Huawei H12-722 HCIP-Security-CSSN Exam Practice Test Instant Access

Question 1

Under the CLI command, which of the following commands can be used to view the AV engine and virus database version?

Adisplay version av-sdb

Bdisplay utm av version

Cdisplay av utm version

Ddisplay utm version

Answer : A

Question 2

The IPS function of Huawei USG6000 supports two response methods: blocking and alarming.

ATrue

BFalse

Answer : A

Question 3

Which of the following iterations is correct for the description of the management center?

AThe management server of the management center is responsible for the cleaning of abnormal flow, as well as the collection and analysis of business data, and storage, and is responsible for the summary
The stream is reported to the management server for report presentation.

BThe data coking device is responsible for the cleaning of abnormal flow, the centralized management and configuration of equipment, and the presentation of business reports.

CThe data collector and management server support distributed deployment and centralized deployment. Centralized deployment has good scalability.

DThe management center is divided into two parts: management server and teaching data collector.

Answer : D

Question 4

For SYIN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?

ATCP proxy means that the firewall is deployed between the client and the server. When the SYI packet sent by the client to the server passes through the firewall, the
The firewall replaces the server and establishes a three-way handshake with the client. Generally used in scenarios where the back and forth paths of packets are inconsistent.

BDuring the TCP proxy process, the firewall will proxy and respond to each SYN message received, and maintain a semi-connection, so when the SYN message is
When the document flow is heavy, the performance requirements of the firewall are often high.

CTCP source authentication has the restriction that the return path must be consistent, so the application of TCP proxy is not common. State 'QQ: 9233

DTCP source authentication is added to the whitelist after the source authentication of the client is passed, and the SYN packet of this source still needs to be verified in the future.

Answer : B

Question 5

Which of the following is not an abnormal situation of the file type recognition result?

AThe file extension does not match.

BUnrecognized file type

CFile corruption

DThe file is compressed

Answer : D

Question 6

Which of the following options does not belong to the security risk of the application layer of the TCP/IP protocol stack?

AVirus

BBuffer overflow

CSystem vulnerabilities

DPort scan

Answer : D

Question 7

Use BGP protocol to achieve diversion, the configuration command is as follows

[sysname] route-policy 1 permit node 1 [sysname-route-policy] apply community no-advertise [sysname-route-policy] quit [sysname]bgp100 155955cc-666171a2-20fac832-0c042c04 29 [sysname-bgp] peer [sysname-bgp] import-route unr [sysname- bgpl ipv4-family unicast [sysname-bgp-af-ipv4] peer 7.7.1.2 route-policy 1 export [sysname-bgp-af-ipv4] peer 7.7. 1.2 advertise community [sysname-bgp-af-ipv4] quit

[sysname-bgp]quit

Which of the following options is correct for the description of BGP diversion configuration? (multiple choice)

AUse BGP to publish UNR routes to achieve dynamic diversion.

BAfter receiving the UNR route, the peer neighbor will not send it to any BGP neighbor.

CYou also need to configure the firewall ddos bgp-next-hop fib-filter command to implement back-injection.

DThe management center does not need to configure protection objects. When an attack is discovered, it automatically issues a traffic diversion task.

Answer : A, B

Huawei H12-722 HCIP-Security-CSSN V3.0 HCIP-Security-CSSN Exam Practice Test