Which of the following health check descriptions is correct? (Selection)

When configuring the protocol and port of the health check, check whether the corresponding protocol and port are enabled on the peer side.

You do not need to configure a security policy to allow health check packets.

The outbound interface of the probe message does not need to be fixed

After specifying the junction of the link health check The outgoing interface of the health probe packet can be consistent with the incoming interface of the response packet.

When configuring the protocol and port of the health check, check whether the corresponding protocol and port are enabled on the peer side.

The following description of the IPv6 stateless address DAD check, which one is wrong? (single selection).

The test address enables broadcast communication.

IPv6 duplicate address detection technology is similar to free ARP in IPv4 Used to detect duplicate IPv4 host addresses when the address is divided into IE or when the host is connected to the network.

The test address enables broadcast communication.

The node sends a Neighbor Request (NS) packet to the test address it will use If you receive a Neighbor Notification (NA) message from another site then proves that the address has already been used.

When the interface is configured as an IPv6 address , DAD is used to detect whether the IPv6 address to be used is unique within the local link.

The following describes the authentication method and authentication domain relationship for Internet users single sign-on What are the correct ones? (multiple selection).

Single sign-on in progress Firewalls can also be bound to users based on IP/MAC addresses Identify the authentication domain to which the local user belongs

Single sign-on users need to be online on the firewall Policy control based on user Therefore, the single sign-on user must also belong to a certain authentication domain.

The firewall participates in the authentication process of single sign-on users, so authentication configuration can be performed in the authentication domain.

If no other authentication domain exists on the server, the default authentication domain is online.

Single sign-on in progress Firewalls can also be bound to users based on IP/MAC addresses Identify the authentication domain to which the local user belongs

Single sign-on users need to be online on the firewall Policy control based on user Therefore, the single sign-on user must also belong to a certain authentication domain.

The following description of security protection, which one is correct?(single selection)

When FW is deployed behind a NAT device, there may be a large amount of traffic accessing different destination ports with the same source IP address In this scenario, you cannot enable port scanning and attack prevention.

The packets received by the Ethernet interface cannot be bound to the corresponding relationship between the source IP address and the MAC address

When FW is deployed behind a NAT device, there may be a large amount of traffic accessing different destination ports with the same source IP address In this scenario, you cannot enable port scanning and attack prevention.

ASPF function will not affect device performance.

When FW works in transparent mode You can enable IP spoofing attack prevention.

The following describes user authentication Which ones are correct? (multiple selection).

Users whose security policies are allowed but whose identity authentication is not passed cannot access resources normally

If the user is a MAC address single-item bound user Other users can also use this MAC address to log in normally.

Users whose security policies are allowed but whose identity authentication is not passed cannot access resources normally

If the user is a MAC address single-item bound user Other users can also use this MAC address to log in normally.

Users with two-way iP/MAC binding can obtain dynamic IP address o through DHCP

Configure two-way binding of MAC addresses for a user to be exempt from authentication? If there are three layers of device elbows between the user and FW, the user can go online normally

Which of the following options are part of the Internet Behavior? (multiple selection).

Keywords that users search for using search engines

User QQ account and its online and offline time

Keywords that users search for using search engines

User QQ account and its online and offline time

Which of the following behaviors does not pose an information security risk. (Single selection)

Important files are not encrypted

Which of the following is not part of the changing trend in cyberattacks? (Single selection)

The attack method changes little

Physicalization of attack methods

The attack method changes little

Diversification of attack objectives

Which of the following options is used to obtain information in penetration testing? (single selection).

Use the tool to scan the port open by the server?

Connect to open ports Log in to the server

Exploit the vulnerability to implant a backdoor into the host

Use the tool to scan the port open by the server?

Extract super administrator permissions for ordinary users.

The trap configuration of the switching machine is as follows: deception deception enable deception detect-network id 1 192.168.1.0 255.255.255.0 deception detect-network id 1 192.168.2.0 255.255.255.0 deception decoy destination 192.0.2.100 Which of the following descriptions of this configuration is correct? (single selection).

The Deception Detect-Network ID is used to configure the detection network for trapping

The IP address used by the Ax deception decoy destination to configure the trapping probe

The Deception Detect-Network ID is used to configure the detection network for trapping

Deception Enable should be configured under the interface.

Deception is used to turn on the device's trapping function

The following describes the service identification Which item ? (single selection) is wrong

The identification of all services can be achieved through port scanning technology.

Service identification is a reconnaissance technique that identifies the type of service provided by the server.

The SSH protocol will actively inform visitors of their version information.

An attacker can retrieve the relevant hole according to the service version and exploit it.

The identification of all services can be achieved through port scanning technology.

The following describes the hot standby of the dual machine What are the wrong items? (multiple selection).

Under the condition that the firewall service interface works at Layer 2 and connects the switch upstream and downstream Support staff sharing networking

The firewall service interface works under the networking condition of Layer 3, uplink and downlink connecting routers You cannot use load-sharing groups.

Under the condition that the firewall service interface works at Layer 2 and connects the router upstream and downstream It is recommended to use a staff-sharing network.

Under the condition that the firewall service interface works at Layer 2 and connects the switch upstream and downstream Support staff sharing networking

The firewall service interface works in the case of three-layer, uplink and downlink connection to the router You can use primary/standby networking.

The firewall service interface works under the networking condition of Layer 3, uplink and downlink connecting routers You cannot use load-sharing groups.

The following describes the implementation of server IP address planning in the firewall server load balancing function, which are the correct items? (multiple selection).

It cannot be the same as the virtualization server address

It cannot be the same as the IP address of the server

Cannot be intertwined with the outgoing IP address of the FW

It cannot be the same as the virtualization server address

It cannot be the same as the address of other servers on the Internet

It cannot be the same as the IP address of the server

Cannot be intertwined with the outgoing IP address of the FW

Let's take the L2TP over IPSec in the dual-machine scenario What is wrong with the description is the egg? (single selection).

After the L2TF tunnel is established, the user cannot access the Internet normally

In this scenario, Fireproof will assign an IP address to the client

After the L2TF tunnel is established, the user cannot access the Internet normally

The parameters set by the client should match the parameters set on the firewall.

The client should initiate a dial-up connection to the virtual address of the dual machine.

The following description of deploying the CIS data ingestation feature is correct? (single selection).

When the log collector transmits logs to the big data platform It is recommended to use SSL Because the SSL method is more secure But the overhead is greater.

By deploying the image function on the stream probe , the Netflow data stream is sent to the big data platform.

Syslog B aims to normalize before reporting to the big data platform But Netflow B does not normalize.

By deploying the spectroscopic function on the flow probe Send information elements to the big data platform.

In the Linux log security settings Which of the following options is included in the user operational log? (multiple selection).

Whether the login is successful

Huawei H12-731_V2.0 Practice Test 7 - Free Online Exam Questions 241-276

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Huawei H12-731_V2.0 Practice Test 7

Question

Huawei H12-731_V2.0 Practice Tests

Practice Tests