Home / Huawei / H12-731_V2.0

Huawei H12-731_V2.0 Practice Test - Questions Answers, Page 17

Question list

List of questions

Question 161

(0)

Which of the following describes the business process of the network trapping scheme wrong? (single selection).

Question 162

(0)

The following is a description of FW's audit conduct. Which one is correct? (single selection).

Question 163

(0)

Which of the following situational aware detection attacks can DDOS attacks, firewall bypasses, and malware outreach attacks know? (multiple selection).

Question 164

(0)

Which of the following devices can work with situational awareness to isolate infected hosts? (single selection).

Question 165

(0)

The IPS function of Huawei's intrusion prevention device is not controlled by License (radio selection).

Question 166

(0)

The collection of subdomains includes the collection (single selection) of the target's top-level domain name, second-level domain name, third-level domain name and other domain names

Question 167

(0)

When you use ATIC for defense policy configuration, the defense system that can be configured does not include which of the following options> (single selection).

Question 168

(0)

With the following description of network scanning defense technology, which is correct? (single selection).

Question 169

(0)

Which of the following threats cannot be detected by the sandbox virtual execution environment? (Single selection)

Question 170

(0)

The following describes the network scanning defense technology Which one is wrong? (single selection).

Question 161

Which of the following describes the business process of the network trapping scheme wrong?

(single selection).

The attacker initiates a network scanning attack The purpose is to probe the network structure.

The business that the attacker eventually attacks is a deliberately constructed counterfeit food business. Therefore, all the actions of the attacker are monitored and reported to the CIS platform

When the access traffic reaches the trapping probe A collision between the probe needle and the trap will be used to send the access flow to the trap

Trapping probes can analyze the frequency of scanning different destination IPs or ports for the same source address Then a virtual MAC responds to the attacker.

Show Answer Comment (0)

Question 162

The following is a description of FW's audit conduct. Which one is correct? (single selection).

After you create or modify an audit profile , the configuration content takes effect immediately.

By default , the audit function of outgoing file content is enabled by default.

By default HTTP status code audit mode is the default mode Only common HTTP status codes areaudited.

Show Answer Comment (0)

Question 163

Which of the following situational aware detection attacks can DDOS attacks, firewall bypasses, and malware outreach attacks know? (multiple selection).

C&C anomaly detection

Hidden channel detection

Encrypted traffic detection

Meteor base rod anomaly detection

Show Answer Comment (0)

Question 164

Which of the following devices can work with situational awareness to isolate infected hosts? (single selection).

Agile-controller Campus

gile-controller DCN

SecoManager

EDR

Show Answer Comment (0)

Question 165

The IPS function of Huawei's intrusion prevention device is not controlled by License (radio selection).

TRUE

FALSE

Show Answer Comment (0)

Question 166

The collection of subdomains includes the collection (single selection) of the target's top-level domain name, second-level domain name, third-level domain name and other domain names

TRUE

FALSE

Show Answer Comment (0)

Question 167

When you use ATIC for defense policy configuration, the defense system that can be configured does not include which of the following options> (single selection).

Blocking

Current limiting

Defense

Detection

Show Answer Comment (0)

Question 168

With the following description of network scanning defense technology, which is correct? (single selection).

For port scanning, you can defend by setting the value of the access frequency bureau.

If the access frequency is set too high More false positives will be generated, blocking normal access traffic.

If the rate at which its source IP accesses other protected addresses or ports exceeds the set access frequency threshold, this behavior is regarded as scanning behavior And add the purpose to the blacklist to block scan

If the frequency of the set direction is too low The scanning behavior is not recognized.

Show Answer Comment (0)

Question 169

Which of the following threats cannot be detected by the sandbox virtual execution environment?

(Single selection)

C&C??

PDF file virus

PE file virus

Web file virus

Show Answer Comment (0)

Question 170

The following describes the network scanning defense technology Which one is wrong? (single selection).

The trapping probe has a business simulation function.

Firewalls and switch devices can act as trapping probes.

In networking mode where the trap and the trap probe are on the same firewall| CIS and SecoManager are not required for trapping Closed-loop threat linkage can be completed directly through FW.

The trapping system produces a unique fingerprint for each attacker Able to record hacker IP, operating system Information such as browser type, type of attack weapon, etC.

Show Answer Comment (0)

Total 276 questions