H12-722-ENU Archives - Premium VCE Dumps

1 Jul, 2022 By admin

Pass Guaranteed Quiz 2022 Realistic Verified Free H12-722-ENU Exam Dumps [Q67-Q88]

Pass Guaranteed Quiz 2022 Realistic Verified Free H12-722-ENU Exam Dumps

Free HCNP-Security H12-722-ENU Ultimate Study Guide (Updated 180 Questions)

NO.67 Regarding the global configuration of file filtering configuration files for Huawei USG6000 products, which of the following descriptions is correct?

File filtering, content filtering and anti-virus detection cannot be performed when the file is damaged. At this time, the documents can be released or blocked according to business requirements.

When the file extension does not match, if the action is “Allow” or “Alarm”, file filtering, content filtering and anti-virus are performed according to the file type Detection.

When the number of compression layers of a file is greater than the configured “Maximum Decompression Layers”, the firewall cannot filter the file.

When the file type cannot be recognized, file filtering, content filtering and anti-virus detection are not performed.

NO.68 If the regular expression is “abc. de”, which of the following will not match the regular expression?

abcde

abcdde

abclde

abc+de

NO.69 AntiDDoS 7-layer defense works from the interface-based defense, global-based defense, and defense-based defense dimension.

True

False

NO.70 Huawei WAF products mainly consist of implementing front-end, back-end central systems and databases. The database mainly stores the front-end detection rules and black and white list configuration files.

True

False

NO.71 Misuse detection discovers intrusion activity in system by detecting similar behaviors of user intrusions, or by detecting violations of system security rules indirectly by exploiting system flaws.
Which of the following is not misuse detection feature?

Easy to implement

Accurate detection

Effective detection of impersonation of legitimate users

Easy to upgrade

NO.72 Configure the following command on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-default-route acl 3000
Which of the following options are correct? (Multiple choice)

For the loose type check, if the source address of the packet exists in the FIB table of the firewall, the packet passes the check.

If the default route is configured but the parameter allow-default-route is not configured. As long as the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected.

If the default route is configured and the allow-default-route parameter is also matched, if the source address of the packet does not exist in the FIB table of the firewall, but for the loose type check, the packet will pass through URPF check, and perform normal forwarding.

If the source address of the packet does not exist in the FIB table of the firewall and the default route is configured and the allow-default-route parameter is also matched, the packet cannot pass the URPF check even if it is a loose type check.

NO.73 Which of the following protocols can be used to construct attack packets for special control packet attacks? (Multiple choices)

ICMP protocol

UDP protocol

IP protocol

FTP protocol

NO.74 What are the risks to information security caused by unauthorized access? (Multiple choices)

Confidentiality

Integrity

Availability

recoverability

NO.75 To protect the security of data transmission, more and more websites or companies choose to encrypt traffic through SSL.
Which of the following statements is true about the threat detection of SSL traffic using Huawei NIP6000?

NIP000 does not support SSL traffic threat detection.

Threat-detected traffic is sent directly to the server without encryption.

NIP can directly crack and detect SSL encryption.

Processes such as “decryption,” “threat detection,” and “encryption.”

NO.76 The administrator has the following configuration:
1. The signature set Protect, all includes the signature ID 3000, and the entire signature set action is blocked.
2. Overwriting the signature ID3000 action is an alarm.
Which of the following judgments is correct?

The action of the signature ID3000 is an alarm

The action of signature ID3000 is blocked

Cannot determine the action of signature ID3000

No relationship between signature set and coverage signature

NO.77 What content can be filtered by the content filtering technology of Huawei USG6000 products?

File content filtering

Voice content filtering

Apply content filtering..

The source of the video content

NO.78 An enterprise administrator configures a web reputation website in the form of a domain name and configures the domain name as www.abc.example.com.
Which of the following is an entry that the firewall will match when looking for a website URL?

example

www.abc.example.com

www.abc.example

example.com

NO.79 Which of the following attacks are attacks against web servers? (multiple choices)

Website phishing deception

Website Trojan

SQL injection

Cross-site scripting attacks 2335

NO.80 Configure the following commands on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-defult-route acl 3000
Which of the following options are correct? (multiple choice)

For loose inspection: if the source address of the packet exists in the FB of the firewall: the packet passes the inspection directly

For the case where the default route is configured, but the parameter allow-defult-route is not configured. As long as the source address of the packet is in the FIB table of the firewall If it does not exist, the message will be rejected.

For the situation where the default route is configured and the parameter allow-defult-route is matched at the same time, if the source address of the packet is in the FIB table of the firewall If the packet does not exist in the loose check mode, all packets will pass the URPF check and be forwarded normally.

For the configuration of the default route, and at the same time matching the parameter allow-defult-route, if the source address of the message is in the FIB table of the firewall If it does not exist in the l0e check, the packet cannot pass the URPF check.

NO.81 If you set the alarm policy for the SMTP virus file, which of the following options is correct?

Generate logs and discard them

Generate logs and forward

Delete email attachment content

Add announcements and generate logs

NO.82 The whitelist rule of the firewall antivirus module is configured as *example*. Which of the following matches is used in this configuration?

Prefix matching

Suffix matching

Keyword matching

exact match

NO.83 Which of the following statements about intrusion detection/defense devices are correct? (Multiple Choice)

Can’t effectively resist the spread of viruses from the Internet to the Intranet.

NIP6000 can identify applications up to 6000+, implement fine-grained application protection, save export bandwidth, and ensure the business experience of key services.

Protect the intranet from external attacks and suppress malicious traffic, such as spyware, worms, etc., flooding and spreading to the intranet.

Can quickly adapt changes in threats.

NO.84 The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are possible causes? (Multiple Choice)

The security policy does not reference the anti-virus configuration file.

Antivirus configuration file configuration error.

The version of the virus signature database is older.

No virus exceptions are configured.

NO.85 Attacks against the Web can be divided into three attacks on the client, server or communication channel.

True

False

NO.86 Which of the following description is incorrect about the cleaning center?

The cleaning center completes the function of drainage, cleaning, and flow reinjection after cleaning for abnormal flow.

There are two drainage ways of static drainage and dynamic drainage.

The re-injection methods include: policy route reinjection, static route reinjection, VPN reinjection, and Layer 2 peering.

The cleaning equipment supports a variety of flexible attack defense technologies, but it is ineffective for CC attack and ICMP flood attack defense.

NO.87 When you suspect that the company’s network has been attacked by hackers, you have carried out a technical investigation. Which of the following options does not belong to the behavior that occurred in the early stage of the attack?

Planting malware

Vulnerability attack

Web application attacks

Brute force

NO.88 Which of the following files can be detected by the sandbox? (Multiple choices)

WWW documents

PE file

Picture file

Mail

Get to the Top with H12-722-ENU Practice Exam Questions: https://www.premiumvcedump.com/Huawei/valid-H12-722-ENU-premium-vce-exam-dumps.html

Premium VCE Dumps

Premium VCE Dumps

Category Archives: H12-722-ENU

Pass Guaranteed Quiz 2022 Realistic Verified Free H12-722-ENU Exam Dumps [Q67-Q88]