HCIP-Security-CSSN V3.0 H12-722_V3.0-ENU Dumps Questions [Released 2022] To Achieve Success

1. If the user's FTP operation matches the FTP filtering policy, what actions can be performed? (Multiple choice)

2. Which of the following statements about firewalls and IDS is true?

3. Which of the following types of DDoS attacks fall into?

4. Part of the reason why APT attacks have become difficult to defend against is that they exploit zero-day exploits. This zero-day vulnerability usually takes a lot of time to research and analyze and develop corresponding defense methods.

5. The figure below shows the configuration of the URL filtering configuration file. Which of the following statements about this configuration is correct?

6. The firewall anti-virus module whitelist rule is configured as "*example*". Which of the following matching methods is used in this configuration?

7. UDP is a connectionless protocol. A large number of UDP flood attacks that change sources and ports will cause the performance of network devices that rely on session forwarding to degrade or even exhaust the session table, resulting in network paralysis. Which of the following is not a defense against UDP flood attacks?

8. Regarding the processing flow of file filtering, which of the following statements is false?

9. Huawei WAF products are mainly composed of front-end execution, back-end central systems and databases. The database mainly stores the front-end detection rules and configuration files such as black and white lists.

10. Misuse detection through the detection of similar intrusion behaviors in user behavior, or the detection of those behaviors that use system defects to indirectly violate system security rules, intrusion activities in the system are found. Which of the following is not a feature of misuse detection?

11. Huawei NIP6000 products have zero-setting network parameters and plug-and-play functions, because the interface and interface pair only work at layer 2, and no IP address needs to be set.

12. In the penetration stage of APT attack, which of the following attack behaviors will the attacker generally have?

13. What aspects of information security are at risk from unauthorized access? (Multiple choice)

14. Network attacks are mainly divided into two categories: single-packet attacks and traffic-based attacks. Single-packet attacks include scanning and snooping attacks, malformed packet attacks and special packet attacks.

15. Which of the following attacks are attacks against web servers? (Multiple choice)

16. Submit

17. In the security protection system in the cloud era, it is necessary to carry out reforms in the three stages before, during and after the event, and form a closed-loop continuous improvement and development.

Which of the following key points should be fulfilled in "during things"? (Multiple choice)

18. Huawei NIP6000 products provide a carrier-class high reliability mechanism from multiple levels to ensure the stable operation of the equipment. Which of the following belong to networking reliability? (Multiple choice)

19. Which of the following are common reasons for IPS detection failure? (Multiple choice)

20. Regarding the file filtering technology in the USG6000 product, which of the following descriptions is wrong?

21. For an antivirus gateway based on flow scanning, which of the following descriptions is wrong?

22. For the description of the DNS Request Flood attack, which of the following statement is correct?

23. Regarding anti-spam response codes, which of the following statements is false?

24. The configuration command to enable the attack defense function is as follows:

[FW] anti-ddos syn-flood source-detect

[FW] anti-ddos udp-flood dynamic-fingerprint-learn

[FW] anti-ddos udp-frag-flood dynamic-fingerprint-learn

[FW] anti-ddos http-flood defend alert-rate 2000

[FW] anti-ddos http-flood source-detect mode basic

Which of the following about the description of the attack defense configuration is correct? (Multiple Choice)

25. After the application behavior control configuration file is referenced, it will take effect immediately, and no configuration submission is required.

26. Regarding the description of keywords, which of the following are correct? (Multiple choice)

27. IPS is an intelligent intrusion detection and defense product. It can not only detect the occurrence of intrusion, but also suspend the occurrence and development of intrusion behaviors in real time through a certain response method, and protect the information system from substantial attacks in real time.

Which of the following statements about IPS is false?

28. Configure the following commands on the Huawei firewall:

[USG] firewall defend ip-fragment enable

Which of the following would be recorded as aggressive behavior? (Multiple choice)

29. Huawei USG6000 products can identify the real type of common files and filter and check the content. Even if the file is hidden in a compressed file, or the extension is changed, the firewall cannot escape the eyes of the firewall.

30. For the description of the AntiDDoS system, which of the following options is correct?

31. Which of the following options are used to upgrade the anti-virus signature database of Huawei USG6000 products? (Multiple choice)

32. Regarding the global configuration of file filtering configuration files for Huawei USG6000 products, which of the following descriptions is correct?

33. In Huawei USG6000 products, IAE provides an integrated solution, and all content security detection functions are integrated in a well-designed high-performance engine. Which of the following is not a content security detection feature supported by this product?

34. Which of the following options is not part of the basic DDoS attack prevention configuration process?

35. Which of the following statements about network intrusion detection systems (NIDS) is false?

36. Cloud sandbox for detection

Which of the following order of the process is correct?

37. What content can the content filtering technology of Huawei USG6000 filter? (Multiple choice)

38. Which of the following regarding the order of the document filtering technology processing flow is correct?

(1) The security policy is applied as permit

(2) Protocol decoding

(3) File type identification

(4) Application identification

(5) File filtering

39. Which of the following statements about IPS is false?

40. Due to the difference of network environment and system security strategy, the specific implementation of intrusion detection system is also different.

What are the four main components of the system?