H12-722-ENU by Huawei Actual Free Exam Q&As

Question 1

Which of the following statements about intrusion detection/defense devices are correct? (Multiple Choice)

A. Can't effectively resist the spread of viruses from the Internet to the Intranet. B. NIP6000 can identify applications up to 6000+, implement fine-grained application protection, save export bandwidth, and ensure the business experience of key services. C. Can quickly adapt changes in threats. D. Protect the intranet from external attacks and suppress malicious traffic, such as spyware, worms, etc., flooding and spreading to the intranet.

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 2

Which of the following is correct about special packets attack?

A. The attacker probes the network structure by sending special control packets to launch real attack. B. Attacks on special control packets do not have the ability to detect network structures. Only scanning-type attacks can detect the network. C. The special control packets attack is a potential attack and does not have direct destruction. D. Attacks on special control packets can only use ICMP to construct attack packets.

Discussion 0

Correct Answer: C Vote an answer

Question 3

What content can be filtered by the content filtering technology of Huawei USG6000? (Multiple choice)

A. File content filtering B. Application content filtering C. Video content filtering D. Voice content filtering

Discussion 0

Correct Answer: A,B Vote an answer

Question 4

The following figure shows the configuration of the URL filtering configuration file. Which of the following statements is true about this configuration?

A. The user visit the website www.exzample.com. When there is no black and white list of hits, the predefined URL category entry is next queried. B. The default action means that all websites allow access. Therefore, this configuration error. C. The firewall will check the blacklist first and then check the whitelist. D. Assume that user visit www.exzample.com, which is part of Humanities and Social Networking category. At this time, the user cannot access the site.

Discussion 0

Correct Answer: D Vote an answer

Question 5

Because the sandbox can provide virtual execution environment to detect files on the network, the sandbox can replace devices such as Anti-Virus, IPS and spam detection when deploying security devices.

A. False B. True

Discussion 0

Correct Answer: A Vote an answer

Question 6

Which of the following descriptions about scanning and snooping attacks is wrong?

A. It is usually the network detection behavior before the attacker launches a real attack. B. The source address of the scanning attack is real, so you can use the method of directly adding a blacklist for defense. C. When a worm breaks out, it is generally accompanied by an address scan attack, so scanning attacks are aggressive. D. Scanning attacks include address scanning and port scanning.

Discussion 0

Correct Answer: C Vote an answer

Question 7

The status code in the HTTP response message describes the type of response message. There are many possible values.
Which of the following status codes indicates that the resource requested by the client does not exist?

A. 503 B. 400 C. 200 D. 404

Discussion 0

Correct Answer: D Vote an answer

Question 8

After the data file hits the whitelist of the firewall anti-virus module, the firewall will no longer do virus detection on the file.

A. False B. True

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which of the following options is not cyber security threat posed by weak personal security awareness?

A. Disclosing personal information B. Threat internal network C. Leaking corporate information D. Increase the cost of enterprise network operation and maintenance

Discussion 0

Correct Answer: D Vote an answer

Question 10

Which of the following categories of sandbox can be used by a company to detect image files, shellcode code files, and PDF files? (Multiple choices)

A. Heavyweight sandbox (virtual execution) B. PDF inspired sandbox C. PE Heuristic Sandbox D. Web inspired sandbox

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 11

Which of the following statement is wrong about a network intrusion detection system (NIDS)?

A. Use newly received network packets as a data source; B. Mainly used for real-time monitoring of critical network path information, listening to all packets on the network, collecting data, and analyzing suspicious objects C. Used to monitor network traffic and can be deployed independently. D. Real-time monitoring through network adapters and analysis of all communication traffic through the network;

Discussion 0

Correct Answer: A Vote an answer

Question 12

Configure the following command on the Huawei firewall:
[USG] interface G0/0/1
[USG] ip urpf loose allow-default-route acl 3000
Which of the following options are correct? (Multiple choice)

A. For the loose type check, if the source address of the packet exists in the FIB table of the firewall, the packet passes the check. B. If the default route is configured but the parameter allow-default-route is not configured. As long as the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected. C. If the default route is configured and the allow-default-route parameter is also matched, if the source address of the packet does not exist in the FIB table of the firewall, but for the loose type check, the packet will pass through URPF check, and perform normal forwarding. D. If the source address of the packet does not exist in the FIB table of the firewall and the default route is configured and the allow-default-route parameter is also matched, the packet cannot pass the URPF check even if it is a loose type check.

Discussion 0

Correct Answer: A,B,C Vote an answer

Question 13

With regard to traditional firewalls, which of the following statements are correct? (Multiple choice)

A. Cannot accurately control various applications such as P2P, online games, etc. B. Lack of effective protection against application layer threats. C. It is unable to effectively resist the spread of viruses from the Internet to the internal network. D. Can quickly adapt to changes in threats.

Discussion 0

Correct Answer: A,B,C Vote an answer

Huawei HCIP-Security-CSSN(Huawei Certified ICT Professional -Constructing Service Security Network) - H12-722-ENU Exam Practice Test