Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Huawei
HCIP-Security
H12-724
HCIP-Security (Fast track) V1.0 Questions and Answers

Pass the Huawei HCIP-Security H12-724 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam H12-724 Premium Access

View all detail and faqs for the H12-724 exam

Go to Exam

731 Students Passed

92% Average Score

96% Same Questions

Viewing page 10 out of 11 pages

Viewing questions 91-100 out of questions

Questions # 91:

Regarding CAPWAP encryption, which of the following statements is wrong?

Options:

CAPWAP The data tunnel can be used DTLS Encrypted.

DTLS Support two authentication methods:Certificate authentication(out AC,AP Already brought)with PSK Password authentication.

DTLS Encryption can guarantee AC The issued control messages will not be eavesdropped on.

Use the certificate method to carry out DTLS Negotiation, the certificate is only used to generate the key, not right AP Perform authentication.

Answer

Questions # 92:

The visitor management process includes page customization, account application, user authentication, audit, and logout. After the user successfully applies for an account, he needs to change.

When the account is distributed to users, what stage does the distribution of the account belong to?

Options:

Page customization stage

Account application stage

User authentication phase

Audit and cancellation stage

Answer

Questions # 93:

After the user deploys the firewall anti-virus strategy, there is no need to deploy anti-virus software

Options:

True

False.

Answer

Questions # 94:

For the basic mode of HTTP Flood source authentication, which of the following options are correct? (multiple choice)

Options:

The basic mode can effectively block the access from the Feng Explor client.

The bot tool does not implement a complete HTTP protocol stack and does not support automatic redirection, so the basic mode can effectively defend against HTTP Flood attacks.

hit.

When there is an HTTP proxy server in the network, the firewall will add the IP address of the proxy server to the whitelist, but it will recognize the basic source of the zombie host.

The certificate is still valid.

The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.

Answer

A, B

Questions # 95:

If you use a normal account for authentication, which of the following descriptions is wrong?

Options:

Users can use Any Office Perform authentication.

User can't use web Way to authenticate.

Users can use Web Agent Perform authentication.

Users can use their own 802. 1X The client authenticates.

Answer

Questions # 96:

For hardware SACC Access control, if the terminal does not pass the authentication, it can access the resources of the post-authentication domain. This phenomenon may be caused by the following reasons? (Multiple choice)

Options:

Authentication data flow has passed SACG filter.

TSM No hardware is added to the system SACG equipment.

SACG Enable the default inter-domain packet filtering.

Privileges are misconfigured IP

Answer

C, D

Questions # 97:

When configuring the terminal visits, we put some equipment configured exception equipment ,which of the following statements are true about the exception equipment?

Options:

the exception equipment IP is not in controlled network segment.

terminal in isolation domain can not access exception equipment .

only through security authentication terminals can access exception equipment.

through identity authentication terminals can access exception equipment.

Answer

A, D

Questions # 98:

What equipment do Policy Center supported servers include? (Choose 3 answers)

Options:

remote control device

mail server

Internet behavior management equipment

log collection server

Answer

A, B, C

Questions # 99:

Which of the following law items is the most blessed for safety? This should be true?

Options:

Checking strategies are mainly used to check some static settings of the terminal, such as whether the screen saver is set, whether the antivirus software is installed; whether there is illegal Outreach etc. z00

Monitoring strategies are mainly used for real-time monitoring of events that occur in the system, such as whether anti-virus software is installed and whether PPPOE dial-up access is used Network, etc.-Once an incident is detected, some control can be taken.

The security check strategy only includes two types of end-host check-type strategies and end-user behavior check-type strategies.

Terminal host security management is mainly implemented by inspection strategies, and end user behavior management is mainly implemented by monitoring strategies.

Answer

Questions # 100:

Terminal fault diagnosis tool can diagnose fault, also can collect terminal information.