Free Online Huawei H12-722_V3.0 Practice Test

Prepare Your Huawei H12-722_V3.0 Exam Questions with Free online H12-722_V3.0 Practice Test. Get Brilliant HCIP-Security-CSSN V3.0 Exam Results with Valid H12 722 V3.0 Exam Dumps.

Page: 1 / 40

Total 197 Questions | Updated On: May 13, 2024

Add To Cart

Question 1

After enabling the IP policy, some services are found to be unavailable. Which of the following may be caused

by? (multiple choice)

A : Only packets in one direction pass through the firewall

B : The same message passes through the firewall multiple times

C : IPS underreporting

D : Excessive traffic causes the Bypass function to be enabled

Answer: A,B

Question 2

The following figure shows the configuration of the URL filtering configuration file. Regarding the

configuration, which of the following statements is correct?

A : The firewall will first check the blacklist entries and then the whitelist entries.

B : Assuming that the user visits the www.exzample.com website, which belongs to the categories ofhumanities and social networks at the same time, the user cannot access the website.

C : The user visits the website www.exzample.com, and when the black and white list is not hit, the nextstep is to query the predefined URL category entry.

D : The default action means that all websites are allowed to visit. So the configuration is wrong here.

Answer: B

Question 3

In the construction of information security, the intrusion detection system plays the role of a monitor. It

monitors the flow of key nodes in the information system.

In-depth analysis to discover security incidents that are occurring. Which of the following are its

characteristics?. c0O

A : IDS can be linked with firewalls and switches to become a powerful "assistant" of firewalls, which canbetter and more accurately control access between domains.

B : It is impossible to correctly analyze the malicious code doped in the allowed application data stream.

C : Unable to detect malicious operations or misoperations from internal killings.

D : Cannot do in-depth inspection

Answer: A

Question 4

USG6000V software logic architecture is divided into three planes: management plane, control plane and

A : Configuration plane

B : Business plane

C : Log plane

D : Data forwarding plane

Answer: D

Question 5

For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the

following descriptions is correct?

A : TCP proxy means that the firewall is deployed between the client and the server. When the SYI packetsent by the client to the server passes through the firewall, theThe firewall replaces the server and establishes a three-way handshake with the client. Generally used inscenarios where the back and forth paths of packets are inconsistent.

B : During the TCP proxy process, the firewall will proxy and respond to each SYN message received, andmaintain a semi-connection, so when the SYN message isWhen the document flow is heavy, the performance requirements of the firewall are often high

C : TCP source authentication has the restriction that the return path must be consistent, so the applicationof TCP proxy is not common. State "QQ: 9233

D : TCP source authentication is added to the whitelist after the source authentication of the client is passed,and the SYN packet of this source still needs to be verified in the future.

Answer: B

Page: 1 / 40

Total 197 Questions | Updated On: May 13, 2024

Add To Cart