Pass Guaranteed Quiz 2022 Realistic Verified Free H12-722 Exam Dumps [Q95-Q110]

NO.95 Huawei’s USG000 product can identify the true type of common files and over-check the content. Even if the file is hidden in a compressed file, or change the extension The name of the exhibition can’t escape the fiery eyes of the firewall.

True

False

NO.96 Which of the following options describes the IntelliSense engine IAE incorrectly?

lAE’s content security detection functions include application identification and perception, intrusion prevention, and Web application security.

Full English name: intelligent Awareness Engine.

The core of C.IAE is to organically centralize all content security-related detection functions.

The security detection of the IAE engine is parallel, using a message-based file processing mechanism, which can receive file fragments and perform security checks.

NO.97 For the description of the Anti DDOS system, which of the following options is correct? C

The detection center is mainly to pull and clean the attack flow according to the control strategy of the security management center, and re-inject the cleaned normal flow back to the customer.
User network, send to the real destination.

The management center mainly completes the processing of attack events, controls the drainage strategy and cleaning strategy of the cleaning center, and responds to various attack events and attack flows.
View in categories and generate reports.

The main function of the Green Washing Center is to detect and analyze DDoS attack traffic on the flow from mirroring or splitting, and provide analysis data to The management center makes a judgment.

The firewall can only be used for inspection equipment

NO.98 Anti-DDoS defense system includes: management center, inspection center and cleaning center.

True

False

NO.99 Which of the following statements about intrusion detection/defense devices are correct? (Multiple Choice)

Can’t effectively resist the spread of viruses from the Internet to the Intranet.

NIP6000 can identify applications up to 6000+, implement fine-grained application protection, save export bandwidth, and ensure the business experience of key services.

Protect the intranet from external attacks and suppress malicious traffic, such as spyware, worms, etc., flooding and spreading to the intranet.

Can quickly adapt changes in threats.

NO.100 When you suspect that the corporate network is being attacked by hackers, you have conducted technical investigations.
Which of the following options does not belong to the pre-attack behavior?

Planting Malware

Loophole attack

Web Application attack

Brute force cracking

NO.101 Which of the following options are the possible reasons why a certain signature is not included after the IPS policy configuration is completed? (multiple choice)

Direction is not enabled

The direction is turned on, but no specific direction is selected

The severity level of the configuration is too high

The protocol selection technique is correct

NO.102 The administrator has configured file filtering to prohibit internal employees from uploading development files, but internal employees can still upload development files. Which of the following is not allowed Can the reason?

The file filtering configuration file is not referenced in the security policy

File filtering configuration file is incorrect

License is not activated.

The action configuration of the file extension does not match is incorrect

NO.103 Configure the following command on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-default-route acl 3000
Which of the following options are correct? (Multiple choice)

For the loose type check, if the source address of the packet exists in the FIB table of the firewall, the packet passes the check.

If the default route is configured but the parameter allow-default-route is not configured. As long as the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected.

If the default route is configured and the allow-default-route parameter is also matched, if the source address of the packet does not exist in the FIB table of the firewall, but for the loose type check, the packet will pass through URPF check, and perform normal forwarding.

If the source address of the packet does not exist in the FIB table of the firewall and the default route is configured and the allow-default-route parameter is also matched, the packet cannot pass the URPF check even if it is a loose type check.

NO.104 Attacks on the Web can be divided into three types of attacks on the client, server, or communication channel.

True

False

NO.105 With the continuous development of the network and the ever-changing applications, enterprise users have begun to transfer files on the network more and more frequently, and the resulting virus threats are also increasing. Only when the company rejects viruses outside the network can it ensure data security and system stability.
So, which of the following are the possible harms of the virus? (Multiple choices)

Threatening user host and network security.

Some viruses can be used as invasive tools (such as the Trojan horse virus).

Control host permissions, steal user data, and some viruses can even damage the host hardware.

Huawei USG6000 product can easily pass the defense.

NO.106 Regarding the 3 abnormal situations of the file type recognition result, which of the following option descriptions is wrong?

File extension mismatch means that the file type is inconsistent with the file extension.

Unrecognized file type means that the file type cannot be recognized and there is no file extension.

File damage means that the file type cannot be identified because the file is damaged.

Unrecognized file type means that the file type cannot be recognized, and the file extension cannot be recognized.

NO.107 The cloud sandbox refers to deploying the sandbox to the cloud and providing tenants with remote detection services. The process includes:
1. Report suspicious files
2. Backtracking attacks
3. Firewall defense linkage
4. Cloud sandbox detection
Which of the following option is correct for the sorting of this process?

1-3-4-2

1-4-2-3

1-4-3-2

3-1-4-2

NO.108 Single-packet attacks are divided into scanning and snooping attacks, malformed packet attacks, and special packet attacks. Ping of death is a special packet attack.

True

False

NO.109 Which of the following descriptions are correct based on proxy-based anti-virus gateways?

The detection rate is higher than the flow scan mode

System overhead will be small

All files are cached through the gateway own protocol stack

More advanced operations such as decompression and shelling can be performed

NO.110 If a company wants to detect image files, Shellcode code files and PDF files, which of the following types of sandboxes can be used? (More select)

PDF heuristic sandbox

PE heuristic sandbox

Web heuristic sandbox

Heavyweight sandbox (virtual execution)

Pass Guaranteed Quiz 2022 Realistic Verified Free H12-722 Exam Dumps [Q95-Q110]

Be the first to reply

Leave a Reply Cancel reply