If it is in the intrusion prevention configuration file Signatures, signature filters, and exception signatures are used at the same time When there is a configuration to the configuration file The following is about the order of matching Which option is correct? (single selection).

Exception Signature>Signature Over Filter>Signature

Exception Signature>Signature>Signature filter

Exception Signature>Signature Over Filter>Signature

Signature>Signature Filter >Exception Signature

Signature filter >Signature>Exception signature

The following describes how to create a trap account Which one is correct? (single selection).

Create a local account named Administrator and set its permissions to the minimum, plus a weak password less than 6 digits

The following describes how to create a trap account Which one is correct? (single selection).

Create a local account named Administrator and set its permissions to the most, plus a strong password of more than 10 digits

Create a local account named Administrator and set its permissions to the minimum, plus a weak password less than 6 digits

Create a local account named Administrator and set its permissions to the minimum, plus a strong password of more than 10 digits

Create a local account named Administrator and set its permissions to maximum Plus a weak password less than 6 digits

In the HCIE-Security V2.0 course architecture, which of the following pieces are included? (multiple selection).

Security operations and analytics

Security attack and defense technology

Security operations and analytics

Security attack and defense technology

A data center creates subnet A and subnet B under the same VPC network If you add the host to security group A and move it out of the default security group, which of the following is correct? (single selection).

A and B are able to visit each other

What are the following descriptions of cybertrapping techniques that are wrong? (multiple selection).

Trapping needles support simulation services

The trapping probe is a honeypot

Trapping needles support simulation services

The trapping technology scheme consists of two parts: trap and trapping probe

The trapping probe is a honeypot

The trapping probe is responsible for identifying the scanning behavior in the network and directing traffic to the trap

With the following description of the difference between stored XSS and reflected XSS, what are the correct items? (multiple selection).

Attacks caused by stored XSS are persistent

The attack code of stored XSS is stored on the target server

Attacks caused by stored XSS are persistent

The attack code of stored XSS is stored on the target server

The attack code of the reflected XSS is stored on the target server

Attacks caused by reflective XSS are persistent

The following is a description of wide management Which one is incorrect? (single selection).

If width management is used at the same time as the NAT Server function When configuring the destination address of the bandwidth management policy, you should specify the address before translation

The functions of ensuring width and forwarding priority can only have an effect on traffic flowing through the firewall

Enabling the bandwidth management function will occupy the CPU resources of the device

If width management is used at the same time as the NAT Server function When configuring the destination address of the bandwidth management policy, you should specify the address before translation

If bandwidth management and source NAT are used at the same time, you should specify the address before translation when configuring the source address matching condition of the bandwidth policy

Which of the following can be used to block C&C attacks? (multiple selection).

DGA (Domain Generation Algorithm. Domain name generation algorithm) domain name detection

Perform environment detection virtually

Which is the correct order for IPS to process traffic? (single selection).

Data reorganization. App recognition. Trait matching. Deal accordingly

Data reorganization, > characteristic matching, > application identification, > corresponding processing

Corresponding processing, data reorganization, > trait matching, application identification

Corresponding treatment, characteristics matching. Application identification, data reorganization

Data reorganization. App recognition. Trait matching. Deal accordingly

In the WAF defense-in-depth system, which of the following security checks is used to protect against CC attacks? (single selection).

Security checks for sensitive information

A VPCA and VPCB are created under a virtual data center VDC, and host A (192.168.1.100/24) is applied for in the VPCA Filed Host B (1921682100/24). Now configure VPC access Create a virtual firewall security policy as follows:Security-policy Source-zone any destination-zone any source-address 192.168.2.100 32 destination-address 192.168.1.100 32 action permit Which of the following statements is correct?

A and B cannot visit each other

A and B are able to visit each other

Which of the following options is not included in virtualization security? (single selection).

Virtualization platform security

Virtualized inter-network security

If you want to intelligently select traffic for the source IP address, you can use which of the following intelligent routing methods^ (single selection).

Global traffic steering strategy

In the cloud data center network Where are Anti-DDos appliances deployed? (single selection).

Security operation and maintenance area

The following is a description of DNS transparent proxy Which ones are correct? (multiple selection).

After enabling the DNS transparent proxy function The DNS server address to replace is determined for the outgoing interface

Two DNS requests for the same user in the case of DNS transparent proxies The replaced address may be different.

The DNS proxy function replaces the source address header in the DNS request packet.

After enabling the DNS transparent proxy function The DNS server address to replace is determined for the outgoing interface

In the case of NGFW as the exit network and the DNS server of the enterprise intranet The DNS transparent proxy function can still be implemented normally.

Two DNS requests for the same user in the case of DNS transparent proxies The replaced address may be different.

In the following description of IPv6 security features, which one is wrong? (single selection).

The IPv6 address is 128 bits to ensure that the source address is trusted

As IPv6 DNS and other related protocols are designed for security

IPv6 addresses can be generated by encryption However, privacy headers are not supported

AH, and ES can be used as extension headers for IPv6 IPsec is used for additional security.

The IPv6 address is 128 bits to ensure that the source address is trusted

The following describes the network layer protection plan for HUAWEI CLOUD security architecture Which one is incorrect? (single selection).

Cloud network perimeter protection DDos can only be achieved by deploying anti-DDoS appliances.

Tenants can be isolated through security group networks.

Fire protection is implemented between HUAWEI CLOUD and the customer network

Cloud network perimeter protection DDos can only be achieved by deploying anti-DDoS appliances.

The cloud network boundary protects service availability through DDos defense.

The following describes the transparent proxy deployment features of WAF Which is correct?(multiple selection).

The content of the packet is not changed when it is forwarded

There is no need for the network layer, and the application layer can be changed There is also no need to make configuration changes on any device

The content of the packet is not changed when it is forwarded

There is no need for the network layer, and the application layer can be changed There is also no need to make configuration changes on any device

Traffic needs to be redirected to the WAF device.

The client does not directly establish a connection with the server, which can hide the server

When you realize the security of cloud transmission Which of the following do we generally consider? (multiple selection).

Encryption of transmission data

The following describes the differences between ISMS and graded protection What are the correct options? (multiple selection).

The construction result of 1SMS is to establish a set of ISMS system documents for the organization Strongly strengthen the Organization's information security, and the result of the rating assessment is to give whether the subject meets the stated security level requirements.

The graded protection system is a basic system for ensuring information security Both technology and qualifications are taken into account The focus is on how to leverage existing sophisticated protection critical information systems It mainly reflects the classification of hierarchies Protect the idea of focus. While ISMS is mainly from the perspective of security management The focus is on the establishment of information security guidelines, policies and security management systems and security management organizations within the organization or its specific scope, and their effective implementation, which mainly reflects the role and importance of security management.

The construction result of 1SMS is to establish a set of ISMS system documents for the organization Strongly strengthen the Organization's information security, and the result of the rating assessment is to give whether the subject meets the stated security level requirements.

The graded protection system is a basic system for ensuring information security Both technology and qualifications are taken into account The focus is on how to leverage existing sophisticated protection critical information systems It mainly reflects the classification of hierarchies Protect the idea of focus. While ISMS is mainly from the perspective of security management The focus is on the establishment of information security guidelines, policies and security management systems and security management organizations within the organization or its specific scope, and their effective implementation, which mainly reflects the role and importance of security management.

The implementation objects of graded protection are mainly those of various enterprise units, while the implementation objects of ISMS are mainly government departments such as party and government organs at all levels that have the requirements of information system levels.

The complete implementation process of ISMS runs through the entire life cycle of the information system The complete implementation process of graded protection runs through the entire life cycle of the management system of the organization or a specific scope of the organization , and can be synchronized with the management system of a specific scope of the organization or organization. It can also be carried out on the basis that its management system has been established.

Huawei H12-731_V2.0 Practice Test 4 - Free Online Exam Questions 121-160

Which of the following are the following ways to protect enterprise users from viruses? (Multiple selection)

Become a Premium Member for full access

Unlock Premium Member

Huawei H12-731_V2.0 Practice Test 4

Question

Huawei H12-731_V2.0 Practice Tests

Practice Tests