Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 141:

  Which of the following technologies can achieve content security? (Choose Four)

  A. Web security protection
  B. Global environment awareness
  C. Sandbox and big data analysis
  D. Intrusion prevention
  A. Web security protection
  B. Global environment awareness
  C. Sandbox and big data analysis
  D. Intrusion prevention

• Question 142:

  The analysis and processing capabilities of traditional firewalls at the application layer are weak, and they cannot correctly analyze malicious codes that are mixed in the flow of allowed application teaching: many Attacks or malicious behaviors often use the firewall's open application data flow to cause damage, causing application layer threats to penetrate the firewall.

  A. True
  B. False
  A. True

• Question 143:

  Which of the following files can the sandbox detect? (Choose Three)

  A. www file
  B. PE file
  C. Picture file
  D. Mail
  A. www file
  B. PE file
  C. Picture file

• Question 144:

  Regarding the description of intrusion detection technology, which of the following statements is correct?

  A. It is impossible to detect violations of security policies.
  B. It can detect all kinds of authorized and unauthorized intrusions.
  C. Unable to find traces of the system being attacked.
  D. is an active and static security defense technology.
  B. It can detect all kinds of authorized and unauthorized intrusions.

• Question 145:

  Since the sandbox can provide a virtual execution environment to detect files in the network, the sandbox can be substituted when deploying security equipment Anti-Virus, IPS, spam detection and other equipment.

  A. True
  B. False
  B. False

• Question 146:

  Regarding web application attacks, which of the following statements are correct? (Choose Two)

  A. SQL injection can be prevented by input validation and parameterized queries.
  B. Cross-site scripting (XSS) attacks inject malicious JavaScript code into web pages.
  C. Web application firewalls cannot detect XSS attacks.
  D. CSRF attacks rely on weak authentication mechanisms.
  A. SQL injection can be prevented by input validation and parameterized queries.
  B. Cross-site scripting (XSS) attacks inject malicious JavaScript code into web pages.

• Question 147:

  Regarding intrusion detection I defense equipment, which of the following statements are correct? (Choose Three)

  A. It cannot effectively prevent the virus from spreading from the Internet to the intranet.
  B. The number of applications that NIP6000 can recognize reaches 6000+, which realizes refined application protection, saves export bandwidth, and guarantees key business services Experience.
  C. Protect the intranet from external attacks, and inhibit malicious flows, such as spyware, worms, etc. from flooding and spreading to the intranet.
  D. Ability to quickly adapt to threat changes.
  B. The number of applications that NIP6000 can recognize reaches 6000+, which realizes refined application protection, saves export bandwidth, and guarantees key business services Experience.
  C. Protect the intranet from external attacks, and inhibit malicious flows, such as spyware, worms, etc. from flooding and spreading to the intranet.
  D. Ability to quickly adapt to threat changes.

• Question 148:

  Configure the following commands on the Huawei firewall:

  [USG] interface G0/0/1 [USG] ip urpf loose allow-default-route acl 3000 Which of the following options are correct? (Choose Two)

  A. For loose inspection: if the source address of the packet exists in the FIB of the firewall, the packet passes the inspection directly.
  B. In the case where the default route is configured but the parameter allow-default-route is not configured, if the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected.
  C. When the default route is configured and the parameter allow-default-route is also configured, if the source address of the packet does not exist in the FIB table of the firewall under loose check mode, all packets will pass the URPF check and be forwarded normally.
  D. When the default route is configured and the parameter allow-default-route is also configured, if the source address of the packet does not exist in the FIB table of the firewall under loose check mode, the packet cannot pass the URPF check.
  A. For loose inspection: if the source address of the packet exists in the FIB of the firewall, the packet passes the inspection directly.
  B. In the case where the default route is configured but the parameter allow-default-route is not configured, if the source address of the packet does not exist in the FIB table of the firewall, the packet will be rejected.
  C. When the default route is configured and the parameter allow-default-route is also configured, if the source address of the packet does not exist in the FIB table of the firewall under loose check mode, all packets will pass the URPF check and be forwarded normally.

• Question 149:

  If the Huawei USG6000 product uses its own protocol stack cache for all files passing through the device and then performs a virus scan, the device uses the stream scanning method.

  A. True
  B. False
  B. False

• Question 150:

  Which of the following options are correct for the configuration description of the management center ATIC? (Choose Two)

  A. The drainage task needs to be configured on the management center, and when an attack is discovered, it will be issued to the cleaning center.
  B. It is necessary to configure the protection object on the management center to guide the abnormal access flow in etpa.
  C. Port mirroring needs to be configured on the management center to monitor abnormal traffic.
  D. The reinjection strategy needs to be configured on the management center to guide the flow after cleaning.
  A. The drainage task needs to be configured on the management center, and when an attack is discovered, it will be issued to the cleaning center.
  B. It is necessary to configure the protection object on the management center to guide the abnormal access flow in etpa.