Latest [Dec 02, 2021] Realistic Verified H12-722_V3.0 Dumps
Pass Huawei H12-722_V3.0 Exam Updated 189 Questions
NEW QUESTION 78
The user needs of a university are as follows:
1. The environment is large, and the total number of two-way traffic can reach 800M. Huawei USG6000 series firewall is deployed at its network node.
2. The intranet is divided into student area, server area, etc., users are most concerned about the security of the server area to avoid attacks from various threats.
3. At the same time, some pornographic websites in the student area are prohibited.
The external network has been configured as an untrust zone and the internal network has been configured as a trust zone on the firewall. How to configure the firewall to meet the above requirements?
- A. In the direction of untrust to the intranet, only the AV and IPS protection functions are turned on for the server area to protect the server
- B. You can directly turn on the AV, IRS protection functions, and URL filtering functions in the global environment to achieve the requirements
- C. Go to the untrust direction to open the URL filtering function for the entire campus network, and filter some classified websites
- D. To the untrust direction, only enable AV and IPS protection functions for the server zone to protect the server
Answer: A,B,C
NEW QUESTION 79
In the Policy Center strategy configuration, how many violations rating of definition are there?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 80
Which of the following elements does PDCA include? (Choose 3 answers)
- A. Monitoring
- B. Plan
- C. Implementation
- D. termination
Answer: A,B,C
NEW QUESTION 81
The whitelist rule of the firewall anti-virus module is configured as ("*example*, which of the following matching methods is used in this configuration?
- A. Prefix matching
- B. Suffix matching
- C. Keyword matching
- D. Exact match
Answer: C
NEW QUESTION 82
The administrator of a certain enterprise wants employees of Yangzhi to visit the shopping website during working hours. So a URL filtering configuration file is configured to divide the predefined The shopping website in the category is selected as blocked. But employee A can still use the company's network to shop online during lunch break. Then what are the following possible reasons some?
- A. The administrator did not submit the configuration after completing the configuration.
- B. The shopping website does not belong to the predefined shopping website category
- C. The administrator has not applied the URL pass-through configuration file to the security policy.
- D. The administrator has not set the time to vote every day from 9:00 to 18:00
Answer: A,B,C
NEW QUESTION 83
The virus signature database on the device needs to be continuously upgraded from the security center platform. Which of the following is the website of the security center platform?
- A. www. huawei. com
- B. security.. huawei. com
- C. support.huaver: com
- D. sec. huawei. com.
Answer: D
NEW QUESTION 84
Which of the following options belong to the upgrade method of the anti-virus signature database of Huawei USG6000 products? (multiple choice)
- A. Online upgrade
- B. Manual upgrade
- C. Local upgrade
- D. Automatic upgrade
Answer: A,C
NEW QUESTION 85
For Huawei USG600 products, which of the following statements about mail filtering configuration is correct?
- A. Cannot control the number of received email attachments
- B. You can control the size of the attachment of the received mail
- C. When the spam processing action is an alert, the email will be blocked and an alert will be generated
- D. Cannot perform keyword filtering on incoming mail
Answer: B
NEW QUESTION 86
Which of the following options are common behavioral characteristics of viruses? (multiple choices)
- A. Network attack characteristics
- B. Download and backdoor features
- C. Information collection characteristics
- D. Self-hidden features
Answer: A,B,C,D
NEW QUESTION 87
Regarding the enhanced mode in HTTP Flood source authentication, which of the following descriptions are correct? Multiple choices
- A. The enhanced mode is superior to the basic mode in terms of user experience.
- B. Enhanced mode refers to the authentication method using verification code.
- C. Enhanced mode supports all HTTP Flood source authentication fields. " WWQQ: 922333
- D. Some bots have a redirection function, or the free proxy used during the attack supports the redirection function, which leads to the failure of the basic mode of defense Effective, enhanced mode can effectively defend.
Answer: B,D
NEW QUESTION 88
Which of the following descriptions are correct for proxy-based anti-virus gateways? (multiple choice)
- A. System overhead will be relatively small
- B. The detection rate is higher than the flow scanning method
- C. Cache all files through the gateway's own protocol stack
- D. More advanced operations such as decompression, shelling, etc. can be performed
Answer: B,C,D
NEW QUESTION 89
When you suspect that the company's network has been attacked by hackers, you have carried out a technical investigation. Which of the following options does not belong to the behavior that occurred in the early stage of the attack?
- A. Web application attacks
- B. Vulnerability attack
- C. Planting malware
- D. Brute force
Answer: C
NEW QUESTION 90
Which is correct about the following Policy Center troubleshooting process?
- A. Hardware fault-> connection fault-> NAC client fault-> Policy Center server fault
- B. Hardware fault-> connection fault-> Policy Center server fault-> NAC client fault
- C. hardware fault-> NAC client fault-> connection fault-> Policy Center server fault
- D. connection fault-> Hardware fault-> NAC client fault-> Policy Center server fault
Answer: A
NEW QUESTION 91
Regarding the description of intrusion detection technology, which of the following statements is correct?
- A. Unable to find traces of the system being attacked.
- B. is an active and static security defense technology.
- C. It can detect all kinds of authorized and unauthorized intrusions.
- D. It is impossible to detect violations of security policies.
Answer: C
NEW QUESTION 92
If the Huawei USG600 product uses its own protocol stack cache for all files passing through the device and then performs a virus scan, then the device uses It is the stream scanning method.
- A. True
- B. False
Answer: B
NEW QUESTION 93
For special message attacks, which of the following option descriptions is correct?
- A. The attacker probes the network structure by sending special control messages to launch a real attack.
- B. Special control message attacks do not have the ability to detect the network structure. Only scanning attacks can detect the network.
- C. Special control message items can only use ICMP to construct attack messages.
- D. Special control packet attack is a potential attack and does not have direct destructive behavior
Answer: D
NEW QUESTION 94
When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.
- A. True
- B. False
Answer: A
NEW QUESTION 95
For compressed files, the virus detection system can directly detect them.
- A. True
- B. False
Answer: A
NEW QUESTION 96
With regard to APT attacks, the attacker often lurks for a long time and launches a formal attack on the enterprise at the key point of the incident.
Generally, APT attacks can be summarized into four stages:
1. Collecting Information & Intrusion
2. Long-term lurking & mining
3. Data breach
4. Remote control and penetration
Regarding the order of these four stages, which of the following options is correct?
- A. 1-2-4-3
- B. 1-4-2-3
- C. 2-1-4-3
- D. 2-3-4-1
Answer: B
NEW QUESTION 97
The administrator has made the following configuration:
1. The signature set Protect_ all includes the signature ID3000, and the overall action of the signature set is to block.
2. The action of overwriting signature ID3000 is an alarm.
- A. The action of signing iD3000 is an alarm
- B. The action of signing ID3000 is to block
- C. Unable to determine the action of signature ID3000
- D. The signature set is not related to the coverage signature
Answer: A
NEW QUESTION 98
The application behavior control configuration file takes effect immediately after being referenced, without configuration submission.
- A. True
- B. False
Answer: A
NEW QUESTION 99
Viruses can damage computer systems. v Change and damage business data: spyware collects, uses, and disperses sensitive information of corporate employees.
These malicious pastoral software seriously disturb the normal business of the enterprise. Desktop anti-disease software can solve the problem of central virus and indirect software from the overall situation.
- A. True
- B. False
Answer: B
NEW QUESTION 100
Regarding the processing process of file overwhelming, which of the following statements is correct?
- A. If the file type is a compressed file, then after the file filtering check, the female file will be sent to the file decompression module for decompression and decompression.
Press out the original file. If the decompression fails, the file will not be re-filed. - B. The file filtering module will compare the application type, file type, and transmission direction of the file identified by the previous module with the file filtering rules configured by the administrator.
Then the lookup table performs matching from top to bottom. - C. If all the parameters of Wenzhu can match all file filtering rules, then the module will execute the action of this file filtering rule.
- D. There are two types of actions: warning and blocking.
Answer: C
NEW QUESTION 101
SACG query right-manager information as follows, which options are correct? (Select 2 answers)
- A. master controller IP address is 2.1.1.1.
- B. master controller IP address is 1.1.1.2.
- C. SACG linkage success with controller.
- D. SACG and IP address 2.1.1.1 server linkage is not successful
Answer: C,D
NEW QUESTION 102
......
Get 2021 Updated Free Huawei H12-722_V3.0 Exam Questions & Answer: https://www.actualtestsquiz.com/H12-722_V3.0-test-torrent.html
