Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 171:

  Which of the following options is not a cyber security threat caused by weak personal security awareness?

  A. Disclosure of personal information
  B. Threats to the internal network
  C. Leaking corporate information
  D. Increasing the cost of enterprise network operation and maintenance
  D. Increasing the cost of enterprise network operation and maintenance

• Question 172:

  The administrator has made the following configuration:

  1.The signature set Protect_ all includes the signature ID3000, and the overall action of the signature set is to block.

  2.The action of overwriting signature ID3000 is an alarm.

  A. The action of signing iD3000 is an alarm
  B. The action of signing ID3000 is to block
  C. Unable to determine the action of signature ID3000
  D. The signature set is not related to the coverage signature
  A. The action of signing iD3000 is an alarm

• Question 173:

  There are several steps in a stored XSS attack

  The attacker submits an issue containing known JavaScript User login

  The user requests the attacker's issue

  The server responds with the attacker's JavaScript

  The attacker's JavaScript is executed in the user's browser

  The user's browser sends a session token to the attacker

  The attacker hijacks the user session

  For the ordering of these steps, which of the following options is correct?

  A. The attacker submits an issue containing known JavaScript User login The user requests the attacker's issue The server responds with the attacker's JavaScript The attacker's JavaScript is executed in the user's browser The user's browser sends a session token to the attacker The attacker hijacks the user session.
  B. User login The attacker submits an issue containing known JavaScript The user requests the attacker's issue The server responds with the attacker's JavaScript The attacker's JavaScript is executed in the user's browser The user's browser sends a session token to the attacker The attacker hijacks the user session.
  C. Attacker submits an issue containing JavaScript User requests the attacker's issue Server responds with the attacker's JavaScript The attacker's JavaScript is executed in the user's browser User login The user's browser sends a session token to the attacker The attacker hijacks the user session.
  D. The attacker submits an issue containing known JavaScript The user requests the attacker's issue The server responds with the attacker's JavaScript The attacker's JavaScript is executed in the user's browser The user's browser sends a session token to the attacker User login The attacker hijacks the user session.
  A. The attacker submits an issue containing known JavaScript User login The user requests the attacker's issue The server responds with the attacker's JavaScript The attacker's JavaScript is executed in the user's browser The user's browser sends a session token to the attacker The attacker hijacks the user session.

• Question 174:

  Which of the following are effective defensive measures against SYN Flood attacks? (Choose Two)

  A. TCP Source Authentication
  B. TCP Proxy
  C. IP Fragmentation
  D. Fingerprint Learning
  A. TCP Source Authentication
  B. TCP Proxy

• Question 175:

  Regarding the 3 abnormal situations of the file type recognition result, which of the following option descriptions is wrong?

  A. File extension mismatch means that the file type is inconsistent with the file extension.
  B. Unrecognized file type means that the file type cannot be recognized and there is no file extension.
  C. File damage means that the file type cannot be identified because the file is damaged.
  D. Unrecognized file type means that the file type cannot be recognized, and the file extension cannot be recognized.
  D. Unrecognized file type means that the file type cannot be recognized, and the file extension cannot be recognized.

• Question 176:

  For the basic mode of HTTP Flood source authentication, which of the following options are correct? (Choose Two) A. The basic mode can effectively block access from the fake exploit client.

  B. Bot tools do not implement a complete HTTP protocol stack and do not support automatic redirection, so the basic mode can effectively defend against HTTP Flood attacks.

  C. When there is an HTTP proxy server in the network, the firewall will add the IP address of the proxy server to the whitelist, but it will still recognize the basic source authentication of the zombie host as valid.

  D. The basic mode will not affect the user experience, so the defense effect is higher than the enhanced mode.

  Correct Answer. AB
  AB

• Question 177:

  Which of the following are the control items of HTTP behavior? (Choose Four)

  A. POST operation
  B. Browse the web
  C. Acting online
  D. File upload and download
  A. POST operation
  B. Browse the web
  C. Acting online
  D. File upload and download

• Question 178:

  Which of the following options is the main purpose of enabling SSL decryption on Huawei USG firewalls?

  A. To increase the bandwidth utilization efficiency.
  B. To inspect encrypted traffic for threats and malicious content.
  C. To accelerate HTTPS traffic.
  D. To block all SSL communications by default.
  B. To inspect encrypted traffic for threats and malicious content.

• Question 179:

  Which of the following options does not belong to the basic DDoS attack prevention configuration process?

  A. The system starts traffic statistics.
  B. System related configuration application, fingerprint learning.
  C. The system starts attack prevention.
  D. The system performs preventive actions.
  B. System related configuration application, fingerprint learning.

• Question 180:

  Regarding the sequence of file filtering technology processing flow, which of the following is correct?

  (1)

  The security policy is applied as permit

  (2)

  Protocol decoding

  (3)

  File type recognition

  (4)

  Application recognition

  (5)

  File filtering

  A. (1)(2)(3)(4)(5)
  B. (1)(4)(2)(3)(5)
  C. (1)(2)(4)(3)(5)
  D. (1)(3)(2)(4)(5)
  B. (1)(4)(2)(3)(5)