File Info
| Exam | HCIP-Security (Fast track) V1.0 |
| Number | H12-724 |
| File Name | Huawei.H12-724.CertsQuestions.2024-04-23.34q.vcex |
| Size | 256 KB |
| Posted | Apr 23, 2024 |
| Download | Huawei.H12-724.CertsQuestions.2024-04-23.34q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Web Standards that come with the client and operating system 8021 The instrument client only has the function of identity authentication: It does not support the execution of inspection strategies and monitoring strategies. Any Office The client supports all inspection strategies and monitoring strategies.
- True
- False
Correct answer: A
Question 2
Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?
- Virus
- Buffer overflow
- System vulnerabilities
- Port scan
Correct answer: D
Question 3
Regarding the processing flow of file filtering, which of the following statements is wrong?
- After the file decompression fails, the file will still be filtered. .
- The application identification module can identify the type of application that carries the file.
- Protocol decoding is responsible for analyzing the file data and file transmission direction in thedata stream.
- The file type recognition module is responsible for identifying the true type of the file and the fileextension based on the file data
Correct answer: A
Question 4
Regarding computer viruses, which of the following options is correct?
- Patching the system can completely solve the virus intrusion problem
- Computer viruses are latent, they may be latent for a long time, and only when they encountercertain conditions will they begin to carry out sabotage activities
- Computer viruses are contagious. They can spread through floppy disks and CDs, but they will notspread through the Internet.
- All computer viruses must be parasitic in files and cannot exist independently
Correct answer: B
Question 5
For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?
- TCP proxy means that the firewall is deployed between the client and the server. When the SYIpacket sent by the client to the server passes through the firewall, the The firewall replaces the server and establishes a three-way handshake with the client. Generally used in scenarios where the back and forth paths of packets are inconsistent
- During the TCP proxy process, the firewall will proxy and respond to each SYN message received,and maintain a semi-connection, so when the SYN message is When the document flow is heavy, the performance requirements of the firewall are often high.
- TCP source authentication has the restriction that the return path must be consistent, so theapplication of TCP proxy is not common. State "QQ: 9233
- TCP source authentication is added to the whitelist after the source authentication of the client ispassed, and the SYN packet of this source still needs to be verified in the future
Correct answer: B
Question 6
An enterprise administrator configures a Web reputation website in the form of a domain name, and configures the domain name as www. abc; example. com. . Which of the following is the entry that the firewall will match when looking up the website URL?
- example
- www. abc. example. com
- www.abc. example
- example. com
Correct answer: A
Question 7
Regarding the principle of MAC authentication, which of the following descriptions is wrong?
- MAC Certification required Portal Server cooperation.
- MAC Certification is passed 802.1X Implementation of the agreement.
- MAC Authentication requires obtaining the terminal’s MAC The address is stored in AAA server.
- NAS Device Configuration MAC After authentication, the terminal’s MAC The address is used as theusername and password.
Correct answer: A
Question 8
Regarding the definition of WIPS/WIDS, which of the following statements is correct?
- WIDS Is a wireless intrusion prevention system
- WIPS Wireless intrusion detection system
- WIDS Is a wireless intrusion countermeasure system
- WIPS Is a wireless intrusion prevention system
Correct answer: D
Question 9
Regarding the trigger mechanism of 802.1X authentication, which of the following descriptions is correct? (multiple choice)
- 802.1X Authentication can only be initiated by the client.
- 802.1X Certification can only be done by certified equipment(like 802.1X switch)Initiate
- 8021X The client can trigger authentication through multicast or broadcast.
- The authentication equipment department triggers authentication through multicast or unicast.
Correct answer: CD
Question 10
Regarding the file source set in the software management, which of the following descriptions is correct?
- When the file source is an internal data source, when distributing software, the business managerwill only send the path of the data source of the software to be distributed to Any Office
- When the file source is an external data source, Any 0fce will obtain the software to bedistributed.
- External data sources cannot distribute files from FTP-type file servers.
- The Microsoft Windows file sharing server uses the UNC (Universal Naming Conversion) path(beginning with "\\") to provide waiting. The path to distribute the software.
Correct answer: D
