File Info
| Exam | HCIE-Security (Written) V2.0 |
| Number | H12-731_V2.0 |
| File Name | Huawei.H12-731_V2.0.VCEplus.2025-03-30.192q.vcex |
| Size | 852 KB |
| Posted | Mar 30, 2025 |
| Download | Huawei.H12-731_V2.0.VCEplus.2025-03-30.192q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which of the following types of journals cannot use the Netflow format? (single selection).
- URL session logs
- Half-connection session logs
- IPV6NAT64 SESSION LOGS
- IPV4 SESSION LOGS
Correct answer: A
Question 2
The following describes user authentication Which ones are correct? (multiple selection).
- Users whose security policies are allowed but whose identity authentication is not passed cannot access resources normally
- If the user is a MAC address single-item bound user Other users can also use this MAC address to log in normally.
- Users with two-way iP/MAC binding can obtain dynamic IP address o through DHCP
- Configure two-way binding of MAC addresses for a user to be exempt from authentication? If there are three layers of device elbows between the user and FW, the user can go online normally
Correct answer: AB
Question 3
One of the reasons why traditional passive defense does not protect against APT attacks is that traditional defense methods cannot correlate and analyze threats.
- TRUE
- FALSE
Correct answer: A
Question 4
Which of the following options are part of the Internet Behavior? (multiple selection).
- Keywords that users search for using search engines
- Sending and receiving emails
- User QQ account and its online and offline time
- User profiles
Correct answer: ABC
Question 5
Which of the following describes the business process of the network trapping scheme wrong?
(single selection).
- The attacker initiates a network scanning attack The purpose is to probe the network structure.
- The business that the attacker eventually attacks is a deliberately constructed counterfeit food business. Therefore, all the actions of the attacker are monitored and reported to the CIS platform
- When the access traffic reaches the trapping probe A collision between the probe needle and the trap will be used to send the access flow to the trap
- Trapping probes can analyze the frequency of scanning different destination IPs or ports for the same source address Then a virtual MAC responds to the attacker.
Correct answer: B
Question 6
The following is a description of FW's audit conduct. Which one is correct? (single selection).
- After you create or modify an audit profile , the configuration content takes effect immediately.
- By default , the audit function of outgoing file content is enabled by default.
- By default HTTP status code audit mode is the default mode Only common HTTP status codes areaudited.
Correct answer: C
Question 7
Which of the following situational aware detection attacks can DDOS attacks, firewall bypasses, and malware outreach attacks know? (multiple selection).
- C&C anomaly detection
- Hidden channel detection
- Encrypted traffic detection
- Meteor base rod anomaly detection
Correct answer: ABCD
Question 8
When Hisec Insight is linked with terminals, it is mainly linked with the EDR of third-party vendors with cooperative relationships.
- TRUE
- FALSE
Correct answer: A
Question 9
Regarding situational awareness, is the following description correct?
- Perception of elements in the environment
- Rationale for the current situation
- A projection of a longer period of time in the future
- Perception of elements in a temporal and spatial environment An understanding of their meaning, and a projection of their later state
Correct answer: D
Question 10
The main role of the audit system is to audit security events after the fact To provide sufficient evidence, a security audit product must have which of the following features?
- Protect the security of user communications and the integrity of data, and prevent malicious users from intercepting and tampering with data It can fully protect users from malicious damage during operation
- It can provide fine-grained access control to maximize the security of user resources
- It provides centralized management of all server and network device accounts, which can complete the monitoring and management of the entire life cycle of the account
- It can automatically display the user's operation process and monitor the user's every behavior Determine whether the user's behavior poses a danger to the internal network security of the enterprise
Correct answer: D
Question 11
On the principle of defense against trapping Which of the following is described as incorrect=
- By deceiving network detection activities, fake resources are displayed, so that attackers cannot discover real system information and vulnerabilities
- Interact with the attack campaign to confirm the intent and discover the attacker before the breach occurs
- Trapping systems discover and block attacker attacks
- Interference Attack Gathering System Information diaphragmatic weakness determination" process, inducing the attacker to expose the intention
Correct answer: C
