Spring Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Huawei
HCIP-Security
H12-723
Huawei Certified ICT Professional - Constructing Terminal Security System Questions and Answers

Pass the Huawei HCIP-Security H12-723 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam H12-723 Premium Access

View all detail and faqs for the H12-723 exam

Go to Exam

663 Students Passed

91% Average Score

91% Same Questions

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions

Questions # 41:

A university user requirements are as follows:

1. The environmental flow is larger, two-way add up to OOOM, UTM deployed in its network node.

2. The intranet is divided into students zones, server zones, etc., users are most concerned about the security of the server area, to avoid all kinds of the threat of attack.

3. At the same time to ban students area some pornographic websites.

In UTM configured Extranet for untrust domain, Intranet for trust domain, how to deploy the UTM strategy? (Select 2 answers)

Options:

can be directly under the global open AV, PS protective function, URL filtering function, then it can be realized

Outbound direction only open AV, IPS protective function for server areas, protected server

inboud direction only open AV, IPS protective function for server areas, protected server

Outbound direction open URL filtering function for the entire campus network, and filtering of part classification website

Answer

C, D

Questions # 42:

Which of the following law items is the most blessed for safety? This should be true?

Options:

Checking strategies are mainly used to check some static settings of the terminal, such as whether the screen saver is set, whether the antivirus software is installed; whether there is illegal Outreach etc. z00

Monitoring strategies are mainly used for real-time monitoring of events that occur in the system, such as whether anti-virus software is installed and whether PPPOE dial-up access is used Network, etc.-Once an incident is detected, some control can be taken.

The security check strategy only includes two types of end-host check-type strategies and end-user behavior check-type strategies.

Terminal host security management is mainly implemented by inspection strategies, and end user behavior management is mainly implemented by monitoring strategies.

Answer

Questions # 43:

Traditional network single--The strategy is difficult to cope with the current complex situations such as diversified users, diversified locations, diversified terminals, diversified applications, and insecure experience.

Options:

right

wrong

Answer

Questions # 44:

Regarding the description of the logic architecture of the business accompanying, which of the following options is correct?

Options:

The business management plane focuses on administrators, authentication servers, and policy servers.

The network equipment plane focuses on user terminals and static resources.

The user plane focuses on authentication points and policy enforcement points.

The business free mobility logic architecture includes a management subsystem, an authentication and authorization subsystem, and a business strategy subsystem.

Answer

Questions # 45:

In the visitor reception hall of a company, there are many temporary terminal users, and the administrator hopes that users do not need to provide any account numbers and passwords. access Internet. Which of the following authentication methods can be used for access?

Options:

Local account authentication

Anonymous authentication

AD Account Verification

MAC Certification

Answer

Questions # 46:

Use hardware SACG Access control,,In hardware SACG View the results of the conversation table on the deduction.

Which of the following statements are correct? (Multiple choice)

Options:

192.168.1.0 definitely is Agile Controller-Campus Manager IP address

if 192.126.200.11 Is the server of the post-authentication domain, then IP Address is 192.18.0.1 If your terminal has not passed the authentication, it is possible to access the server.

192.168.100.1 definitely is Agile Controller-Campus Controller IP address.

If in 6 Within minutes of the conversation 192.168.0.19 154->/192.162.0.11: 15080 Not refreshed,IP Address is 192.168.0.119 If the device wants to IP Address is 192.168.200.11 For device communication, the session must be re-established.

Answer

A, B, D

Questions # 47:

Which of the following options is about SACG The description of the online process is wrong?

Options:

Terminal and Agile Controller-Campus Server communication SSL encryption

Authentication fails, end users can only access resources in the pre-authentication domain

Security check passed,Agile Controller-Campus Server notification SACG Will end user's IP Address switch to isolated domain

Agile Controller-Campus Server gives SACG Carrying domain parameters in the message

Answer

Questions # 48:

What do the common virus behavior characteristics include?(select 3 answers)

Options:

Download and backdoor characteristics

Information Collection feature

own hidden feature

system attacks characteristics

Answer

A, B, C

Questions # 49:

MAC Bypass authentication means that after the terminal is connected to the network, the access control device automatically obtains the terminal MAC Address, which is sent to RADIUS The server performs euverification.

Options:

right

wrong

Answer

Questions # 50:

Regarding the description of the ACL used in the linkage between SACG equipment and the TSM system, which of the following statements is correct!?

Options:

default ACL The rule group number can be arbitrarily specified.

default ACL The rule group number can only be 3999.

due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you need to ensure these ACL Not referenced by other functions.

The original group number is 3099-3999 of ACL Even if it is occupied, it can be successfully activated TSM Linkage.

Answer

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions