HCIP-Security (Fast track) V1.0 H12-724-ENU Real Exam Dumps

1. Business accompanying is-A special access control method, according to the user's access location, access time, access method and terminal use to grant designated investment limits, among which the physical connection can be divided into 3 Class, excluding which of the following access methods?

2. Which of the following files can the sandbox detect? (multiple choice)

3. View on the switch Agile Controller-Campus The policy issued by the server is as follows:

For this strategy, which of the following options are correct? (Multiple choice)

4. Identity authentication determines whether to allow access by identifying the identity of the access device or user.

5. Regarding the enhanced mode in HTTP Flood source authentication, which of the following descriptions are correct? Multiple choices

6. Prosecution in the cloud sandbox

For the ordering of the process, which of the following options is correct?

7. The following is the 802.1X access control switch configuration:

[S5720] dot1x authentication-method eap

[S5720-GigabitEthernet0/0/1] port link-type access

[S5720-GigabitEthemet0/0/1] port default vlan 11

[S5720-GigabitEthernet0/0/1] authentication dot1x

Assuming that GE0/0/1 is connected to user 1 and user 2 through the HUB, which of the following options is correct?

8. Tianyu Nei answered the role of safety filtering technology, which of the following is still correct? (multiple choice)

9. In the security protection system of the cloud era, reforms need to be carried out in the three stages before, during and after the event, and a closed-loop continuous improvement should be formed.

And development .

Which of the following key points should be done in "things"? (multiple choice)

10. In the scenario of SACG linkage in bypass mode, only the traffic initiated by the terminal user will pass through the firewall, and the server will return to the terminal in use.

The traffic does not need to go through the firewall y. For the firewall, it belongs to the scenario of inconsistent traffic back and forth paths, this needs to turn off the session state check function.

11. Deployed by an enterprise network manager Agile Controller-Campus with SACG Later; Identity authentication is successful but cannot access the post-authentication domain, This phenomenon may be caused by any reason? (Multiple choice)

12. In the construction of information security, the intrusion detection system plays the role of a monitor. It monitors the flow of key nodes in the information system.

In-depth analysis to discover security incidents that are occurring .

Which of the following are its characteristics?

13. Which way can NAC Agent upgrade package be deployed?

14. Submit

15. Which of the following is the default port number of Portal authentication service?

16. Regarding WLAN, which of the following descriptions is correct?

17. If the processing strategy for SMTP virus files is set to alert, which of the following options is correct?

18. Which of the following options belong to the upgrade method of the anti-virus signature database of Huawei USG6000 products? (multiple choice)

19. Regarding the application scenarios of Agile Controller-Campus centralized deployment and distributed deployment, which of the following options are correct? (Multiple select)

20. Remote control and penetration

Regarding the order of these four stages, which of the following options is correct?

21. Configuring WLAN device detection can realize the monitoring of the entire network, but you need to set the working mode of the AP first, which of the following options are.

What is the working mode of AP? (multiple choice)

22. An enterprise adopts hardware SACG access method for admission control. The configuration commands are as follows, among which Key; Admin@123

[USG] right-manager server-group

[USG-rightm] localip 10.1.10.2

[USG-rightm]serverip 10. 1.31.78 shared-key AdnIn@123

[USG2100-rightm] right-manager server-group enable.

Assuming that the other configurations are correct, based on the above configuration only, which of the following options is correct?

23. 802.1X During the authentication, if the authentication point is at the aggregation switch, in addition to RADIUS,AAA,802.1X.

In addition to the conventional configuration, what special configuration is needed?

24. If the user's FTP operation matches the FTP filtering policy, what actions can be performed? (multiple choice)

25. Jailbroken mobile terminalMobile terminals with non-compliant applications installed or terminals with non-compliant lock screen passwords connecting to the corporate network for office operations are not safe for companies. Any 0fice How to solve the problem of mobile office system?

26. When using local guest account authentication, usually use(Portal The authentication method pushes the authentication page to the visitor. Before the user is authenticated, when the admission control device receives the HTTP The requested resource is not Portal Server authentication URL When, how to deal with the access control equipment.

27. Sort all services according to user group and account: By the end IP The address range is time-sharing, if it is a user group, a small terminal with an account IP Address range allocation for the same business(Chen Gongji outside business) I The business assigned to the one with the highest priority will take effect.

Which of the following is correct regarding the order of priority?

28. Analysis is the core function of intrusion detection. The analysis and processing process of intrusion detection can be divided into three phases; build an analyzer to perform analysis on actual field data.

Which of the analysis, feedback and refinement is the function included in the first two stages?

29. Which of the following options will not pose a security threat to the network?

30. Which of the following options are relevant to Any Office The description of the solution content is correct? (Multiple choice)

31. Regarding the processing process of file overwhelming, which of the following statements is correct?

32. Regarding the 3 abnormal situations of the file type recognition result, which of the following option descriptions is wrong?

33. In order to increase AP The security can be AC Going online AP Perform authentication. Currently Huawei AC What are the supported authentication methods? (Multiple choice)

34. Which of the following options belong to the network layer attack of the TCP/IP protocol stack? (multiple choice)

35. The cleaned traffic is sent to the original destination server.

36. In the visitor reception hall of a company, there are many temporary terminal users, and the administrator hopes that users do not need to provide any account numbers and passwords. access Internet .

Which of the following authentication methods can be used for access?

37. Security zone division means to better protect the internal network security, Based on the business type and security requirements of the intranet, divide the intranet into several granularities.

Logical area .

Which of the following options does not belong Agile Controller-Campus Security domain?

38. Which of the following options belong to the keyword matching mode? (multiple choice)

39. The realization of content security filtering technology requires the support of the content security combination license.

40. About the software SACG And hardware SACG Description, which of the following is correct?

41. When managing guest accounts, you need to create a guest account policy and set the account creation method.

For the account creation method, which of the following descriptions is wrong?

42. Which of the following technology, administrators can according to business requirements, to scale to achieve load sharing of business flow?

43. In the Agile Controller-Campus admission control scenario, regarding the role description of the RADIUS server I client, which of the following is positive True?

44. For Huawei USG600 products, which of the following statements about mail filtering configuration is correct?

45. When a data file hits the whitelist of the firewall's anti-virus module, the firewall will no longer perform virus detection on the file.

46. Import the user information of the AD server on the Agile Controller-Campus to realize the user's access authentication. If the user is in the Agile.

The user information is not found on the Controller-Campus .

Which of the following actions will be performed in the next step?

47. Regarding the file filtering technology in the USG6000 product, which of the following options is wrong?

48. Which of the following series of devices does not support the function of accompanying business?

49. Single-packet attacks are divided into scanning and snooping attacks, malformed packet attacks, and special packet attacks. Ping of death is a special packet attack.

50. If a company wants to detect image files, Shellcode code files and PDF files, which of the following types of sandboxes can be used? (More select)

51. In WPA2, because of the more secure encryption technology-TKIP/MIC, WPA2 is more secure than WPA.

52. Regarding CAPWAP encryption, which of the following statements is wrong?

53. Which of the following attacks are attacks against web servers? (multiple choices)

54. The relationship between user groups and accounts in user management is stored in a tree on the Agile Controller-Campus. An account belongs to only one user group.

Consistent with the corporate organizational structure: If the OU (OnizbonUnit) structure stored in the AD/LDAP server is consistent with the corporate organizational structure, users are stored Under 0OU, when the Agile Controller-Campus synchronizes AD/LDAP server accounts, which synchronization method can be used?

55. The following commands are configured on the Huawei firewall:

[USG] firewall defend ip-fragment enable

Which of the following situations will be recorded as an offensive behavior? (multiple choice)

56. There are three roles in the XMPP protocol: server, gateway, and client. Corresponding to the free mobility solution: Agile Controller-Campus as For the server, Huawei USG6000 series firewall acts as the gateway; the agile switch acts as the client.

57. How to check whether the SM and SC silverware start normally after installing the Agile Controller-Campus) (multiple delivery)

58. In enterprises where terminal host access control management is relatively strict, administrators hope to bind terminal hosts and accounts to prevent terminal users from accessing the controlled network from unauthorized terminal hosts at will. Regarding the description of binding the terminal host and account, which of the following is correct?

59. Windows in environment,Agile Controller-Campus After the installation is successful, how to manually start the management center(MC)? (Multiple choice)

60. Typical application scenarios of terminal security include: Desktop management, illegal outreach and computer peripheral management.

61. Regarding the Anti-DDoS cloud cleaning solution; which of the following statements is wrong?

62. Terminal fault diagnosis tool can diagnose fault, also can collect terminal information.

63. Which of the following are typical intrusions? "Multiple choice)

64. Which of the following options is not included in the mobile terminal life cycle?

65. When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.

66. Use hardware SACG Access control, In hardware SACG View the results of the conversation table on the deduction.

Which of the following statements are correct? (Multiple choice)

67. Viruses can damage computer systems. v Change and damage business data: spyware collects, uses, and disperses sensitive information of corporate employees.

These malicious pastoral software seriously disturb the normal business of the enterprise. Desktop anti-disease software can solve the problem of central virus and indirect software from the overall situation.

68. Malicious code usually uses RootKit technology in order to hide itself. RootKit modifies the kernel of the system by loading a special driver.

To hide itself and the role of designated files.

69. Which of the following iterations is correct for the description of the management center?

70. Regarding asset management, which of the following descriptions is wrong?

71. If the regular expression is "abc. de", which of the following will not match the regular expression?

72. The most common form of child-like attack is to send a large number of seemingly legitimate packets to the target host through Flood, which ultimately leads to network bandwidth.

Or the equipment resources are exhausted .

Which of the following options is not included in traffic attack packets?

73. Which of the following options are correct for the configuration description of the management center ATIC? (multiple choice)

74. What content can be filtered by the content filtering technology of Huawei USG6000 products?

75. A policy template is a collection of several policies. In order to audit the security status of different terminal hosts and the behavior of end users, the administrator needs to customize.

The same policy template is used to protect and manage terminal hosts. Regarding the policy template, which of the following option descriptions are correct? (Multiple choice)

76. Which of the following options are correct for the description of visitor management? (Multiple choice)

77. In some scenarios, an anonymous account can be used for authentication .

What are the correct descriptions of the following options for the anonymous account?? (Multiple choice)

78. On WIDS functional WLAN Regarding the judgment of illegal devices in the network, which of the following statements are correct? (Multiple choice)

79. Which of the following options is for Portal The description of the role of each role in the authentication system is correct?