push the Portal authentication page to the user.

Regarding the basic principles of user access security, it is wrong not to list any description?

The terminal device selects the answer to the resource to be accessed according to the result of the status check.

When a terminal device accesses the network, it first authenticates the user's identity through the access device, and the access device cooperates with the authentication server to complete the user Authentication.

The terminal device directly interacts with the security policy server, and the terminal reports its own status information, including virus database version, operating system version, and terminal Information such as the patch version installed on the device.

The security policy server checks the status information of the terminal, and for terminal devices that do not meet the corporate security standards, the security policy server reissues. The authorization information is given to the access device.

The terminal device selects the answer to the resource to be accessed according to the result of the status check.

Which of the following law items is the most blessed for safety? This should be true?

Terminal host security management is mainly implemented by inspection strategies, and end user behavior management is mainly implemented by monitoring strategies.

Checking strategies are mainly used to check some static settings of the terminal, such as whether the screen saver is set, whether the antivirus software is installed; whether there is illegal Outreach etc. z00

Monitoring strategies are mainly used for real-time monitoring of events that occur in the system, such as whether anti-virus software is installed and whether PPPOE dial-up access is used Network, etc.-Once an incident is detected, some control can be taken.

The security check strategy only includes two types of end-host check-type strategies and end-user behavior check-type strategies.

Terminal host security management is mainly implemented by inspection strategies, and end user behavior management is mainly implemented by monitoring strategies.

Regarding the principle of MAC authentication, which of the following descriptions is wrong?

MAC Certification required Portal Server cooperation.

MAC Certification is passed 802.1X Implementation of the agreement.

MAC Authentication requires obtaining the terminal's MAC The address is stored in AAA server.

NAS Device Configuration MAC After authentication, the terminal's MAC The address is used as the username and password.

When deploying the Agile Controller-Campus, the high-reliability solution of the Windows+SQL Server platform is adopted. Which of the following components is not supported for deployment?

Deploy MC and SM dual machine backup

Regarding the description of the ACL used in the linkage between SACG equipment and the TSM system, which of the following statements is correct!?

due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you need to ensure these ACL Not referenced by other functions.

default ACL The rule group number can be arbitrarily specified.

default ACL The rule group number can only be 3999.

due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you need to ensure these ACL Not referenced by other functions.

The original group number is 3099-3999 of ACL Even if it is occupied, it can be successfully activated TSM Linkage.

After configuring the announcement,Agile Controller-Campus The system cannot assign this announcement to which of the following objects?

Assign to terminal IP Address range

How to check whether the SM and SC silverware start normally after installing the Agile Controller- Campus) (multiple delivery)

Open https://SM server IP:8943 in the browser, enter the account admin and the default passwordChangeme123, if the login is successful, it will be explained. The SIM components are normal.

After logging in to SM, select Ziyuan>User>User Management, and Xinlu has a common part number. Open https://SC server IP:8447 newauth in the browser. If you can successfully log in with the account created in the previous step, it means that the SC component is Wang Chang.

Open https://SM server IP:8943 in the browser, enter the account admin and the default passwordChangeme123, if the login is successful, it will be explained. The SIM components are normal.

After logging in to SC, select Resources>Users>User Management to create a common account.Open https://SM server IP:8447 in the browser newauth, if you can successfully log in using theaccount created in the previous step, the SM component is normal.

Open https://SC Server IP:8443 in the browser and enter the account admin and the defaultpassword Changeme123. If the login is successful, it will be explained. The SC component is normal.

After logging in to SM, select Ziyuan>User>User Management, and Xinlu has a common part number. Open https://SC server IP:8447 newauth in the browser. If you can successfully log in with the account created in the previous step, it means that the SC component is Wang Chang.

In the terminal host check strategy, you can check whether the important subkeys and key values of the registry meet the requirements to control the terminal host's Access, which of the following check results will be recorded as violations?(multiple choice)

The registry does not contain the mandatory requirements of the policy"Subkeys and key values".

The registry contains the prohibited"Subkeys and key values"W

The registry does not contain the mandatory requirements of the policy"Subkeys and key values".

The registry contains the mandatory requirements of the policy"Subkeys and key values",

The registry contains the prohibited"Subkeys and key values"W

The registry does not contain any prohibited by this policy"Subkeys and key values"

Regarding the use of MAC authentication to access the network in the WLAN networking environment, which of the following statements is wrong en.

The user name format used by MAC authentication is only one of MAC address user name format.

MAC authentication does not require users to install any client software.

The user name format used by MAC authentication is only one of MAC address user name format.

MAC authentication actually uses 802 1X authentication method.

MAC bypass authentication solves the situation of both 802.1x client authentication and MAC authentication in the same network environment.

In the Agile Controller-Campus admission control scenario, regarding the role description of the RADIUS server I client, which of the following is positive True?

Agile Controller-Campus As RADIUS Server side, authentication device(like 802.1X switch)As RADIUS Client.

Agile Controller-Campus Integrated RADIUS All functions of server and client."

Agile Controller-Campus As RADIUS On the server side, the user terminal acts as RADIUS Client.

Certified equipment(like 802. 1X switch)As RADIUS On the server side, the user terminal acts as RADIUS Client.

Agile Controller-Campus As RADIUS Server side, authentication device(like 802.1X switch)As RADIUS Client.

Hardware in useSACG At the time of certification,SACG After the configuration is completed, you can seeSACG andAgile Agile Controller-Campus The linkage is successful, but the user authentication fails. This phenomenon may be caused by the following reasons? (Multiple choice)

SACG There is no release on the user stream.

SACG There is no closed state detection on it.

SACG There is no release on the user stream.

SACG There is no closed state detection on it.

Agile Controller-Campus On and SACG Wrong key configuration for linkage

If you deploy Free Mobility, in the logic architecture of Free Mobility, which of the following options should be concerned by the administrator?

Choose the appropriate policy control point and user authentication point

Is the strategy automatically deployed?

Choose the appropriate policy control point and user authentication point

Does the strategy deployment target a single user?

Does the strategy deployment target a single department?

Agile Controller-Campus The system can manage the software installed on the terminal, define the black and white list of software, and assist the terminal to install necessary software and uninstall the software that is not allowed to be installed by linking with the access control equipment,Regarding the definition of black and white lists, which of the following statements is correct?

Check for prohibited software and software that must be installed

Check for prohibited software licenses and sub-licensed software

Check for prohibited software and software that must be installed

Check the software that must be installed

Regarding the strategy for checking the screensaver settings, which of the following descriptions are correct? (Multiple choice)

You can check whether the screen saver is enabled on the terminal

You can check whether the screen saver password is enabled

You can check whether the screen saver is enabled on the terminal

You can check whether the screen saver password is enabled

Only supports Windows operating system

Screen saver settings cannot be automatically repaired

Which of the following options is about Portal The description of the certification process is correct?

Switch received Portal Online message, will give Radius Server send Radius Certification request

Portal The certification process is only used in Web Certification

Server for a terminal Portal Certification will only give one Portal Device sends authentication message

Switch received Portal Online message, will give Radius Server send Radius Certification request

Portal The authentication message will not carry the result of the security check

An enterprise has a large number of mobile office employees, and a mobile office system needs to be deployed to manage the employees. The number of employees in this enterprise exceeds 2000 People, and the employees' working areas are distributed all over the country. In order to facilitate management, which deployment method is adopted?

Both centralized deployment and distributed deployment are possible

Regarding WLAN, which of the following descriptions is correct?

WLAN There are two basic architectures: FAT AP with AC+FIT AP

WLAN Is to adopt 80211 Technical WiFi

WLAN There are two basic architectures: FAT AP with AC+FIT AP

AC+FATAP The architecture is suitable for medium and large use scenarios

AC+FITAP Autonomous network architecture

Huawei H12-724 Practice Test 9 - Free Online Exam Prep & Questions

The service free mobility function of the Agile Controller can guide the flow to the security center for processing according to the service, improving the utilization of physical equipment.

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-724 Practice Test 9

Question

Huawei H12-724 Practice Tests

Practice Tests