Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 91:

  Which of the following types of attacks is DDoS attack?

  A. Single packet attack
  B. Floating child attack
  C. Malformed message attack
  D. Snooping scan attack
  B. Floating child attack

• Question 92:

  Which of the following protocols can be used to construct attack messages for special control message attacks? (Choose Three)

  A. A ICMP protocol
  B. UDP protocol
  C. CIP protocol
  D. FTP protocol
  A. A ICMP protocol
  B. UDP protocol
  C. CIP protocol

• Question 93:

  In the security protection system of the cloud era, reforms need to be carried out in the three stages: before, during, and after the event, to form a closed-loop of continuous improvement and development. Which of the following key points should be done during the event? (Choose Two)

  A. Vulnerability intelligence
  B. Defense in Depth
  C. Offensive and defensive situation
  D. Fight back against hackers
  B. Defense in Depth
  D. Fight back against hackers

• Question 94:

  Among the following options, which attack is a malformed packet attack based on the TCR protocol?

  A. Teardrop attack
  B. Ping of Death attack
  C. IP Spoofng attack
  D. Land attack
  D. Land attack

• Question 95:

  The following commands are configured on the Huawei firewall:

  [USG] firewall defend ip-fragment enable

  Which of the following situations will be recorded as an offensive behavior? (Choose Two)

  A. DF, bit is down, and MF bit is also 1 or Fragment Offset is not 0.
  B. DF bit is 023, MF bit is 1 or Fragment Offset is not 0.
  C. DF bit is 0, and Fragment Offset + Length> 65535.
  D. The DF bit is 1, and Fragment Ofset + Length
  A. DF, bit is down, and MF bit is also 1 or Fragment Offset is not 0.
  C. DF bit is 0, and Fragment Offset + Length> 65535.

• Question 96:

  Which of the following options will not pose a security threat to the network?

  A. Hacking
  B. Weak personal safety awareness
  C. Open company confidential files
  D. Failure to update the virus database in time
  C. Open company confidential files

• Question 97:

  When configuring the URL filtering configuration file, www.bt.com is configured in the URL blacklist-item: At the same time, set it in the custom URL category. A URL is set as bt.com, and the action of customizing URL classification is a warning.

  Regarding the above configuration, which of the following statements are correct? (Choose Two) A. Users can visit www.videobt.com website.

  B. The user can visit the www.bt.com website, but the administrator will receive a warning message.

  C. User cannot access all the sites ending with bt.com.

  D. When users visit www.bt. com, they will be blocked.

  Correct Answer. AD
  AD

• Question 98:

  The administrator of a certain enterprise wants to prevent employees from visiting shopping websites during working hours. Therefore, a URL filtering configuration file is set up to block predefined shopping website categories. However, employee A can still use the company's network to shop online during the lunch break.

  Which of the following are possible reasons? (Choose Three)

  A. The administrator has not set the time period as every day from 9:00 to 18:00.
  B. The shopping website does not belong to the predefined shopping website category.
  C. The administrator did not submit the configuration after completing it.
  D. The administrator has not applied the URL filtering configuration file to the security policy.
  B. The shopping website does not belong to the predefined shopping website category.
  C. The administrator did not submit the configuration after completing it.
  D. The administrator has not applied the URL filtering configuration file to the security policy.

• Question 99:

  For the description of URPF technology, which of the following options are correct? (Choose Two)

  A. The main function is to prevent network attacks based on source address spoofing.
  B. In strict mode, it does not check whether the interface matches. As long as there is a route to the source address, the message can pass.
  C. The loose mode not only requires corresponding entries in the forwarding table, but also requires that the interface must match to pass the URPF check.
  D. Use URPF's loose mode in an environment where routing symmetry cannot be guaranteed.
  A. The main function is to prevent network attacks based on source address spoofing.
  D. Use URPF's loose mode in an environment where routing symmetry cannot be guaranteed.

• Question 100:

  When using the misuse check technology, if the normal user behavior is successfully matched with the intrusion feature knowledge base, it will be falsely reported.

  A. True
  B. False
  A. True