Huawei H12-722-ENU Premium Exam Engine pdf – Download Free Updated 180 Questions [Q58-Q73]

Q58. Huawei NIP6000 products have zero-setting network parameters and plug-and-play functions, because the interfaces and interface pairs only work on layer 2 without Set the IP address.

True

False

Q59. Which of the following is correct about enhanced mode in HTTP Flood Source authentication? (Multiple selection)

Enhanced mode refers to the use of verification code authentication.

Some bots have redirection function, or the free agent used during the attack supports the redirection function, resulting in the failure of defense of the basic mode. The enhanced mode can effectively defend.

The enhanced mode is better than the basic mode in the user experience.

The enhanced mode support all HTTP flood source authentication scenarios.

Q60. Which of the following is a false positive for an intrusion detection system?

Unable to detect new worms

The process of trying to log in to the system was recorded

Use Ping for network detection and being alerted as an attack

Web-based attacks have not been detected by the system

Q61. What are the following descriptions of the role of content security filtering technology? (Multiple choices)

File Filtering By blocking the transmission of certain types of files, you can reduce the risk of internal networks running malicious code and viruses. You can also prevent employees from leaking corporate confidential files to the Internet.

Content filtering prevents the leakage of confidential information and the transmission of non-compliant information.

The application behavior control function can finely control the common HTTP behavior and FTP behavior.

E-mail filtering refers to the management and control of e-mail sending and receiving activities, including the prevention of spam and the proliferation of anonymous e-mails, and the control of illegal sending and receiving.

Q62. Which of the following description are correct about the principles of HTTP Flood and HTTPS flood attack defense? (Multiple Choice)

HTTPS flood defense mode includes basic mode, enhanced mode, and 302 redirects.

HTTPS flood defense can perform source authentication by limiting the packet request rate.

The principle of HTTPS Flood attack is to use the URI that involves database operations or other URIs that consume system resources, causing server resources to become exhausted and unable to respond to normal requests.

The principle of HTTPS flood attack is to initiate a large number of HTTPS connections to the target server, resulting in exhaustion of server resources and failure to respond to normal requests.

Q63. Which of the following is wrong about the 3 types of abnormalities in the file type recognition result?

File extension mismatch means that the file type does not match the file extension.

Unrecognized file type means that the file type can’t be identified and there is no file extension.

File corruption means that the file type can’t be identified because the file is damaged.

Unrecognized file type means that the file type can’t be recognized and the file extension can’t be recognized.

Q64. Under the CLI command, which of the following commands can be used to view the AV engine and virus database version?

display version av-sdb

display utm av version

display av utm version

display utm version

Q65. Regarding the mail content filtering configuration of Huawei USG6000 products, which of the following statements is wrong?.

Mail filtering will only take effect when the mail filtering configuration file is invoked when the security policy is allowed.

When a POP3 message is detected, if it is judged to be an illegal email, the firewall’s response action only supports sending alarm information, and will not block the email o

When an IMAP message is detected, if it is judged to be an illegal email; the firewall’s response action only supports sending alarm messages and will not block the email.

The attachment size limit is for a single attachment, not for the total size of all attachments.

Q66. Which of the following options are correct for the description of URPF technology? (Multiple Choices)

The main function is to prevent network attacks based on source address spoofing.

Does not check whether the interfaces match in the strict mode. As long as there is a route to the source address, the packets can pass.

In loose mode, not only the corresponding entries in the forwarding table are required, but also the interfaces must match to pass the URPF check.

Use the loose mode of URPF in an environment where route symmetry is not guaranteed.

Q67. The DDoS attack defense configuration process is as follows:
1, start the flow statistics function;
2. Set different protection thresholds for different types of attacks;
3. When the traffic exceeds the preset threshold, the system starts attack defense.

TRUE

FALSE

Q68. Regarding the network intrusion detection system (NIDS), which of the following statements is wrong?

It is mainly used for real-time monitoring of the information of the critical path of the network, listening to all packets on the network, collecting data, and analyzing suspicious objects

Use the newly received network packet as the data source;

Real-time monitoring through the network adapter, and analysis of all communication services through the network;

Used to monitor network traffic, and can be deployed independently.

Q69. Viruses can damage computer systems. v Change and damage business data: spyware collects, uses, and disperses sensitive information of corporate employees.
These malicious pastoral software seriously disturb the normal business of the enterprise. Desktop anti-disease software can solve the problem of central virus and indirect software from the overall situation.

True

False

Q70. For the basic mode of HTTP Flood source authentication, which of the following options are correct?
(multiple choice)

The basic mode can effectively block the access from the Feng Explor client.

The bot tool does not implement a complete HTTP protocol stack and does not support automatic redirection, so the basic mode can effectively defend against HTTP Flood attacks.
hit.

When there is an HTTP proxy server in the network, the firewall will add the IP address of the proxy server to the whitelist, but it will recognize the basic source of the zombie host.
The certificate is still valid.

The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.

Q71. Regarding the enhanced mode in HTTP Flood source authentication, which of the following descriptions are correct? Multiple choices

Enhanced mode refers to the authentication method using verification code.

Some bots have a redirection function, or the free proxy used during the attack supports the redirection function, which leads to the failure of the basic mode of defense Effective, enhanced mode can effectively defend.

The enhanced mode is superior to the basic mode in terms of user experience.

Enhanced mode supports all HTTP Flood source authentication fields. ” WWQQ: 922333

Q72. When you suspect that the corporate network is being attacked by hackers, you have conducted technical investigations.
Which of the following options does not belong to the pre-attack behavior?

Planting Malware

Loophole attack

Web Application Attacks

Brute force attack

Q73. Which of the following are the possible causes for the failure to include a signature after the IPS policy is configured? (Multiple choices)

Direction is not enabled

Direction opened, but no specific direction was chosen

Severity configuration is too high

Incorrect protocol selection

Huawei H12-722-ENU Premium Exam Engine pdf – Download Free Updated 180 Questions [Q58-Q73]

Leave a Reply Cancel reply

H12-722-ENU Practice Tests

Related Certifications

Recent Posts

Categories

Archives