H12-724無料問題集「Huawei HCIP-Security (Fast track) V1.0」

質問 1

The following is the 802.1X access control switch configuration:
[S5720]dot1x authentication-method eap
[S5720-GigabitEthernet0/0/1] port link-type access
[S5720-GigabitEthemet0/0/1] port default vlan 11
[S5720-GigabitEthernet0/0/1] authentication dot1x
Assuming that GE0/0/1 is connected to user 1 and user 2 through the HUB, which of the following options is correct?

（A）After user 1 is authenticated, user 2 can access network resources without authentication

（B）User 1 and User 2 must be individually authenticated before they can access network resources

（C）Neither user 1 nor user 2 can pass the authentication and access network resources.

（D）GE0/0/1 does not need to enable dot1X

正解：A 解答を投票する

質問 2

Server Fault information collection tool Server Collector, which of the following does collected information items not include?

（A）processes, services and startup

（B）System Log

（C）Software and Patch

（D）sharing information and system account information

正解：B、C 解答を投票する

質問 3

Which of the following are the control items of HTTP behavior?) (multiple choice)

（A）File upload and download

（B）Browse the web

（C）POST operation

（D）Acting online

正解：A、B、C、D 解答を投票する

質問 4

Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

（A）System vulnerabilities

（B）Port scan

（C）Virus

（D）Buffer overflow

正解：B 解答を投票する

質問 5

The user access security solution is one-kind"End to end"Security architecture. The user access security architecture includes three key components:Terminal equipment, network access equipment and access server.

（A）False

（B）True

正解：B 解答を投票する

質問 6

For the convenience of visitors, different authentication and master pages can be distributed for different visitors. When configuring the push page strategy, different matching conditions need to be defined, so which of the following options can be used as the limited matching conditions? (Multiple choice)

（A）Connected to the network SSID'

（B）Location information of the access device

（C）Priority of guest accounts

（D）Terminal P address

正解：A、D 解答を投票する

質問 7

The user needs of a university are as follows:
1. The environment is large, and the total number of two-way traffic can reach 800M. Huawei USG6000 series firewall is deployed at its network node.
2. The intranet is divided into student area, server area, etc., users are most concerned about the security of the server area to avoid attacks from various threats.
3. At the same time, some pornographic websites in the student area are prohibited.
The external network has been configured as an untrust zone and the internal network has been configured as a trust zone on the firewall. How to configure the firewall to meet the above requirements?
155955cc-666171a2-20fac832-0c042c0415

（A）To the untrust direction, only enable AV and IPS protection functions for the server zone to protect the server

（B）In the direction of untrust to the intranet, only the AV and IPS protection functions are turned on for the server area to protect the server

（C）Go to the untrust direction to open the URL filtering function for the entire campus network, and filter some classified websites

（D）You can directly turn on the AV, IRS protection functions, and URL filtering functions in the global environment to achieve the requirements

正解：B、C、D 解答を投票する

質問 8

Secure email is Any ffice Solution for corporate office 0A The killer application provided, it provides powerful email business capabilities and rich email strategies. For secure mail, which of the following descriptions are correct? (Multiple choice)

（A）Support MAP4/SMTP/EAS Send and receive emails with standard protocols such as, and support real-time email push.

（B）Through the mail client, you can connect No or Exchange Mail system.

（C）Support automatic mail transmission encryption, transmission encryption method supports a full range of IPSec/TLS protocol.

（D）Online survey of attached documents is not supported.

正解：A、B 解答を投票する

質問 9

The results of the RBL black and white list query on the firewall are as follows:

Based on the above information only, which of the following statements is correct? (multiple choice)

（A）Mail with source address 10.17.1.0/24 will be blocked

（B）Mail with source address 10.18.1.0/24 will be blocked

（C）Mail with source address 10.18.1.0/24 will be released

（D）Mail with source address 10.17.1.0/24 will be released

正解：C、D 解答を投票する

質問 10

IPS is an intelligent intrusion detection and defense product. It can not only detect the occurrence of intrusions, but also can respond in real time through certain response methods.
Stop the occurrence and development of intrusions, and protect the information system from substantial attacks in real time. According to the description of PS, the following items are wrong?

（A）IPS must use bypass deployment in the network

（B）IPS is an intrusion detection system that can block real-time intrusions when found

（C）IPS unifies IDS and firewall

（D）Common IPS deployment modes are in-line deployment,

正解：A 解答を投票する

質問 11

An enterprise has a large number of mobile office employees, and a mobile office system needs to be deployed to manage the employees. The number of employees in this enterprise exceeds 2000 People, and the employees' working areas are distributed all over the country. In order to facilitate management, which deployment method is adopted?

（A）Distributed deployment

（B）Centralized deployment

（C）Both centralized deployment and distributed deployment are possible

（D）Hierarchical deployment

正解：A 解答を投票する

質問 12

Misuse detection is through the detection of similar intrusions in user behavior, or those that use system flaws to indirectly violate system security rules To detect intrusions in the system. Which of the following is not a feature of misuse detection 2

（A）Accurate detection

（B）Effective detection of impersonation detection of legitimate users

（C）Easy to upgrade

（D）Easy to implement

正解：B 解答を投票する

質問 13

The administrator has configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not allowed Can the reason?

（A）The file filtering configuration file is not referenced in the security policy

（B）License is not activated.

（C）The action configuration of the file extension does not match is incorrect

（D）File filtering configuration file is incorrect

正解：C 解答を投票する

質問 14

Which of the following statements about IPS is wrong?

（A）The signature set can contain either predefined signatures or custom signatures. 832335

（B）The priority of the coverage signature is higher than that of the signature in the signature set.

（C）When the "source security zone" is the same as the "destination security zone", it means that the IPS policy is applied in the domain.

（D）Modifications to the PS policy will not take effect immediately. You need to submit a compilation to update the configuration of the IPS policy.

正解：A 解答を投票する

質問 15

Which of the following are typical intrusions? "Multiple choice)

（A）Computer is infected by U disk virus

（B）Abnormal power interruption in the computer room

（C）Copy/view sensitive data

（D）Tampering with Web pages

正解：C、D 解答を投票する

質問 16

The realization of content security filtering technology requires the support of the content security combination license.

（A）False

（B）True

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

Which of the following options is not a challenge brought by mobile office?

（A）Users can access the network safely and quickly.

（B）Network gateway deployment

（C）Unified terminal management and fine control.

（D）The mobile office platform is safe and reliable and goes online quickly.

正解：B 解答を投票する

H12-724 無料問題集「Huawei HCIP-Security (Fast track) V1.0」

弊社を連絡する

関連リンク

トップ試験