Valid H12-722_V3.0 Test Answers & Huawei H12-722_V3.0 Exam PDF [Q67-Q89]

Rate this post

Valid H12-722_V3.0 Test Answers & Huawei H12-722_V3.0 Exam PDF

Huawei H12-722_V3.0 Certification Real 2022 Mock Exam

NEW QUESTION 67
UDP is a connectionless protocol. UDP Flood attacks that change sources and ports will cause performance degradation of network devices that rely on session forwarding.
Even the session table is exhausted, causing the network to be paralyzed. Which of the following options is not a preventive measure for UDP Flood attacks?

UDP fingerprint learning

Associated defense

current limit

First packet discarded

NEW QUESTION 68
Which of the following protocols can be used to construct attack messages for special control message attacks? (multiple choice)

ICMP protocol

UDP protocol

CIP protocol

FTP protocol

NEW QUESTION 69
Which of the following types of attacks are DDoS attacks? 2I

Single packet attack

Floating child attack

Malformed message attack

Snooping scan attack

NEW QUESTION 70
When you suspect that the company’s network has been attacked by hackers, you have carried out a technical investigation. Which of the following options does not belong to the behavior that occurred in the early stage of the attack?

Planting malware

Vulnerability attack

Web application attacks

Brute force

NEW QUESTION 71
The network-based intrusion detection system is mainly used to monitor the information of the critical path of the network in real time, listen to all packets on the network, collect data, and divide Analyze the suspicious object, which of the following options are its main features? (multiple choices)

Good concealment, the network-based monitor does not run other applications, does not provide network services, and may not respond to other computers, so Not vulnerable to attack.

The monitoring speed is fast (the problem can be found in microseconds or seconds, and the host-based DS needs to take an analysis of the audit transcripts in the last few minutes

Need a lot of monitors.

It can detect the source address and destination address, identify whether the address is illegal, and locate the real intruder.

NEW QUESTION 72
Regarding the statement of the mail protocol, which of the following is correct? (multiple choice)

Using POP3, the client software will download all unread mails to the computer, and the mail server will delete the mails.

Use JIMAP; the client software will download all unread mails to the computer, and the mail server will delete the mails.

With IMAP, users can directly operate on the mail on the server, without downloading all the mails locally to perform various operations.

Using POP3, users can directly operate on the mail on the server without sending all mails to the local to perform various operations.

NEW QUESTION 73
Intrusion detection is a network security technology used to detect any damage or attempt to damage the confidentiality, integrity or availability of the system. Which of the following What is the content of the intrusion detection knowledge base?

Complete virus sample

Complete Trojan Horse

Specific behavior patterns

Security Policy

NEW QUESTION 74
The realization of content security filtering technology requires the support of the content security combination license.

True

False

NEW QUESTION 75
Regarding the description of intrusion detection technology, which of the following statements is correct?

It is impossible to detect violations of security policies.

It can detect all kinds of authorized and unauthorized intrusions.

Unable to find traces of the system being attacked.

is an active and static security defense technology.

NEW QUESTION 76
What content can be filtered by the content filtering technology of Huawei USG6000 products?

File content filtering

Voice content filtering

Apply content filtering..

The source of the video content

NEW QUESTION 77
USG6000V software logic architecture is divided into three planes: management plane, control plane and

Configuration plane

Business plane

Log plane

Data forwarding plane

NEW QUESTION 78
Anti DDoS seven-layer defense can work from the dimensions of interface-based defense, global defense and defense object-based defense.

True

False

NEW QUESTION 79
Abnormal detection is to establish the normal behavior characteristic profile of the system subject through the analysis of the audit data of the system: check if the audit data in the system If there is a big discrepancy with the normal behavior characteristics of the established subject, it is considered an intrusion. Nasu must be used as the system subject? (multiple choice)

Host

A group of users

Single user

A key program and file in the system

NEW QUESTION 80
The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are the possible reasons? (multiple choice)

The security policy does not reference the anti-virus configuration file.

The anti-virus configuration file is configured incorrectly.

The virus signature database version is older.

No virus exceptions are configured.

NEW QUESTION 81
When a virus is detected in an email, which of the following is not the corresponding action for detection?

Warning

Block

Declare

Delete attachments

NEW QUESTION 82
Which of the following signature attributes cannot be configured for IP custom signature?

Message length

Agreement

Direction

NEW QUESTION 83
For the basic mode of HTTP Flood source authentication, which of the following options are correct?
(multiple choice)

The basic mode can effectively block the access from the Feng Explor client.

The bot tool does not implement a complete HTTP protocol stack and does not support automatic redirection, so the basic mode can effectively defend against HTTP Flood attacks.
hit.

When there is an HTTP proxy server in the network, the firewall will add the IP address of the proxy server to the whitelist, but it will recognize the basic source of the zombie host.
The certificate is still valid.

The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.

NEW QUESTION 84
Information security is the protection of information and information systems to prevent unauthorized access, use, leakage, interruption, modification, damage, and to improve For confidentiality, integrity and availability. ,

True

False

NEW QUESTION 85
Which of the following is not an abnormal situation of the file type recognition result?

The file extension does not match.

Unrecognized file type

File corruption

The file is compressed

NEW QUESTION 86
Regarding the file filtering technology in the USG6000 product, which of the following options is wrong?

It can identify the application that carries the file, the file transfer direction, the file type and the file extension.

Even if the file type is modified, it can also identify the true type of the file

It can identify the type of files transmitted by itself, and can block, alert and announce specific types of files.

It supports filtering the contents of compressed files after decompression. “

NEW QUESTION 87
Based on the anti-virus gateway of streaming scan, which of the following descriptions is wrong?

Rely on state detection technology and protocol analysis technology

The performance is higher than the agent-based method

The cost is smaller than the agent-based approach

The detection rate is higher than the proxy-based scanning method

NEW QUESTION 88
When configuring the URL filtering configuration file, www.bt.com is configured in the URL blacklist-item:
At the same time, set it in the custom URL category.
A URL is set as bt.com, and the action of customizing URL classification is a warning. Regarding the above configuration, which of the following statements are correct? (More select)

Users can visit www.videobt.com website.

The user can visit the www.bt.com website, but the administrator will receive a warning message.

User cannot access all the sites ending with bt com.

When users visit www.bt. com, they will be blocked.

NEW QUESTION 89
In the Huawei USG6000 product, after creating or modifying the security configuration file, the configuration content will not take effect immediately: you need to click the “Prompt” in the upper right corner of the interface.
“Hand in” to activate.

True

False

H12-722_V3.0 Exam Questions and Valid H12-722_V3.0 Dumps PDF: https://www.testsimulate.com/H12-722_V3.0-study-materials.html

Leave a Reply Cancel reply