Use Real Huawei Achieve the H12-722 Dumps – 100% Exam Passing Guarantee [Q92-Q115]

Rate this post

Use Real Huawei Achieve the H12-722 Dumps – 100% Exam Passing Guarantee

Verified H12-722 Q&As – Pass Guarantee H12-722 Exam Dumps

QUESTION 92
File filtering technology can filter files based on the application of the file, the file transfer direction, the file type and the file extension.

True

False

QUESTION 93
The following figure is a schematic diagram of the detection file of the firewall and the sandbox system linkage.

The Web reputation function is enabled on the firewall, and website A is set as a trusted website and website B is set as a suspicious website.
Which of the following statements is correct

The files obtained by users from website A and website B will be sent to the inspection node for inspection.

When a user visits website B, although the firewall will extract the file and send it to the detection node, the user can still access normally during the detection process Site B.

After the detection node detects the suspicious file, it not only informs the firewall in the figure of the result, but also informs other network devices connected to it.

Assuming that website A is an unknown website, the administrator cannot detect the traffic file of this website sC

QUESTION 94
Which of the following are the keyword matching patterns? (Multiple Choice)

Text

Regular expressions

Community word

Custom Keywords

QUESTION 95
About the description of the file filtering technology in the USG6000, which statement is wrong?

It can identify the application hosting the file, the file transfer direction, the file type, and the file extension.

Even if the file type is modified, it can recognize the true type of the file.

It can identify the types of files transmitted by itself and can block, alert and announce specific type of files.

It supports the filtering of the decompressed contents of the compressed file.

QUESTION 96
With regard to traditional firewalls, which of the following statements are correct? (Multiple choice)

Lack of effective protection against application layer threats.

It is unable to effectively resist the spread of viruses from the Internet to the internal network.

Can quickly adapt to changes in threats.

Cannot accurately control various applications such as P2P, online games, etc.

QUESTION 97
What content can be filtered by the content filtering technology of Huawei USG6000? (Multiple choice)

File content filtering

Voice content filtering

Application content filtering

Video content filtering

QUESTION 98
Which of the following options are the possible reasons why a certain signature is not included after the IPS policy configuration is completed? (multiple choice)

Direction is not enabled

The direction is turned on, but no specific direction is selected

The severity level of the configuration is too high

The protocol selection technique is correct

QUESTION 99
The realization of content security filtering technology requires the support of the content security combination license.

True

False

QUESTION 100
Threat after the big data intelligent security analysis platform detect will be synchronized to each network device, and then continue to learn and optimize by collecting to the logs from the network device.

True

False

QUESTION 101
Huawei NIP6000 products have zero-setting network parameters and plug-and-play functionality because interfaces pairs only work on Layer 2 and do not need to set IP address.

True

False

QUESTION 102
Which of the following statements is wrong about Huawei anti-virus technology?

The virus detection system cannot directly detect compressed files

Anti-virus engine can detect file type by file extension

The maximum number of unpacked layers of the gateway antivirus default file is 3

Gateway anti-virus implementation is based on proxy scanning and flow scanning

QUESTION 103
Which of the following description are correct about the principles of HTTP Flood and HTTPS flood attack defense? (Multiple Choice)

HTTPS flood defense mode includes basic mode, enhanced mode, and 302 redirects.

HTTPS flood defense can perform source authentication by limiting the packet request rate.

The principle of HTTPS Flood attack is to use the URI that involves database operations or other URIs that consume system resources, causing server resources to become exhausted and unable to respond to normal requests.

The principle of HTTPS flood attack is to initiate a large number of HTTPS connections to the target server, resulting in exhaustion of server resources and failure to respond to normal requests.

QUESTION 104
Regarding the description of intrusion detection technology, which of the following statements is correct?

Unable to detect violation of security policy.

Can detect authorized and non-authorized intrusions.

Cannot find the trace of the system being attacked.

is an active, static security defense technology.

QUESTION 105
The analysis and processing capabilities of traditional firewalls at the application layer are weak, and they cannot correctly analyze malicious codes that are mixed in the flow of allowed application teaching: many Attacks or malicious behaviors often use the firewall’s open application data flow to cause damage, causing application layer threats to penetrate the firewall.

True

False

QUESTION 106
The anti-virus feature configured on the Huawei USG6000 product does not take effect. Which of the following are possible causes? (Multiple Choice)

The security policy does not reference the anti-virus configuration file.

Antivirus configuration file configuration error.

The version of the virus signature database is older.

No virus exceptions are configured.

QUESTION 107
Huawei USG6000 product can virus scan and process certain file transfer protocols, but which of the following protocol does not include?

POP3

IMAP

FTP

TFTP

QUESTION 108
Regarding the Anti-DDoS cloud cleaning solution; which of the following statements is wrong?

Ordinary attacks will usually be cleaned locally first.

If there is a large traffic attack on the network, send it to the cloud cleaning center to share the cleaning pressure.

Since the Cloud Cleaning Alliance will direct larger attack flows to the cloud for cleaning, it will cause network congestion.

The closer to the attacked self-labeled cloud cleaning service, the priority will be called.

QUESTION 109
Cloud sandbox refers to deploying the sandbox in the cloud and providing remote detection services for tenants. The process includes:
1. Report suspicious files
2. Retrospective attack
3. Firewall linkage defense
4. Prosecution in the cloud sandbox
For the ordering of the process, which of the following options is correct?

1-3-4-2

1-4-2-3

1-4-3-2

3-1-4-2

QUESTION 110
SQI injection attacks generally have the following steps:
1, Privilge Escalation
2, Get the data in the database
3, To determine whether there is a vulnerability in the webpage
4, Determine the database type
Which of the following options is correct for the ordering of these steps?

3, 4, 1, 2

3, 4, 2, 1

4, 1, 2, 3

4, 2, 1, 3

QUESTION 111
After the IP policy is enabled, some services are found to be inaccessible. Which of the following may be the cause? (Multiple Choice)

Only one direction of packets goes through the firewall

The same packet passes through the firewall multiple times

IPS missed

Too much traffic causes the bypass function to be enabled

QUESTION 112
Which of the following is correct about the order of the file filtering technology process?
(1) Security policy application is permit
(2) Protocol decoding
(3) File Type Identification
(4) Application identification
(5) File Filtering

(1) (2) (3) (4) (5)

(1) (4) (2) (3) (5)

(1) (2) (4) (3) (5)

(1) (3) (2) (4) (5)

QUESTION 113
File filtering technology can filter files based on their application, file transfer direction, file type, and file extension.

TRUE

FALSE

QUESTION 114
The IPS function of Huawei USG6000 supports two response methods: blocking and alarming.

True

False

QUESTION 115
Fraggle attack means that both the source address and the destination address of TCP are set to the IP address of a victim. This behavior will cause the victim to send a SYN-ACK message to its own address, which in turn sends back an ACK message and creates an empty connection, causing the system resources to be occupied or the destination host to crash.

True

False

Check the Free demo of our H12-722 Exam Dumps with 180 Questions: https://www.test4cram.com/H12-722_real-exam-dumps.html

Leave a Reply Cancel reply