Home / Huawei / H12-724

Huawei H12-724 Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

Which of the following options belong to the upgrade method of the anti-virus signature database of Huawei USG6000 products? (multiple choice)

Question 32

(0)

Regarding the global configuration of file filtering configuration files for Huawei USG6000 products, which of the following descriptions is correct?

Question 33

(0)

In Huawei USG6000 products, IAE provides an integrated solution, all content security detection functions are integrated in a well-designed In the high-performance engine. Which of the following is

Question 34

(0)

Which of the following options does not belong to the basic DDoS attack prevention configuration process?

Question 35

(0)

Regarding the network intrusion detection system (NIDS), which of the following statements is wrong?

Question 36

(0)

Cloud sandbox refers to deploying the sandbox in the cloud and providing remote detection services for tenants. The process includes:

Question 37

(0)

What content can be filtered by the content filtering technology of Huawei USG6000 products? (multiple choice)

Question 38

(0)

Regarding the sequence of file filtering technology processing flow, which of the following is correct? (1) The security policy is applied as permit (2) Protocol decoding (3) File type recognitio

Question 39

(0)

Which of the following statements about IPS is wrong?

Question 40

(0)

Due to differences in network environment and system security strategies, intrusion detection systems are also different in specific implementation. From the perspective of system composition, the m

Related questions

Traditional network single--The strategy is difficult to cope with the current complex situations such as diversified users, diversified locations, diversified terminals, diversified applications, and insecure experience.

Use BGP protocol to achieve diversion, the configuration command is as follows [sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname]bgp100 155955cc-666171a2-20fac832-0c042c04 29 [sysname-bgp] peer [sysname-bgp] import-route unr [sysname- bgpl ipv4-family unicast [sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export [sysname-bgp-af-ipv4] peer 7.7. 1.2 advertise community [sysname-bgp-af-ipv4] quit [sysname-bgp]quit Which of the following options is correct for the description of BGP diversion configuration? (multiple choice)

There are two types of accounts on the Agile Controller-Campus: one is a local account and the other is an external account. Which of the following is not a local account?

For the scenario where the authentication server adopts distributed deployment, which of the following descriptions are correct? (multiple choice)

Regarding the application scenarios of Agile Controller-Campus centralized deployment and distributed deployment, which of the following options are correct? (Multiple select)

Regarding the principle of MAC authentication, which of the following descriptions is wrong?

The relationship between user groups and accounts in user management is stored in a tree on the Agile Controller-Campus. An account belongs to only one user group. Consistent with the corporate organizational structure: If the OU (OnizbonUnit) structure stored in the AD/LDAP server is consistent with the corporate organizational structure, users are stored Under 0OU, when the Agile Controller-Campus synchronizes AD/LDAP server accounts, which synchronization method can be used?

If you are deploying BYOD When the system is installed, use a stand-alone installation SM, Dualmachine installation SC, Stand-alone hardware deployment AE,Which of the following descriptions are correct? (Multiple choice)

Deploying on Windows platform, using SQL Server database About the HA function of Agile Cotoller- Campus, which of the following descriptions Is it correct? (multiple choice)

About the software SACG And hardware SACG Description, which of the following is correct?

Question 31

Which of the following options belong to the upgrade method of the anti-virus signature database of Huawei USG6000 products? (multiple choice)

Local upgrade

Manual upgrade

Online upgrade

Automatic upgrade

Show Answer Comment (0)

Question 32

Regarding the global configuration of file filtering configuration files for Huawei USG6000 products, which of the following descriptions is correct?

File filtering, content filtering and anti-virus detection cannot be performed when the file is damaged. At this time, the documents can be released or blocked according to business requirements.

When the file extension does not match, if the action is "Allow" or "Alarm", file filtering, content filtering and anti-virus are performed according to the file type Detection.

When the number of compression layers of a file is greater than the configured "Maximum Decompression Layers", the firewall cannot filter the file.

When the file type cannot be recognized, file filtering, content filtering and anti-virus detection are not performed.

Show Answer Comment (0)

In Huawei USG6000 products, IAE provides an integrated solution, all content security detection functions are integrated in a well-designed In the high-performance engine. Which of the following is not the content security detection function supported by this product?

Application recognition and perception

URL classification and filtering

Video content filtering

Intrusion prevention 155955cc-666171a2-20fac832-0c042c048

Show Answer Comment (0)

Question 34

Which of the following options does not belong to the basic DDoS attack prevention configuration process?

The system starts traffic statistics.

System related configuration application, fingerprint learning.

The system starts attack prevention.

The system performs preventive actions.

Show Answer Comment (0)

Question 35

Regarding the network intrusion detection system (NIDS), which of the following statements is wrong?

It is mainly used for real-time monitoring of the information of the critical path of the network, listening to all packets on the network, collecting data, and analyzing suspicious objects

Use the newly received network packet as the data source;

Real-time monitoring through the network adapter, and analysis of all communication services through the network;

Used to monitor network traffic, and can be deployed independently.

Show Answer Comment (0)

Question 36

Cloud sandbox refers to deploying the sandbox in the cloud and providing remote detection services for tenants. The process includes:

Report suspicious files

Retrospective attack

Firewall linkage defense

Prosecution in the cloud sandboxFor the ordering of the process, which of the following options is correct?

1-3-4-2

1-4-2-3

1-4-3-2

3-1-4-2:

Show Answer Comment (0)

Question 37

What content can be filtered by the content filtering technology of Huawei USG6000 products?

(multiple choice)

Keywords contained in the content of the uploaded file

Keywords contained in the downloaded file

File type

File upload direction 335

Show Answer Comment (0)

Question 38

Regarding the sequence of file filtering technology processing flow, which of the following is correct?

(1) The security policy is applied as permit

(2) Protocol decoding

(3) File type recognition

(4) Application recognition

(5) File filtering

(1)(2)(3)(4)(5)155955cc-666171a2-20fac832-0c042c049

(1)(4)(2)(3)(5)

(1)(2)(4)(3)(5)

(1)(3)(2)(4)(5)

Show Answer Comment (0)

Question 39

Which of the following statements about IPS is wrong?

The priority of the coverage signature is higher than that of the signature in the signature set.

When the "source security zone" is the same as the "destination security zone", it means that the IPS policy is applied in the domain.

Modifications to the PS policy will not take effect immediately. You need to submit a compilation to update the configuration of the IPS policy.

The signature set can contain either predefined signatures or custom signatures. 832335

Show Answer Comment (0)

Question 40

Due to differences in network environment and system security strategies, intrusion detection systems are also different in specific implementation. From the perspective of system composition, the main Which four major components are included?

Event extraction, intrusion analysis, reverse intrusion and remote management.

Incident extraction, intrusion analysis, intrusion response and on-site management.

Incident recording, intrusion analysis, intrusion response and remote management.

Incident extraction, intrusion analysis, intrusion response and remote management.

Show Answer Comment (0)

Total 367 questions

2 3 4 5 6

Go to page: of 37