The Best H12-722-ENU Exam Study Material and Preparation Test Question Dumps [Q25-Q49]

4.2/5 - (4 votes)

The Best H12-722-ENU Exam Study Material and Preparation Test Question Dumps

Get Ready to Pass the H12-722-ENU exam Right Now Using Our HCNP-Security Exam Package

NEW QUESTION 25
The following figure is a schematic diagram of the detection file of the firewall and the sandbox system linkage.

The Web reputation function is enabled on the firewall, and website A is set as a trusted website and website B is set as a suspicious website.
Which of the following statements is correct

The files obtained by users from website A and website B will be sent to the inspection node for inspection.

When a user visits website B, although the firewall will extract the file and send it to the detection node, the user can still access normally during the detection process Site B.

After the detection node detects the suspicious file, it not only informs the firewall in the figure of the result, but also informs other network devices connected to it.

Assuming that website A is an unknown website, the administrator cannot detect the traffic file of this website sC

NEW QUESTION 26
When you suspect that the corporate network is being attacked by hackers, you have conducted technical investigations.
Which of the following options does not belong to the pre-attack behavior?

Planting Malware

Loophole attack

Web Application Attacks

Brute force attack

NEW QUESTION 27
Which of the following options is wrong for the description of the cleaning center?

The cleaning center completes the functions of drainage, cleaning, and re-injection of the flow after cleaning in the abnormal flow.

There are two types of drainage methods: static drainage and dynamic drainage.

Re-injection methods include: policy route re-injection, static route re-injection, VVPN back-injection and layer 2 same.

The cleaning equipment supports rich and flexible attack prevention technologies, but it is ineffective against cc attacks and ICMP Flood attacks.

NEW QUESTION 28
With the continuous development of the network and the rapid development of applications, companies are making users more and more frequently start to transfer files on the network.
Virus threats are becoming more and more serious. Only by rejecting the virus outside the network can data security and system stability be guaranteed. So, which of the following are What harm might be caused by illness? (multiple choices)

Threaten the security of the user’s host and network.

Some viruses can be used as intrusion tools, such as Trojan horse viruses,

Control the host computer’s accumulated limit and the user’s data, and some viruses may even cause damage to the host’s hardware.

Can easily pass the defense of Huawei USG6000 products

NEW QUESTION 29
For the description of the Anti DDOS system, which of the following options is correct? C

The detection center is mainly to pull and clean the attack flow according to the control strategy of the security management center, and re-inject the cleaned normal flow back to the customer.
User network, send to the real destination.

The management center mainly completes the processing of attack events, controls the drainage strategy and cleaning strategy of the cleaning center, and responds to various attack events and attack flows.
View in categories and generate reports.

The main function of the Green Washing Center is to detect and analyze DDoS attack traffic on the flow from mirroring or splitting, and provide analysis data to The management center makes a judgment.

The firewall can only be used for inspection equipment

NEW QUESTION 30
When a device identifies a keyword during content filtering detection, what response actions can the device perform? (Multiple Choice)

Alarm

Blocking

Announcement

Operate by weight

NEW QUESTION 31
After the cleaning device establishes a BGP neighbor relationship with the peer router, uses BGP traffic diversion and policy routing reinjection, what configuration needs to be performed on the cleaning device? (Multiple Choice)

[sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname] bgp 100 [sysname-bgp] peer X.X.X.X as-number 100 [sysname-bgp] import-route unr [sysname-bgp] ipv4-family unicast [sysname-bgp-af-ipv4] peer X.X.X.X route-policy 1 export [sysname-bgp-af-ipv4] peer X.X.X.X advertise-community [sysname-bgp-af-ipv4] quit

<sysname> system-view [sysname] firewall ddos bgp-next-hop X.X.X.X

[sysname] interface GigabitEthernet 2/0/1 [sysname-GigabitEthernet2/0/1] anti-ddos flow-statistic enable

[sysname] policy-based-route [sysname-policy-pbr] rule name huizhu [sysname-policy-pbr-rule-huizhu] ingress-interface GigabitEthernet 2/0/1 [sysname-policy-pbr-rule-huizhu] action pbr egress-interface GigabitEthernet 2/0/2 next-hop X.X.X.X [sysname-policy-pbr-rule-huizhu] quit

NEW QUESTION 32
For the URL is htpt://www.abcd. com:8080/news/education. aspx?name=tom&age=20, which option is path?

htttp://www.abcd. com:8080/news/education. aspx

htttp://www.abcd. com:8080,te

/news/education. aspx

/news/education. aspx?name=tom&age=20

NEW QUESTION 33
The most common form of child-like attack is to send a large number of seemingly legitimate packets to the target host through Flood, which ultimately leads to network bandwidth.
Or the equipment resources are exhausted. Which of the following options is not included in traffic attack packets?

TCP packets

UDP packet

ICMP message

FTP message

NEW QUESTION 34
What are the three aspects that need to be considered when designing a cloud platform security solution? (Multiple choices)

Infrastructure security

Tenant security

How to manage the operation and maintenance

Hardware Maintenance

NEW QUESTION 35
Regarding the strong statement of DNS Request Flood attack, which of the following options is correct?

The DNS Request Flood attack on the cache server can be redirected to verify the legitimacy of the source

For the DNS Reguest Flood attack of the authorization server, the client can be triggered to send DINS requests in TCP packets: to verify The legitimacy of the source IP.

In the process of source authentication, fire prevention will trigger the client to send DINS request via TCP report to verify the legitimacy of the source IP, but in a certain process It will consume the TCP connection resources of the OINS cache server.

Redirection should not be implemented on the source IP address of the attacked domain name, and the destination P address of the attacked domain name should be implemented in the wild.

NEW QUESTION 36
The administrator of a certain enterprise wants employees of Yangzhi to visit the shopping website during working hours. So a URL filtering configuration file is configured to divide the predefined The shopping website in the category is selected as blocked. But employee A can still use the company’s network to shop online during lunch break. Then what are the following possible reasons some?

The administrator has not set the time to vote every day from 9:00 to 18:00

The shopping website does not belong to the predefined shopping website category

The administrator did not submit the configuration after completing the configuration.

The administrator has not applied the URL pass-through configuration file to the security policy.

NEW QUESTION 37
For the URL is http://www.abcd.com:8080/news/education.aspx?name=tom&age=20, where is the path option?

http://www.abcd.com:8080/news/education.aspx

http://www.abcd.com:8080

/news/education.aspx

/news/education.aspx?name=tom&age=20

NEW QUESTION 38
When you suspect that the company’s network has been attacked by hackers, you have carried out a technical investigation. Which of the following options does not belong to the behavior that occurred in the early stage of the attack?

Planting malware

Vulnerability attack”

We6 Application Click

Brute force

NEW QUESTION 39
When configure the URL filtering configuration file, www.bt.com is configured in the URL blacklist, and URL is set to *bt.com in the custom URL classification, and the action for customizing the URL classification is warning. .
Which of the following statements is true about the above configuration? (Multiple choices)

Users can visit www.videobt.com.

Users can visit www.bt.com website, but administrators will receive warning message.

Users can’t access all websites ending with bt.com.

Users will be blocked when they visit www.bt.com.

NEW QUESTION 40
Which of the following options belong to the keyword matching mode? (multiple choice)

Text

Regular expressions

Community word

Custom keywords

NEW QUESTION 41
Analysis is the core function of intrusion detection. The analysis process of intrusion detection can be divided into three phases. The analyzer is built to analyze, feedback and refine the actual field data.
Which of these are the functions included in the first two phases?

Data Analysis, Data Classification, Post Processing

Data Processing, Data Classification, Post Processing

Data Processing, Attack Classification, Post Processing

Data Processing, Data Classification, Attack Playback

NEW QUESTION 42
In the construction of information security, the intrusion detection system plays the role of a monitor. It monitors the flow of key nodes in the information system.
In-depth analysis to discover security incidents that are occurring. Which of the following are its characteristics?. c0O

IDS can be linked with firewalls and switches to become a powerful “assistant” of firewalls, which can better and more accurately control access between domains.

It is impossible to correctly analyze the malicious code doped in the allowed application data stream.

Unable to detect malicious operations or misoperations from internal killings.

Cannot do in-depth inspection

NEW QUESTION 43
After the user deploys the firewall anti-virus strategy, there is no need to deploy anti-virus software

True

False.

NEW QUESTION 44
Regarding the local black and white list of anti-spam messages, which of the following statements is wrong?

The black and white list is matched by extracting the destination IP address of the SMTP connection

The black and white list is matched by the sender’s dns suffix

Black and white lists are matched by extracting the source IP address of the SMTP connection

Block the connection if the source IP address of the SMTP connection matches the blacklist

NEW QUESTION 45
SQI injection attacks generally have the following steps:
1, Privilge Escalation
2, Get the data in the database
3, To determine whether there is a vulnerability in the webpage
4, Determine the database type
Which of the following options is correct for the ordering of these steps?

3, 4, 1, 2

3, 4, 2, 1

4, 1, 2, 3

4, 2, 1, 3

NEW QUESTION 46
USG6000V software logical architecture is divided into three planes: the management plane, control plane, and _______.

configuration plane

service plane

log plane

data forwarding plane

NEW QUESTION 47
The virus signature database on the device needs to be continuously upgraded from the security center platform. Which of the following is the website of the security center platform?

sec. huawei. com.

support.huaver: com

www. huawei. com

security.. huawei. com

NEW QUESTION 48
Which of the following types of attacks are DDoS attacks? 2I

Single packet attack

Floating child attack

Malformed message attack

Snooping scan attack

NEW QUESTION 49
Anti-DDoS defense system includes: management center, inspection center and cleaning center.

True

False

Get Special Discount Offer of H12-722-ENU Certification Exam Sample Questions and Answers: https://www.testsimulate.com/H12-722-ENU-study-materials.html

Leave a Reply Cancel reply