H12-722のPDF問題集リアル2022最近更新された問題 [Q68-Q90]

Rate this post

H12-722のPDF問題集リアル2022最近更新された問題

リリースHuawei H12-722更新された問題PDF

68、Which of the following options are correct for the configuration description of the management center ATIC?
(multiple choice)

The drainage task needs to be configured on the management center, and when an attack is discovered, it will be issued to the cleaning center.

It is necessary to configure the protection object on the management center to guide the abnormal access flow in etpa

Port mirroring needs to be configured on the management center to monitor abnormal traffic.

The reinjection strategy needs to be configured on the management center to guide the flow after cleaning.

69、Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

Virus

Buffer overflow

System vulnerabilities

Port scan

70、A college user needs are as follows:
1. The environmental traffic is relatively large and can add up to 800M in both directions. Huawei USG6000 series firewalls are deployed at its network nodes.
2. The intranet is divided into student areas, server areas, etc. Users are most concerned about the security of the server area and avoid being attacked by various types of threats.
3. At the same time, some pornographic websites in the student district are prohibited.
The external network is configured as untrust zone on the firewall, and the internal network is configured as trust zone. How to configure the firewall to meet the above requirements? (Multiple choices)

You can enable the AV, IPS protection and URL filtering functions in the global environment.

Enable AV and IPS protection only for the server zone in the untrust direction to protect the server

untrust to the internal network direction only for the server area to open AV, IPS protection to protect the server

Enable URL filtering for the entire campus network in the direction of untrust and filter some classified websites

71、After the IP policy is enabled, some services are found to be inaccessible. Which of the following may be the cause? (Multiple Choice)

Only one direction of packets goes through the firewall

The same packet passes through the firewall multiple times

IPS missed

Too much traffic causes the bypass function to be enabled

72、When you suspect that the corporate network is being attacked by hackers, you have conducted technical investigations.
Which of the following options does not belong to the pre-attack behavior?

Planting Malware

Loophole attack

Web Application Attacks

Brute force attack

73、The analysis and processing capabilities of traditional firewalls at the application layer are weak, and they cannot correctly analyze malicious codes that are mixed in the flow of allowed application teaching: many Attacks or malicious behaviors often use the firewall’s open application data flow to cause damage, causing application layer threats to penetrate the firewall.

True

False

74、The whitelist rule of the firewall antivirus module is configured as *example*. Which of the following matches is used in this configuration?

Prefix matching

Suffix matching

Keyword matching

exact match

75、Which of the following statements about IPS is wrong?

The priority of the coverage signature is higher than that of the signature in the signature set.

When the “source security zone” is the same as the “destination security zone”, it means that the IPS policy is applied in the domain.

Modifications to the PS policy will not take effect immediately. You need to submit a compilation to update the configuration of the IPS policy.

The signature set can contain either predefined signatures or custom signatures. 832335

76、What are the following descriptions of the role of content security filtering technology? (Multiple choices)

File Filtering By blocking the transmission of certain types of files, you can reduce the risk of internal networks running malicious code and viruses. You can also prevent employees from leaking corporate confidential files to the Internet.

Content filtering prevents the leakage of confidential information and the transmission of non-compliant information.

The application behavior control function can finely control the common HTTP behavior and FTP behavior.

E-mail filtering refers to the management and control of e-mail sending and receiving activities, including the prevention of spam and the proliferation of anonymous e-mails, and the control of illegal sending and receiving.

77、The configuration commands for enabling the attack defense function are as follows:
[FW] anti-ddos syn-flood source-detect
[FW] anti-ddos udp-flood dynamic-fingerprint-learn
[FW] anti-ddos udp-frag-flood dynamic-fingerprint-learn
[FW] anti-ddos http-flood defend alert-rate 2000
[FW] anti-ddos http-flood source-detect mode basic
Which of the following are the correct descriptions of the attack prevention configuration? (Multiple Choices)

SYN Flood source detection and prevention function is enabled on the firewall.

The firewall uses the first packet discard to defense the UDP flood attacks.

HTTP flood attack defense uses enhanced mode for defense.

The threshold value enabled by HTTP Flood defense is 2000.

78、With regard to APT attacks, the attacker often lurks for a long time and launches a formal attack on the enterprise at the key point of the incident.
Generally, APT attacks can be summarized into four stages:
1. Collecting Information & Intrusion
2. Long-term lurking & mining
3. Data breach
4. Remote control and penetration
Regarding the order of these four stages, which of the following options is correct?

2-3-4-1

1-2-4-3

1-4-2-3

2-1-4-3

79、Attacks against the Web can be divided into three attacks on the client, server or communication channel.

True

False

80、IPS is an intelligent intrusion detection and prevention product. It can not only detect the occurrence of intrusion, but also can stop the occurrence and development of intrusion in real time through a certain response method and protect the information system from substantive attack in real time.
Which of the following statement is wrong about the description of IPS?

IPS is an intrusion detection system that can block in real-time when an intrusion is discovered.

IPS makes IDS and firewalls unified.

IPS must be deployed in bypass mode on the network.

The common IPS deployment mode is straight-line deployment.

81、Which of the following description are correct about the principles of HTTP Flood and HTTPS flood attack defense? (Multiple Choice)

HTTPS flood defense mode includes basic mode, enhanced mode, and 302 redirects.

HTTPS flood defense can perform source authentication by limiting the packet request rate.

The principle of HTTPS Flood attack is to use the URI that involves database operations or other URIs that consume system resources, causing server resources to become exhausted and unable to respond to normal requests.

The principle of HTTPS flood attack is to initiate a large number of HTTPS connections to the target server, resulting in exhaustion of server resources and failure to respond to normal requests.

82、Which of the following options belong to the network layer attack of the TCP/IP protocol stack? (multiple choice)

Address scanning

Buffer overflow p

Port scan

IP spoofing

83、The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are the possible reasons? (multiple choice)

The security policy does not reference the anti-virus configuration file.

The anti-virus configuration file is configured incorrectly.

The virus signature database version is older.

No virus exceptions are configured.

84、A business administrator wants to prevent employees from accessing shopping websites during business hours. A URL filtering configuration file was then configured to select the shopping site in the predefined category as blocked. However, employee A can still use the company’s network to shop online during the lunch break.
What are the possible reasons for the following? (Multiple choices)

The administrator did not set the time period to 9:00-18:00 daily.

The shopping site does not belong to the predefined shopping site category.

The administrator did not submit the configuration after configuration.

The administrator did not apply the URL filtering profile to the security policy.

85、Which of the following statement is wrong about a network intrusion detection system (NIDS)?

Mainly used for real-time monitoring of critical network path information, listening to all packets on the network, collecting data, and analyzing suspicious objects

Use newly received network packets as a data source;

Real-time monitoring through network adapters and analysis of all communication traffic through the network;

Used to monitor network traffic and can be deployed independently.

86、Which of the following attacks are belong to attacks against Web servers? (Multiple choices)

Website fishing fraud

Website Trojan

SQL injection

Cross-site scripting attacks

87、Anti DDoS seven-layer defense can work from the dimensions of interface-based defense, global defense and defense object-based defense.

True

False

88、Which of the following descriptions are correct for proxy-based anti-virus gateways? (multiple choice)

The detection rate is higher than the flow scanning method

System overhead will be relatively small

Cache all files through the gateway’s own protocol stack

More advanced operations such as decompression, shelling, etc. can be performed

89、The security management system is only optional, and anti-virus software or anti-hacking technology can be a good defense against network threats.

True

False

90、Which of the following is the correct configuration idea for the anti-virus strategy?
1. Load the feature library
2. Configure security policy and reference AV Profile
3. Apply and activate the license
4. Configure AV Profile
5. Submit

3->1->4->2->5

3->2->4->1->5

3->2->1->4->5

3->1->2->4->5

H12-722問題集と練習テスト（180試験問題)：https://www.goshiken.com/Huawei/H12-722-mondaishu.html

Tags: H12-722勉強時間, H12-722復習解答例, H12-722日本語解説集, H12-722日本語認定対策, H12-722絶対合格, H12-722資格模擬, H12-722資格講座

H12-722のPDF問題集リアル2022最近更新された問題 [Q68-Q90]

コメントを残すコメントをキャンセル

関連認証

H12-722 練習テスト

最近の投稿

アーカイブ

カテゴリー

H12-722のPDF問題集リアル2022最近更新された問題 [Q68-Q90]

コメントを残す コメントをキャンセル

関連認証

H12-722 練習テスト

最近の投稿

アーカイブ

カテゴリー

コメントを残すコメントをキャンセル