[May-2022] Download Real Huawei H12-722 Exam Dumps Test Engine Exam Questions [Q64-Q82]

H12-722 Huawei

admin • May 7, 2022

[May-2022] Download Real Huawei H12-722 Exam Dumps Test Engine Exam Questions [Q64-Q82]

Rate this post

[May-2022] Download Real Huawei H12-722 Exam Dumps Test Engine Exam Questions

New H12-722 exam dumps Use Updated Huawei Exam

NEW QUESTION 64
Regarding the sequence of file filtering technology processing flow, which of the following is correct?
(1) The security policy is applied as permit
(2) Protocol decoding
(3) File type recognition
(4) Application recognition
(5) File filtering

(1)(2)(3)(4)(5)

(1)(4)(2)(3)(5)

(1)(2)(4)(3)(5)

(1)(3)(2)(4)(5)

NEW QUESTION 65
After the data file hits the whitelist of the firewall anti-virus module, the firewall will no longer do virus detection on the file.

True

False

NEW QUESTION 66
Which of the following statements is wrong about Huawei anti-virus technology?

The virus detection system cannot directly detect compressed files

Anti-virus engine can detect file type by file extension

The maximum number of unpacked layers of the gateway antivirus default file is 3

Gateway anti-virus implementation is based on proxy scanning and flow scanning

NEW QUESTION 67
The following figure is the diagram which shows the firewall and sandbox system linkage detection file.

The Web Reputation feature is enabled on the firewall, and Site A is set as a trusted site and Site B is set as a suspicious site. Which of the following statements is correct?

The files which the users obtain from Site A and Site B are sent to the detection node for detection.

When the user visits the Site B, although the firewall will extract the file and send it to the detection node, the user can still visit the Site B normally during the detection process.

After the detection node detects a suspicious file, it not only informs the firewall in the figure, but also informs other connected network devices.

Assume that Site A is an unknown website, the administrator cannot detect the website’s traffic file.

NEW QUESTION 68
For the description of the principles of HTTP Flood and HTTPS Flood blow defense, which of the following options are correct? (multiple choice)

HTTPS Flood defense modes include basic mode, enhanced mode and 302 redirection.

HTTPS Flood defense can perform source authentication by limiting the request rate of packets.

The principle of HTTPS Flood attack is to request URIs involving database operations or other URIs that consume system resources, causing server resource consumption.
Failed to respond to normal requests.

The principle of HTTPS Flood attack is to initiate a large number of HTTPS connections to the target server, causing the server resources to be exhausted and unable to respond to regular requests.
begging.

NEW QUESTION 69
Buffer overflows, Trojan horses, and backdoor attacks are all attacks at the application layer.

True

False

NEW QUESTION 70
If Huawei USG6000 product uses its own protocol stack cache for all files passing through the device and then performs virus scanning, then the device uses a flow scan mode.

TRUE

FALSE

NEW QUESTION 71
Which of the following options does not belong to the defense against HTTP flood attacks?

HTTP Flood Source Authentication

HTTP source statistics

URI source fingerprint learning function

Baseline learning

NEW QUESTION 72
Which of the following are the common causes of IPS detection failures? (Multiple choices)

IPS policy is not submitted for compilation

Policy IDs with incorrect associations between IPS policy domains

IPS function is not enabled

Bypass function in IPS is turned off

NEW QUESTION 73
The DDoS attack defense configuration process is as follows:
1, start the flow statistics function;
2. Set different protection thresholds for different types of attacks;
3. When the traffic exceeds the preset threshold, the system starts attack defense.

TRUE

FALSE

NEW QUESTION 74
Regarding scanning and snooping attacks, which of the following descriptions is wrong?

Scanning attacks include address scanning and port scanning.

It is usually the network detection behavior before the attacker launches the real attack.

The source address of the scanning attack is real, so it can be defended by adding direct assistance to the blacklist.

When a worm virus breaks out, it is usually accompanied by an address scanning attack, so scanning attacks are offensive.

NEW QUESTION 75
Which of the following are the control items for HTTP behavior? (Multiple Choice)

POST operation

Browse the web

Acting on the Internet

File Upload and Download

NEW QUESTION 76
USG6000V software logic architecture is divided into three planes: management plane, control plane and

Configuration plane

Business plane

Log plane

Data forwarding plane

NEW QUESTION 77
Which of the following options is not a special message attack?

ICMP redirect message attack) 0l

Oversized ICMP packet attack

Tracert packet attack

IP fragment message item

NEW QUESTION 78
Which of the following options are not part of the PDRR security model?

Protection

Testing

Request

Response

NEW QUESTION 79
Huawei WAF products mainly consist of implementing front-end, back-end central systems and databases. The database mainly stores the front-end detection rules and black and white list configuration files.

True

False

NEW QUESTION 80
Regarding the sequence of the mail transmission process, which of the following is correct?
1. The sender PC sends the mail to the designated SMTP Server.
2. The sender SMTP Server encapsulates the mail information in an SMTP message and sends it to the receiver SMTP Server according to the destination address of the mail
3. The sender SMTP Server encapsulates the mail information in an SMTP message according to the destination address of the mail and sends it to the receiver POP3/MAP Senver
4. The recipient sends an email.

1->2->3

1->2->4,

1->3->2

1->4->3

NEW QUESTION 81
Regarding the network intrusion detection system (NIDS), which of the following statements is wrong?

It is mainly used for real-time monitoring of the information of the critical path of the network, listening to all packets on the network, collecting data, and analyzing suspicious objects

Use the newly received network packet as the data source;

Real-time monitoring through the network adapter, and analysis of all communication services through the network;

Used to monitor network traffic, and can be deployed independently.

NEW QUESTION 82
Regarding the description of intrusion detection technology, which of the following statements is correct?

Unable to detect violation of security policy.

Can detect authorized and non-authorized intrusions.

Cannot find the trace of the system being attacked.

is an active, static security defense technology.

Loading …