Master 2021 Latest The Questions HCNP-Security and Pass H12-722 Real Exam!
Penetration testers simulate H12-722 exam PDF
NEW QUESTION 70
Which of the following statement is wrong about a network intrusion detection system (NIDS)?
- A. Real-time monitoring through network adapters and analysis of all communication traffic through the network;
- B. Use newly received network packets as a data source;
- C. Mainly used for real-time monitoring of critical network path information, listening to all packets on the network, collecting data, and analyzing suspicious objects
- D. Used to monitor network traffic and can be deployed independently.
Answer: B
NEW QUESTION 71
If you set the alarm policy for the SMTP virus file, which of the following options is correct?
- A. Generate logs and forward
- B. Add announcements and generate logs
- C. Generate logs and discard them
- D. Delete email attachment content
Answer: A
NEW QUESTION 72
Which of the following is correct about the order of the file filtering technology process?
(1) Security policy application is permit
(2) Protocol decoding
(3) File Type Identification
(4) Application identification
(5) File Filtering
- A. (1) (3) (2) (4) (5)
- B. (1) (2) (3) (4) (5)
- C. (1) (4) (2) (3) (5)
- D. (1) (2) (4) (3) (5)
Answer: C
NEW QUESTION 73
The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are possible causes? (Multiple Choice)
- A. The security policy does not reference the anti-virus configuration file.
- B. Antivirus configuration file configuration error.
- C. No virus exceptions are configured.
- D. The version of the virus signature database is older.
Answer: A,B,D
NEW QUESTION 74
Because the sandbox can provide virtual execution environment to detect files on the network, the sandbox can replace devices such as Anti-Virus, IPS and spam detection when deploying security devices.
- A. False
- B. True
Answer: A
NEW QUESTION 75
A business administrator wants to prevent employees from accessing shopping websites during business hours. A URL filtering configuration file was then configured to select the shopping site in the predefined category as blocked. However, employee A can still use the company's network to shop online during the lunch break.
What are the possible reasons for the following? (Multiple choices)
- A. The shopping site does not belong to the predefined shopping site category.
- B. The administrator did not submit the configuration after configuration.
- C. The administrator did not apply the URL filtering profile to the security policy.
- D. The administrator did not set the time period to 9:00-18:00 daily.
Answer: A,B,C
NEW QUESTION 76
Threat after the big data intelligent security analysis platform detect will be synchronized to each network device, and then continue to learn and optimize by collecting to the logs from the network device.
- A. True
- B. False
Answer: A
NEW QUESTION 77
Why APT attacks are difficult to defend? Part of the reason is that they use zero-day loopholes to attack. This zero-day loopholes usually takes a lot of time to research and analyze and make corresponding defense methods.
- A. True
- B. False
Answer: A
NEW QUESTION 78
Which of the following description are correct about the principles of HTTP Flood and HTTPS flood attack defense? (Multiple Choice)
- A. The principle of HTTPS flood attack is to initiate a large number of HTTPS connections to the target server, resulting in exhaustion of server resources and failure to respond to normal requests.
- B. The principle of HTTPS Flood attack is to use the URI that involves database operations or other URIs that consume system resources, causing server resources to become exhausted and unable to respond to normal requests.
- C. HTTPS flood defense can perform source authentication by limiting the packet request rate.
- D. HTTPS flood defense mode includes basic mode, enhanced mode, and 302 redirects.
Answer: A,B,C
NEW QUESTION 79
After the Huawei USG6000 product license expires, the RBL function is unavailable.
Users can only use local black and white lists to filter spam.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 80
Which of the following protocols can be used to construct attack packets for special control packet attacks? (Multiple choices)
- A. UDP protocol
- B. ICMP protocol
- C. FTP protocol
- D. IP protocol
Answer: A,B,D
NEW QUESTION 81
Buffer overflows, Trojans, backdoor attacks, etc. are all application-level attacks.
- A. True
- B. False
Answer: A
NEW QUESTION 82
About the anti-virus gateways based on flow-scanning, which of the following statement is wrong?
- A. The cost is smaller than proxy-based
- B. Performance is higher than proxy-based
- C. The detection rate is higher than proxy-scanning-based
- D. Depends on state detection technology and protocol analysis technology
Answer: C
NEW QUESTION 83
What content can be filtered by the content filtering technology of Huawei USG6000? (Multiple choice)
- A. Voice content filtering
- B. File content filtering
- C. Application content filtering
- D. Video content filtering
Answer: B,C
NEW QUESTION 84
There are the following steps in the storage XSS attack
1, The attacker hijacked the user session
2, Attacker submits issues with known JavaScript
3, user login
4, User Request Attacker Problem
5, Server responds to attacker's JavaScript
6, User's browser sends session token to attacker
7, Attacker's JavaScript is executed in the user's browser
Which of the following options is correct for the ordering of these steps?
- A. 3, 2, 7, 6, 4, 5, 1
- B. 3, 2, 4, 5, 7, 6, 1
- C. 3, 2, 4, 6, 5, 7, 1
- D. 3, 2, 5, 7, 4, 6, 1
Answer: B
NEW QUESTION 85
What are the three aspects that need to be considered when designing a cloud platform security solution? (Multiple choices)
- A. Hardware Maintenance
- B. How to manage the operation and maintenance
- C. Infrastructure security
- D. Tenant security
Answer: B,C,D
NEW QUESTION 86
After the data file hits the whitelist of the firewall anti-virus module, the firewall will no longer do virus detection on the file.
- A. True
- B. False
Answer: A
NEW QUESTION 87
Which of the following is the correct about computer virus?
- A. The computer virus is latent. It may be lurking for a long time. It will only begin to perform sabotage if certain conditions are met.
- B. All computer viruses must be parasitic in files and cannot exist independently
- C. The computer virus is contagious. It can spread through floppy disks and optical disks but it does not spread through the network.
- D. Patching the system can completely solve the problem of virus intrusion
Answer: A
NEW QUESTION 88
Which two of the following options use similar attack methods and generate a large number of useless reply packets, occupying network bandwidth and consuming device resources?
- A. Fraggle and Smurf
- B. Teardrop and Land
- C. Land and Smurf
- D. Fraggle andLand
Answer: A
NEW QUESTION 89
IPS function of Huawei USG6000 product supports two response modes of blocking and alarming.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 90
......
Penetration testers simulate H12-722 exam: https://www.testpdf.com/H12-722-exam-braindumps.html
