New 2022 Guaranteed Success with DumpsTests H12-722-ENU Dumps Huawei PDF Questions [Q94-Q117]

4.7/5 - (3 votes)

New 2022 Guaranteed Success with DumpsTests H12-722-ENU Dumps Huawei PDF Questions

Exceptional Practice To HCIP-Security-CSSN(Huawei Certified ICT Professional -Constructing Service Security Network) Pass the First Time

NO.94 The most common form of child-like attack is to send a large number of seemingly legitimate packets to the target host through Flood, which ultimately leads to network bandwidth.
Or the equipment resources are exhausted. Which of the following options is not included in traffic attack packets?

TCP packets

UDP packet

ICMP message

FTP message

NO.95 Which of the following descriptions about scanning and snooping attacks is wrong?

Scanning attacks include address scanning and port scanning.

It is usually the network detection behavior before the attacker launches a real attack.

The source address of the scanning attack is real, so you can use the method of directly adding a blacklist for defense.

When a worm breaks out, it is generally accompanied by an address scan attack, so scanning attacks are aggressive.

NO.96 Misuse detection discovers intrusion activity in system by detecting similar behaviors of user intrusions, or by detecting violations of system security rules indirectly by exploiting system flaws.
Which of the following is not misuse detection feature?

Easy to implement

Accurate detection

Effective detection of impersonation of legitimate users

Easy to upgrade

NO.97 Fage attack means that the original address and target address of TOP are both set to the IP address of a certain victim. This behavior will cause the victim to report to it.
SYN-ACK message is sent from the address, and this address sends back an ACK message and creates an empty connection, which causes the system resource board to occupy or target The host crashed.

True

False

NO.98 The administrator defines two keywords that need to be identified on the firewall. The keyword x has a weight value of 2, the keyword y has a weight value of 3, and the content filtering alarm threshold is 5 (blocking threshold) 10. If the device detects that there is a keyword x in the page viewed by the user, the two keywords are Y;
What is the following statement about the value of weights and the behavior of users visiting web pages?

The weight value is 8 and you can access the web page.

The weight value is 10 and you cannot access the web page.

The weight value is 8 and you cannot access the web page.

The weight value is 10 and you can access the web page.

NO.99 Which of the following options is incorrect for the IntelliSense engine IAE?

IAE’s content security detection capabilities include application identification and awareness, intrusion prevention, and Web application security.

English full name: Intelligent Awareness Engine.

The core of IAE is to organically integrate all content security related detection functions.

IAE engine’s security detection is parallel and uses a message-based file processing mechanism that can receive file fragments and perform security checks.

NO.100 Which of the following attacks are attacks against web servers? (multiple choices)

Website phishing deception

Website Trojan

SQL injection

Cross-site scripting attacks 2335

NO.101 For compressed files, the virus detection system can directly detect them.

True

False

NO.102 After the IP policy is enabled, some services are found to be inaccessible. Which of the following may be the cause? (Multiple Choice)

Only one direction of packets goes through the firewall

The same packet passes through the firewall multiple times

IPS missed

Too much traffic causes the bypass function to be enabled

NO.103 The administrator has made the following configuration:
1. The signature set Protect_ all includes the signature ID3000, and the overall action of the signature set is to block.
2. The action of overwriting signature ID3000 is an alarm.

The action of signing iD3000 is an alarm

The action of signing ID3000 is to block

Unable to determine the action of signature ID3000

The signature set is not related to the coverage signature

NO.104 For the URL is http://www.abcd.com:8080/news/education.aspx?name=tom&age=20, where is the path option?

http://www.abcd.com:8080/news/education.aspx

http://www.abcd.com:8080

/news/education.aspx

/news/education.aspx?name=tom&age=20

NO.105 Regarding the anti-spam local black and white list, which of the following statements is wrong?

The black and white list is matched by extracting the destination IP address of the SMTP connection

The black and white list is matched by the sender’s dns suffix

The black and white list is matched by extracting the source IP address of the SMTP connection

If the source IP address of the SMTP connection matches the blacklist, the connection will be blocked

NO.106 Which of the following features does Huawei NIP intrusion prevention equipment support? (multiple choice)

Virtual patch

Mail detection

SSL traffic detection

Application identification and control

NO.107 The virus signature database on the device needs to be continuously upgraded from the security center platform. Which of the following is the website of the security center platform?

sec. huawei. com.

support.huaver: com

www. huawei. com

security.. huawei. com

NO.108 The realization of content security filtering technology requires the support of the content security combination license.

True

False

NO.109 IPS is an intelligent intrusion detection and prevention product. It can not only detect the occurrence of intrusion, but also can stop the occurrence and development of intrusion in real time through a certain response method and protect the information system from substantive attack in real time.
Which of the following statement is wrong about the description of IPS?

IPS is an intrusion detection system that can block in real-time when an intrusion is discovered.

IPS makes IDS and firewalls unified.

IPS must be deployed in bypass mode on the network.

The common IPS deployment mode is straight-line deployment.

NO.110 When the license of Huawei USG6000 product expires, the RBL function will be unavailable, and users can only use the local black and white list to filter junk mail.

True

False

NO.111 Regarding the description of intrusion detection technology, which of the following statements is correct?

Unable to detect violation of security policy.

Can detect authorized and non-authorized intrusions.

Cannot find the trace of the system being attacked.

is an active, static security defense technology.

NO.112 The administrator configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not possible?

The file filtering configuration file is not referenced in the security policy

The file filtering configuration file is incorrect

License is not activated

Misconfigured action for file extension mismatch

NO.113 The Huawei USG6000 product can identify the actual types of common files and filter inspection to content. Even if the file is hidden in a zip file, or if you change the extension, you can’t escape the eyes of the firewall.

True

False

NO.114 Regarding the process of file filtering, which of the following statements is wrong?

After the file extraction fails, the file will still be filtered.

The application identification module can identify the type of application hosting the file.

Protocol decoding is responsible for parsing the file data and file transfer directions in the data stream.

The file type identification module is responsible for identifying the real type of the file and the extension of the file based on the file data

NO.115 After the cleaning device establishes a BGP neighbor relationship with the peer router, uses BGP traffic diversion and policy routing reinjection, what configuration needs to be performed on the cleaning device? (Multiple Choice)

[sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname] bgp 100 [sysname-bgp] peer X.X.X.X as-number 100 [sysname-bgp] import-route unr [sysname-bgp] ipv4-family unicast [sysname-bgp-af-ipv4] peer X.X.X.X route-policy 1 export [sysname-bgp-af-ipv4] peer X.X.X.X advertise-community [sysname-bgp-af-ipv4] quit

<sysname> system-view [sysname] firewall ddos bgp-next-hop X.X.X.X

[sysname] interface GigabitEthernet 2/0/1 [sysname-GigabitEthernet2/0/1] anti-ddos flow-statistic enable

[sysname] policy-based-route [sysname-policy-pbr] rule name huizhu [sysname-policy-pbr-rule-huizhu] ingress-interface GigabitEthernet 2/0/1 [sysname-policy-pbr-rule-huizhu] action pbr egress-interface GigabitEthernet 2/0/2 next-hop X.X.X.X [sysname-policy-pbr-rule-huizhu] quit

NO.116 When using the two-way SSL function to decrypt HTTPS packets, the value of the reverse proxy level represents the number of times the packet can be decrypted.

True

False

NO.117 Information security is the protection of information and information systems to prevent unauthorized access, use, leakage, interruption, modification, damage, and to improve For confidentiality, integrity and availability. ,

True

False