Get 2022 Free Huawei H12-723_V3.0 Exam Practice Materials Collection [Q80-Q104]

admin • July 4, 2022

Get 2022 Free Huawei H12-723_V3.0 Exam Practice Materials Collection [Q80-Q104]

Rate this post

Get 2022 Free Huawei H12-723_V3.0 Exam Practice Materials Collection

Get Latest and 100% Accurate H12-723_V3.0 Exam Questions

Q80. About the hardware SACG Certification deployment scenarios, which of the following descriptions are correct? (Multiple choice)

SACG Authentication is generally used in scenarios where a stable network performs wired admission control.

SACG Authentication is generally used in scenarios where new networks are used for wireless admission control.

SACG It is generally deployed in a bypass mode without changing the original network topology.

SACG Essentially through 802.1X Technology controls access users.

Q81. In the Agile Controller-Campus admission control technology framework, regarding the description of RADIUS, which of the following options is correct?

PADIUS Used on the client and 802.1X Information such as user names and passwords arepassed between switches.

PADIUS Used in 802.1X Switch and AAA Information such as user name and password are passed between servers.

PADIUS Used for Portal Server pushes to users Web page.

PADIUS Used for server to SACG Security policy issued by the device

Q82. Use on access control equipment test-aaa Command test and Radius When the server is connected, the running result shows a timeout, which may be caused by incorrect account or password configuration.

True

False

Q83. Regarding the way SACG devices connect to the network, which of the following descriptions are correct?
(multiple choice)

SACG The equipment requires Layer 3 intercommunication with the terminal.

SACGIt is usually connected to the core switch equipment and uses policy routing to divert traffic.

SACG Support hanging on non-Huawei devices.

SACG Equipment requirements and Agile Controller-Campus Interoperability on the second floor.

Q84. Business accompanying is-A special access control method, according to the user’s access location, access time, access method and terminal use to grant designated investment limits, among which the physical connection can be divided into 3 Class, excluding which of the following access methods?

Wired access

Wireless access

VPN Access

802.1X Access

Q85. Which of the following options is correct for the description of the role of the isolation domain?

Isolation domain refers to the area that the terminal host can access before passing the identity authentication, such as DNS server, external authentication source, business controller (SC)c The area where the service manager (SM) is located.

Isolation domain refers to the area that is allowed to be accessed when the terminal user passes the identity authentication but fails the security authentication,such as patch server, virus database server.
The area where the server is located.

Isolation domain refers to the area that terminal users can access after passing identity authentication and security authentication, such as ERP system, financial system database system. The area where you are.

End users can access the isolated domain regardless of whether they pass identity authentication.

Q86. Regarding the description of the ACL used in the linkage between SACG equipment and the TSM system, which of the following statements is correct!?

default ACL The rule group number can be arbitrarily specified.

default ACL The rule group number can only be 3999.

due to SACG Need to use ACL3099-3999 To pick TSM The rules issued by the system, so in the configuration TSM Before linkage, you needto ensure these ACL Not referenced by other functions.

The original group number is 3099-3999 of ACL Even if it is occupied, it can be successfully activated TSM Linkage.

Q87. There is a three-layer forwarding device between the authentication client and the admission control device:If at this time Portal The certified three-layer authentication device can also obtain the authentication client’s MAC address,So you can use IP Addressand MC The address serves as the information to identify the user.

True

False

Q88. In the terminal security all-round defense system, use PPT-PDCA The model can effectively implement terminal security defense. Which of the following options does not belong to PPT Model?

technology

Process

organization

plan

Q89. Portal page push rules have priority, and the rules with higher priority are matched with the user’s authentication information first. If none of the configured rules match, The default rules are used.

True

False

Q90. Regarding MAC authentication and MAC bypass authentication, which of thefollowing descriptions are correct? (multiple choice)

The biggest difference between the two is MAC Bypass authentication belongs to 802 1X Certification, while MAC Certification does not belong to 802 1X Certification.

If a network can connect to dumb terminals(printer,IP telephone), The text may be connected to a portable computer, please use MAC Bypass authentication:First try 802 1X Authentication, try again if authentication fails MAC Certification

If a network will only connect to dumb terminals(printer,IP telephone),please use MAC Certification in order to shorten the certification time.

MAC Authentication MAC One more bypass authentication 802 In the instrument certification process, the open time is longer than MAC The bypass authentication time is long.

Q91. Regarding the trigger mechanism of 802.1X authentication, which of the following descriptions is correct?
(multiple choice)

802.1X Authentication can only be initiated by the client.

802.1X Certification can only be done by certified equipment(like 802.1X switch)Initiate

8021X The client can trigger authentication through multicast or broadcast.

The authentication equipment department triggers authentication through multicast orunicast.

Q92. Hardware in useSACG At the time of certification,SACG After the configuration is completed, you can seeSACG andAgile Agile Controller-Campus The linkage is successful, but the user authentication fails. This phenomenon may be caused by the following reasons? (Multiple choice)

User flow has not passed SACG.

SACG There is no release on the user stream.

SACG There is no closed state detection on it.

Agile Controller-Campus On and SACG Wrong key configuration for linkage

Q93. When the account assigned by the administrator for the guest is connected to the network, the audit action that the administrator can perform on the guest does not include which of the following options?

Visitor online and offline records

Force users to go offline

Account deactivation 1 reset Password

Send a warning message to the user

Q94. If youdeploy Free Mobility, in the logic architecture of Free Mobility, which of the following options should be concerned by the administrator?

Is the strategy automatically deployed?

Choose the appropriate policy control point and user authentication point

Does the strategy deployment target a single user?

Does the strategy deployment target a single department?

Q95. Regarding the description of the logic architecture of the business accompanying, which of the following options is correct?

The business management plane focuses on administrators, authentication servers, and policy servers.

The network equipment plane focuses on user terminals and static resources.

The user plane focuses on authentication points and policy enforcement points.

The business free mobility logic architecture includes a management subsystem, an authentication and authorization subsystem, and a business strategy subsystem.

Q96. The administrator issues notices to users in the form of announcements, such as the latest software and patch installation notices. Which of the following options of the announcement is incorrect?

Announcements can be issued bythe security department

The terminal must have a proxy client installed to receive announcements.

If the system issues an announcement and the proxy client is not online, the announcement information will not be received after going online.

Announcements can be issued by account.

Q97. Guest management is Agile Controller-Campus Important function of, regarding visitor management, which of the following statements are correct? (Multiple choice)

Visitors can use their mobilephone number to quickly register an account

The administrator can assign different permissions to each visitor

Reception staff cannot create guest accounts

There is a violation of the guest account, and the administrator cannot retrospectively

Q98. Regarding WLAN, which of the following descriptions is correct?

WLAN Is to adopt 80211 Technical WiFi

WLAN There are two basic architectures: FAT AP with AC+FIT AP

AC+FATAP The architecture is suitable for medium andlarge use scenarios

AC+FITAP Autonomous network architecture

Q99. User access authentication technology does not include which of the following options?

Authentication

Isolation repair’

Security check

Access control

Q100. In theAgile Controller-Campus admission control scenario, regarding the role description of the RADIUS server I client, which of the following is positive True?

Agile Controller-Campus Integrated RADIUS All functions of server and client.”

Agile Controller-Campus As RADIUS On the server side, the user terminal acts as RADIUS Client.

Certified equipment(like 802. 1X switch)As RADIUS On the server side, the user terminal acts as RADIUS Client.

Agile Controller-Campus As RADIUS Server side, authentication device(like 802.1X switch)As RADIUS Client.

Q101. An enterprise adopts hardware SACG access method for admission control. The configuration commands are as follows, among which Key; Admin@123
[USG] right-manager server-group
[USG-rightm] localip 10.1.10.2
[USG-rightm]serverip 10. 1.31.78 shared-key AdnIn@123
[USG2100-rightm] right-manager server-group enable.
Assuming that the other configurations are correct, based on the above configuration only, which of the following options is correct?

After completing the configuration, SACG can successfully link with the Agile Controller-Campus.

After completing the configuration, SACG cannot successfully link with Agile Contrlle-Campus. P

Can issue pre-authentication domain ACL.

The linkage cannot be successful but the terminal can access the pre-authentication domain server.

Q102. An account can belong to multiple roles, that is, a user may hold multiple positions.

True

False

Q103. The following is the 802.1X access control switch configuration:
[S5720]dot1x authentication-method eap
[S5720-GigabitEthernet0/0/1] port link-type access
[S5720-GigabitEthemet0/0/1] port default vlan 11
[S5720-GigabitEthernet0/0/1] authentication dot1x
Assuming that GE0/0/1 is connected to user 1 and user 2through the HUB, which of the following options is correct?

After user 1 is authenticated, user 2 can access network resources without authentication

User 1 and User 2 must be individually authenticated before they can access networkresources

GE0/0/1 does not need to enable dot1X

Neither user 1 nor user 2 can pass the authentication and access network resources.

Q104. Terminal security access technology does not include which of the following options?

Access control

safety certificate

Authentication

System Management

Loading …