Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 131:

  If the regular expression is "abc. de", which of the following will not match the regular expression?

  A. abcde
  B. abcdde
  C. abclde
  D. abc+de
  A. abcde

• Question 132:

  Which three aspects should be considered in the design of cloud platform security solutions? (Choose Three)

  A. Infrastructure security
  B. Tenant security
  C. How to do a good job in management, operation and maintenance
  D. Hardware maintenance
  A. Infrastructure security
  B. Tenant security
  C. How to do a good job in management, operation and maintenance

• Question 133:

  Which of the following signature attributes cannot be configured for IP custom signature?

  A. ID
  B. Message length
  C. Agreement
  D. Direction
  B. Message length

• Question 134:

  Which of the following options belong to the network layer attack of the TCP/IP protocol stack? (Choose Two)

  A. Address scanning
  B. Buffer overflow p
  C. Port scan
  D. IP spoofing
  A. Address scanning
  D. IP spoofing

• Question 135:

  The following figure is a schematic diagram of the detection file of the firewall and the sandbox system linkage.

  

  The web reputation function is enabled on the firewall, and website A is set as a trusted website while website B is set as a suspicious website. Which of the following statements is correct?

  A. The files obtained by users from websites A and B will be sent to the inspection node for inspection.
  B. When a user visits website B, although the firewall will extract the file and send it to the detection node, the user can still normally access website B during the detection process.
  C. After the detection node detects the suspicious file, it not only informs the firewall of the result but also informs other connected network devices.
  D. Assuming that website A is an unknown website, the administrator cannot detect the traffic files of this website.
  C. After the detection node detects the suspicious file, it not only informs the firewall of the result but also informs other connected network devices.

• Question 136:

  Anti-DDoS defense system includes: management center, detection center and cleaning center.

  A. True
  B. False
  A. True

• Question 137:

  Regarding the DNS Request Flood attack, which of the following options is correct?

  A. The DNS Request Flood attack on the cache server can be redirected to verify the legitimacy of the source.
  B. For the DNS Request Flood attack on the authoritative server, the client can be triggered to send DNS requests in TCP packets to verify the legitimacy of the source IP.
  C. In the process of source authentication, the firewall will trigger the client to send DNS requests via TCP to verify the legitimacy of the source IP, but this process will consume the TCP connection resources of the DNS cache server.
  D. Redirection should not be implemented on the source IP address of the attacked domain name; the destination IP address of the attacked domain name should be redirected.
  C. In the process of source authentication, the firewall will trigger the client to send DNS requests via TCP to verify the legitimacy of the source IP, but this process will consume the TCP connection resources of the DNS cache server.

• Question 138:

  The security management system is only optional, and anti-virus software or anti-hacking technology can be a good defense against network threats.

  A. True
  B. False
  B. False

• Question 139:

  For the description of the Anti-DDoS system, which of the following options is correct?

  A. The detection center mainly pulls and cleans the attack traffic according to the control strategy of the security management center and re-injects the cleaned normal traffic back into the user network, sending it to the real destination.
  B. The management center mainly processes attack events, controls the diversion and cleaning strategies of the cleaning center, categorizes and analyzes various attack events and attack traffic, and generates reports.
  C. The main function of the cleaning center is to detect and analyze DDoS attack traffic from mirrored or split traffic and provide analysis data to the management center for judgment.
  D. The firewall can only be used as inspection equipment.
  B. The management center mainly processes attack events, controls the diversion and cleaning strategies of the cleaning center, categorizes and analyzes various attack events and attack traffic, and generates reports.

• Question 140:

  Which of the following statements about IPS is wrong?

  A. The priority of the coverage signature is higher than that of the signature in the signature set.
  B. When the "source security zone" is the same as the "destination security zone", it means that the IPS policy is applied in the domain.
  C. Modifications to the PS policy will not take effect immediately. You need to submit a compilation to update the configuration of the IPS policy.
  D. The signature set can contain either predefined signatures or custom signatures.
  D. The signature set can contain either predefined signatures or custom signatures.