[Q52-Q72] 100% Passing Guarantee - Brilliant H12-711 Exam Questions PDF [Jun-2022]

QUESTION 52
When the firewall hard disk is in place, which of the following is correct description for the firewall log?

The administrator can advertise the content log to view the detection and defense records of network threats.

The administrator can use the threat logto understand the user’s security risk behavior and the reason for being alarmed or blocked.

The administrator knows the user’s behavior, the keywords explored, and the effectiveness of the audit policy configuration through the user activity log.

The administrator can learn the security policy of the traffic hit through the policy hit log. And use it for fault location when the problem occurs.

QUESTION 53
Evidence identification needs to resolve the integrity verification of the evidence and determine whether it meets the applicable standards. Which of the following statements iscorrect about the standard of evidence identification?

Relevance criterion means that if the electronic evidence can have a substantial impact on the facts of the case to s certain extent, the court should determine that it is relevant.

Objective standard means that the acquisition, storage, and submission of electronic evidence should be legal, and the basic rights such as national interests, social welfare, and personal privacy are not strictly violated

Legality standard is to ensure that the electronic evidence is collected from the initial collection, and there is no change in the content of the evidence submitted as evidence.

Fairness standard refers to the evidence obtained by the legal subject through egal means, which has the evidence ability.

QUESTION 54
Which of the following is the analysis layer device inthe Huawei SDSec solution? r a.

cis

Agile Controller

switch

Firehunter

QUESTION 55
When the session authentication mode is used to trigger the firewall’s built-in Portal authentication, the user does not actively perform identity authentication, advanced service access, and device push “redirect” to the authentication page.

True

False

QUESTION 56
Which of the following are the response actions after the gateway antivirus detects the mail virus? (Multiple choice)

Alarm

Blocking

Announcement

Delete attachments

QUESTION 57
Which of the following traffic matches the authentication policy triggers authentication?

Access device or device initiated traffic

DHCP, BGP. OSPF and LDP packets

Traffic of visitors accessing HTTP services

The first DNS packet corresponding to the HTTP service data flow

QUESTION 58
Terminal detection is an important part of the future development of informationsecurity. Which of the following methods belong to the category of terminal detection? (Multiple Choice)

Install host antivirus software

Monitor and remember the external device

Prevent users from accessing public network search engines

Monitorthe host registry modification record

QUESTION 59
Use iptables to write a rule that does not allow the network segment of 172.16.0.0/16 to access the device. Which of the following rules is correct?

iptables -t filter -A INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j DROP

iptables -t filter -P INPUT -s 172.16.0.0/16 -p all -j ACCEPT

iptables -t filter -P INPUT -d 172.16.0.0/16 -p all -j ACCEPT

QUESTION 60
Which of the following statements are correct about the business continuity plan? (Multiple Choice)

Business continuity plan does not require high-level participation of the company in determining the project scope phase

BCP needs flexibility because it cannot predict all possible accidents

Business continuity plan does not require high-level participation of the company before forming a formal document

Not all security incidents must be reported to company executives

QUESTION 61
The GE1/0/1 and GE1/0/2 ports of the firewall belong to the DMZ. If the area connected to GE1/0/1 can accessthe area connected to GE1/0/2, which of the following is correct?

Need to configure local to DMZ security policy

No need to do any configuration

Need to configure an interzone security policy

Need to configure DMZ to local security policy

QUESTION 62
Typical remote authentication modes are: (Multiple Choice)

RADIUS

Local

HWTACACS

LDP

QUESTION 63
After the network intrusion event occurs,according to the plan to obtain the identity of the intrusion, the attack source and other information, and block the intrusion behavior, which links of the above actions are involved in the PDRR network security model? (Multiple Choice)

Protection link

Testing link

Response link

Recovery link

QUESTION 64
In o der to obtain evidence of crime, it is necessary to master the technology ofintrusion tracking Which of the following descriptions are correct about the tracking technology? (Multiple Choice)

Packet Recording Technology marks packets on each passing router by inserting trace data into the tracked IP packets

Link test technology determines the source of the attack by testing the network link between the routers

Packet tagging technology extracts information from attack sources by recording packets on the router and then using data drilling techniques

Snallow mail behavior analysis can analyze the information such as sending IF address, sending time, sending frequency, number of recipients, shallow email heacers and so on.

QUESTION 65
In order to obtain evidence of crime, it is necessary to master :he technology of intrusion tracking. Which of the following descriptions are correct about thetracking technology? (Multiple Choice)

Packet Recording Technology marks packets on each router that has been spoken by inserting trace data into the tracked IP packets.

Link detection technology determines the source of the attack by testing the network connection between the routers

Packet tagging technology extracts information from attack sources by recording packets on the router and then using data drilling techniques

Analysis of shallow mail behavior can analyze the information such as sending IP address, sending time, sending frequency, number of recipients, shallow email headers, etc.

QUESTION 66
In the construction of information security system, the security model is needed to accurately describe the relationship between important aspects of security and system behavior

True

False

QUESTION 67
NAPTtechnology can implement a public network IP address for multiple private network hosts

True

False

QUESTION 68
Which of the following is the default backup method for double hot standby?

Automatic backup

Manual batch backup

Session fast backup

Configuration of the active and standby FWs after the device is restarted

QUESTION 69
Which of the following options does not include the respondents in the questionnaire for safety assessment?

Network System Administrator

Security administrator

Technical leader

QUESTION 70
Which of the following does not include the steps of the safety assessment method?

Manual audit

Penetration test

Questionnaire survey

Data analysis

QUESTION 71
When the USG series firewall hard disk is in place, which of the following logs can be viewed? (Multiple Choice)

Operation log

Business log

Alarm information

Threat log

QUESTION 72
Which of the following is wrong about the management of Internet users?

Each user group can include multiple users and user groups

Each user group can belong to multiple user groups

The system has a default user group by default, which is also the system default authentication domain.

Each user belongs to at least one user group, also can belong to multiple user groups

[Q52-Q72] 100% Passing Guarantee – Brilliant H12-711 Exam Questions PDF [Jun-2022]

Leave a Reply Cancel reply

H12-711 Practice Tests

Related Certifications

Recent Posts

Categories

Archives