Huawei H12-723 - Huawei Certified ICT Professional - Constructing Terminal Security System

can be directly under the global open AV, PS protective function, URL filtering function, then it can be realized

Outbound direction only open AV, IPS protective function for server areas, protected server

inboud direction only open AV, IPS protective function for server areas, protected server

Outbound direction open URL filtering function for the entire campus network, and filtering of part classification website

The enterprise network is relatively scattered, there are multiple branches, and the branch users are larger in scale.

A scenario where there are less than 2,000 branch users, and the headquarters and branch networks are relatively stable.

The terminal security management business between the branch and the headquarters is relatively independent, and the headquarters provides supervision and control over the branch terminal security management business.

It is difficult to guarantee the quality of the network between the branch and the headquarters, and the network between the headquarters and the branch may be interrupted, making the terminal of the

branch no longer available.

User use portal Page for authentication

Users follow WeChat for authentication.

User use IAC Client authentication

User use Pota At the first certification,RAOIUS Used by the server cache terminal MAC Address, if the terminal goes offline and then goes online again within the validity period of the cache,RAIUS The server directly searches the cache for the terminal's MAC The address is discussed.

TRUE

FALSE

URL audit function is used to record the user's HTTP Internet behavior as the basis for the audit.

The user can configure the web type to be audited, WEB types to distinguish with file extensions, including html, jsp, aspx, etc.

can audit user HTTP access in the specific content of the Post, as a user Internet censorship

internal users access to the specified type of WEB resource, the firewall will be logged and sent to log server.

right

wrong

Visitors can use their mobile phone number to quickly register an account

The administrator can assign different permissions to each visitor

Reception staff cannot create guest accounts

There is a violation of the guest account, and the administrator cannot retrospectively

Basic networking includes deploying one SM Server, one SC Server, one DB and a AE server.

AE In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SC server.

SC In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup SM server.

DB In addition to the deployment of basic networking components, the reliability of the network also requires the deployment of an additional backup DB..

MAC Certification is based on MAC The address is an authentication method that controls the user's network access authority. It does not require the user to install any client software.

MAC Bypass authentication is first performed on the devices that are connected to the authentication 802 1X Certification;If the device is 802. 1X No response from authentication, re-use MAC The authentication method verifies the legitimacy of the device.

MAC During the authentication process, the user is required to manually enter the user name or password.

MAC The bypass authentication process does not MAC The address is used as the user name and password to automatically access the network.

SACG Authentication is generally used in scenarios where a stable network performs wired admission control.

SACG Authentication is generally used in scenarios where new networks are used for wireless admission control.

SACG It is generally deployed in a bypass mode without changing the original network topology.

SACG Essentially through 802.1X Technology controls access users.