Get Huawei H12-722 Dumps Questions [2021] To Gain Brilliant Result
H12-722 dumps - BootcampPDF - 100% Passing Guarantee
NEW QUESTION 34
Which of the following options does not belong to packet message attack?
- A. Large ICMP packet attacks
- B. ICMP redirect packet attack
- C. Tracert packet attacks
- D. IP fragmentation packet attacks
Answer: D
NEW QUESTION 35
Which of the following is the correct about computer virus?
- A. The computer virus is latent. It may be lurking for a long time. It will only begin to perform sabotage if certain conditions are met.
- B. All computer viruses must be parasitic in files and cannot exist independently
- C. The computer virus is contagious. It can spread through floppy disks and optical disks but it does not spread through the network.
- D. Patching the system can completely solve the problem of virus intrusion
Answer: A
NEW QUESTION 36
Which of the following is correct about worms and viruses?
- A. The worm is infected with other computer systems on the network
- B. The virus is mainly transmitted through system loopholes
- C. The worm is parasitic
- D. Viruses exist independently in computer systems
Answer: A
NEW QUESTION 37
For the description of the AntiDDoS system, which of the following option is correct?
- A. The detection center mainly uses the control strategy of the security management center to perform traction and cleaning of the attack traffic. The normal traffic after cleaning is injected back to the customer network and sent to the real destination.
- B. The management center mainly completes the processing of attack events, controls the flow policy and cleaning policy of the cleaning center, and classifies various attack events and attack traffic to generate reports
- C. The main role of the cleaning center is to detect and analyze the DDoS attack traffic for the mirrored or light splitting traffic and provide the analysis data to the management center for judgment.
- D. The firewall can only be a detection device.
Answer: B
NEW QUESTION 38
Which of the following is a false positive for an intrusion detection system?
- A. Web-based attacks have not been detected by the system
- B. Use Ping for network detection and being alerted as an attack
- C. The process of trying to log in to the system was recorded
- D. Unable to detect new worms
Answer: B
NEW QUESTION 39
The administrator defines two keywords that need to be identified on the firewall. The keyword x has a weight value of 2, the keyword y has a weight value of 3, and the content filtering alarm threshold is 5 (blocking threshold) 10. If the device detects that there is a keyword x in the page viewed by the user, the two keywords are Y;
What is the following statement about the value of weights and the behavior of users visiting web pages?
- A. The weight value is 10 and you can access the web page.
- B. The weight value is 10 and you cannot access the web page.
- C. The weight value is 8 and you can access the web page.
- D. The weight value is 8 and you cannot access the web page.
Answer: C
NEW QUESTION 40
In the security protection system of cloud era, reforms must be carried out in advance, in the event, and afterwards, and continuous improvement and development of closed loops must be formed.
Which of the following key points should be fulfilled in "in the matter"? (Multiple choices)
- A. Defense in depth
- B. Counterattacks Hackers
- C. Offensive and defensive situation
- D. Vulnerability information
Answer: A,B
NEW QUESTION 41
What are the typical technologies of anti-virus engines? (Multiple choices)
- A. Heuristic detection technology
- B. Document reputation detection technology
- C. Decryption technology
- D. First packet inspection technology
Answer: A,B,D
NEW QUESTION 42
Which of the following options does not belong to the basic DDoS attack prevention configuration process?
- A. The system starts attack defense.
- B. The system performs preventive actions.
- C. The system is associated to configurate application for fingerprint learning.
- D. The system starts traffic statistics.
Answer: C
NEW QUESTION 43
If the regular expression is "abc.de", which of the following will not match the regular expression?
- A. abc.de
- B. abc+de
- C. abcdde
- D. abcde
Answer: D
NEW QUESTION 44
Which of the following description is incorrect about the cleaning center?
- A. There are two drainage ways of static drainage and dynamic drainage.
- B. The re-injection methods include: policy route reinjection, static route reinjection, VPN reinjection, and Layer 2 peering.
- C. The cleaning center completes the function of drainage, cleaning, and flow reinjection after cleaning for abnormal flow.
- D. The cleaning equipment supports a variety of flexible attack defense technologies, but it is ineffective for CC attack and ICMP flood attack defense.
Answer: D
NEW QUESTION 45
Which of the following are the control items for HTTP behavior? (Multiple Choice)
- A. Acting on the Internet
- B. POST operation
- C. Browse the web
- D. File Upload and Download
Answer: A,B,C,D
NEW QUESTION 46
When you suspect that the corporate network is being attacked by hackers, you have conducted technical investigations.
Which of the following options does not belong to the pre-attack behavior?
- A. Brute force attack
- B. Web Application Attacks
- C. Planting Malware
- D. Loophole attack
Answer: C
NEW QUESTION 47
Which of the following options does not belong to the security risk of the TCP/IP stack application layer?
- A. Buffer overflow
- B. System vulnerabilities
- C. Port scanning
- D. Virus
Answer: C
NEW QUESTION 48
What are the three aspects that need to be considered when designing a cloud platform security solution? (Multiple choices)
- A. Hardware Maintenance
- B. How to manage the operation and maintenance
- C. Infrastructure security
- D. Tenant security
Answer: B,C,D
NEW QUESTION 49
In Huawei's USG6000 products, IAE provides an integrated solution. All content security detection functions are integrated in a well-designed, high-performance engine.
Which of the following is not a content security detection feature that the product supports?
- A. Application identification and awareness
- B. Video content filtering
- C. Intrusion Prevention
- D. URL classification and filtering
Answer: B
NEW QUESTION 50
About the description of the file filtering technology in the USG6000, which statement is wrong?
- A. Even if the file type is modified, it can recognize the true type of the file.
- B. It supports the filtering of the decompressed contents of the compressed file.
- C. It can identify the application hosting the file, the file transfer direction, the file type, and the file extension.
- D. It can identify the types of files transmitted by itself and can block, alert and announce specific type of files.
Answer: D
NEW QUESTION 51
Which of the following features are supported by the Huawei NIP intrusion prevention device?
- A. Mail detection
- B. SSL traffic detection
- C. Virtual Patch
- D. Application Identification and Control
Answer: B,C,D
NEW QUESTION 52
When the two-way SSL function is used to decrypt the HTTPS data packet, the value of the reverse proxy series represents the number of times which the data packet can be decrypted.
- A. False
- B. True
Answer: A
NEW QUESTION 53
Under the CLI command, which of the following commands can be used to view the AV engine and virus database version?
- A. display utm version
- B. display utm av version
- C. display av utm version
- D. display version av-sdb
Answer: D
NEW QUESTION 54
Which of the following is correct about special packets attack?
- A. The special control packets attack is a potential attack and does not have direct destruction.
- B. Attacks on special control packets can only use ICMP to construct attack packets.
- C. The attacker probes the network structure by sending special control packets to launch real attack.
- D. Attacks on special control packets do not have the ability to detect network structures. Only scanning-type attacks can detect the network.
Answer: A
NEW QUESTION 55
In the anti-virus policy configuration of Huawei USG6000 products, which are the HTTP response methods? (Multiple choices)
- A. Popup warning dialog
- B. Disable all access for this client
- C. Alarms
- D. Blocking and pushing pages
Answer: C,D
NEW QUESTION 56
Which of the following description is correct about the Management Center?
- A. Management Center is divided into two parts: management server and data collector.
- B. The management server of the management center is responsible for the cleaning of abnormal traffic, as well as the collection, analysis, aggregation, and storage of service data, and is responsible for reporting the summarized traffic to the management server for report presentation.
- C. The data collector is responsible for abnormal traffic cleaning, centralized device management configuration, and business report presentation.
- D. The data collector and management server support distributed deployment and centralized deployment. Centralized deployment has good scalability.
Answer: A
NEW QUESTION 57
What content can be filtered by the content filtering technology of Huawei USG6000? (Multiple choice)
- A. Voice content filtering
- B. File content filtering
- C. Application content filtering
- D. Video content filtering
Answer: B,C
NEW QUESTION 58
When configure the URL filtering configuration file, www.bt.com is configured in the URL blacklist, and URL is set to *bt.com in the custom URL classification, and the action for customizing the URL classification is warning. .
Which of the following statements is true about the above configuration? (Multiple choices)
- A. Users can visit www.bt.com website, but administrators will receive warning message.
- B. Users can't access all websites ending with bt.com.
- C. Users will be blocked when they visit www.bt.com.
- D. Users can visit www.videobt.com.
Answer: C,D
NEW QUESTION 59
......
Get 100% Passing Success With True H12-722 Exam: https://www.bootcamppdf.com/H12-722_exam-dumps.html