H12-722_V3.0 Dumps 2022 - New Huawei H12-722_V3.0 Exam Questions
Free H12-722_V3.0 Braindumps Download Updated on Jan 26, 2022 with 189 Questions
NEW QUESTION 93
Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?
- A. Port scan
- B. Buffer overflow
- C. System vulnerabilities
- D. Virus
Answer: A
NEW QUESTION 94
What content can be filtered by the content filtering technology of Huawei USG6000 products?
- A. File content filtering
- B. Voice content filtering
- C. The source of the video content
- D. Apply content filtering..
Answer: A,D
NEW QUESTION 95
If the regular expression is "abc. de", which of the following will not match the regular expression?
- A. abc+de
- B. abcdde
- C. abcde
- D. abclde
Answer: C
NEW QUESTION 96
When the Anti DDoS system finds the attack flow, the state will redirect the attack flow to the cleaning device.
After the cleaning device is cleaned, it will flow back.
Note to the original link, which of the following options does not belong to the method of re-injection?
- A. Policy routing back annotation,
- B. GRE back note:
- C. BGP back-annotation
- D. MPLS LSP back injection
Answer: C
NEW QUESTION 97
The configuration command to enable the attack prevention function is as follows; n
[FW] anti-ddos syn-flood source-detect
[FW] anti-ddos udp-flood dynamic-fingerprint-learn
[FW] anti-ddos udp-frag-flood dynamic fingerprint-learn
[FW] anti-ddos http-flood defend alert-rate 2000
[Fwj anti-ddos htp-flood source-detect mode basic
Which of the following options is correct for the description of the attack prevention configuration? (multiple choice)
- A. The firewall uses the first packet drop to defend against UDP Flood attacks.
- B. HTTP Flood attack defense uses enhanced mode for defense
- C. The threshold for HTTP Flood defense activation is 2000.
- D. The firewall has enabled the SYN Flood source detection and defense function
Answer: C,D
NEW QUESTION 98
The administrator has configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not allowed Can the reason?
- A. The action configuration of the file extension does not match is incorrect
- B. The file filtering configuration file is not referenced in the security policy
- C. License is not activated.
- D. File filtering configuration file is incorrect
Answer: A
NEW QUESTION 99
Threats detected by the big data intelligent security analysis platform will be synchronized to each network device at the same time C and then collected from the network device Collect it in the log for continuous learning and optimization.
- A. True
- B. False
Answer: A
NEW QUESTION 100
Analysis is the core function of intrusion detection. The analysis and processing process of intrusion detection can be divided into three phases; build an analyzer to perform analysis on actual field data.
Which of the analysis, feedback and refinement is the function included in the first two stages?
- A. Data processing, attack classification, post-processing
- B. Data processing, data classification, post-processing
- C. Data processing, data classification, attack playback
- D. Data analysis, data classification, post-processing
Answer: B
NEW QUESTION 101
Which of the following options are common reasons for IPS detection failure? (multiple choices)
- A. The IPS function is not turned on
- B. False Policy IDs are associated with IPS policy domains
- C. Bypass function is closed in IPS
- D. IPS policy is not submitted for compilation
Answer: A,B,D
NEW QUESTION 102
Regarding the network intrusion detection system (NIDS), which of the following statements is wrong?
- A. It is mainly used for real-time monitoring of the information of the critical path of the network, listening to all packets on the network, collecting data, and analyzing suspicious objects
- B. Used to monitor network traffic, and can be deployed independently.
- C. Real-time monitoring through the network adapter, and analysis of all communication services through the network;
- D. Use the newly received network packet as the data source;
Answer: D
NEW QUESTION 103
Regarding the enhanced mode in HTTP Flood source authentication, which of the following descriptions are correct? Multiple choices
- A. The enhanced mode is superior to the basic mode in terms of user experience.
- B. Enhanced mode supports all HTTP Flood source authentication fields. " WWQQ: 922333
- C. Enhanced mode refers to the authentication method using verification code.
- D. Some bots have a redirection function, or the free proxy used during the attack supports the redirection function, which leads to the failure of the basic mode of defense Effective, enhanced mode can effectively defend.
Answer: C,D
NEW QUESTION 104
The network-based intrusion detection system is mainly used to monitor the information of the critical path of the network in real time, listen to all packets on the network, collect data, and divide Analyze the suspicious object, which of the following options are its main features? (multiple choices)
- A. Good concealment, the network-based monitor does not run other applications, does not provide network services, and may not respond to other computers, so Not vulnerable to attack.
- B. It can detect the source address and destination address, identify whether the address is illegal, and locate the real intruder.
- C. Need a lot of monitors.
- D. The monitoring speed is fast (the problem can be found in microseconds or seconds, and the host-based DS needs to take an analysis of the audit transcripts in the last few minutes
Answer: A,D
NEW QUESTION 105
Which of the following options is not a defense against HTTP Flood attacks?
- A. HTTP source statistics
- B. URI source fingerprint learning function
- C. Baseline learning
- D. HTTP Flood source authentication
Answer: C
NEW QUESTION 106
The analysis and processing capabilities of traditional firewalls at the application layer are weak, and they cannot correctly analyze malicious codes that are mixed in the flow of allowed application teaching: many Attacks or malicious behaviors often use the firewall's open application data flow to cause damage, causing application layer threats to penetrate the firewall
- A. True
- B. False
Answer: A
NEW QUESTION 107
Since the sandbox can provide a virtual execution environment to detect files in the network, the sandbox can be substituted when deploying security equipment Anti-Virus, IPS, spam detection and other equipment.
- A. False
- B. True
Answer: A
NEW QUESTION 108
The results of the RBL black and white list query on the firewall are as follows:
Based on the above information only, which of the following statements is correct? (multiple choice)
- A. Mail with source address 10.18.1.0/24 will be released
- B. Mail with source address 10.17.1.0/24 will be blocked
- C. Mail with source address 10.18.1.0/24 will be blocked
- D. Mail with source address 10.17.1.0/24 will be released
Answer: A,D
NEW QUESTION 109
Regarding the description of intrusion detection technology, which of the following statements is correct?
- A. Unable to find traces of the system being attacked.
- B. It is impossible to detect violations of security policies.
- C. is an active and static security defense technology.
- D. It can detect all kinds of authorized and unauthorized intrusions.
Answer: D
NEW QUESTION 110
Which of the following options is correct for the description of the Anti DDoS system configuration?
- A. Configure drainage and re-injection on the management center.
- B. Configure drainage and re-injection on the testing equipment.
- C. Configure port mirroring on the cleaning device.
- D. Add protection objects on the management center.
Answer: D
NEW QUESTION 111
Among the following options, which attack is a malformed packet attack based on the TCR protocol?
- A. Ping of Death attack
- B. IP Spoofng attack
- C. Land attack
- D. Teardrop attack
Answer: C
NEW QUESTION 112
......
Huawei H12-722_V3.0 Exam Practice Test Questions: https://passleader.dumpexams.com/H12-722_V3.0-vce-torrent.html