H12-722_V3.0 - Latest Training Dumps

[2022] Valid H12-722_V3.0 test answers & Huawei H12-722_V3.0 exam pdf

Verified H12-722_V3.0 dumps Q&As – Pass Guarantee or Full Refund

NO.80 Which aspects of information security will be caused by unauthorized access? (multiple choice)

Confidentiality

Integrity

Availability

Recoverability

NO.81 For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?

TCP proxy means that the firewall is deployed between the client and the server. When the SYI packet sent by the client to the server passes through the firewall, the The firewall replaces the server and establishes a three-way handshake with the client. Generally used in scenarios where the back and forth paths of packets are inconsistent.

During the TCP proxy process, the firewall will proxy and respond to each SYN message received, and maintain a semi-connection, so when the SYN message is When the document flow is heavy, the performance requirements of the firewall are often high.

TCP source authentication has the restriction that the return path must be consistent, so the application of TCP proxy is not common. State “QQ: 9233

TCP source authentication is added to the whitelist after the source authentication of the client is passed, and the SYN packet of this source still needs to be verified in the future.

NO.82 After the user deploys the firewall anti-virus strategy, there is no need to deploy anti-virus software

True

False.

NO.83 USG6000V software logic architecture is divided into three planes: management plane, control plane and

Configuration plane

Business plane

Log plane

Data forwarding plane

NO.84 Due to differences in network environment and system security strategies, intrusion detection systems are also different in specific implementation. From the perspective of system composition, the main Which four major components are included?

Event extraction, intrusion analysis, reverse intrusion and remote management.

Incident extraction, intrusion analysis, intrusion response and on-site management.

Incident recording, intrusion analysis, intrusion response and remote management.

Incident extraction, intrusion analysis, intrusion response and remote management.

NO.85 Buffer overflows, Trojan horses, and backdoor attacks are all attacks at the application layer.

True

False

NO.86 Regarding firewall and IDS, which of the following statements is correct?

The firewall is a bypass device, used for fine-grained detection

IDS is a straight line equipment and cannot be used for in-depth inspection

The firewall cannot detect malicious operations or misoperations by insiders

IDS cannot be linked with firewall

NO.87 UDP is a connectionless protocol. UDP Flood attacks that change sources and ports will cause performance degradation of network devices that rely on session forwarding.
Even the session table is exhausted, causing the network to be paralyzed. Which of the following options is not a preventive measure for UDP Flood attacks?

UDP fingerprint learning

Associated defense

current limit

First packet discarded

NO.88 Attacks on the Web can be divided into three types of attacks on the client, server, or communication channel.

True

False

NO.89 What equipment do Policy Center supported servers include? (Choose 3 answers)

remote control device

mail server

Internet behavior management equipment

log collection server

NO.90 The administrator has made the following configuration:
1. The signature set Protect_ all includes the signature ID3000, and the overall action of the signature set is to block.
2. The action of overwriting signature ID3000 is an alarm.

The action of signing iD3000 is an alarm

The action of signing ID3000 is to block

Unable to determine the action of signature ID3000

The signature set is not related to the coverage signature

NO.91 Which of the following options will not pose a security threat to the network?

Hacking

Weak personal safety awareness

Open company confidential files

Failure to update the virus database in time

NO.92 Huawei USG6000 products can scan and process certain file transfer protocols for viruses, but which of the following protocols is not included?

POP3

IMAP

FTP

TFTP

NO.93 Which of the following options belong to the upgrade method of the anti-virus signature database of Huawei USG6000 products? (multiple choice)

Local upgrade

Manual upgrade

Online upgrade

Automatic upgrade

NO.94 Which of the following descriptions are correct for proxy-based anti-virus gateways? (multiple choice)

The detection rate is higher than the flow scanning method

System overhead will be relatively small

Cache all files through the gateway’s own protocol stack

More advanced operations such as decompression, shelling, etc. can be performed

NO.95 The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are the possible reasons? (multiple choice)

The security policy does not reference the anti-virus configuration file.

The anti-virus configuration file is configured incorrectly.

The virus signature database version is older.

No virus exceptions are configured.

NO.96 In the security protection system of the cloud era, reforms need to be carried out in the three stages before, during and after the event, and a closed-loop continuous improvement should be formed.
And development. Which of the following key points should be done in “things”? (multiple choice)

Vulnerability intelligence

Defense in Depth

Offensive and defensive situation

Fight back against hackers

NO.97 If you combine security defense with big data technology, which of the following statements are correct?
(multiple choice)

In the learning process, you should start from collecting samples, analyze their characteristics and then perform machine learning.

Machine learning only counts a large number of samples, which is convenient for security administrators to view.

In the detection process, the characteristics of unknown samples need to be extracted and calculated to provide samples for subsequent static comparisons.

Security source data can come from many places, including data streams, messages, threat events, logs, etc.

NO.98 An enterprise has 3 server, which is the most reasonable plan when deploy Policy Center system planning?

manager + controller + FTP + witness database, controller + master database + FTP, controller + mirror database+ FTP

manager + controller + FTP + master database, controller + FTP + witness database, controller + FTP
+ mirror database

manager + controller + FTP + mirror database, controller + FTP + witness database, controller + FTP + master database

manager + controller + FTP, controller + FTP + witness databases, controller + FTP + master database

H12-722_V3.0 Exam Questions – Valid H12-722_V3.0 Dumps Pdf: https://www.trainingdump.com/Huawei/H12-722_V3.0-practice-exam-dumps.html

Category H12-722_V3.0

[2022] Valid H12-722_V3.0 test answers & Huawei H12-722_V3.0 exam pdf [Q80-Q98]