Free 2022 H12-722-ENU Dumps 100 Pass Guarantee With Latest Demo
Prepare H12-722-ENU Question Answers Free Update With 100% Exam Passing Guarantee [2022]
NEW QUESTION 40
Configure the following commands on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-defult-route acl 3000
Which of the following options are correct? (multiple choice)
- A. For the configuration of the default route, and at the same time matching the parameter allow-defult-route, if the source address of the message is in the FIB table of the firewall If it does not exist in the l0e check, the packet cannot pass the URPF check.
- B. For the situation where the default route is configured and the parameter allow-defult-route is matched at the same time, if the source address of the packet is in the FIB table of the firewall If the packet does not exist in the loose check mode, all packets will pass the URPF check and be forwarded normally.
- C. For loose inspection: if the source address of the packet exists in the FB of the firewall: the packet passes the inspection directly
- D. For the case where the default route is configured, but the parameter allow-defult-route is not configured. As long as the source address of the packet is in the FIB table of the firewall If it does not exist, the message will be rejected.
Answer: B,C,D
NEW QUESTION 41
Which of the following technologies can achieve content security? (Multiple Choice)
- A. Sandbox and Big Data Analysis
- B. Global environment awareness
- C. Web security protection
- D. Intrusion Prevention
Answer: A,B,C,D
NEW QUESTION 42
For Huawei USG600 products, which of the following statements about mail filtering configuration is correct?
- A. You can control the size of the attachment of the received mail
- B. Cannot control the number of received email attachments
- C. When the spam processing action is an alert, the email will be blocked and an alert will be generated
- D. Cannot perform keyword filtering on incoming mail
Answer: A
NEW QUESTION 43
About the anti-virus gateways based on flow-scanning, which of the following statement is wrong?
- A. Depends on state detection technology and protocol analysis technology
- B. The cost is smaller than proxy-based
- C. The detection rate is higher than proxy-scanning-based
- D. Performance is higher than proxy-based
Answer: C
NEW QUESTION 44
Which of the following options are common behavioral characteristics of viruses? (multiple choices)
- A. Information collection characteristics
- B. Network attack characteristics
- C. Download and backdoor features
- D. Self-hidden features
Answer: A,B,C,D
NEW QUESTION 45
Which of the following statements is wrong about Huawei anti-virus technology?
- A. The maximum number of unpacked layers of the gateway antivirus default file is 3
- B. Anti-virus engine can detect file type by file extension
- C. Gateway anti-virus implementation is based on proxy scanning and flow scanning
- D. The virus detection system cannot directly detect compressed files
Answer: B
NEW QUESTION 46
Regarding the sequence of the mail transmission process, which of the following is correct?
1. The sender PC sends the mail to the designated SMTP Server.
2. The sender SMTP Server encapsulates the mail information in an SMTP message and sends it to the receiver SMTP Server according to the destination address of the mail
3. The sender SMTP Server encapsulates the mail information in an SMTP message according to the destination address of the mail and sends it to the receiver POP3/MAP Senver
4. The recipient sends an email.
- A. 1->2->4,
- B. 1->3->2
- C. 1->2->3
- D. 1->4->3
Answer: A
NEW QUESTION 47
For the URL is http://www.abcd.com:8080/news/education.aspx?name=tom&age=20, where is the path option?
- A. http://www.abcd.com:8080/news/education.aspx
- B. /news/education.aspx
- C. http://www.abcd.com:8080
- D. /news/education.aspx?name=tom&age=20
Answer: B
NEW QUESTION 48
For the basic mode of HTTP Flood source authentication, which of the following options are correct?
(multiple choice)
- A. The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.
- B. The basic mode can effectively block the access from the Feng Explor client.
- C. When there is an HTTP proxy server in the network, the firewall will add the IP address of the proxy server to the whitelist, but it will recognize the basic source of the zombie host.
The certificate is still valid. - D. The bot tool does not implement a complete HTTP protocol stack and does not support automatic redirection, so the basic mode can effectively defend against HTTP Flood attacks.
hit.
Answer: B,D
NEW QUESTION 49
The most common form of child-like attack is to send a large number of seemingly legitimate packets to the target host through Flood, which ultimately leads to network bandwidth.
Or the equipment resources are exhausted. Which of the following options is not included in traffic attack packets?
- A. ICMP message
- B. FTP message
- C. TCP packets
- D. UDP packet
Answer: B
NEW QUESTION 50
Content filtering is a security mechanism for filtering files or applications by Huawei USG6000 products. By deeply identifying the content contained in the traffic, the device can block or alarm the traffic containing specific keywords.
- A. True
- B. False
Answer: A
NEW QUESTION 51
URL filtering technology can access control URLs for users according to different time objects and address objects, and achieve the purpose of accurately managing user online behavior.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 52
In the big data intelligent security analysis platform, it is necessary to collect data from data sources, and then complete a series of actions such as data processing, detection and analysis, etc.
do. Which of the following options does not belong to the action that needs to be completed in the data processing part?
- A. Distributed index
- B. Threat determination
- C. Data preprocessing
- D. Distributed storage
Answer: B
NEW QUESTION 53
The following commands are configured on the Huawei firewall:
[USG] firewall defend ip-fragment enable
Which of the following situations will be recorded as an offensive behavior? (multiple choice)
- A. The DF bit is 1, and Fragment Ofset + Length <65535.
- B. DF, bit is down, and MF bit is also 1 or Fragment Offset is not 0,
- C. DF bit is 0, and Fragment Offset + Length> 65535.
- D. DF bit is 023, MF bit is 1 or Fragment Offset is not 0,
Answer: B,C
NEW QUESTION 54
Which of the following description are correct about the principles of HTTP Flood and HTTPS flood attack defense? (Multiple Choice)
- A. HTTPS flood defense can perform source authentication by limiting the packet request rate.
- B. HTTPS flood defense mode includes basic mode, enhanced mode, and 302 redirects.
- C. The principle of HTTPS Flood attack is to use the URI that involves database operations or other URIs that consume system resources, causing server resources to become exhausted and unable to respond to normal requests.
- D. The principle of HTTPS flood attack is to initiate a large number of HTTPS connections to the target server, resulting in exhaustion of server resources and failure to respond to normal requests.
Answer: A,C,D
NEW QUESTION 55
Malicious code usually uses RootKit technology to hide itself. RootKit modifies the kernel of the system by loading special drivers to hide itself and specific files.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION 56
The main attack prevention technologies of Huawei USG6000 products include: source detection, fingerprint learning and associated defense.
- A. True
- B. False
Answer: B
NEW QUESTION 57
Which of the following signature properties cannot be configured for IP custom signatures?
- A. Packet length
- B. Direction
- C. protocol
- D. ID
Answer: A
NEW QUESTION 58
The following figure shows the configuration of the URL filtering configuration file. Regarding the configuration, which of the following statements is correct?
- A. The default action means that all websites are allowed to visit. So the configuration is wrong here.
- B. The firewall will first check the blacklist entries and then the whitelist entries.
- C. Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.
- D. The user visits the website www.exzample.com, and when the black and white list is not hit, the next step is to query the predefined URL category entry.
Answer: C
NEW QUESTION 59
Which aspects of information security will be caused by unauthorized access? (multiple choice)
- A. Integrity
- B. Recoverability
- C. Confidentiality
- D. Availability
Answer: A,C
NEW QUESTION 60
......
Dumps Real Huawei H12-722-ENU Exam Questions [Updated 2022]: https://dumpstorrent.exam4pdf.com/H12-722-ENU-dumps-torrent.html
