Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 11:

  For SYN Flood attacks, TCP source authentication and TCP proxy can be used for defense. Which of the following descriptions is correct?

  A. TCP proxy means that the firewall is deployed between the client and the server. When the SYN packet sent by the client to the server passes through the firewall, the firewall replaces the server and establishes a three-way handshake with the client. It is generally used in scenarios where the forward and return paths of packets are inconsistent.
  B. During the TCP proxy process, the firewall will proxy and respond to each SYN message received and maintain a semi-connection, so when the SYN message flow is heavy, the performance requirements of the firewall are often high.
  C. TCP source authentication has the restriction that the return path must be consistent, so the application of TCP proxy is not common.
  D. TCP source authentication is added to the whitelist after the source authentication of the client is passed, and the SYN packet of this source still needs to be verified in the future.
  B. During the TCP proxy process, the firewall will proxy and respond to each SYN message received and maintain a semi-connection, so when the SYN message flow is heavy, the performance requirements of the firewall are often high.

• Question 12:

  Single-packet attacks are divided into scanning and snooping attacks, malformed packet attacks, and special packet attacks. Ping of death is a special packet attack.

  A. True
  B. False
  B. False

• Question 13:

  When configuring the terminal visits, we put some equipment configured exception equipment, which of the following statements are true about the exception equipment?

  A. the exception equipment IP is not in controlled network segment.
  B. terminal in isolation domain can not access exception equipment.
  C. only through security authentication terminals can access exception equipment.
  D. through identity authentication terminals can access exception equipment.
  A. the exception equipment IP is not in controlled network segment.
  D. through identity authentication terminals can access exception equipment.

• Question 14:

  Huawei NIP6000 products have zero-setting network parameters and plug-and-play functions, because the interfaces and interface pairs only work on layer 2 without Set the IP address.

  A. True
  B. False
  A. True

• Question 15:

  Which of the following actions can be performed by the content filtering module when detecting sensitive keywords? (Choose Three)

  A. Alarm
  B. Block
  C. Declare
  D. Ignore
  A. Alarm
  B. Block
  C. Declare

• Question 16:

  When a data file hits the whitelist of the firewall's anti-virus module, the firewall will no longer perform virus detection on the file.

  A. True
  B. False
  A. True

• Question 17:

  Which of the following options describes the IntelliSense engine IAE incorrectly?

  A. lAE's content security detection functions include application identification and perception, intrusion prevention, and Web application security.
  B. Full English name: intelligent Awareness Engine.
  C. The core of C.IAE is to organically centralize all content security-related detection functions.
  D. The security detection of the IAE engine is parallel, using a message-based file processing mechanism, which can receive file fragments and perform security checks.
  D. The security detection of the IAE engine is parallel, using a message-based file processing mechanism, which can receive file fragments and perform security checks.

• Question 18:

  In the penetration stage of an APT attack, which of the following attack behaviors will the attacker generally have?

  A. Long-term latency and collection of key data.
  B. Leak the acquired key data information to a third party of interest.
  C. Through phishing emails, attachments carrying 0-day vulnerabilities are delivered, causing the user's terminal to become a springboard for attacks.
  D. The attacker sends a CandC attack or other remote commands to the infected host to spread the attack horizontally on the intranet.
  D. The attacker sends a CandC attack or other remote commands to the infected host to spread the attack horizontally on the intranet.

• Question 19:

  Regarding intrusion prevention configuration on Huawei USG devices, which of the following options is correct?

  A. The IPS policy must be bound to a security policy before taking effect.
  B. IPS takes effect automatically after creation.
  C. IPS cannot detect buffer overflow attacks.
  D. IPS can only perform alerting, not blocking.
  A. The IPS policy must be bound to a security policy before taking effect.

• Question 20:

  SQL injection attacks generally have the following steps: Elevate the right Get the data in the database Determine whether there are loopholes in the webpage Determine the database type For the ordering of these steps, which of the following options is correct?

  A. Determine whether there are loopholes in the webpage Determine the database type Get the data in the database Elevate the right.
  B. Determine the database type Determine whether there are loopholes in the webpage Get the data in the database Elevate the right.
  C. Determine whether there are loopholes in the webpage Get the data in the database Determine the database type Elevate the right.
  D. Get the data in the database Determine whether there are loopholes in the webpage Determine the database type Elevate the right.
  A. Determine whether there are loopholes in the webpage Determine the database type Get the data in the database Elevate the right.