H12-724 Sample Practice Exam Questions 2023 Updated Verified [Q16-Q40]

Rate this post

H12-724 Sample Practice Exam Questions 2023 Updated Verified

Exam Study Guide Free Practice Test LAST UPDATED H12-724

Q16. Regarding scanning and snooping attacks, which of the following descriptions is wrong?

Scanning attacks include address scanning and port scanning.

It is usually the network detection behavior before the attacker launches the real attack.
155955cc-666171a2-20fac832-0c042c0424

The source address of the scanning attack is real, so it can be defended by adding direct assistance to the blacklist.

When a worm virus breaks out, it is usually accompanied by an address scanning attack, so scanning attacks are offensive.

Q17. When a virus is detected in an email, which of the following is not the corresponding action for detection?

Warning

Block

Declare

Delete attachments

Q18. A policy template is a collection of several policies. In order to audit the security status of different terminal hosts and the behavior of end users, the administrator needs to customize.
The same policy template is used to protect and manage terminal hosts. Regarding the policy template, which of the following option descriptions are correct? (multiple choice)

When configuring the policy template, you can inherit the parent template and modify the parent template policy

Only the strategy in the strategy template can be used, and the administrator cannot customize the strategy.

You can assign a policy template to a certain network segment.

If different policy templates are applied to departments and accounts, the policy template assigned to the highest priority will take effect. The priority relationship of the number is: account>department

Q19. Security zone division means to better protect the internal network security,Based on the business type and security requirements of the intranet, divide the intranet into several granularities.
Logical area. Which of the following options does not belong Agile Controller-Campus Security domain?

User domain

Network domain

Business domain:

Attack domain

Q20. File filtering technology can filter files based on the application of the file, the file transfer direction, the file type and the file extension.

True

False

Q21. Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

Virus

Buffer overflow

System vulnerabilities

Port scan

Q22. User access authentication technology does not include which of the following options?

Authentication

Isolation repair’

Security check

Access control

Q23. Which of the following options belong to a third-party server account? (Multiple choice)

AD account number

Mobile certificate account)

Anonymous account

Guest account

Q24. When configuring the URL filtering configuration file, www.bt.com is configured in the URL blacklist-item:
At the same time, set it in the custom URL category.
A URL is set as bt.com, and the action of customizing URL classification is a warning. Regarding the above configuration, which of the following statements are correct? (More select)

Users can visit www.videobt.com website.

The user can visit the www.bt.com website, but the administrator will receive a warning message.

User cannot access all the sites ending with bt com.

When users visit www.bt. com, they will be blocked.

Q25. Agile Controller-Campus The product architecture includes three levels. Which of the following options does not belong to the product architecture level?

Server layer

Network device layer

Access control layer

User access layer

Q26. When the license of Huawei USG6000 product expires, the RBL function will be unavailable, and users can only use the local black and white list to filter junk mail.
155955cc-666171a2-20fac832-0c042c0435

True

False

Q27. For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?

TCP proxy means that the firewall is deployed between the client and the server. When the SYI packet sent by the client to the server passes through the firewall, the The firewall replaces the server and establishes a three-way handshake with the client. Generally used in scenarios where the back and forth paths of packets are inconsistent.

During the TCP proxy process, the firewall will proxy and respond to each SYN message received, and maintain a semi-connection, so when the SYN message is When the document flow is heavy, the performance requirements of the firewall are often high.

TCP source authentication has the restriction that the return path must be consistent, so the application of TCP proxy is not common. State “QQ: 9233

TCP source authentication is added to the whitelist after the source authentication of the client is passed, and the SYN packet of this source still needs to be verified in the future.

Q28. Server Fault information collection tool Server Collector, which of the following does collected information items not include?

Software and Patch

sharing information and system account information

System Log

processes, services and startup

Q29. Windows in environment,Agile Controller-Campus After the installation is successful, how to manually start the management center(MC)? (Multiple choice)

Double click on the desktop”Start Server”The shortcut starts.

choose”Start>all programs> Huawei> MCServer> StartServer.

choose”Start>all programs> Huawei> Agile Controller> Server Startup Config”To manually start the required components.

choose”Start 3 all programs> Huawei> MCServer> Sever Startup Conig”,Manually start the required components

Q30. For the description of URPF technology, which of the following options are correct? (multiple choice)

The main function is to prevent network attacks based on source address spoofing.

In strict mode, it does not check whether the interface matches. As long as there is a route to the source address, the message can pass.

The loose mode not only requires corresponding entries in the forwarding table, but also requires that the interface must match to pass the URPF check.

Use URPF’s loose mode in an environment where routing symmetry cannot be guaranteed.

Q31. Attacks on the Web can be divided into three types of attacks on the client, server, or communication channel.

True

False

Q32. Which of the following options is not a defense against HTTP Flood attacks?

HTTP Flood source authentication

HTTP source statistics

URI source fingerprint learning function

Baseline learning

Q33. Which of the following protocols can be used to construct attack messages for special control message attacks? (multiple choice)

ICMP protocol

UDP protocol

CIP protocol

FTP protocol

Q34. There are three roles in the XMPP protocol: server, gateway, and client. Corresponding to the free mobility solution: Agile Controller-Campus as For the server, Huawei USG6000 series firewall acts as the gateway; the agile switch acts as the client.

True

False

Q35. Viruses can damage computer systems. v Change and damage business data: spyware collects, uses, and disperses sensitive information of corporate employees.
These malicious pastoral software seriously disturb the normal business of the enterprise. Desktop anti-disease software can solve the problem of central virus and indirect software from the overall situation.

True

False

Q36. Regarding computer viruses, which of the following options is correct?

Patching the system can completely solve the virus intrusion problem

Computer viruses are latent, they may be latent for a long time, and only when they encounter certain conditions will they begin to carry out sabotage activities

Computer viruses are contagious. They can spread through floppy disks and CDs, but they will not spread through the Internet.

All computer viruses must be parasitic in files and cannot exist independently

Q37. The traditional campus network is based on IP As the core network, if there are mobile office users, which of the following options is not the problem that mobile office users face when deploying access authentication?

The user distribution range is large, and the access control requirements are high.

The deployment of the access control strategy is significant.

Access rights are difficult to control.

User experience technology

Q38. The processing flow of IPS has the following steps;
1. Reorganize application data
2. Match the signature
3. Message processing
4. Protocol identification
Which of the following is the correct order of the processing flow?

4-1-2-3

1-4-2-3

1-3-2-4

2-4-1-3

Q39. There are two ways for Business Manager to download patches. When using hierarchical deployment, you can download patches directly from the management center or through Microsoft patches Server download patch.

True

False

Q40. Regarding the description of the ACL used in the linkage between SACG equipment and the TSM system, which of the following statements is correct!?

default ACL The rule group number can be arbitrarily specified.

default ACL The rule group number can only be 3999.

due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you need to ensure these ACL Not referenced by other functions.

The original group number is 3099-3999 of ACL Even if it is occupied, it can be successfully activated TSM Linkage.

The New H12-724 2023 Updated Verified Study Guides & Best Courses: https://www.prepawaypdf.com/Huawei/H12-724-practice-exam-dumps.html

Related posts:

admin

You might also like

Leave a Reply Cancel reply