QUESTION 16
What content can be filtered by the content filtering technology of Huawei USG6000 products? (multiple choice)

QUESTION 17
The network-based intrusion detection system is mainly used to monitor the information of the critical path of the network in real time, listen to all packets on the network, collect data, and divide Analyze the suspicious object, which of the following options are its main features? (multiple choices)

QUESTION 18
With regard to APT attacks, the attacker often lurks for a long time and launches a formal attack on the enterprise at the key point of the incident.
Generally, APT attacks can be summarized into four stages:
1. Collecting Information & Intrusion
2. Long-term lurking & mining
3. Data breach
4. Remote control and penetration
Regarding the order of these four stages, which of the following options is correct?

QUESTION 19
Malicious code usually uses RootKit technology in order to hide itself. RootKit modifies the kernel of the system by loading a special driver.
To hide itself and the role of designated files.

QUESTION 20
The configuration command to enable the attack prevention function is as follows; n
[FW] anti-ddos syn-flood source-detect
[FW] anti-ddos udp-flood dynamic-fingerprint-learn
[FW] anti-ddos udp-frag-flood dynamic fingerprint-learn
[FW] anti-ddos http-flood defend alert-rate 2000
[Fwj anti-ddos htp-flood source-detect mode basic
Which of the following options is correct for the description of the attack prevention configuration? (multiple choice)

QUESTION 21
Which of the following technology, administrators can according to business requirements, to scale to achieve load sharing of business flow?

QUESTION 22
Regarding the description of keywords, which of the following is correct? (multiple choice)

QUESTION 23
Which of the following descriptions about viruses and Trojans are correct? (multiple choices)

QUESTION 24
Which of the following elements does PDCA include? (Choose 3 answers)

QUESTION 25
In the deployment of Huawei NIP6000 products, only port mirroring can be used for streaming replication.

QUESTION 26
The core technology of content security lies in anomaly detection, and the concept of defense lies in continuous monitoring and analysis.

QUESTION 27
Which patches does Policy Center support to management?(Choose 3 answers)

QUESTION 28
The most common form of child-like attack is to send a large number of seemingly legitimate packets to the target host through Flood, which ultimately leads to network bandwidth.
Or the equipment resources are exhausted. Which of the following options is not included in traffic attack packets?

QUESTION 29
Regarding the anti-spam local black and white list, which of the following statements is wrong?

QUESTION 30
What are the typical technologies of anti-virus engines (multiple choice)

QUESTION 31
Regarding the enhanced mode in HTTP Flood source authentication, which of the following descriptions are correct? Multiple choices