H12-722 Exam Dumps - Try Best H12-722 Exam Questions from Training Expert DumpsTorrent
Practice Examples and Dumps & Tips for 2021 Latest H12-722 Valid Tests Dumps
NEW QUESTION 32
Anti-DDoS defense system includes: management center, detection center and cleaning center.
- A. True
- B. False
Answer: A
NEW QUESTION 33
Which of the following options will not pose a security threat to the network?
- A. Weak personal safety awareness
- B. Failure to update the virus database in time
- C. Hacking
- D. Open company confidential files
Answer: D
NEW QUESTION 34
Regarding worms and viruses, which of the following statements is correct?
- A. Viruses mainly rely on system vulnerabilities to spread
- B. The target of the worm infection is other computer systems on the network.
- C. The virus exists independently in the computer system.
- D. Worms exist in a parasitic way
Answer: B
NEW QUESTION 35
In the anti-virus policy configuration of Huawei USG6000 products, which are the HTTP response methods? (Multiple choices)
- A. Disable all access for this client
- B. Blocking and pushing pages
- C. Popup warning dialog
- D. Alarms
Answer: B,D
NEW QUESTION 36
When the AntiDDoS system detects attack traffic, the attack traffic is directed to the cleaning device. After the cleaning device completes cleaning, the traffic is re-injected to the original link. Which of the following options does not belong to the injection method?
- A. Policy Routing injection
- B. BGP injection
- C. GRE injection
- D. MPLS LSP injection
Answer: B
NEW QUESTION 37
Which of the following statements is wrong about Huawei anti-virus technology?
- A. Gateway anti-virus implementation is based on proxy scanning and flow scanning
- B. Anti-virus engine can detect file type by file extension
- C. The maximum number of unpacked layers of the gateway antivirus default file is 3
- D. The virus detection system cannot directly detect compressed files
Answer: B
NEW QUESTION 38
Which of the following options are common reasons for IPS detection failure? (multiple choices)
- A. Bypass function is closed in IPS
- B. False Policy IDs are associated with IPS policy domains
- C. IPS policy is not submitted for compilation
- D. The IPS function is not turned on
Answer: B,C,D
NEW QUESTION 39
The whitelist rule of the firewall antivirus module is configured as *example*. Which of the following matches is used in this configuration?
- A. Prefix matching
- B. Suffix matching
- C. Keyword matching
- D. exact match
Answer: C
NEW QUESTION 40
In the Huawei USG6000 product, after the security profile is created or modified, the configuration does not take effect immediately. You need to click "Submit" in the upper right corner of the page to activate it.
- A. True
- B. False
Answer: A
NEW QUESTION 41
Which of the following is correct about worms and viruses?
- A. The virus is mainly transmitted through system loopholes
- B. Viruses exist independently in computer systems
- C. The worm is infected with other computer systems on the network
- D. The worm is parasitic
Answer: C
NEW QUESTION 42
The whitelist rule of the firewall anti-virus module is configured as ("*example*, which of the following matching methods is used in this configuration?
- A. Prefix matching
- B. Suffix matching
- C. Keyword matching
- D. Exact match
Answer: C
NEW QUESTION 43
When you suspect that the company's network has been attacked by hackers, you have carried out a technical investigation. Which of the following options does not belong to the behavior that occurred in the early stage of the attack?
- A. Planting malware
- B. Vulnerability attack"
- C. Brute force
- D. We6 Application Click
Answer: A
NEW QUESTION 44
The user needs of a university are as follows:
1. The environment is large, and the total number of two-way traffic can reach 800M. Huawei USG6000 series firewall is deployed at its network node.
2. The intranet is divided into student area, server area, etc., users are most concerned about the security of the server area to avoid attacks from various threats.
3. At the same time, some pornographic websites in the student area are prohibited.
The external network has been configured as an untrust zone and the internal network has been configured as a trust zone on the firewall. How to configure the firewall to meet the above requirements?
- A. In the direction of untrust to the intranet, only the AV and IPS protection functions are turned on for the server area to protect the server
- B. You can directly turn on the AV, IRS protection functions, and URL filtering functions in the global environment to achieve the requirements
- C. Go to the untrust direction to open the URL filtering function for the entire campus network, and filter some classified websites
- D. To the untrust direction, only enable AV and IPS protection functions for the server zone to protect the server
Answer: A,B,C
NEW QUESTION 45
If the Huawei USG600 product uses its own protocol stack cache for all files passing through the device and then performs a virus scan, then the device uses It is the stream scanning method.
- A. True
- B. False
Answer: B
NEW QUESTION 46
Which of the following options are correct for the description of the Management Center ATIC configuration? (Multiple Choices)
- A. The recycle strategy needs to be configured on management center needs to guide the cleaned traffic.
- B. The drainage task must be configured on the management center and delivered to the cleaning center when an attack is discovered.
- C. The port mirroring needs to be configured on the management center to monitor abnormal traffic.
- D. The protection object needs to be configured on the management center to guide abnormal access traffic.
Answer: B,D
NEW QUESTION 47
With regard to APT attacks, the attacker often lurks for a long time and launches a formal attack on the enterprise at the key point of the incident.
Generally, APT attacks can be summarized into four stages:
1. Collecting Information & Intrusion
2. Long-term lurking & mining
3. Data breach
4. Remote control and penetration
Regarding the order of these four stages, which of the following options is correct?
- A. 1-2-4-3
- B. 1-4-2-3
- C. 2-1-4-3
- D. 2-3-4-1
Answer: B
NEW QUESTION 48
Which of the following signature properties cannot be configured for IP custom signatures?
- A. ID
- B. Direction
- C. Packet length
- D. protocol
Answer: C
NEW QUESTION 49
Huawei WAF products are mainly composed of front-end execution, back-end central systems and databases.
Among them, the database mainly stores the front-end detection rules and black Whitelist and other configuration files.
- A. True
- B. False
Answer: A
NEW QUESTION 50
When the device recognizes a keyword during content filtering detection, which response actions can the device perform? (multiple choice)
- A. Declare
- B. Warning
- C. Operate by weight
- D. Block
Answer: B,C,D
NEW QUESTION 51
Regarding the description of keywords, which of the following is correct? (multiple choice)
- A. Keywords are the content that the device needs to recognize during content filtering.
- B. Keywords include predefined keywords and custom keywords.
- C. The minimum length of the keyword that the text can match is 2 bytes. ,
- D. Custom keywords can only be defined in text mode.
Answer: A,B
NEW QUESTION 52
Single-packet attacks are classified into scanning and snooping attacks, malformed packet attacks, and special packet attacks. Ping of death belongs to special packet attacks.
- A. True
- B. False
Answer: B
NEW QUESTION 53
......
Latest 100% Passing Guarantee - Brilliant H12-722 Exam Questions PDF: https://www.dumpstorrent.com/H12-722-exam-dumps-torrent.html