Home / Huawei / H12-724

Huawei H12-724 Practice Test - Questions Answers, Page 15

Question list

List of questions

Question 141

(0)

When a data file hits the whitelist of the firewall's anti-virus module, the firewall will no longer perform virus detection on the file.

Question 142

(0)

What content can be filtered by the content filtering technology of Huawei USG6000 products?

Question 143

(0)

If you combine security defense with big data technology, which of the following statements are correct? (multiple choice)

Question 144

(0)

Use BGP protocol to achieve diversion, the configuration command is as follows [sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit

Question 145

(0)

Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

Question 146

(0)

Intrusion detection is a network security technology used to detect any damage or attempt to damage the confidentiality, integrity or availability of the system. Which of the following What is the c

Question 147

(0)

The administrator has configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is

Question 148

(0)

Regarding the Anti-DDoS cloud cleaning solution; which of the following statements is wrong?

Question 149

(0)

The processing flow of IPS has the following steps;

Question 150

(0)

An enterprise administrator configures the Web reputation system as shown in the figure. Regarding the configuration, which of the following statements is correct?

Related questions

Traditional network single--The strategy is difficult to cope with the current complex situations such as diversified users, diversified locations, diversified terminals, diversified applications, and insecure experience.

For the scenario where the authentication server adopts distributed deployment, which of the following descriptions are correct? (multiple choice)

Regarding the application scenarios of Agile Controller-Campus centralized deployment and distributed deployment, which of the following options are correct? (Multiple select)

Use BGP protocol to achieve diversion, the configuration command is as follows [sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname]bgp100 155955cc-666171a2-20fac832-0c042c04 29 [sysname-bgp] peer [sysname-bgp] import-route unr [sysname- bgpl ipv4-family unicast [sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export [sysname-bgp-af-ipv4] peer 7.7. 1.2 advertise community [sysname-bgp-af-ipv4] quit [sysname-bgp]quit Which of the following options is correct for the description of BGP diversion configuration? (multiple choice)

In the Huawei USG6000 product, after creating or modifying the security configuration file, the configuration content will not take effect immediately: you need to click the "Prompt" in the upper right corner of the interface. "Hand in" to activate.

Regarding the principle of MAC authentication, which of the following descriptions is wrong?

The relationship between user groups and accounts in user management is stored in a tree on the Agile Controller-Campus. An account belongs to only one user group. Consistent with the corporate organizational structure: If the OU (OnizbonUnit) structure stored in the AD/LDAP server is consistent with the corporate organizational structure, users are stored Under 0OU, when the Agile Controller-Campus synchronizes AD/LDAP server accounts, which synchronization method can be used?

If you are deploying BYOD When the system is installed, use a stand-alone installation SM, Dualmachine installation SC, Stand-alone hardware deployment AE,Which of the following descriptions are correct? (Multiple choice)

Deploying on Windows platform, using SQL Server database About the HA function of Agile Cotoller- Campus, which of the following descriptions Is it correct? (multiple choice)

There are two types of accounts on the Agile Controller-Campus: one is a local account and the other is an external account. Which of the following is not a local account?

Question 141

When a data file hits the whitelist of the firewall's anti-virus module, the firewall will no longer perform virus detection on the file.

True

False

Show Answer Comment (0)

Question 142

What content can be filtered by the content filtering technology of Huawei USG6000 products?

File content filtering

Voice content filtering

Apply content filtering..

The source of the video content

Show Answer Comment (0)

Question 143

If you combine security defense with big data technology, which of the following statements are correct? (multiple choice)

In the learning process, you should start from collecting samples, analyze their characteristics and then perform machine learning.

Machine learning only counts a large number of samples, which is convenient for security administrators to view.

In the detection process, the characteristics of unknown samples need to be extracted and calculated to provide samples for subsequent static comparisons.

Security source data can come from many places, including data streams, messages, threat events, logs, etc.

Show Answer Comment (0)

Question 144

(multiple choice)

Use BGP to publish UNR routes to achieve dynamic diversion.

After receiving the UNR route, the peer neighbor will not send it to any BGP neighbor.

You also need to configure the firewall ddos bgp-next-hop fib-filter command to implement backinjection.

The management center does not need to configure protection objects. When an attack is discovered, it automatically issues a traffic diversion task.

Show Answer Comment (0)

Question 145

Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

Virus

Buffer overflow ?

System vulnerabilities

Port scan

Show Answer Comment (0)

Intrusion detection is a network security technology used to detect any damage or attempt to damage the confidentiality, integrity or availability of the system. Which of the following What is the content of the intrusion detection knowledge base?

Complete virus sample

Complete Trojan Horse

Specific behavior patterns

Security Policy

Show Answer Comment (0)

Question 147

The administrator has configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not allowed Can the reason?

The file filtering configuration file is not referenced in the security policy

File filtering configuration file is incorrect

License is not activated.

The action configuration of the file extension does not match is incorrect

Show Answer Comment (0)

Question 148

Regarding the Anti-DDoS cloud cleaning solution; which of the following statements is wrong?

Ordinary attacks will usually be cleaned locally first.

If there is a large traffic attack on the network, send it to the cloud cleaning center to share the cleaning pressure.

Since the Cloud Cleaning Alliance will direct larger attack flows to the cloud for cleaning, it will cause network congestion.

The closer to the attacked self-labeled cloud cleaning service, the priority will be called.155955cc-666171a2-20fac832-0c042c0430

Show Answer Comment (0)

Question 149

The processing flow of IPS has the following steps;

Reorganize application data

Match the signature

Message processing

Protocol identificationWhich of the following is the correct order of the processing flow?

4-1-2-3

1-4-2-3

1-3-2-4

2-4-1-3:

Show Answer Comment (0)

Question 150

An enterprise administrator configures the Web reputation system as shown in the figure. Regarding the configuration, which of the following statements is correct?