Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ecus65

Huawei H12-724 - HCIP-Security (Fast track) V1.0

Page: 4 / 11
Total 367 questions

In the campus network, employees can use 802.1X, Portal,MAC Address or SACG Way to access. Use different access methods according to different needs to achieve the purpose of user access control.

A.

True

B.

False

Security zone division means to better protect the internal network security,Based on the business type and security requirements of the intranet, divide the intranet into several granularities.

Logical area. Which of the following options does not belong Agile Controller-Campus Security domain?

A.

User domain

B.

Network domain

C.

Business domain:

D.

Attack domain

Which of the following options describes the IntelliSense engine IAE incorrectly?

A.

lAE's content security detection functions include application identification and perception, intrusion prevention, and Web application security.

B.

Full English name: intelligent Awareness Engine.

C.

The core of C.IAE is to organically centralize all content security-related detection functions.

D.

The security detection of the IAE engine is parallel, using a message-based file processing mechanism, which can receive file fragments and perform security checks.

User access authentication technology does not include which of the following options?

A.

Authentication

B.

Isolation repair'

C.

Security check

D.

Access control

There is a three-layer forwarding device between the authentication client and the admission control device:If at this time Portal The certified three-layer authentication device can also obtain the authentication client's MAC address,So you can use IP Address and MC The address serves as the information to identify the user.

A.

True

B.

False

Regarding the file filtering technology in the USG6000 product, which of the following options is wrong?

A.

It can identify the application that carries the file, the file transfer direction, the file type and the file extension.

B.

Even if the file type is modified, it can also identify the true type of the file

C.

It can identify the type of files transmitted by itself, and can block, alert and announce specific types of files.

D.

It supports filtering the contents of compressed files after decompression. "

The user access security solution is one-kind"End to end"Security architecture. The user access security architecture includes three key components:Terminal equipment, network access equipment and access server.

A.

True

B.

False

Regarding the processing flow of file filtering, which of the following statements is wrong?

A.

After the file decompression fails, the file will still be filtered. .

B.

The application identification module can identify the type of application that carries the file.

C.

Protocol decoding is responsible for analyzing the file data and file transmission direction in the data stream.

D.

The file type recognition module is responsible for identifying the true type of the file and the file extension based on the file data

A network adopts Portal Authentication, the user finds the pushed Web No username entered on the page/The place of the password. This failure may Which of the following causes?

A.

Agile Controller-Campus There is no corresponding user on.

B.

switch AAA Configuration error.

C.

The switch is not turned on Portal Function.

D.

Portal The push page on the server is wrong.

For Huawei USG600 products, which of the following statements about mail filtering configuration is correct?

A.

Cannot control the number of received email attachments

B.

When the spam processing action is an alert, the email will be blocked and an alert will be generated

C.

You can control the size of the attachment of the received mail

D.

Cannot perform keyword filtering on incoming mail