Huawei H12-722-ENU Real Exam Questions Guaranteed Updated Dump from Actualtests4sure
Verified Pass H12-722-ENU Exam in First Attempt Guaranteed
NEW QUESTION 70
For APT attacks, attackers often lurk for a long time and initiate formal attacks on the enterprise at key points of the incident. APT attacks can generally be summarized in four stages:
1. Collect Information & Invasion
2. Long-term latency & mining
3. Data leakage
4. Remote control and penetration
Which of the following options is correct regarding the ordering of these four phases?
- A. 2-3-4-1
- B. 1-4-2-3
- C. 1-2-4-3
- D. 2-1-4-3
Answer: B
NEW QUESTION 71
Anti-DDoS defense system includes: management center, detection center and cleaning center.
- A. False
- B. True
Answer: B
NEW QUESTION 72
The following figure shows the configuration of the URL filtering configuration file. Regarding the configuration, which of the following statements is correct?
- A. The firewall will first check the blacklist entries and then the whitelist entries.
- B. The user visits the website www.exzample.com, and when the black and white list is not hit, the next step is to query the predefined URL category entry.
- C. Assuming that the user visits the www.exzample.com website, which belongs to the categories of humanities and social networks at the same time, the user cannot access the website.
- D. The default action means that all websites are allowed to visit. So the configuration is wrong here.
Answer: C
NEW QUESTION 73
Since the sandbox can provide a virtual execution environment to detect files in the network, the sandbox can be substituted when deploying security equipment Anti-Virus, IPS, spam detection and other equipment.
- A. False
- B. True
Answer: A
NEW QUESTION 74
When the license of Huawei USG6000 product expires, the RBL function will be unavailable, and users can only use the local black and white list to filter junk mail.
- A. False
- B. True
Answer: B
NEW QUESTION 75
The status code in the HTTP response message indicates the type of the response message, and there are many possible values. Which of the following status codes represents the client request The resource does not exist?
- A. 0
- B. 1
- C. 2
- D. 400.
Answer: A
NEW QUESTION 76
The following commands are configured on the Huawei firewall:
[USG] firewall defend ip-fragment enable
Which of the following situations will be recorded as an offensive behavior? (multiple choice)
- A. DF bit is 023, MF bit is 1 or Fragment Offset is not 0,
- B. DF, bit is down, and MF bit is also 1 or Fragment Offset is not 0,
- C. DF bit is 0, and Fragment Offset + Length> 65535.
- D. The DF bit is 1, and Fragment Ofset + Length <65535.
Answer: B,C
NEW QUESTION 77
Buffer overflows, Trojan horses, and backdoor attacks are all attacks at the application layer.
- A. False
- B. True
Answer: B
NEW QUESTION 78
For the description of the Anti DDOS system, which of the following options is correct? C
- A. The management center mainly completes the processing of attack events, controls the drainage strategy and cleaning strategy of the cleaning center, and responds to various attack events and attack flows.
View in categories and generate reports. - B. The detection center is mainly to pull and clean the attack flow according to the control strategy of the security management center, and re-inject the cleaned normal flow back to the customer.
User network, send to the real destination. - C. The main function of the Green Washing Center is to detect and analyze DDoS attack traffic on the flow from mirroring or splitting, and provide analysis data to The management center makes a judgment.
- D. The firewall can only be used for inspection equipment
Answer: A
NEW QUESTION 79
Which of the following options are common behavioral characteristics of viruses? (multiple choices)
- A. Self-hidden features
- B. Network attack characteristics
- C. Information collection characteristics
- D. Download and backdoor features
Answer: A,B,C,D
NEW QUESTION 80
Which of the following options is correct for the sequence of the flow-by-stream detection of AntiDDoS?
1. The Netflow analysis device samples the current network flow;
2. Send a drainage command to the cleaning center;
3. Discover the DDoS attack stream;
4.Netior: analysis equipment sends alarms to ATIC management center
5. The abnormal flow is diverted to the cleaning center for further inspection and cleaning;
6. The cleaning center sends the host route of the attacked target IF address server to the router to achieve drainage
7. The cleaning log is sent to the management center to generate a report;
8. The cleaned traffic is sent to the original destination server.
- A. 1-3-4-2-5-6-7-8
- B. 1-3-24-6-5-8-7
- C. 1-3-4-2-6-5-8-7
- D. 1-3-2-4-6-5-7-8
Answer: C
NEW QUESTION 81
If you set the alarm policy for the SMTP virus file, which of the following options is correct?
- A. Generate logs and forward
- B. Add announcements and generate logs
- C. Generate logs and discard them
- D. Delete email attachment content
Answer: A
NEW QUESTION 82
When the Anti DDoS system finds the attack flow, the state will redirect the attack flow to the cleaning device.
After the cleaning device is cleaned, it will flow back.
Note to the original link, which of the following options does not belong to the method of re-injection?
- A. GRE back note:
- B. BGP back-annotation
- C. Policy routing back annotation,
- D. MPLS LSP back injection
Answer: B
NEW QUESTION 83
The following figure shows the configuration of the URL filtering configuration file. Which of the following statements is true about this configuration?
- A. The firewall will check the blacklist first and then check the whitelist.
- B. Assume that user visit www.exzample.com, which is part of Humanities and Social Networking category. At this time, the user cannot access the site.
- C. The default action means that all websites allow access. Therefore, this configuration error.
- D. The user visit the website www.exzample.com. When there is no black and white list of hits, the predefined URL category entry is next queried.
Answer: B
NEW QUESTION 84
Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?
- A. Virus
- B. System vulnerabilities
- C. Buffer overflow
- D. Port scan
Answer: D
NEW QUESTION 85
Which of the following are the keyword matching patterns? (Multiple Choice)
- A. Community word
- B. Regular expressions
- C. Text
- D. Custom Keywords
Answer: B,C
NEW QUESTION 86
The status code in the HTTP response message describes the type of response message. There are many possible values.
Which of the following status codes indicates that the resource requested by the client does not exist?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION 87
Which of the following description is incorrect about the cleaning center?
- A. The re-injection methods include: policy route reinjection, static route reinjection, VPN reinjection, and Layer 2 peering.
- B. There are two drainage ways of static drainage and dynamic drainage.
- C. The cleaning center completes the function of drainage, cleaning, and flow reinjection after cleaning for abnormal flow.
- D. The cleaning equipment supports a variety of flexible attack defense technologies, but it is ineffective for CC attack and ICMP flood attack defense.
Answer: D
NEW QUESTION 88
......
Download Real Huawei H12-722-ENU Exam Dumps Test Engine Exam Questions: https://www.actualtests4sure.com/H12-722-ENU-test-questions.html
