Home / Huawei / H12-731_V2.0

Huawei H12-731_V2.0 Practice Test - Questions Answers, Page 21

Question list

List of questions

Question 201

(0)

What are the correct options for describing the impact of IPv6 technology on cyberattacks (multiple selection).

Question 202

(0)

The following description of configuring elog management, which one is wrong? (single selection).

Question 203

(0)

The following describes vulnerabilities and identification and assessment Which one is incorrect? (single selection).

Question 204

(0)

Implement secure communication network requirements for Class-Protect on HUAWEI CLOUD Which of the following services does not need to be covered? (single selection).

Question 205

(0)

With the following description of the database auditing system, which option is wrong? (single selection).

Question 206

(0)

The National Graded Protection System (GB) is in the process of grading The assessment is based on the safety management assessment requirements in IS027001. (single selection).

Question 207

(0)

Hypothetical has a set of raw data as follows: ·10, 20. 30. 40, 50" The set of data was desensitized by randomly swapping the position of the data, and the desensitized data was: ·30 20. 50. 10. 40

Question 208

(0)

Which of the following descriptions of user management is wrong? (single selection).

Question 209

(0)

In the following description of the principles of network trapping defense, which are correct? (multiple selection).

Question 210

(0)

Take the following description of safety measures Which one is wrong? (single selection).

Question 201

What are the correct options for describing the impact of IPv6 technology on cyberattacks (multiple selection).

IPV6 is enough to take into account the security aspects and does not have its own security vulnerabilities.

IPv6 also has a defensive effect on application-layer spoofing attacks.

In the IPv6 environment Sharding attacks, ARP, and DHCP attacks can be mitigated or eliminated to some extent.

IPv6 has the ability to locate the initiator of the attack through attacks

Show Answer Comment (0)

Question 202

The following description of configuring elog management, which one is wrong? (single selection).

By default eLog does not parse session creation logs, if you need to parse and display session creation logs on eLog, you need to configure them on the collector.

At present, elog supports manual addition and automatic discovery of two ways to manage FW The manual addition method requires SNMP parameters to be configured on the FW.

The time zone and time on FW must be consistent with the time zone and time on the eLog cold collector, otherwise the log viewing results will be affected.

If FW simultaneously imports session aging logs, session new logs, and periodic session logs This will cause an increase in the number of logs received by eLog Consume eLog storage space.

Show Answer Comment (0)

Question 203

The following describes vulnerabilities and identification and assessment Which one is incorrect?

(single selection).

In the technical vulnerability point, identify the vulnerable point of the application system From the audit mechanism Audit storage and access control policies. Data integrity Identification Password protection and other aspects for identification.

Vulnerability identification is also called vulnerability identification, and weakness is the existence of capital itself If there is no corresponding threat, the weakness itself will not cause damage to capital.

Vulnerability points are divided into two types: technical vulnerabilities and management vulnerabilities. The management vulnerability identification image is only for the management part of the organization

The severity of the technical vulnerability of an asset is affected by the organization's management vulnerability. Therefore, the vulnerability of assets should also be assigned with reference to the severity of technical management and organizational management vulnerabilities.

Show Answer Comment (0)

Question 204

Implement secure communication network requirements for Class-Protect on HUAWEI CLOUD Which of the following services does not need to be covered? (single selection).

Install anti-virus software

Web application protection

Anti-DDoS Pro

Security groups

Show Answer Comment (0)

Question 205

With the following description of the database auditing system, which option is wrong? (single selection).

Detect abnormal operations of legitimate users.

Usually carry out direct deployment, extract messages and records.

Ability to analyze operational behavior that does not contain threat signatures.

Support deployment in cloud environment, and the strategy is matched as needed Rules are on demand.

Show Answer Comment (0)

Question 206

The National Graded Protection System (GB) is in the process of grading The assessment is based on the safety management assessment requirements in IS027001. (single selection).

TRUE

FALSE

Show Answer Comment (0)

Question 207

Hypothetical has a set of raw data as follows: ·10, 20. 30. 40, 50" The set of data was desensitized by randomly swapping the position of the data, and the desensitized data was: ·30 20. 50. 10.

40\Which of the following algorithms is used in this data masking method? (single selection).

AV hash

Change

Load break

Noise

Show Answer Comment (0)

Question 208

Which of the following descriptions of user management is wrong? (single selection).

User management can control the resources that users access.

Management is a basic safety management.

Administrators can manage users' use of resources through AAA.

User management cannot control a user's access to specific resources.

Show Answer Comment (0)

Question 209

In the following description of the principles of network trapping defense, which are correct?

(multiple selection).

Installing threats against network weapons, network trapping defense technology, can use deception to make the attack execute special commands in the trapping system

In the face of viruses, worms, WebShell these weaponized attack methods, can use misleading methods to make the attack traffic be diverted to trap probe O

For the detection behavior in the early stage of the attack, you can use deception to burst into defense. By creating various traps to mislead the attacker. Cause attackers to misunderstand the network structure, attack targets, and vulnerabilities.

Network trapping technology can disguise the actual business and vulnerabilities to mislead the attacker, so that the attacker can infiltrate the trapping system.

Show Answer Comment (0)