2022 Realistic H12-724 Dumps Latest Huawei Practice Tests Dumps [Q21-Q42]

Rate this post

2022 Realistic H12-724 Dumps Latest Huawei Practice Tests Dumps

H12-724 Dumps PDF – H12-724 Real Exam Questions Answers

QUESTION 21
An enterprise has 3 server, which is the most reasonable plan when deploy Policy Center system planning?

manager + controller + FTP + witness database, controller + master database + FTP, controller + mirror database+ FTP

manager + controller + FTP + master database, controller + FTP + witness database, controller + FTP
+ mirror database

manager + controller + FTP + mirror database, controller + FTP + witness database, controller + FTP + master database

manager + controller + FTP, controller + FTP + witness databases, controller + FTP + master database

QUESTION 22
Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

Virus

Buffer overflow

System vulnerabilities

Port scan

QUESTION 23
The access control server is the implementer of the corporate security policy, responsible for implementing the corresponding access control in accordance with the security policy formulated by the customer’s network(Allow, deny, leave or restrict).

True

False

QUESTION 24
On WIDS functional WLAN Regarding the judgment of illegal devices in the network, which of the following statements are correct? (Multiple choice)

all Ad-hoc The device will be directly judged as an illegal device

Not this AC Access AP Is illegal AP

Not this AC Access STA Is illegal STA

Not this AC Access STA,Also need to check access AP Does it contain law

QUESTION 25
Regarding the global configuration of file filtering configuration files for Huawei USG6000 products, which of the following descriptions is correct?

File filtering, content filtering and anti-virus detection cannot be performed when the file is damaged. At this time, the documents can be released or blocked according to business requirements.

When the file extension does not match, if the action is “Allow” or “Alarm”, file filtering, content filtering and anti-virus are performed according to the file type Detection.

When the number of compression layers of a file is greater than the configured “Maximum Decompression Layers”, the firewall cannot filter the file.

When the file type cannot be recognized, file filtering, content filtering and anti-virus detection are not performed.

QUESTION 26
Which of the following elements does PDCA include? (Choose 3 answers)

Plan

Implementation

termination

Monitoring

QUESTION 27
VIP Experience guarantee, from which two aspects are the main guarantees VIP User experience? (Multiple choice)

bandwidth

Forwarding priority

Authority

Strategy

QUESTION 28
In the WLAN wireless access scenario, which of the following network security technologies belong to user access security? (Multiple choice)

AP Certification

Link authentication

User access authentication

data encryption

QUESTION 29
The following commands are configured on the Huawei firewall:
[USG] firewall defend ip-fragment enable
Which of the following situations will be recorded as an offensive behavior? (multiple choice)

DF, bit is down, and MF bit is also 1 or Fragment Offset is not 0,
155955cc-666171a2-20fac832-0c042c047

DF bit is 023, MF bit is 1 or Fragment Offset is not 0,

DF bit is 0, and Fragment Offset + Length> 65535.

The DF bit is 1, and Fragment Ofset + Length <65535.

QUESTION 30
Portal At the time of certification, pass Web After the browser enters the account password for authentication, it prompts”Authenticating..”The status lasts for a long time before it shows that the authentication is successful. Which of the following reasons may cause this phenomenon?

Multiple Agile Controller The same terminal IP Address added Portal”Access terminal IP Address list”,Some of them Agile Controller The server and the terminal cannot communicate normally.

Portal The template is configured with an incorrect password.

Agile Controller-Campus There are too many authorization rules on the “It takes a lot of time to find
835

Insufficient curtains of the terminal equipment result in a relatively large delay.

QUESTION 31
When a data file hits the whitelist of the firewall’s anti-virus module, the firewall will no longer perform virus detection on the file.

True

False

QUESTION 32
After configuring the announcement,Agile Controller-Campus The system cannot assign this announcement to which of the following objects?

Assign to user

Assigned to account

Assign to terminal IP Address range

Assigned to places

QUESTION 33
Which of the following options belongs to MC prioritized pail Authentication application scenarios?

User use portal Page for authentication

Users follow WeChat for authentication.

User use IAC Client authentication

User use Pota At the first certification,RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache,RAIUS The server directly searches the cache for the terminal’s MAC The address is discussed.

QUESTION 34
File filtering technology can filter files based on the application of the file, the file transfer direction, the file type and the file extension.

True

False

QUESTION 35
When the license of Huawei USG6000 product expires, the RBL function will be unavailable, and users can only use the local black and white list to filter junk mail.
155955cc-666171a2-20fac832-0c042c0435

True

False

QUESTION 36
The relationship between user groups and accounts in user management is stored in a tree on the Agile Controller-Campus. An account belongs to only one user group.
Consistent with the corporate organizational structure: If the OU (OnizbonUnit) structure stored in the AD/LDAP server is consistent with the corporate organizational structure, users are stored Under 0OU, when the Agile Controller-Campus synchronizes AD/LDAP server accounts, which synchronization method can be used?

Press “0U” to synchronize

AO Synchronize by “group”, “0U describes the organizational structure

AO Press “Group” “Synchronize,” “Group” Jida organization structure

LDAP synchronization by “group”

QUESTION 37
The following configuration is in A with B The authentication commands are configured on the two admission control devices. For the analysis of the following configuration commands, which ones are correct? (Multiple choice)

A What is configured on the device is MAC Bypass authentication

B What is configured on the device is MAC Bypass authentication o

A On the device 2GE1/01 Can access PC Can also access dumb terminal equipment

B On the device GE1/0/1 Can access PC It can also access dumb terminal equipment. Upper

QUESTION 38
Regarding Huawei’s anti-virus technology, which of the following statements is wrong?

The virus detection system cannot directly detect compressed files

The anti-virus engine can detect the file type through the file extension

Gateway antivirus default file maximum decompression layer is 3 layers

The implementation of gateway antivirus is based on proxy scanning and stream scanning

QUESTION 39
User access authentication technology does not include which of the following options?

Authentication

Isolation repair’

Security check

Access control

QUESTION 40
Analysis is the core function of intrusion detection. The analysis and processing process of intrusion detection can be divided into three phases; build an analyzer to perform analysis on actual field data.
Which of the analysis, feedback and refinement is the function included in the first two stages?

Data analysis, data classification, post-processing

Data processing, data classification, post-processing

Data processing, attack classification, post-processing

Data processing, data classification, attack playback

QUESTION 41
Since the sandbox can provide a virtual execution environment to detect files in the network, the sandbox can be substituted when deploying security equipment Anti-Virus, IPS, spam detection and other equipment.

True
155955cc-666171a2-20fac832-0c042c0414

False

QUESTION 42
In the terminal security management, the black and white list mode is used to check the terminal host software installation status. Which of the following situations is a compliant behavior?

The terminal host does not install the software in the whitelist, nor the software in the blacklist.

The terminal host installs all the software in the whitelist, but does not install the software in the blacklist.

The terminal host installs part of the software in the whitelist, but does not install the software in the blacklist.

The terminal host installs all the software in the whitelist, and also installs some of the software in the blacklist.