Huawei H12-722 Online Practice Questions and Exam Preparation

Huawei H12-722 Online Questions & Answers

• Question 191:

  Regarding the description of keywords, which of the following is correct? (Choose Two)

  A. Keywords are the content that the device needs to recognize during content filtering.
  B. Keywords include predefined keywords and custom keywords.
  C. The minimum length of the keyword that the text can match is 2 bytes.
  D. Custom keywords can only be defined in text mode.
  A. Keywords are the content that the device needs to recognize during content filtering.
  B. Keywords include predefined keywords and custom keywords.

• Question 192:

  Regarding the mail content filtering configuration of Huawei USG6000 products, which of the following statements is wrong?

  A. Mail filtering will only take effect when the mail filtering configuration file is invoked when the security policy is allowed.
  B. When a POP3 message is detected, if it is judged to be an illegal email, the firewall's response action only supports sending alarm information, and will not block the email.
  C. When an IMAP message is detected, if it is judged to be an illegal email; the firewall's response action only supports sending alarm messages and will not block the email.
  D. The attachment size limit is for a single attachment, not for the total size of all attachments.
  B. When a POP3 message is detected, if it is judged to be an illegal email, the firewall's response action only supports sending alarm information, and will not block the email.

• Question 193:

  Place refers to the terminal environment when end-user use strategy management center access to controlled network office, which options are correct about place? (Choose two)

  A. strategy management center only support the default place
  B. The default place only support by way of cable access network scenario
  C. can be customized places
  D. when allocation strategy template for the end user, need to select the corresponding places
  C. can be customized places
  D. when allocation strategy template for the end user, need to select the corresponding places

• Question 194:

  The most common form of child-like attack is to send a large number of seemingly legitimate packets to the target host through flood, which ultimately leads to network bandwidth or the equipment resources being exhausted. Which of the following options is not included in traffic attack packets?

  A. TCP packets
  B. UDP packet
  C. ICMP message
  D. FTP message
  D. FTP message

• Question 195:

  The configuration commands to enable the attack prevention function are as follows: [FW] anti-ddos syn-flood source-detect [FW] anti-ddos udp-flood dynamic-fingerprint-learn [FW] anti-ddos udp-frag-flood dynamic-fingerprint-learn [FW] anti-ddos http-flood defend alert-rate 2000 [FW] anti-ddos http-flood source-detect mode basic

  Which of the following options is correct regarding the description of the attack prevention configuration? (Choose Two)

  A. The firewall has enabled the SYN Flood source detection and defense function
  B. The firewall uses the first packet drop to defend against UDP Flood attacks.
  C. HTTP Flood attack defense uses enhanced mode for defense
  D. The threshold for HTTP Flood defense activation is 2000.
  A. The firewall has enabled the SYN Flood source detection and defense function
  D. The threshold for HTTP Flood defense activation is 2000.

• Question 196:

  In the big data intelligent security analysis platform, it is necessary to collect data from data sources and then complete a series of actions such as data processing, detection, and analysis. Which of the following options does not belong to the actions that need to be completed in the data processing part?

  A. Data preprocessing
  B. Threat determination
  C. Distributed storage
  D. Distributed index
  B. Threat determination

• Question 197:

  Anti DDoS seven-layer defense can work from the dimensions of interface-based defense, global defense and defense object-based defense.

  A. True
  B. False
  A. True

• Question 198:

  When using the two-way SSL function to decrypt HTTPS packets, the value of the reverse proxy level represents the number of times the packet can be decrypted.

  A. True
  B. False
  B. False

• Question 199:

  Malicious code usually uses RootKit technology in order to hide itself. RootKit modifies the kernel of the system by loading a special driver. To hide itself and the role of designated files.

  A. True
  B. False
  A. True

• Question 200:

  The process of a browser carrying a cookie to request resources from a server is shown in the following figure. Which of the following steps contains SessionID information in the message?

  

  A. Steps (1) and (2)
  B. Steps (2) and (3)
  C. Steps (3) and (4)
  D. Steps (4) and (6)
  C. Steps (3) and (4)